Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ecc4db22-2f33-3442-8107-69801392f41f.roa
File:                     ecc4db22-2f33-3442-8107-69801392f41f.roa (raw, json)
Hash identifier:          DJMs45txt03K6xNW43ZHbeFp9qT6pP4yjbAR/A1UUwc=
Subject key identifier:   22:0F:0F:46:3D:C2:96:4E:4E:66:58:DE:CE:99:14:ED:E2:97:EC:04
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D766818CEB5055D4B9480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ecc4db22-2f33-3442-8107-69801392f41f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2602:107:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:76:68:18:ce:b5:05:5d:4b:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0abed244-14d4-4160-9553-73bf295fce7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:77:4f:c0:a8:c8:b6:aa:34:36:07:04:bf:
                    b8:bb:51:58:6f:26:ef:e8:74:c9:8a:44:23:5b:2a:
                    e4:d8:5d:0c:fb:00:84:6c:5e:71:f0:88:c4:cc:2c:
                    d7:f7:c0:12:66:d3:74:18:99:7a:a2:8c:3d:47:e0:
                    99:3f:21:b4:f1:3f:25:7f:d8:fe:58:38:76:3a:c3:
                    a7:6d:f8:55:d9:7c:8b:e5:1b:01:2b:24:7b:a2:d6:
                    a7:71:be:7d:ae:0e:79:5d:fc:8f:1a:ed:c7:b2:ad:
                    e1:f3:1f:17:51:22:7c:32:42:a7:2f:ca:ba:4d:69:
                    e2:ef:cf:52:5d:e0:da:c3:02:57:5c:58:77:52:67:
                    e9:70:1c:21:1e:a9:49:b6:6e:f5:10:6d:19:51:00:
                    c7:52:1f:c2:17:6b:34:f4:af:24:70:9c:65:ae:55:
                    f7:06:3b:7b:65:08:5d:b1:e1:93:2c:13:86:f0:42:
                    cc:01:8a:9d:7a:b8:9d:4b:1d:71:c6:a5:37:ba:29:
                    88:16:f0:6d:a9:db:69:32:73:a8:ba:8f:36:14:01:
                    ee:df:09:0e:91:7f:74:e3:9f:82:d2:cf:be:ae:aa:
                    26:f1:e7:3b:19:ee:5e:14:04:5e:f4:c7:ba:1c:46:
                    ee:46:78:09:41:07:65:c6:f4:d4:00:9d:3a:01:84:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:0F:46:3D:C2:96:4E:4E:66:58:DE:CE:99:14:ED:E2:97:EC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ecc4db22-2f33-3442-8107-69801392f41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:89:7e:82:91:f1:3a:12:97:52:05:5b:f8:37:f6:02:30:b2:
         7f:f4:2c:fd:5a:41:8b:58:e2:f0:15:2b:e6:96:21:fc:6a:ab:
         16:25:5e:4a:7e:81:aa:ea:96:c5:d5:35:21:48:6a:6a:c3:f0:
         de:c1:76:28:6f:83:17:93:fd:97:15:68:bc:d9:35:4b:20:80:
         3c:b5:68:48:a6:78:51:cf:8e:b0:61:90:d3:17:21:e3:ed:83:
         59:09:4c:8d:5f:0f:30:0e:f4:ce:29:94:9a:4f:29:67:1b:e1:
         20:ca:56:3e:37:5e:65:07:88:ab:50:0c:36:32:42:62:e7:51:
         01:c7:ab:59:fb:ce:08:4e:0c:74:ea:af:d3:2f:45:c2:76:89:
         0a:7b:c4:72:18:b1:71:00:20:bb:dc:5d:3d:e6:20:ea:c2:b7:
         f0:d2:a1:7f:0f:14:5f:04:57:ac:23:ca:be:e9:fd:99:0a:6f:
         5a:ff:45:e3:c5:a3:d4:bb:22:82:06:46:53:a7:bb:2b:10:81:
         36:ce:22:03:cc:ca:63:9a:8b:cf:12:93:fb:9a:ab:20:e3:5e:
         b2:b7:09:5c:ce:8f:32:7b:66:f7:57:42:fd:0f:e9:c1:f4:06:
         82:e5:c3:6e:cd:e7:ad:37:2a:9c:06:64:1e:f1:2d:c9:74:3f:
         b8:6f:ff:b1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuCHXZoGM61BV1LlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MGFiZWQyNDQtMTRkNC00MTYwLTk1NTMtNzNiZjI5NWZjZTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsN3T8CoyLaqNDYHBL+4u1FYbybv6HTJikQj
Wyrk2F0M+wCEbF5x8IjEzCzX98ASZtN0GJl6oow9R+CZPyG08T8lf9j+WDh2OsOn
bfhV2XyL5RsBKyR7otancb59rg55XfyPGu3Hsq3h8x8XUSJ8MkKnL8q6TWni789S
XeDawwJXXFh3UmfpcBwhHqlJtm71EG0ZUQDHUh/CF2s09K8kcJxlrlX3Bjt7ZQhd
seGTLBOG8ELMAYqderidSx1xxqU3uimIFvBtqdtpMnOouo82FAHu3wkOkX9045+C
0s++rqom8ec7Ge5eFARe9Me6HEbuRngJQQdlxvTUAJ06AYQNqwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCIPD0Y9wpZOTmZY3s6ZFO3il+wEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWNjNGRiMjItMmYzMy0z
NDQyLTgxMDctNjk4MDEzOTJmNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIBB1Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA0Yl+gpHxOhKXUgVb+Df2AjCyf/Qs/VpBi1ji8BUr5pYh/GqrFiVe
Sn6BquqWxdU1IUhqasPw3sF2KG+DF5P9lxVovNk1SyCAPLVoSKZ4Uc+OsGGQ0xch
4+2DWQlMjV8PMA70zimUmk8pZxvhIMpWPjdeZQeIq1AMNjJCYudRAcerWfvOCE4M
dOqv0y9FwnaJCnvEchixcQAgu9xdPeYg6sK38NKhfw8UXwRXrCPKvun9mQpvWv9F
48Wj1LsiggZGU6e7KxCBNs4iA8zKY5qLzxKT+5qrIONesrcJXM6PMntm91dC/Q/p
wfQGguXDbs3nrTcqnAZkHvEtyXQ/uG//sQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:23 2025 by rpki-client