Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa
File:                     611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa (raw, json)
Hash identifier:          MhVcOQi5CPcK8Xt7S5PNHFLY/9oSyv9H3+9jkScxASQ=
Subject key identifier:   AD:91:DC:ED:6D:24:0F:EC:46:15:43:35:AE:85:D2:3F:A3:0A:25:7D
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F4328584AB91B909A36105DE4E30CFB40
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        2620:104:6003::/48 maxlen: 48
                          2620:104:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:90:9a:36:10:5d:e4:e3:0c:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=f6f906c0-07a0-4f17-991e-4d0a6b4ae73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:24:6d:55:29:24:33:4f:cb:88:8b:35:b1:
                    db:a4:45:87:da:39:73:75:db:22:f0:23:a0:f0:6e:
                    69:f6:18:43:57:b8:2e:51:b3:fe:ca:a2:f9:67:45:
                    4c:6b:6f:b2:bc:0d:79:82:37:5d:5d:48:99:91:cb:
                    bd:a4:73:b1:fe:37:7c:0a:cd:e3:3b:f2:c1:c2:b7:
                    ff:39:b4:33:e3:5e:ca:b1:c7:94:76:83:2c:71:4e:
                    f3:6f:26:4c:f9:e1:3f:ca:d7:a0:f5:13:ec:bf:fc:
                    7b:63:32:22:90:87:35:c6:5a:ef:e6:77:1a:76:79:
                    16:28:31:69:9f:39:57:7d:27:63:47:74:a6:91:65:
                    b0:cf:a1:b8:50:e7:90:01:f5:34:d6:0d:7e:23:e5:
                    00:f9:ea:16:1c:3a:c6:09:65:91:e0:d6:58:10:23:
                    f5:53:66:bf:20:fb:2c:74:02:6b:2f:08:55:f8:01:
                    b8:a2:02:8b:5e:be:b2:ed:9f:63:33:dc:10:2a:28:
                    f6:f6:59:f3:83:b0:10:f7:11:ef:57:50:8c:69:23:
                    6f:bc:2d:76:c7:df:eb:6e:3c:6a:7b:4a:3d:d7:54:
                    fc:be:16:8e:09:81:10:9a:89:a7:ba:ed:1e:2c:2b:
                    60:67:c1:19:34:a6:b8:13:a9:21:0e:23:9c:66:92:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:91:DC:ED:6D:24:0F:EC:46:15:43:35:AE:85:D2:3F:A3:0A:25:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:6003::-2620:104:6004:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:77:60:97:40:a5:00:43:fe:43:ea:b6:02:64:0e:97:85:21:
         a7:3a:d1:23:14:1c:92:f9:1b:64:41:62:d9:cc:69:b8:ca:88:
         c5:a7:c7:e5:55:dd:ad:51:54:0d:9c:a5:4d:02:00:04:26:9c:
         1d:7b:03:22:f3:f4:c6:f1:8e:ec:f4:98:11:02:fa:85:a2:de:
         ff:76:2a:dd:9c:31:aa:cf:02:c6:7a:8f:3c:b4:aa:47:c5:7a:
         25:01:2d:08:d0:e4:ba:81:95:3f:a2:f4:5f:f7:03:4d:11:df:
         11:16:b4:50:a0:19:a7:60:44:ce:48:96:70:8c:17:61:2e:21:
         4e:f1:e6:fc:0e:01:60:ee:85:21:df:8c:32:ff:75:9d:d2:8c:
         85:c2:36:d5:58:87:da:43:e5:e7:43:d4:9b:02:1c:c6:51:2c:
         09:58:2a:ba:a1:b8:83:78:e1:ff:f5:df:ed:84:5d:58:f7:55:
         1f:6e:41:35:62:e1:4a:e4:58:07:66:b8:34:69:e3:e7:48:e5:
         04:0e:a2:ed:ad:24:c0:9a:06:c7:93:cd:58:7f:0c:a9:eb:8b:
         1e:d3:5a:af:23:fe:90:04:db:ba:62:67:8d:62:93:91:3e:bc:
         9f:45:b7:ba:33:96:1e:5f:fd:04:0b:7f:99:2d:74:d7:f7:e7:
         6e:28:91:5a
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEq5G5CaNhBd5OMM+0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjZkZGEwMzItNzlmOS00MjNlLTk5OTQtMzNmZGIxY2Q0
NGRiMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZjZmOTA2YzAtMDdhMC00ZjE3LTk5MWUtNGQwYTZiNGFlNzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum4kbVUpJDNPy4iLNbHbpEWH2jlzddsi8COg
8G5p9hhDV7guUbP+yqL5Z0VMa2+yvA15gjddXUiZkcu9pHOx/jd8Cs3jO/LBwrf/
ObQz417KsceUdoMscU7zbyZM+eE/yteg9RPsv/x7YzIikIc1xlrv5ncadnkWKDFp
nzlXfSdjR3SmkWWwz6G4UOeQAfU01g1+I+UA+eoWHDrGCWWR4NZYECP1U2a/IPss
dAJrLwhV+AG4ogKLXr6y7Z9jM9wQKij29lnzg7AQ9xHvV1CMaSNvvC12x9/rbjxq
e0o911T8vhaOCYEQmomnuu0eLCtgZ8EZNKa4E6khDiOcZpLL4QIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFK2R3O1tJA/sRhVDNa6F0j+jCiV9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRk
YTAzMi03OWY5LTQyM2UtOTk5NC0zM2ZkYjFjZDQ0ZGIvNjExY2JiZGMtNjBiNC0z
YTQyLWJmZjUtZGFmNzk2MGJlYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjZkZGEwMzItNzlmOS00MjNlLTk5
OTQtMzNmZGIxY2Q0NGRiLzI2ZGRhMDMyLTc5ZjktNDIzZS05OTk0LTMzZmRiMWNk
NDRkYi5jcmwwHwYDVR0jBBgwFoAUlOxHNSwx7ERB/+Hh13pxBU8VHbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRkYTAzMi03OWY5LTQyM2UtOTk5NC0zM2Zk
YjFjZDQ0ZGIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmIAEE
YAMDBwAmIAEEYAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAOXdgl0ClAEP+Q+q2AmQOl4UhpzrRIxQckvkb
ZEFi2cxpuMqIxafH5VXdrVFUDZylTQIABCacHXsDIvP0xvGO7PSYEQL6haLe/3Yq
3Zwxqs8CxnqPPLSqR8V6JQEtCNDkuoGVP6L0X/cDTRHfERa0UKAZp2BEzkiWcIwX
YS4hTvHm/A4BYO6FId+MMv91ndKMhcI21ViH2kPl50PUmwIcxlEsCVgquqG4g3jh
//Xf7YRdWPdVH25BNWLhSuRYB2a4NGnj50jlBA6i7a0kwJoGx5PNWH8MqeuLHtNa
ryP+kATbumJnjWKTkT68n0W3ujOWHl/9BAt/mS101/fnbiiRWg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:04 2025 by rpki-client