Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a271dc14-99e1-30fe-a7c1-15fd7d331655.roa
File:                     a271dc14-99e1-30fe-a7c1-15fd7d331655.roa (raw, json)
Hash identifier:          U/lGBMvMgPUAgg4quFiBGL9fNfb8hbXhrh3UgjVaK04=
Subject key identifier:   15:2E:1F:65:DA:ED:E4:05:03:CA:BD:1F:18:17:D2:E5:34:FB:AB:B3
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584A74B5CFF67A7A08665E6F8E00
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a271dc14-99e1-30fe-a7c1-15fd7d331655.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     21581
IP address blocks:        2606:7100:3200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:cf:f6:7a:7a:08:66:5e:6f:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=aa57d315-ae53-46ec-a037-3c7e144ab8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cc:6c:a9:e6:64:e2:a1:87:7b:75:f5:a2:d2:
                    63:5a:71:8b:32:73:ad:6e:43:99:6c:cc:72:70:c6:
                    9b:5a:1c:66:d4:02:e5:21:32:c1:70:3e:d2:50:2a:
                    b0:07:15:79:b5:be:48:a3:44:c5:24:4a:2e:43:89:
                    b6:70:05:79:0a:9c:b8:01:eb:5b:04:c9:e3:18:0f:
                    45:ad:9f:cf:60:2c:03:a5:02:10:4b:21:45:0c:97:
                    b1:5f:df:56:6f:b4:3f:6d:11:b2:b2:d9:2c:b9:ec:
                    15:e5:12:1f:47:2f:96:dd:83:45:dc:89:af:c6:f9:
                    e5:8a:a4:92:6d:d2:12:48:dd:fb:c9:ed:da:01:6b:
                    86:d5:97:f0:03:69:4b:a7:62:7a:2c:9a:d5:66:5c:
                    a8:3f:17:da:08:ee:1f:14:06:b7:95:86:b6:2b:f6:
                    bc:2a:8e:c3:8e:f7:a7:25:3f:c2:ac:ac:a4:13:86:
                    a0:5b:3c:f8:db:e5:c7:39:4b:05:b5:b0:ae:c9:bf:
                    a1:9d:21:f5:c0:88:7a:53:bb:92:56:37:07:31:d2:
                    cd:5f:90:92:f4:ff:5d:7a:48:60:09:b4:7e:44:63:
                    88:f9:a3:86:50:0c:65:ee:5e:35:ab:39:64:ae:01:
                    b8:ab:47:1b:27:fc:31:5b:4a:0a:48:6a:4b:fe:22:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:1F:65:DA:ED:E4:05:03:CA:BD:1F:18:17:D2:E5:34:FB:AB:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a271dc14-99e1-30fe-a7c1-15fd7d331655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7100:3200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:0c:2c:f6:d2:46:c5:ef:11:4f:6e:dc:05:e7:fc:08:bc:
         5a:56:f3:ed:81:8c:38:8d:70:d1:b3:d1:76:f7:8d:26:c9:5d:
         88:08:6e:aa:e8:17:29:db:38:92:af:55:4e:68:89:0d:ac:71:
         d4:84:d6:2c:ae:b6:25:8a:9e:32:18:d6:ec:d0:43:a1:1d:96:
         99:b6:9c:d3:5a:8d:0f:51:12:03:26:38:cf:88:7a:3f:8c:4e:
         7e:b6:17:2f:58:ea:59:00:23:ee:a4:56:4b:cd:04:9c:49:a2:
         7d:0b:83:1b:d8:82:53:f8:8b:7d:4e:e2:4e:92:8e:aa:55:89:
         8e:ff:19:67:95:bc:4a:8b:da:3b:4c:63:48:81:97:af:6e:bd:
         d5:ed:ff:b4:8c:9a:32:11:14:75:a7:ae:c9:82:d2:ec:ab:44:
         50:09:29:4f:74:a5:fb:bc:34:e7:fd:44:a0:7e:d4:c3:52:fd:
         ff:3f:58:5d:c3:57:f9:52:ca:28:1b:8e:a4:e1:4e:e6:df:1c:
         48:49:49:de:7f:39:05:91:fa:f0:0a:e1:24:41:51:55:bf:07:
         67:43:8c:da:32:57:08:27:8d:78:b6:fb:73:f5:00:c2:26:ca:
         95:b4:04:1d:b5:43:18:41:78:cb:cb:88:21:73:41:26:ad:43:
         4e:6a:98:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp0tc/2enoIZl5vjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh
ZDRjMB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
YWE1N2QzMTUtYWU1My00NmVjLWEwMzctM2M3ZTE0NGFiOGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMxsqeZk4qGHe3X1otJjWnGLMnOtbkOZbMxy
cMabWhxm1ALlITLBcD7SUCqwBxV5tb5Io0TFJEouQ4m2cAV5Cpy4AetbBMnjGA9F
rZ/PYCwDpQIQSyFFDJexX99Wb7Q/bRGystksuewV5RIfRy+W3YNF3ImvxvnliqSS
bdISSN37ye3aAWuG1ZfwA2lLp2J6LJrVZlyoPxfaCO4fFAa3lYa2K/a8Ko7Djven
JT/CrKykE4agWzz42+XHOUsFtbCuyb+hnSH1wIh6U7uSVjcHMdLNX5CS9P9dekhg
CbR+RGOI+aOGUAxl7l41qzlkrgG4q0cbJ/wxW0oKSGpL/iLoHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBUuH2Xa7eQFA8q9HxgX0uU0+6uzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll
NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvYTI3MWRjMTQtOTllMS0z
MGZlLWE3YzEtMTVmZDdkMzMxNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy
MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi
YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk
NDM4YmFkNGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZxADIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD60DCz20kbF7xFPbtwF5/wIvFpW8+2BjDiNcNGz0Xb3jSbJXYgI
bqroFynbOJKvVU5oiQ2scdSE1iyutiWKnjIY1uzQQ6Edlpm2nNNajQ9REgMmOM+I
ej+MTn62Fy9Y6lkAI+6kVkvNBJxJon0LgxvYglP4i31O4k6SjqpViY7/GWeVvEqL
2jtMY0iBl69uvdXt/7SMmjIRFHWnrsmC0uyrRFAJKU90pfu8NOf9RKB+1MNS/f8/
WF3DV/lSyigbjqThTubfHEhJSd5/OQWR+vAK4SRBUVW/B2dDjNoyVwgnjXi2+3P1
AMImypW0BB21QxhBeMvLiCFzQSatQ05qmDE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:56 2025 by rpki-client