Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/b29a20ff-936e-3035-a99b-5bc8b2230acf.roa
File:                     b29a20ff-936e-3035-a99b-5bc8b2230acf.roa (raw, json)
Hash identifier:          IVakbbxIkhaSDVQzhLbZIE+8nsKORNB0Bdh2AJdEAMc=
Subject key identifier:   E7:FA:7A:68:88:3D:C5:D8:AA:78:E8:74:98:99:6B:13:BF:67:97:80
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F4328584AC016407F1AE78B3AFD13FC80
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/b29a20ff-936e-3035-a99b-5bc8b2230acf.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     393891
IP address blocks:        2620:135:4001::/48 maxlen: 48
                          2620:135:4002::/48 maxlen: 48
                          2620:135:4003::/48 maxlen: 48
                          2620:135:4004::/48 maxlen: 48
                          2620:135:4005::/48 maxlen: 48
                          2620:135:4006::/48 maxlen: 48
                          2620:135:4007::/48 maxlen: 48
                          2620:135:4008::/48 maxlen: 48
                          2620:135:4009::/48 maxlen: 48
                          2620:135:400a::/48 maxlen: 48
                          2620:135:400b::/48 maxlen: 48
                          2620:135:400c::/48 maxlen: 48
                          2620:135:400d::/48 maxlen: 48
                          2620:135:400e::/48 maxlen: 48
                          2620:135:400f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:40:7f:1a:e7:8b:3a:fd:13:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=ed16ab43-0a4c-4efc-9b57-64cadcf791bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:78:cf:fe:02:95:f7:84:4b:26:f3:b7:cd:
                    b9:5e:40:3e:a4:d1:f0:63:fb:88:4f:fe:ca:5d:6e:
                    8f:a1:f0:48:4f:0b:07:12:37:12:be:e7:ec:c3:8d:
                    97:9f:32:a0:48:9f:8e:28:9e:c0:4d:f4:96:bd:4d:
                    c1:10:78:f3:71:d1:0b:cc:22:94:b6:b0:ed:3d:3a:
                    d4:e0:56:d9:02:70:3d:22:ba:04:ca:d9:79:6b:91:
                    f4:1d:52:3c:cf:a5:53:ca:04:8e:6e:86:68:43:93:
                    f2:dc:36:a5:81:63:d3:a9:4a:24:4b:e5:bd:48:52:
                    d0:32:af:39:b5:c8:03:59:2e:7a:dc:21:d7:dc:98:
                    5e:5d:17:bc:9f:67:03:ca:ed:e5:07:7d:12:23:6b:
                    50:b6:62:76:d8:bf:ad:e5:d4:27:3a:33:1c:23:2e:
                    0c:59:07:81:a4:e6:7e:20:e5:2b:5d:07:a8:a9:16:
                    73:db:a5:bd:88:2f:e0:df:4c:f2:64:72:6c:a4:66:
                    0e:f3:d0:13:d8:13:da:61:1e:e8:7f:42:9b:69:1c:
                    a6:bc:39:2c:7c:fd:fe:7c:45:da:e0:78:2c:88:b1:
                    ad:f3:75:7f:7b:2e:8a:2f:50:19:24:57:68:87:b6:
                    ae:90:19:65:6d:03:73:74:e0:95:58:4f:20:99:ed:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FA:7A:68:88:3D:C5:D8:AA:78:E8:74:98:99:6B:13:BF:67:97:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/b29a20ff-936e-3035-a99b-5bc8b2230acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:4001::-2620:135:400f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8b:fa:4d:0b:fc:b6:18:ff:05:5c:51:b2:ac:6e:14:60:9a:
         58:e5:62:0a:d4:de:a0:da:d3:2a:fd:7a:a8:42:2e:a9:9a:c6:
         9b:e1:3b:80:09:ed:79:00:7c:15:e1:7a:ba:c6:50:23:fd:ba:
         9c:16:99:4b:cc:bc:fe:68:28:13:e9:70:f9:9b:c8:4a:14:9f:
         04:12:50:43:da:2c:94:3c:f1:a3:bb:65:6b:ab:f5:fe:4c:64:
         35:3b:46:28:db:6a:a1:d7:b2:fa:7b:ef:2c:3b:12:bc:e7:15:
         23:0d:6c:66:4d:dd:7b:2d:39:88:15:00:b8:7f:c2:2f:3f:ca:
         14:b6:f7:4e:ce:1b:f4:e6:ad:24:16:32:75:f5:17:39:1c:1a:
         3f:79:bf:32:28:26:40:45:16:73:54:e8:1f:5e:01:cd:2e:50:
         b6:ad:23:62:42:5c:4f:f9:20:79:85:e5:28:d6:71:da:12:64:
         f2:60:7b:cb:a6:61:fb:fd:0a:d5:fb:96:91:42:44:43:10:67:
         2b:cc:0a:7c:b3:18:02:3f:23:ea:48:50:2f:45:d7:e1:c3:61:
         6b:1e:7c:0e:6c:b8:60:56:cb:ca:52:05:8f:db:77:fa:18:25:
         de:cd:4e:44:60:90:1f:66:af:62:ef:c5:6e:5a:37:c1:2d:e9:
         4e:43:a9:0a
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWErAFkB/GueLOv0T/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy
ZmIxMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZWQxNmFiNDMtMGE0Yy00ZWZjLTliNTctNjRjYWRjZjc5MWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5d4z/4ClfeESybzt825XkA+pNHwY/uIT/7K
XW6PofBITwsHEjcSvufsw42XnzKgSJ+OKJ7ATfSWvU3BEHjzcdELzCKUtrDtPTrU
4FbZAnA9IroEytl5a5H0HVI8z6VTygSOboZoQ5Py3DalgWPTqUokS+W9SFLQMq85
tcgDWS563CHX3JheXRe8n2cDyu3lB30SI2tQtmJ22L+t5dQnOjMcIy4MWQeBpOZ+
IOUrXQeoqRZz26W9iC/g30zyZHJspGYO89AT2BPaYR7of0KbaRymvDksfP3+fEXa
4HgsiLGt83V/ey6KL1AZJFdoh7aukBllbQNzdOCVWE8gme2Q1QIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFOf6emiIPcXYqnjodJiZaxO/Z5eAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0
NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvYjI5YTIwZmYtOTM2ZS0z
MDM1LWE5OWItNWJjOGIyMjMwYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4
ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy
MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx
NTczMjJmYjEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmIAE1
QAEDBwQmIAE1QAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAJYv6TQv8thj/BVxRsqxuFGCaWOViCtTeoNrT
Kv16qEIuqZrGm+E7gAnteQB8FeF6usZQI/26nBaZS8y8/mgoE+lw+ZvIShSfBBJQ
Q9oslDzxo7tla6v1/kxkNTtGKNtqodey+nvvLDsSvOcVIw1sZk3dey05iBUAuH/C
Lz/KFLb3Ts4b9OatJBYydfUXORwaP3m/MigmQEUWc1ToH14BzS5Qtq0jYkJcT/kg
eYXlKNZx2hJk8mB7y6Zh+/0K1fuWkUJEQxBnK8wKfLMYAj8j6khQL0XX4cNhax58
Dmy4YFbLylIFj9t3+hgl3s1ORGCQH2avYu/Fblo3wS3pTkOpCg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:01 2025 by rpki-client