Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
File:                     1f74085a-91aa-3331-9a65-b05046d33510.roa (raw, json)
Hash identifier:          PFDkj9vNbr6ndJNJmPEOPLCwC1iV/VKzRig7LHK4LBo=
Subject key identifier:   7A:16:9D:E5:17:73:98:B0:BE:A0:C1:EA:89:C0:9A:5B:D0:78:93:DA
Certificate issuer:       /CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
Certificate serial:       010D0C9F4328584A76337428A294E0F08C8C8B80
Authority key identifier: A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa
Signing time:             Wed 09 Jul 2025 13:49:49 +0000
ROA not before:           Wed 09 Jul 2025 13:49:49 +0000
ROA not after:            Tue 07 Oct 2025 13:49:49 +0000
asID:                     40716
IP address blocks:        2602:81b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:33:74:28:a2:94:e0:f0:8c:8c:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
        Validity
            Not Before: Jul  9 13:49:49 2025 GMT
            Not After : Oct  7 13:49:49 2025 GMT
        Subject: CN=668c073c-41ec-4d16-a91c-fd7b06fef030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:62:00:1e:9b:95:1b:49:81:1c:bc:a6:c8:
                    04:d2:8a:64:d7:de:f7:0d:1e:0c:0f:bd:18:b2:5b:
                    a3:87:45:9a:94:47:f9:9c:42:71:7c:cf:3b:5b:7d:
                    fe:f9:d7:58:82:22:fc:47:bf:c7:df:0e:09:8f:f9:
                    ab:16:bd:2c:79:53:52:a3:b6:60:09:b7:18:24:d2:
                    e6:12:80:41:60:88:a1:8c:63:ca:7e:fc:0d:47:93:
                    05:07:af:a0:4c:d6:f1:90:60:04:fd:c3:92:a1:cb:
                    fb:23:5c:d8:16:2f:0d:6b:a0:e7:c4:5d:82:97:7a:
                    7c:20:39:8b:df:9b:a3:a0:d5:3f:57:2f:ec:a1:5b:
                    81:08:83:ce:f7:b3:f9:c7:53:80:06:2a:a1:0a:40:
                    fc:58:d8:25:6d:f7:e5:f7:ff:20:c1:27:b5:56:b3:
                    3c:74:23:77:7c:6a:b5:46:3b:06:67:5a:44:56:e9:
                    fd:f0:14:3d:59:e7:47:48:f0:2d:a2:47:7b:29:6f:
                    81:3e:55:60:d2:0b:2b:ac:4c:3f:d2:f0:24:f2:92:
                    18:06:65:63:f4:bb:4a:b7:0a:1b:9f:ae:eb:35:7c:
                    17:f6:04:bf:af:cf:51:ce:44:e6:03:a6:6b:8c:be:
                    2c:c7:fb:2f:1e:24:a4:2b:2c:64:e9:37:44:b2:ed:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:16:9D:E5:17:73:98:B0:BE:A0:C1:EA:89:C0:9A:5B:D0:78:93:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/1f74085a-91aa-3331-9a65-b05046d33510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl

            X509v3 Authority Key Identifier:
                keyid:A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:27:dd:42:74:88:7f:79:b0:71:89:74:81:a3:c0:7a:c8:5f:
         ab:a7:76:45:d5:b8:c9:0f:39:70:1d:f3:1f:79:f5:5a:e8:59:
         de:f7:b6:37:92:60:61:79:ee:49:25:c6:6d:97:33:36:9b:e4:
         3f:6d:be:1b:a1:b6:8d:69:3e:0d:ba:90:fe:c8:05:6c:35:0d:
         f9:dc:99:c6:47:a4:7b:33:f4:45:2b:8c:37:24:66:e6:be:00:
         06:be:23:1f:f8:5e:31:06:b0:8b:87:12:0b:ca:2f:1a:f2:06:
         a1:80:a9:35:25:2a:4a:0d:74:52:6d:a7:e6:88:50:1a:24:0b:
         62:93:62:6a:2b:bb:60:be:da:2f:3d:70:dc:28:de:50:41:22:
         67:9f:33:f0:21:4a:78:2f:6b:6c:7d:ec:a8:db:60:01:66:e9:
         e8:d6:59:f2:1a:ab:9e:66:d9:f4:77:cb:8b:2a:9f:3d:90:ed:
         f7:e7:eb:7d:6c:38:85:09:02:01:0e:e3:d7:c9:a5:50:df:0b:
         01:03:3c:69:85:4f:72:f6:b9:ad:32:c8:08:31:0d:0a:c5:fa:
         35:16:81:05:ef:35:b4:e9:cc:5c:2e:b8:59:8a:5e:73:ba:1a:
         60:c4:35:8e:fc:47:d9:10:cf:2d:5c:27:60:6f:0e:f8:c0:d3:
         ee:83:29:7c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp2M3QoopTg8IyMi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWE3NTdhNjktMjk0NS00YjAxLWIzMGMtMjljM2ZmNzRh
ZTRiMB4XDTI1MDcwOTEzNDk0OVoXDTI1MTAwNzEzNDk0OVowLzEtMCsGA1UEAxMk
NjY4YzA3M2MtNDFlYy00ZDE2LWE5MWMtZmQ3YjA2ZmVmMDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0liAB6blRtJgRy8psgE0opk1973DR4MD70Y
slujh0WalEf5nEJxfM87W33++ddYgiL8R7/H3w4Jj/mrFr0seVNSo7ZgCbcYJNLm
EoBBYIihjGPKfvwNR5MFB6+gTNbxkGAE/cOSocv7I1zYFi8Na6DnxF2Cl3p8IDmL
35ujoNU/Vy/soVuBCIPO97P5x1OABiqhCkD8WNglbffl9/8gwSe1VrM8dCN3fGq1
RjsGZ1pEVun98BQ9WedHSPAtokd7KW+BPlVg0gsrrEw/0vAk8pIYBmVj9LtKtwob
n67rNXwX9gS/r89RzkTmA6ZrjL4sx/svHiSkKyxk6TdEsu1f0wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHoWneUXc5iwvqDB6onAmlvQeJPaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YTc1
N2E2OS0yOTQ1LTRiMDEtYjMwYy0yOWMzZmY3NGFlNGIvMWY3NDA4NWEtOTFhYS0z
MzMxLTlhNjUtYjA1MDQ2ZDMzNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWE3NTdhNjktMjk0NS00YjAxLWIz
MGMtMjljM2ZmNzRhZTRiLzVhNzU3YTY5LTI5NDUtNGIwMS1iMzBjLTI5YzNmZjc0
YWU0Yi5jcmwwHwYDVR0jBBgwFoAUqOuBriwlC6IE1jaDWiMYIRGyWX0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YTc1N2E2OS0yOTQ1LTRiMDEtYjMwYy0yOWMz
ZmY3NGFlNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIG+Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcifdQnSIf3mwcYl0gaPAeshfq6d2RdW4yQ85cB3zH3n1WuhZ3ve2
N5JgYXnuSSXGbZczNpvkP22+G6G2jWk+DbqQ/sgFbDUN+dyZxkekezP0RSuMNyRm
5r4ABr4jH/heMQawi4cSC8ovGvIGoYCpNSUqSg10Um2n5ohQGiQLYpNiaiu7YL7a
Lz1w3CjeUEEiZ58z8CFKeC9rbH3sqNtgAWbp6NZZ8hqrnmbZ9HfLiyqfPZDt9+fr
fWw4hQkCAQ7j18mlUN8LAQM8aYVPcva5rTLICDENCsX6NRaBBe81tOnMXC64WYpe
c7oaYMQ1jvxH2RDPLVwnYG8O+MDT7oMpfA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:24 2025 by rpki-client