Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa
File:                     707934f0-2be6-3cdf-a514-9b44c5ca443b.roa (raw, json)
Hash identifier:          rku7OjgONgBhDTiKQj0ZZ0LjhgRCPudFEFrEdU6YvUw=
Subject key identifier:   AF:D5:AD:53:A5:7B:A6:E7:D2:14:B7:1E:6D:7D:13:45:F8:9B:6E:B1
Certificate issuer:       /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial:       010D0C9F43285849DC8FB992031488DFA4F6B800
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     21766
IP address blocks:        2605:6600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b9:92:03:14:88:df:a4:f6:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=0a7994c7-3fb1-47f2-806d-c6b99fe31a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:ab:db:23:1a:cc:d2:17:53:7c:df:3a:c6:
                    c7:68:a5:73:f7:6b:92:d8:58:7b:cc:da:37:87:50:
                    71:52:5b:2e:00:8c:a4:8a:80:c1:0f:8a:0e:82:90:
                    27:07:df:07:51:a7:6d:74:30:dd:3d:2d:64:45:4b:
                    ea:24:87:1b:4f:0a:74:00:10:c9:e8:1e:16:7c:8c:
                    19:5d:a1:e3:db:2d:88:c8:6c:84:e8:b9:05:69:f9:
                    02:10:49:5d:b3:5a:f7:9c:73:ca:cc:d7:b1:a5:28:
                    b7:f4:c6:f6:94:9d:4b:ad:64:3f:43:27:09:c0:50:
                    d8:ad:0e:62:b9:da:32:20:81:96:de:56:ab:24:a3:
                    b9:25:b8:f2:2f:79:8b:13:56:c0:52:db:ec:de:b9:
                    41:cc:9a:86:92:11:2a:c6:36:8d:ad:93:06:fc:3e:
                    fc:a0:9d:9b:de:9a:da:93:6b:5b:f0:95:c5:de:fd:
                    e6:97:66:a8:2d:db:23:09:1b:cb:98:c5:9d:cf:79:
                    24:b1:35:d0:14:13:68:59:78:cb:8e:7b:08:ed:b8:
                    33:cd:a7:69:e1:74:ed:43:99:1e:de:58:36:91:76:
                    f9:ed:57:e0:0b:09:13:92:53:fb:d1:23:85:71:64:
                    00:31:76:02:20:67:ad:da:31:e2:3b:e8:53:c7:91:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D5:AD:53:A5:7B:A6:E7:D2:14:B7:1E:6D:7D:13:45:F8:9B:6E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:78:10:50:13:0d:01:a0:be:b7:6e:a2:43:68:4c:27:b9:e2:
         02:78:9a:77:09:7b:40:5d:d7:4b:24:4e:87:5c:2c:22:a0:e9:
         78:f2:5b:46:f9:18:40:a9:9d:ff:3e:a4:e5:b3:36:5d:dc:5f:
         f9:d3:81:0d:d8:66:6e:f4:f9:ff:9b:ac:46:8b:25:6f:2c:9f:
         d8:5b:0f:db:e3:44:15:6c:7c:8e:3a:3b:af:29:c2:59:31:5d:
         fd:49:9b:84:59:11:f8:03:06:4c:cc:92:aa:2a:c0:56:43:93:
         04:e2:e6:2b:2f:68:69:e7:4e:3a:ac:4b:da:31:0b:f7:70:a6:
         69:ef:71:f3:bb:cb:b9:ee:a1:e2:c3:ee:99:82:d4:9b:fe:f3:
         97:0a:ee:18:40:c9:00:e4:90:41:f8:c5:66:e2:9d:ee:f1:e8:
         64:d9:d8:b1:79:84:8c:12:79:cb:30:0a:19:f7:2e:55:86:fc:
         58:e1:7c:97:85:10:2c:d1:1c:6c:38:83:22:2b:54:00:09:2a:
         8d:19:03:df:c0:6d:4c:27:70:5d:0e:c4:48:e1:cc:86:9b:ed:
         10:5b:b6:57:c8:85:46:02:b1:02:c1:52:d4:17:96:18:19:fa:
         4c:a2:28:4e:61:87:d6:b3:68:b1:47:5f:2c:bc:41:2d:9d:96:
         bc:ef:de:25
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEncj7mSAxSI36T2uAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj
N2IxMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
MGE3OTk0YzctM2ZiMS00N2YyLTgwNmQtYzZiOTlmZTMxYTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yar2yMazNIXU3zfOsbHaKVz92uS2Fh7zNo3
h1BxUlsuAIykioDBD4oOgpAnB98HUadtdDDdPS1kRUvqJIcbTwp0ABDJ6B4WfIwZ
XaHj2y2IyGyE6LkFafkCEElds1r3nHPKzNexpSi39Mb2lJ1LrWQ/QycJwFDYrQ5i
udoyIIGW3larJKO5JbjyL3mLE1bAUtvs3rlBzJqGkhEqxjaNrZMG/D78oJ2b3pra
k2tb8JXF3v3ml2aoLdsjCRvLmMWdz3kksTXQFBNoWXjLjnsI7bgzzadp4XTtQ5ke
3lg2kXb57VfgCwkTklP70SOFcWQAMXYCIGet2jHiO+hTx5HZIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK/VrVOle6bn0hS3Hm19E0X4m26xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3
ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNzA3OTM0ZjAtMmJlNi0z
Y2RmLWE1MTQtOWI0NGM1Y2E0NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk
MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0
YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3
MmY5NGM3YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVmADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDCeBBQEw0BoL63bqJDaEwnueICeJp3CXtAXddLJE6HXCwioOl48ltG
+RhAqZ3/PqTlszZd3F/504EN2GZu9Pn/m6xGiyVvLJ/YWw/b40QVbHyOOjuvKcJZ
MV39SZuEWRH4AwZMzJKqKsBWQ5ME4uYrL2hp5046rEvaMQv3cKZp73Hzu8u57qHi
w+6ZgtSb/vOXCu4YQMkA5JBB+MVm4p3u8ehk2dixeYSMEnnLMAoZ9y5VhvxY4XyX
hRAs0RxsOIMiK1QACSqNGQPfwG1MJ3BdDsRI4cyGm+0QW7ZXyIVGArECwVLUF5YY
GfpMoihOYYfWs2ixR18svEEtnZa8794l
-----END CERTIFICATE-----
Generated at Mon Jun 30 03:49:25 2025 by rpki-client