Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa
File:                     6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa (raw, json)
Hash identifier:          RLQJMzZxBPaCt6N+Cx5ZvTSkVqTN56PUbdNWh0UGxxE=
Subject key identifier:   26:4D:05:93:51:17:06:7C:7F:B2:E8:CA:78:D3:7F:C8:4B:C5:DF:60
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584A3050329C607B62D49D1C0480
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     399728
IP address blocks:        2620:98:e007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:32:9c:60:7b:62:d4:9d:1c:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=b703c81f-4f12-4f52-97de-3d7299efbf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:54:86:c7:e0:3d:e9:64:72:63:7b:e3:a9:
                    1e:9f:8b:f5:5c:c8:23:ef:9a:dc:eb:f2:5c:54:4e:
                    bd:64:13:bb:a8:89:56:8c:75:a2:c1:15:1f:55:cc:
                    a0:c7:33:de:b0:51:14:4c:63:11:c2:2c:72:fd:26:
                    dd:3b:5d:47:61:9b:b7:f2:51:87:63:be:d0:87:a9:
                    97:1e:92:23:29:fb:42:ff:d4:a4:bd:76:43:d1:39:
                    bd:49:0e:e4:e1:11:69:4e:16:bc:8e:33:1d:6a:4a:
                    0f:b9:0a:f0:7c:39:6c:d6:87:8d:79:0a:7a:ec:50:
                    24:44:a5:2c:86:9c:66:e8:9b:78:f1:0f:41:25:8f:
                    4a:a6:b5:d3:0d:bd:cf:b3:6a:0e:55:58:c4:b0:75:
                    19:1a:df:00:f6:33:01:ef:ed:62:8a:21:17:a8:de:
                    d3:90:5f:4f:be:0d:c1:c0:aa:c3:fa:d1:df:d5:cd:
                    13:ca:27:94:a7:e8:ef:d9:0c:47:4a:78:94:68:a7:
                    2f:0e:95:6f:53:48:8a:2f:54:c0:dd:08:a1:6e:df:
                    d6:85:db:ac:59:aa:e2:da:8a:74:c7:4f:18:a5:23:
                    85:6f:b3:2a:cd:53:e8:4a:77:ed:b0:a1:65:92:56:
                    80:60:32:58:28:b1:b3:f6:dd:58:ac:bc:b1:15:43:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:05:93:51:17:06:7C:7F:B2:E8:CA:78:D3:7F:C8:4B:C5:DF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/6a75522c-675d-3b8d-bf4d-c445fde3eac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:e2:27:f2:87:2a:fb:c7:2f:99:49:f9:56:5e:63:96:d2:
         27:cd:66:0b:8b:33:4b:6a:7d:db:f9:0a:b5:e8:98:6a:50:8e:
         27:89:09:80:f4:be:80:c8:a8:1e:3e:90:1c:f3:62:7c:cc:01:
         b7:89:6a:87:7e:11:4b:56:42:06:04:ad:e9:ac:4d:82:f2:cb:
         8e:78:1d:59:11:f9:eb:61:4e:30:42:12:43:ad:5e:8e:b9:b4:
         7f:34:1b:36:0a:35:11:9a:2c:5b:21:c5:c3:43:cd:70:a8:32:
         da:fd:72:42:a7:6d:3c:9e:cf:14:18:aa:6e:a8:44:16:db:5e:
         09:0b:92:81:4f:96:d7:4a:a4:09:e2:f9:d0:59:99:55:b9:97:
         5b:fb:c1:36:b0:dc:7b:4d:bd:1f:42:6e:ad:68:ac:cd:67:4d:
         c7:d7:2e:99:5e:23:18:8a:6c:d8:d5:2b:e8:cd:25:39:ad:5a:
         97:cf:f9:2d:d5:48:d2:e7:60:7a:e7:a4:63:90:1d:bd:9e:25:
         81:03:9c:1f:49:35:bc:7a:9b:19:b5:ee:25:fd:c2:b1:a0:19:
         04:2f:9f:bc:3e:e3:a8:98:d9:55:88:75:5b:6c:6b:47:8a:f8:
         27:3f:27:7f:d2:f4:cc:ca:eb:0d:3b:f1:44:b4:35:35:b2:33:
         5a:ff:79:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEowUDKcYHti1J0cBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm
MDgyMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YjcwM2M4MWYtNGYxMi00ZjUyLTk3ZGUtM2Q3Mjk5ZWZiZjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12JUhsfgPelkcmN746ken4v1XMgj75rc6/Jc
VE69ZBO7qIlWjHWiwRUfVcygxzPesFEUTGMRwixy/SbdO11HYZu38lGHY77Qh6mX
HpIjKftC/9SkvXZD0Tm9SQ7k4RFpTha8jjMdakoPuQrwfDls1oeNeQp67FAkRKUs
hpxm6Jt48Q9BJY9KprXTDb3Ps2oOVVjEsHUZGt8A9jMB7+1iiiEXqN7TkF9Pvg3B
wKrD+tHf1c0TyieUp+jv2QxHSniUaKcvDpVvU0iKL1TA3Qihbt/WhdusWari2op0
x08YpSOFb7MqzVPoSnftsKFlklaAYDJYKLGz9t1YrLyxFUNynwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCZNBZNRFwZ8f7LoynjTf8hLxd9gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh
OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvNmE3NTUyMmMtNjc1ZC0z
YjhkLWJmNGQtYzQ0NWZkZTNlYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5
OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1
ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi
ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACKu4ifyhyr7xy+ZSflWXmOW0ifNZguLM0tqfdv5CrXomGpQjieJ
CYD0voDIqB4+kBzzYnzMAbeJaod+EUtWQgYEremsTYLyy454HVkR+ethTjBCEkOt
Xo65tH80GzYKNRGaLFshxcNDzXCoMtr9ckKnbTyezxQYqm6oRBbbXgkLkoFPltdK
pAni+dBZmVW5l1v7wTaw3HtNvR9Cbq1orM1nTcfXLpleIxiKbNjVK+jNJTmtWpfP
+S3VSNLnYHrnpGOQHb2eJYEDnB9JNbx6mxm17iX9wrGgGQQvn7w+46iY2VWIdVts
a0eK+Cc/J3/S9MzK6w078US0NTWyM1r/eRE=
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:44:56 2025 by rpki-client