Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa
File:                     59a5be5e-265d-3a86-995d-2d74371e9b02.roa (raw, json)
Hash identifier:          XiE/Hmj0yTZRiyD7H805faJB8A3r4LGc3j6YObQplkM=
Subject key identifier:   94:30:0C:57:C7:F8:55:96:1C:38:8F:12:7C:16:AF:CA:7E:A7:91:0A
Certificate issuer:       /CN=206b65c6-b880-42a7-b728-a37b15fc236d
Certificate serial:       010D0C9F4328584AADF1015ACF20961004FFCF50
Authority key identifier: 29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     6360
IP address blocks:        2607:f278::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:01:5a:cf:20:96:10:04:ff:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206b65c6-b880-42a7-b728-a37b15fc236d
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=4b0313aa-20b1-4042-8c6c-146d6c473386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:86:b4:46:c7:9f:1e:63:6d:01:b8:dd:b7:
                    af:55:a7:ed:11:5d:6c:84:23:69:7c:06:18:b7:4b:
                    05:d7:3c:f1:31:ad:68:89:ef:a6:d1:45:2a:b7:e3:
                    5f:fc:a3:1f:11:ce:b1:00:1f:33:71:f7:fa:bb:45:
                    e4:a6:a3:9b:a1:45:10:50:e5:26:18:7f:a2:f0:c7:
                    ad:23:52:e7:63:7f:34:11:3c:b7:62:72:50:14:45:
                    80:fa:fa:52:c8:b2:4e:6e:4c:5e:5b:7b:9d:dd:15:
                    38:3f:7b:e2:76:f9:eb:41:8b:16:b9:f6:bb:e7:04:
                    55:5f:ec:10:a1:58:93:73:4e:4e:a8:14:5a:0f:54:
                    bc:6d:fc:14:30:13:49:a7:0a:dc:cd:9c:ef:59:d4:
                    8a:99:2f:ba:17:2f:1b:78:5c:72:11:d1:f6:6d:08:
                    b1:b5:b0:3c:a6:f1:e7:61:b2:2c:56:fd:e1:0e:18:
                    08:01:78:e2:91:8d:af:fd:2c:21:ac:24:39:ec:ae:
                    46:f6:1a:6c:75:d5:81:fc:c6:6a:68:80:57:32:17:
                    46:1e:35:7d:aa:1d:9b:06:c3:59:f7:9a:d2:91:11:
                    53:d7:b9:44:fe:22:53:b9:50:65:54:07:71:a2:f1:
                    21:b0:cc:34:d9:07:e3:c5:b3:3d:43:ca:31:7a:ef:
                    b0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:30:0C:57:C7:F8:55:96:1C:38:8F:12:7C:16:AF:CA:7E:A7:91:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl

            X509v3 Authority Key Identifier:
                keyid:29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f278::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e3:74:54:f1:7a:23:67:60:a9:09:c4:bb:38:33:9b:f6:eb:
         98:d9:57:87:93:e8:35:61:c5:27:d8:9f:ee:08:85:27:7e:0f:
         f1:10:ef:16:33:e6:2a:a5:ea:11:24:98:06:87:57:fa:74:fb:
         59:58:4a:1e:39:0c:3e:71:ab:fc:cc:2b:89:29:a3:2b:e8:3e:
         91:02:f2:17:38:59:38:c8:0b:b3:63:b5:14:35:4a:5e:a8:c5:
         2e:98:f9:89:2c:a3:d0:1d:76:f5:58:f5:cc:15:2b:10:ba:e7:
         15:46:59:a6:f4:4e:d6:9a:d7:69:0e:51:36:db:8c:4d:a1:34:
         99:e5:b7:84:51:17:16:b7:ae:7f:0d:8e:d5:c3:f3:f4:fe:38:
         54:e6:6c:61:43:cf:73:d1:64:ae:3c:b9:ea:34:6a:ef:54:e1:
         c7:7a:54:67:03:4e:c2:1f:d1:67:7f:3f:f2:fd:39:48:9c:57:
         55:7c:e1:90:73:3a:31:d5:b7:25:7f:3c:73:0b:01:d7:4c:4e:
         2f:d6:c6:07:3e:c5:29:48:c0:20:21:c8:af:af:ac:9a:fc:f2:
         38:a7:a3:5c:a5:ef:32:cb:db:61:0b:4a:80:84:2f:20:24:da:
         a8:d5:a0:f9:dd:4f:5e:f5:12:1a:2e:55:ab:b1:4b:c6:06:58:
         59:46:18:97
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqt8QFazyCWEAT/z1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA2YjY1YzYtYjg4MC00MmE3LWI3MjgtYTM3YjE1ZmMy
MzZkMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
NGIwMzEzYWEtMjBiMS00MDQyLThjNmMtMTQ2ZDZjNDczMzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXSGtEbHnx5jbQG43bevVaftEV1shCNpfAYY
t0sF1zzxMa1oie+m0UUqt+Nf/KMfEc6xAB8zcff6u0XkpqOboUUQUOUmGH+i8Met
I1LnY380ETy3YnJQFEWA+vpSyLJObkxeW3ud3RU4P3vidvnrQYsWufa75wRVX+wQ
oViTc05OqBRaD1S8bfwUMBNJpwrczZzvWdSKmS+6Fy8beFxyEdH2bQixtbA8pvHn
YbIsVv3hDhgIAXjikY2v/SwhrCQ57K5G9hpsddWB/MZqaIBXMhdGHjV9qh2bBsNZ
95rSkRFT17lE/iJTuVBlVAdxovEhsMw02QfjxbM9Q8oxeu+w/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJQwDFfH+FWWHDiPEnwWr8p+p5EKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDZi
NjVjNi1iODgwLTQyYTctYjcyOC1hMzdiMTVmYzIzNmQvNTlhNWJlNWUtMjY1ZC0z
YTg2LTk5NWQtMmQ3NDM3MWU5YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA2YjY1YzYtYjg4MC00MmE3LWI3
MjgtYTM3YjE1ZmMyMzZkLzIwNmI2NWM2LWI4ODAtNDJhNy1iNzI4LWEzN2IxNWZj
MjM2ZC5jcmwwHwYDVR0jBBgwFoAUKVV8DO6NGLE/hbyF1yM2h+MfMwQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDZiNjVjNi1iODgwLTQyYTctYjcyOC1hMzdi
MTVmYzIzNmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfyeDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCa43RU8XojZ2CpCcS7ODOb9uuY2VeHk+g1YcUn2J/uCIUnfg/xEO8W
M+YqpeoRJJgGh1f6dPtZWEoeOQw+cav8zCuJKaMr6D6RAvIXOFk4yAuzY7UUNUpe
qMUumPmJLKPQHXb1WPXMFSsQuucVRlmm9E7WmtdpDlE224xNoTSZ5beEURcWt65/
DY7Vw/P0/jhU5mxhQ89z0WSuPLnqNGrvVOHHelRnA07CH9Fnfz/y/TlInFdVfOGQ
czox1bclfzxzCwHXTE4v1sYHPsUpSMAgIcivr6ya/PI4p6Ncpe8yy9thC0qAhC8g
JNqo1aD53U9e9RIaLlWrsUvGBlhZRhiX
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:05:06 2025 by rpki-client