Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/c13b6f2c-8089-3214-a219-75fa96b55e3b.roa
File:                     c13b6f2c-8089-3214-a219-75fa96b55e3b.roa (raw, json)
Hash identifier:          tS3Ql60gDM0NbZ8wSoqWtfvesh4MUnp/P1bcxiz5Yfo=
Subject key identifier:   17:E5:C3:9C:1E:F4:81:F3:65:F7:F4:8B:52:A6:B0:35:BE:4D:9D:AD
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584AC2E0FCC7331FBBB51288F300
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/c13b6f2c-8089-3214-a219-75fa96b55e3b.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2606:9680:20a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fc:c7:33:1f:bb:b5:12:88:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=9112d298-a1d2-4e8a-840f-e3b1ef65f02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:3c:9c:7b:db:11:d6:f8:76:ac:8f:bb:47:
                    77:c1:15:3e:7e:a4:bb:5f:42:d3:2c:f9:ef:f9:80:
                    8b:0a:7d:4d:97:4f:ce:41:43:22:1e:64:20:07:fb:
                    20:8f:34:22:80:d7:25:ef:9f:99:d6:0c:24:3b:c6:
                    9f:a8:90:47:00:6d:94:6d:7f:82:77:73:09:6c:63:
                    25:60:17:e5:b7:03:8a:f5:50:64:6a:73:f6:74:78:
                    cd:44:61:6f:7b:8e:15:85:4c:f6:9b:36:8f:6e:be:
                    11:62:e5:04:31:2b:39:23:6d:19:5b:b8:fa:48:2f:
                    a5:bd:7d:75:3a:4f:39:1c:43:4d:35:c5:66:00:25:
                    61:1c:f2:11:39:ec:59:ea:9a:a0:ab:55:4a:98:cf:
                    62:64:77:11:98:6e:2b:ad:e3:12:dd:27:46:10:3f:
                    2a:98:e9:79:f7:85:36:e8:fd:65:08:5d:f7:85:12:
                    83:f1:4d:42:81:eb:e8:50:15:a5:7b:84:6b:0f:9c:
                    cb:81:fb:0b:6a:ff:68:af:3f:5f:b3:17:21:b0:d7:
                    22:41:72:c3:bb:8d:82:46:22:ac:06:f3:fb:5d:c5:
                    96:48:0f:0e:67:b0:8a:3e:f7:db:ac:64:e3:4d:37:
                    d7:86:06:af:ca:03:24:52:31:4d:cf:54:df:03:2b:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:C3:9C:1E:F4:81:F3:65:F7:F4:8B:52:A6:B0:35:BE:4D:9D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/c13b6f2c-8089-3214-a219-75fa96b55e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9680:20a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:8f:c3:e4:a7:a4:0c:9c:6a:89:f4:42:69:04:90:46:9e:80:
         7a:29:58:5f:2b:24:92:0f:93:f1:b0:4f:41:ea:4c:60:a0:3f:
         fd:44:1d:1f:ee:e1:54:92:44:a4:9e:73:b8:a8:c5:ec:35:53:
         5d:ff:f6:8f:e6:d6:00:13:a5:d3:54:b2:24:69:ce:a2:38:74:
         f4:df:c3:f7:4c:50:0a:af:51:4b:4f:fa:eb:13:4d:1d:62:88:
         2f:a3:f9:c4:d9:73:29:be:24:4b:57:a4:14:8a:df:cb:a3:6e:
         b0:ef:0a:36:11:8a:e5:5d:0f:e7:62:0b:62:2d:b1:b7:5a:84:
         2d:f2:ae:30:67:15:8f:48:7a:49:bf:1f:12:eb:b9:6e:ba:66:
         a6:82:48:08:18:63:01:22:f3:c0:e2:94:1e:8d:fc:f1:d8:7a:
         39:22:75:59:ce:16:9f:fe:50:a3:0c:c8:6b:64:32:88:04:6a:
         3f:32:c1:0f:3f:21:f5:a7:89:51:88:dc:a9:3c:c7:cc:c0:84:
         c0:26:9e:09:88:e2:81:d0:a7:ec:75:c7:ba:37:f1:e7:85:2c:
         60:2d:ba:7e:77:f1:92:7f:74:b9:11:5a:55:89:0e:57:65:01:
         1f:5f:81:8a:bc:72:41:b0:03:09:a0:de:64:95:cd:fc:da:27:
         dc:c4:36:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4PzHMx+7tRKI8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli
Njc2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
OTExMmQyOTgtYTFkMi00ZThhLTg0MGYtZTNiMWVmNjVmMDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Y8nHvbEdb4dqyPu0d3wRU+fqS7X0LTLPnv
+YCLCn1Nl0/OQUMiHmQgB/sgjzQigNcl75+Z1gwkO8afqJBHAG2UbX+Cd3MJbGMl
YBfltwOK9VBkanP2dHjNRGFve44VhUz2mzaPbr4RYuUEMSs5I20ZW7j6SC+lvX11
Ok85HENNNcVmACVhHPIROexZ6pqgq1VKmM9iZHcRmG4rreMS3SdGED8qmOl594U2
6P1lCF33hRKD8U1CgevoUBWle4RrD5zLgfsLav9orz9fsxchsNciQXLDu42CRiKs
BvP7XcWWSA8OZ7CKPvfbrGTjTTfXhgavygMkUjFNz1TfAyvnRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBflw5we9IHzZff0i1KmsDW+TZ2tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5
MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvYzEzYjZmMmMtODA4OS0z
MjE0LWEyMTktNzVmYTk2YjU1ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3
ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5
YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy
Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgaWgCCj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKOPw+SnpAycaon0QmkEkEaegHopWF8rJJIPk/GwT0HqTGCgP/1E
HR/u4VSSRKSec7ioxew1U13/9o/m1gATpdNUsiRpzqI4dPTfw/dMUAqvUUtP+usT
TR1iiC+j+cTZcym+JEtXpBSK38ujbrDvCjYRiuVdD+diC2ItsbdahC3yrjBnFY9I
ekm/HxLruW66ZqaCSAgYYwEi88DilB6N/PHYejkidVnOFp/+UKMMyGtkMogEaj8y
wQ8/IfWniVGI3Kk8x8zAhMAmngmI4oHQp+x1x7o38eeFLGAtun538ZJ/dLkRWlWJ
DldlAR9fgYq8ckGwAwmg3mSVzfzaJ9zENsc=
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:21 2025 by rpki-client