Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/4e0119ee-0f0b-34d4-8600-07960abfc65c.roa
File:                     4e0119ee-0f0b-34d4-8600-07960abfc65c.roa (raw, json)
Hash identifier:          k31tGj/OAa0JlQcHPll7jBZk75xDIfiQHEBFOzv1dfQ=
Subject key identifier:   48:C9:2B:4D:08:22:1C:F2:77:F3:81:E8:28:4B:15:E6:90:8A:B1:5A
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584AB91B7ECE66374585CCEBE680
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/4e0119ee-0f0b-34d4-8600-07960abfc65c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     10126
IP address blocks:        2606:c00:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:7e:ce:66:37:45:85:cc:eb:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=36803139-1b48-4113-a653-d0ab19fc1921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:75:53:e1:2d:ae:00:bc:eb:b4:1a:76:bf:ba:
                    cc:7a:12:00:d6:b5:72:03:9e:d0:8d:16:0d:60:6e:
                    c8:3d:dd:d7:ce:68:c9:20:0a:c3:8d:31:db:79:e9:
                    df:67:66:7c:c8:f9:cd:9a:4f:dc:25:b0:77:87:50:
                    34:1f:f0:17:81:42:0e:fc:58:78:95:49:48:ce:28:
                    55:25:e4:1c:a1:34:93:bd:e4:b6:bd:e3:e7:55:0d:
                    e7:c9:15:0f:09:42:0c:26:16:09:85:56:02:07:69:
                    38:57:46:d7:eb:31:ad:86:ec:40:db:9d:d4:db:d4:
                    6b:d6:05:1d:42:55:0d:f3:8c:af:44:59:c8:ec:55:
                    cd:1e:8f:36:f2:a0:4f:1d:ca:93:86:ba:48:53:51:
                    b6:ea:b1:7f:9f:a2:2b:c3:67:f9:21:f7:1f:03:34:
                    9e:1c:dd:e6:c3:ca:27:ac:89:54:f5:23:21:ca:95:
                    74:bb:d2:34:30:48:76:f5:74:6e:1d:8a:f8:11:51:
                    b4:db:c5:41:1d:e7:d1:94:37:82:63:2b:4c:85:fb:
                    14:fd:67:7e:f5:d2:4b:5b:49:20:c6:75:1c:c4:b2:
                    91:1a:7b:0b:25:5d:03:1e:8f:b9:65:2a:40:ed:b8:
                    0f:71:bd:9e:81:3c:c7:bf:29:66:27:ba:b9:ef:2c:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:2B:4D:08:22:1C:F2:77:F3:81:E8:28:4B:15:E6:90:8A:B1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/4e0119ee-0f0b-34d4-8600-07960abfc65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c00:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:5f:72:05:ae:e4:94:8b:95:de:bf:fa:e9:b5:fc:13:a8:
         71:21:83:19:6d:15:4e:a7:14:cc:d2:48:c5:68:2c:e2:84:23:
         48:55:b3:ad:6e:a3:06:68:aa:bf:93:49:6b:7e:cf:dc:1c:84:
         be:01:54:47:68:c0:cd:2b:ab:01:4d:4c:32:cc:03:d0:a3:22:
         41:72:4d:d3:b8:26:38:f9:ea:62:76:62:1e:84:3b:7b:e5:f9:
         17:af:9e:9d:06:a8:4a:49:eb:17:8e:56:1e:82:02:7a:a2:6b:
         67:fa:1f:0e:f1:9a:44:7e:56:57:5f:9f:48:85:76:df:f7:45:
         c2:4b:a8:bc:2a:06:04:43:b5:6f:84:11:6b:d9:a0:db:9f:65:
         63:1c:9f:a0:93:4f:0b:60:84:a2:53:a1:99:eb:d4:ef:27:1d:
         98:11:bc:b9:fa:fa:3e:44:05:c9:fa:f9:93:30:17:b5:25:87:
         cd:9b:07:4b:37:35:f6:e1:ae:d0:23:59:8e:e4:c2:bd:7d:ba:
         6e:ca:97:6c:e0:fe:5a:d9:89:47:9e:a2:f0:e6:09:d3:2b:3a:
         f4:8e:40:b2:43:4f:fe:bc:5e:6c:24:db:10:f4:20:e9:1b:6b:
         9e:ad:89:b7:c8:0e:a8:dc:72:a8:e2:8d:99:84:9b:ce:db:b3:
         59:67:4b:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G37OZjdFhczr5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi
ZmQ2MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MzY4MDMxMzktMWI0OC00MTEzLWE2NTMtZDBhYjE5ZmMxOTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HVT4S2uALzrtBp2v7rMehIA1rVyA57QjRYN
YG7IPd3XzmjJIArDjTHbeenfZ2Z8yPnNmk/cJbB3h1A0H/AXgUIO/Fh4lUlIzihV
JeQcoTSTveS2vePnVQ3nyRUPCUIMJhYJhVYCB2k4V0bX6zGthuxA253U29Rr1gUd
QlUN84yvRFnI7FXNHo828qBPHcqThrpIU1G26rF/n6Irw2f5IfcfAzSeHN3mw8on
rIlU9SMhypV0u9I0MEh29XRuHYr4EVG028VBHefRlDeCYytMhfsU/Wd+9dJLW0kg
xnUcxLKRGnsLJV0DHo+5ZSpA7bgPcb2egTzHvylmJ7q57yxsYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEjJK00IIhzyd/OB6ChLFeaQirFaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0
YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvNGUwMTE5ZWUtMGYwYi0z
NGQ0LTg2MDAtMDc5NjBhYmZjNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi
ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj
YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2
MjQ2Y2JmZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYMAAAy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHEbX3IFruSUi5Xev/rptfwTqHEhgxltFU6nFMzSSMVoLOKEI0hV
s61uowZoqr+TSWt+z9wchL4BVEdowM0rqwFNTDLMA9CjIkFyTdO4Jjj56mJ2Yh6E
O3vl+Revnp0GqEpJ6xeOVh6CAnqia2f6Hw7xmkR+Vldfn0iFdt/3RcJLqLwqBgRD
tW+EEWvZoNufZWMcn6CTTwtghKJToZnr1O8nHZgRvLn6+j5EBcn6+ZMwF7Ulh82b
B0s3NfbhrtAjWY7kwr19um7Kl2zg/lrZiUeeovDmCdMrOvSOQLJDT/68Xmwk2xD0
IOkba56tibfIDqjccqjijZmEm87bs1lnS1E=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:12 2025 by rpki-client