Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a779bd3a-d039-3c50-8018-bf19bee1346b.roa
File:                     a779bd3a-d039-3c50-8018-bf19bee1346b.roa (raw, json)
Hash identifier:          qntsL7L7AwDLr0SGpzX1memZ9UVx3uDhotM7KhkiQCk=
Subject key identifier:   70:BC:C7:B9:A2:60:A6:6D:87:6C:C4:3B:73:BD:B3:94:64:53:79:66
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F4328584BA0D24917C6A2C05E14471290
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a779bd3a-d039-3c50-8018-bf19bee1346b.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     22697
IP address blocks:        2620:2b:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:49:17:c6:a2:c0:5e:14:47:12:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=8b734618-361b-4a39-b0df-4460d4d27129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:92:70:72:cd:fb:b6:4f:1b:41:d4:cb:53:
                    b8:f7:77:bd:27:87:cb:e3:c3:53:8d:ad:6b:3d:be:
                    88:10:87:14:fe:fb:ee:87:6b:27:97:3a:5a:ca:6e:
                    cc:f2:85:bb:5e:28:11:c1:dc:c8:6b:96:e2:8e:ae:
                    b7:e5:70:46:f0:33:01:28:ee:3d:23:61:e8:75:60:
                    08:0d:f6:1c:14:6b:9d:0f:0f:8d:ab:a7:91:07:b8:
                    8c:b6:04:3d:fb:7b:e3:e0:f6:2c:ec:7f:8a:5e:1a:
                    77:c7:22:94:03:ff:a3:a9:a8:2d:8f:17:e7:11:cc:
                    2a:c9:92:94:0c:0f:87:3a:19:78:ec:10:7c:63:db:
                    35:b8:6a:9e:1d:d4:0f:87:d1:03:a6:1b:cf:28:a4:
                    ad:7c:b7:2c:d0:44:93:40:d2:62:5e:95:3b:07:b4:
                    fe:77:05:4d:25:3b:85:a7:3a:27:2d:cc:fe:8c:8a:
                    e2:92:15:3c:3f:9c:b9:29:d8:38:d5:99:41:4f:52:
                    55:b0:4f:41:3e:9a:2e:6a:df:b4:7c:f6:36:f0:f3:
                    58:88:2f:5c:1c:ad:f2:49:2a:42:e1:e8:7e:cf:15:
                    ae:f7:2b:5e:c5:99:6a:7a:ed:ef:a4:3b:f2:a0:2d:
                    f9:bf:60:67:bb:02:1e:55:16:ff:92:6a:96:6c:a3:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BC:C7:B9:A2:60:A6:6D:87:6C:C4:3B:73:BD:B3:94:64:53:79:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a779bd3a-d039-3c50-8018-bf19bee1346b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2b:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:70:f1:b5:68:c6:4a:00:d2:b4:3a:e1:b4:8c:8b:84:28:4f:
         61:54:26:47:1e:50:30:ec:0a:01:66:98:75:06:93:3b:48:69:
         93:c4:33:08:b8:1b:ab:31:04:c3:f0:36:69:ac:14:56:ca:e9:
         da:7d:fc:3d:1d:2c:41:d1:71:dd:6b:ff:3e:f1:91:6f:1b:35:
         89:48:73:d8:7c:b6:aa:a5:5e:0e:f3:6a:b0:37:e7:3b:fa:67:
         ff:23:ce:c2:39:d9:ed:0f:a5:a1:7c:0c:0a:9c:26:45:c8:c0:
         0b:56:84:8a:c8:df:bf:bb:9d:89:83:91:8e:3b:1d:ec:17:ad:
         c7:a3:e0:66:f4:e7:4c:60:a9:2c:96:cf:08:c0:9e:aa:dd:ca:
         5b:13:78:d8:dd:02:ae:3e:f3:f0:8f:b2:ed:1f:f0:ac:8b:8f:
         96:a2:7f:ee:db:95:7e:59:73:04:af:db:b2:4d:c3:b3:59:de:
         1c:96:63:85:fb:90:e9:28:f5:a3:48:9a:2d:e4:aa:06:9e:82:
         6d:b3:92:36:5f:9c:cb:2e:2a:c7:20:0b:6a:99:a5:12:38:dc:
         a5:ac:14:ad:6f:74:18:69:43:11:c2:53:63:68:6c:07:a9:5a:
         d9:f7:a5:f7:43:93:2a:60:bb:b2:74:e2:4b:4b:54:12:b9:ca:
         eb:71:19:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0kkXxqLAXhRHEpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4
NDMwMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk
OGI3MzQ2MTgtMzYxYi00YTM5LWIwZGYtNDQ2MGQ0ZDI3MTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugmScHLN+7ZPG0HUy1O493e9J4fL48NTja1r
Pb6IEIcU/vvuh2snlzpaym7M8oW7XigRwdzIa5bijq635XBG8DMBKO49I2HodWAI
DfYcFGudDw+Nq6eRB7iMtgQ9+3vj4PYs7H+KXhp3xyKUA/+jqagtjxfnEcwqyZKU
DA+HOhl47BB8Y9s1uGqeHdQPh9EDphvPKKStfLcs0ESTQNJiXpU7B7T+dwVNJTuF
pzonLcz+jIrikhU8P5y5Kdg41ZlBT1JVsE9BPpouat+0fPY28PNYiC9cHK3ySSpC
4eh+zxWu9ytexZlqeu3vpDvyoC35v2BnuwIeVRb/kmqWbKMrbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHC8x7miYKZth2zEO3O9s5RkU3lmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl
N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvYTc3OWJkM2EtZDAzOS0z
YzUwLTgwMTgtYmYxOWJlZTEzNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3
NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2
ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl
YjYzNjg0MzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAK+AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJBw8bVoxkoA0rQ64bSMi4QoT2FUJkceUDDsCgFmmHUGkztIaZPE
Mwi4G6sxBMPwNmmsFFbK6dp9/D0dLEHRcd1r/z7xkW8bNYlIc9h8tqqlXg7zarA3
5zv6Z/8jzsI52e0PpaF8DAqcJkXIwAtWhIrI37+7nYmDkY47HewXrcej4Gb050xg
qSyWzwjAnqrdylsTeNjdAq4+8/CPsu0f8KyLj5aif+7blX5ZcwSv27JNw7NZ3hyW
Y4X7kOko9aNImi3kqgaegm2zkjZfnMsuKscgC2qZpRI43KWsFK1vdBhpQxHCU2No
bAepWtn3pfdDkypgu7J04ktLVBK5yutxGbY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:19:22 2025 by rpki-client