Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa
File:                     52ea9329-199b-3173-bb35-8fdad2b9a372.roa (raw, json)
Hash identifier:          iGi7yt+RY0byMH57OR3z7KPf7sThqlMuPXqSctZVBFU=
Subject key identifier:   98:55:36:67:0C:2B:BF:2E:19:91:DC:20:DF:04:FE:03:81:A3:9B:1C
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584A9870A01FCBACE674D1B43000
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa
Signing time:             Mon 21 Jul 2025 20:10:33 +0000
ROA not before:           Mon 21 Jul 2025 20:10:33 +0000
ROA not after:            Sun 19 Oct 2025 20:10:33 +0000
asID:                     5744
IP address blocks:        2610:20:5160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:70:a0:1f:cb:ac:e6:74:d1:b4:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Jul 21 20:10:33 2025 GMT
            Not After : Oct 19 20:10:33 2025 GMT
        Subject: CN=9cc3cc41-35df-4962-b69c-57aa5e31a89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:da:9c:10:3d:36:78:3d:68:d3:29:36:52:f2:
                    f3:8f:0c:64:f7:b1:dd:51:dd:ff:6d:f7:f6:93:ee:
                    49:e7:d0:ad:3c:99:4c:ff:ca:8a:84:0f:a5:bc:6b:
                    e1:2b:2e:71:bb:fa:a5:18:0d:3f:a3:8d:f5:a1:91:
                    37:10:7d:35:30:9f:a2:2a:56:d1:1a:11:c2:0d:05:
                    b9:f3:80:52:8c:6b:51:bb:f2:0b:cb:af:44:4f:57:
                    6c:19:4a:18:1f:07:fd:e3:9e:5d:cb:22:ba:b2:60:
                    fb:87:14:58:24:ac:17:ed:db:83:07:61:c3:b2:71:
                    aa:a2:0e:be:9c:59:35:f8:4c:77:33:ab:cc:d2:7e:
                    19:73:65:f4:55:6d:31:45:43:93:6a:5f:ba:e6:fc:
                    b5:16:22:7d:a9:50:ad:ff:08:3b:31:dc:e0:2c:ec:
                    4a:90:be:29:74:dc:6e:d3:61:e5:a1:76:8f:dd:7b:
                    e8:95:c4:a1:e4:82:83:b7:72:b7:98:08:7f:54:02:
                    cd:97:46:2a:65:0a:30:33:66:e0:e8:5a:a6:1f:06:
                    50:72:4b:15:39:8e:09:95:3a:15:b6:e3:05:b6:11:
                    35:da:2f:ed:b7:8e:17:0a:4e:ce:96:b6:24:6e:10:
                    b7:8d:f7:36:c8:06:28:a0:47:76:11:24:8c:dd:d9:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:55:36:67:0C:2B:BF:2E:19:91:DC:20:DF:04:FE:03:81:A3:9B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:31:23:e6:26:9c:c4:47:02:c3:f4:63:f0:03:07:96:31:4d:
         cc:cf:a2:2c:5b:0f:f1:23:87:a7:01:9f:d9:52:de:be:e2:66:
         57:5c:8f:0a:f8:bb:e0:55:9f:8b:c7:65:8d:da:0b:01:7e:9f:
         fc:3a:b7:96:4e:33:f8:7b:39:1c:f4:5f:94:0e:b9:93:a9:e7:
         68:4b:a8:93:78:13:78:f4:94:ec:c5:0e:aa:3d:e1:3b:94:bd:
         85:00:59:5d:02:e0:e5:c4:c9:13:91:05:fb:4c:dd:d5:25:4b:
         3d:93:1a:88:42:fe:7f:a1:5c:4c:d3:c4:35:83:6f:68:80:ed:
         1e:6f:d1:b4:89:99:ec:d5:1d:6d:1e:4d:7a:a3:d1:30:53:30:
         58:2d:57:51:8d:05:60:6b:da:2f:4e:45:30:c5:f3:26:1e:c9:
         5b:b3:fc:48:46:92:37:30:c9:fe:17:7f:fb:14:f8:62:f8:eb:
         b2:3f:46:97:6e:c6:21:43:8c:14:2d:66:2e:19:41:a5:a9:20:
         c4:bc:b2:4e:b2:a0:c7:c6:10:b3:2b:f2:94:d8:1c:44:9e:d8:
         e4:d8:44:c6:71:d5:2a:c1:76:54:2b:72:bd:78:69:83:5a:20:
         3f:2a:72:0c:9b:7e:b2:60:a0:d7:64:c1:55:75:54:dd:dc:79:
         af:e4:fb:9a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqYcKAfy6zmdNG0MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm
YWI3MB4XDTI1MDcyMTIwMTAzM1oXDTI1MTAxOTIwMTAzM1owLzEtMCsGA1UEAxMk
OWNjM2NjNDEtMzVkZi00OTYyLWI2OWMtNTdhYTVlMzFhODllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tqcED02eD1o0yk2UvLzjwxk97HdUd3/bff2
k+5J59CtPJlM/8qKhA+lvGvhKy5xu/qlGA0/o431oZE3EH01MJ+iKlbRGhHCDQW5
84BSjGtRu/ILy69ET1dsGUoYHwf9455dyyK6smD7hxRYJKwX7duDB2HDsnGqog6+
nFk1+Ex3M6vM0n4Zc2X0VW0xRUOTal+65vy1FiJ9qVCt/wg7MdzgLOxKkL4pdNxu
02HloXaP3XvolcSh5IKDt3K3mAh/VALNl0YqZQowM2bg6FqmHwZQcksVOY4JlToV
tuMFthE12i/tt44XCk7OlrYkbhC3jfc2yAYooEd2ESSM3dmuIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJhVNmcMK78uGZHcIN8E/gOBo5scMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk
NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNTJlYTkzMjktMTk5Yi0z
MTczLWJiMzUtOGZkYWQyYjlhMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2
ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3
ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4
ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIFFg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGMxI+YmnMRHAsP0Y/ADB5YxTczPoixbD/Ejh6cBn9lS3r7iZldc
jwr4u+BVn4vHZY3aCwF+n/w6t5ZOM/h7ORz0X5QOuZOp52hLqJN4E3j0lOzFDqo9
4TuUvYUAWV0C4OXEyRORBftM3dUlSz2TGohC/n+hXEzTxDWDb2iA7R5v0bSJmezV
HW0eTXqj0TBTMFgtV1GNBWBr2i9ORTDF8yYeyVuz/EhGkjcwyf4Xf/sU+GL467I/
RpduxiFDjBQtZi4ZQaWpIMS8sk6yoMfGELMr8pTYHESe2OTYRMZx1SrBdlQrcr14
aYNaID8qcgybfrJgoNdkwVV1VN3cea/k+5o=
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:26:09 2025 by rpki-client