Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa
File:                     06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa (raw, json)
Hash identifier:          9vxOSe5CBFF6DgsB8ywW7z0A0448lgz51aDyMzHggcI=
Subject key identifier:   5D:59:19:52:05:4D:E1:9A:AD:6B:D4:A5:0A:46:4E:83:6D:2A:CE:ED
Certificate issuer:       /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Certificate serial:       010D0C9F4328584A84123CD7905FDE6F45F7FD80
Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     394725
IP address blocks:        2620:e4:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3c:d7:90:5f:de:6f:45:f7:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=efb1789b-60fe-4b8f-9b5a-259bf584bbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:07:f3:9f:67:05:dd:64:15:d8:5c:6d:a9:3d:
                    f9:c6:28:85:bb:ad:0b:50:c9:27:61:e6:7d:d0:87:
                    b0:f3:20:91:62:08:42:fb:6e:d2:ac:d1:5d:fc:6b:
                    52:15:4b:62:b6:07:6a:d4:47:13:31:f9:ed:36:24:
                    0b:b1:77:f0:59:3a:e6:d7:f6:68:6c:18:11:c4:46:
                    b2:9c:33:1c:95:9e:c3:fb:cf:07:05:e8:ce:89:e5:
                    c5:37:39:07:01:54:58:7a:a4:b8:f1:0d:ec:f3:69:
                    56:5f:ba:5d:11:0e:94:58:8d:a4:01:81:e6:22:d9:
                    7b:a8:31:26:a5:80:70:6e:52:7a:b3:7e:ce:37:06:
                    c9:ab:aa:c6:c1:3b:44:8a:44:99:61:11:35:e1:42:
                    ab:5b:bf:45:44:ce:5d:db:38:7c:4c:d8:54:cc:7d:
                    05:f7:57:16:1f:27:db:6c:c0:7f:ee:41:f1:b4:ba:
                    bf:57:df:02:a0:ec:98:be:ec:79:23:f4:7b:14:3c:
                    f0:ac:cd:68:bb:f7:00:ac:1c:5a:be:c0:b4:38:41:
                    04:5e:e2:b4:b4:b8:6d:87:fd:70:aa:bb:f6:13:3f:
                    0d:d0:7c:3d:10:f6:ca:4a:4b:51:f9:38:65:0e:87:
                    86:f8:3b:24:b2:d0:7b:8e:04:39:f3:ed:89:d5:90:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:59:19:52:05:4D:E1:9A:AD:6B:D4:A5:0A:46:4E:83:6D:2A:CE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/06f7fa6a-a150-3625-b5e6-e4b6e1fe1e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e4:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:01:dc:61:80:43:65:1d:e9:32:d8:6e:b2:0a:ab:94:00:8b:
         31:e7:23:8d:5a:ab:74:d0:4a:48:94:03:f4:19:fe:65:7c:31:
         d5:15:bf:86:bc:8d:7c:5f:0b:9b:3b:78:3e:a9:25:87:70:84:
         fc:99:7f:64:f0:73:98:e3:5a:54:7c:f6:6e:ed:8f:9a:03:87:
         c3:f3:eb:5d:22:7e:55:f7:f7:6d:e6:8f:f2:06:c5:d5:cb:ff:
         ef:e3:5b:3d:3a:e6:d8:60:22:3a:0c:54:7d:49:d0:70:12:83:
         e0:41:32:b1:19:db:38:c6:db:2e:4d:46:10:b5:7a:8e:e6:72:
         65:c8:c4:0d:40:01:91:43:5b:9b:a4:52:7f:31:9d:5c:0f:e8:
         56:c0:55:13:86:26:7c:b5:a3:c3:f6:45:32:07:5d:d7:7d:f8:
         60:cb:a2:70:20:7d:16:ab:b0:0d:5e:cb:d2:dd:8a:48:2a:b3:
         43:c2:e0:6e:96:93:b8:97:7d:ee:40:94:75:69:b0:7a:2b:39:
         38:0a:7a:5d:d4:14:0e:33:2b:94:d4:bc:53:cc:1c:39:9e:26:
         9b:1e:84:b1:53:bd:cf:b5:26:2e:96:5b:5e:46:34:cf:31:b1:
         6f:6f:c0:24:c4:a8:d3:8f:e8:d6:bc:a7:c7:ba:6b:30:ab:13:
         56:1c:4e:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEjzXkF/eb0X3/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVkNGI5ZGItMThmMy00MDhhLTgyODQtMWVmMGVhNWJj
NjhhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZWZiMTc4OWItNjBmZS00YjhmLTliNWEtMjU5YmY1ODRiYmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwfzn2cF3WQV2FxtqT35xiiFu60LUMknYeZ9
0Iew8yCRYghC+27SrNFd/GtSFUtitgdq1EcTMfntNiQLsXfwWTrm1/ZobBgRxEay
nDMclZ7D+88HBejOieXFNzkHAVRYeqS48Q3s82lWX7pdEQ6UWI2kAYHmItl7qDEm
pYBwblJ6s37ONwbJq6rGwTtEikSZYRE14UKrW79FRM5d2zh8TNhUzH0F91cWHyfb
bMB/7kHxtLq/V98CoOyYvux5I/R7FDzwrM1ou/cArBxavsC0OEEEXuK0tLhth/1w
qrv2Ez8N0Hw9EPbKSktR+ThlDoeG+DskstB7jgQ58+2J1ZDV+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF1ZGVIFTeGarWvUpQpGToNtKs7tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zNWQ0
YjlkYi0xOGYzLTQwOGEtODI4NC0xZWYwZWE1YmM2OGEvMDZmN2ZhNmEtYTE1MC0z
NjI1LWI1ZTYtZTRiNmUxZmUxZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzVkNGI5ZGItMThmMy00MDhhLTgy
ODQtMWVmMGVhNWJjNjhhLzM1ZDRiOWRiLTE4ZjMtNDA4YS04Mjg0LTFlZjBlYTVi
YzY4YS5jcmwwHwYDVR0jBBgwFoAUoTRdUaRX00Bb5epaiU8mlMolFckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zNWQ0YjlkYi0xOGYzLTQwOGEtODI4NC0xZWYw
ZWE1YmM2OGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA5EAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACAB3GGAQ2Ud6TLYbrIKq5QAizHnI41aq3TQSkiUA/QZ/mV8MdUV
v4a8jXxfC5s7eD6pJYdwhPyZf2Twc5jjWlR89m7tj5oDh8Pz610iflX3923mj/IG
xdXL/+/jWz065thgIjoMVH1J0HASg+BBMrEZ2zjG2y5NRhC1eo7mcmXIxA1AAZFD
W5ukUn8xnVwP6FbAVROGJny1o8P2RTIHXdd9+GDLonAgfRarsA1ey9Ldikgqs0PC
4G6Wk7iXfe5AlHVpsHorOTgKel3UFA4zK5TUvFPMHDmeJpsehLFTvc+1Ji6WW15G
NM8xsW9vwCTEqNOP6Na8p8e6azCrE1YcTvw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:02 2025 by rpki-client