Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa
File:                     f20db414-9887-3258-bbe3-5440b1f22bf0.roa (raw, json)
Hash identifier:          2f0UUGDfZnsp+0fr1qWNFI+H3+jymYkTA667IW5nICY=
Subject key identifier:   A1:26:64:E3:18:1E:36:83:2D:CD:12:AB:59:D0:D1:2B:C9:67:FD:93
Certificate issuer:       /CN=a1046e21-4a33-4415-a524-c10db602b0ec
Certificate serial:       010D0C9F4328584A7FE08C3E35D334232D39E780
Authority key identifier: E8:29:BE:FC:43:BB:9D:31:56:BD:62:E1:85:15:11:AF:0E:F4:A0:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     396204
IP address blocks:        2620:22:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:8c:3e:35:d3:34:23:2d:39:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1046e21-4a33-4415-a524-c10db602b0ec
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=39650142-36a7-460f-aef0-2c03d3eb73bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:63:42:25:e6:5d:c0:6b:2b:fb:ad:89:f3:
                    0b:33:2b:ba:5b:2f:1f:67:6a:2c:d3:83:36:bc:76:
                    c3:84:c7:5b:31:3f:67:a0:c4:5e:27:c3:d1:74:fa:
                    98:1a:6c:7c:f1:8a:9b:71:5c:f4:cc:43:06:64:ab:
                    f7:5b:d2:ce:87:09:7d:9d:94:76:f2:6b:ff:c6:a3:
                    9a:aa:1d:f9:92:a4:07:c2:a4:8b:20:5e:ae:3b:83:
                    21:c7:5e:e2:cc:e3:14:f8:8c:68:46:de:31:d4:38:
                    e5:67:6e:a2:af:39:5d:d9:2b:19:5c:ac:ee:ff:c2:
                    39:cb:c9:de:05:e4:56:be:9c:ab:b0:96:c5:9b:1e:
                    42:72:62:ca:0e:07:2f:87:9e:e7:7e:59:84:e6:29:
                    3c:a3:e2:a0:06:0f:4b:02:e3:8e:0b:2d:5f:b2:61:
                    a9:ac:6e:3e:1a:11:a0:e1:f3:fe:ec:ab:82:ce:70:
                    81:c8:52:b7:eb:6a:4a:34:75:29:f9:83:cf:e4:88:
                    ba:0c:e6:d8:0c:35:5d:10:b9:81:2e:0f:f3:ca:05:
                    3c:67:8a:3c:ff:14:1e:6e:09:be:46:5e:85:a8:e6:
                    ca:3c:b8:a7:ca:36:0e:32:07:66:2c:d6:0f:e2:c9:
                    dc:a7:b0:a9:02:53:88:f1:49:07:c3:c7:59:26:94:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:64:E3:18:1E:36:83:2D:CD:12:AB:59:D0:D1:2B:C9:67:FD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.crl

            X509v3 Authority Key Identifier:
                keyid:E8:29:BE:FC:43:BB:9D:31:56:BD:62:E1:85:15:11:AF:0E:F4:A0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:22:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:aa:4f:88:bd:52:e9:5f:96:f6:31:9d:89:2f:06:3b:fc:
         40:96:1b:4d:8a:43:c8:55:04:db:70:4b:67:21:29:87:1c:8d:
         63:58:5d:94:93:73:15:c0:b6:4a:15:15:55:b1:df:b1:e7:d5:
         39:4c:c8:df:ed:f7:e1:07:92:2a:67:be:9a:fc:5e:bf:d9:3f:
         80:4f:65:83:c3:7a:3b:0f:8a:e7:29:aa:8c:eb:d1:d0:61:ee:
         c8:21:77:47:df:40:2c:1d:2d:86:1b:6d:52:fa:12:9c:bd:d7:
         3f:17:67:4c:bc:37:a3:4f:c9:c6:44:15:04:0f:98:20:da:41:
         aa:31:a1:31:1b:74:26:57:0d:a5:f1:36:d2:87:5d:42:72:7a:
         d1:da:47:c8:a3:32:99:60:4c:7f:5c:6f:9e:95:68:0c:59:a0:
         da:d2:bd:47:ee:c4:fb:1f:e4:34:8f:79:8f:29:c5:a7:7b:31:
         6f:17:df:b9:11:1e:26:eb:83:33:cb:e7:ba:49:9b:66:5b:37:
         dd:6e:1e:85:37:c5:88:15:1f:a5:d9:4c:8b:d0:df:75:6a:52:
         1e:c0:48:a5:a8:5a:99:6a:fc:cd:64:e0:d9:01:27:cd:f7:98:
         21:1a:52:33:29:f5:02:5b:26:9f:d2:0a:d3:93:c9:9c:ff:f4:
         bc:a7:f6:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp/4Iw+NdM0Iy0554AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTEwNDZlMjEtNGEzMy00NDE1LWE1MjQtYzEwZGI2MDJi
MGVjMB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
Mzk2NTAxNDItMzZhNy00NjBmLWFlZjAtMmMwM2QzZWI3M2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu1jQiXmXcBrK/utifMLMyu6Wy8fZ2os04M2
vHbDhMdbMT9noMReJ8PRdPqYGmx88YqbcVz0zEMGZKv3W9LOhwl9nZR28mv/xqOa
qh35kqQHwqSLIF6uO4Mhx17izOMU+IxoRt4x1DjlZ26irzld2SsZXKzu/8I5y8ne
BeRWvpyrsJbFmx5CcmLKDgcvh57nflmE5ik8o+KgBg9LAuOOCy1fsmGprG4+GhGg
4fP+7KuCznCByFK362pKNHUp+YPP5Ii6DObYDDVdELmBLg/zygU8Z4o8/xQebgm+
Rl6FqObKPLinyjYOMgdmLNYP4sncp7CpAlOI8UkHw8dZJpSmlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKEmZOMYHjaDLc0Sq1nQ0SvJZ/2TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMTA0
NmUyMS00YTMzLTQ0MTUtYTUyNC1jMTBkYjYwMmIwZWMvZjIwZGI0MTQtOTg4Ny0z
MjU4LWJiZTMtNTQ0MGIxZjIyYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTEwNDZlMjEtNGEzMy00NDE1LWE1
MjQtYzEwZGI2MDJiMGVjL2ExMDQ2ZTIxLTRhMzMtNDQxNS1hNTI0LWMxMGRiNjAy
YjBlYy5jcmwwHwYDVR0jBBgwFoAU6Cm+/EO7nTFWvWLhhRURrw70oNgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMTA0NmUyMS00YTMzLTQ0MTUtYTUyNC1jMTBk
YjYwMmIwZWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIqAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA23qk+IvVLpX5b2MZ2JLwY7/ECWG02KQ8hVBNtwS2chKYccjWNY
XZSTcxXAtkoVFVWx37Hn1TlMyN/t9+EHkipnvpr8Xr/ZP4BPZYPDejsPiucpqozr
0dBh7sghd0ffQCwdLYYbbVL6Epy91z8XZ0y8N6NPycZEFQQPmCDaQaoxoTEbdCZX
DaXxNtKHXUJyetHaR8ijMplgTH9cb56VaAxZoNrSvUfuxPsf5DSPeY8pxad7MW8X
37kRHibrgzPL57pJm2ZbN91uHoU3xYgVH6XZTIvQ33VqUh7ASKWoWplq/M1k4NkB
J833mCEaUjMp9QJbJp/SCtOTyZz/9Lyn9lM=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:47 2025 by rpki-client