Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/07468dfe-384a-31a0-b447-aa69ad4458c3.roa
File:                     07468dfe-384a-31a0-b447-aa69ad4458c3.roa (raw, json)
Hash identifier:          y5MJ9TuHDFfWp2xlPthb3Ev+qHFk3DSMUprNwjCX2Tw=
Subject key identifier:   00:8E:E0:8C:87:CA:8B:D3:9A:2B:B8:5E:06:64:49:02:AE:95:05:74
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161D57FEEAD022592686D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/07468dfe-384a-31a0-b447-aa69ad4458c3.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        2602:10d:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:d5:7f:ee:ad:02:25:92:68:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=d8ea6773-3543-49b0-baf7-9ddacac11892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:63:35:36:ca:23:eb:a0:70:0f:e8:1f:8d:3b:
                    2e:04:0f:ff:92:11:d0:d2:4a:af:36:22:9b:cd:2f:
                    fd:e0:e8:96:91:da:bc:86:f4:89:26:bf:ce:64:f2:
                    15:e0:81:23:91:b5:ca:86:58:9d:3a:2c:51:d6:28:
                    b6:c1:04:f2:ec:8f:84:da:10:91:d1:94:0c:41:ff:
                    03:2b:ba:4d:68:c4:30:d9:37:9b:e8:fd:4f:29:5f:
                    51:9d:2a:6c:22:ef:e7:63:f6:b1:1b:0d:35:41:95:
                    ff:92:59:a8:01:bd:0f:80:ba:24:43:0e:e8:15:36:
                    57:ac:fa:8f:f9:aa:0e:06:82:00:d7:ae:33:4a:4e:
                    a9:39:51:7c:cc:a2:b6:6f:46:f9:e1:74:cf:86:a5:
                    ff:5d:ef:3d:aa:bc:9d:c7:af:b8:4b:eb:fd:d2:dc:
                    b1:4f:4b:a2:22:0e:ce:91:ba:6d:ab:bc:77:11:11:
                    c9:c8:01:39:43:6e:e3:fd:a3:24:2d:1b:a7:3c:54:
                    69:8b:bc:8e:c7:6e:d8:ef:ce:a0:f0:d1:28:b5:2c:
                    d5:a2:fb:2e:77:e1:e9:9a:e6:4b:14:9c:ab:f0:b8:
                    4c:65:a8:f4:26:47:53:35:e3:d4:fa:78:00:0d:b2:
                    20:93:4e:87:e4:00:60:5f:af:e1:08:35:6a:89:7b:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8E:E0:8C:87:CA:8B:D3:9A:2B:B8:5E:06:64:49:02:AE:95:05:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/07468dfe-384a-31a0-b447-aa69ad4458c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10d:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cf:8f:04:72:c7:f7:82:97:f2:ea:c4:c9:fd:89:15:05:4e:
         01:01:49:2e:fb:1d:e4:a9:ee:83:3f:7c:3f:6a:4e:af:6b:5d:
         55:e5:7e:a8:91:e7:6c:0f:c2:82:fe:f0:68:5a:7a:87:15:db:
         11:15:d6:79:dd:fd:6c:95:ab:c1:4c:45:65:7f:27:fa:af:49:
         f3:11:01:a3:55:fd:7d:40:9d:14:fb:a9:ee:27:68:33:00:31:
         c4:2d:3f:50:86:7e:00:f5:a7:71:20:5b:32:06:69:94:e7:ba:
         2f:55:16:f8:03:25:11:3f:21:34:3c:b3:70:5d:ee:e6:ac:74:
         6b:c7:03:c2:01:00:5b:39:a9:a3:e8:b2:c9:fb:d3:7d:64:9f:
         3a:a2:89:56:a6:16:51:f6:72:b8:0b:06:d8:bf:d8:76:23:d4:
         45:32:46:03:74:1b:20:52:1c:0c:42:2c:37:59:d3:20:ad:a1:
         32:4d:f6:53:19:de:90:91:af:8c:fd:a2:73:e8:00:ec:ab:99:
         0b:e7:4d:99:3d:27:18:83:bd:64:35:c8:35:be:c5:27:a1:77:
         27:2e:4b:fd:df:71:af:1d:04:bb:01:ad:86:76:2c:03:b9:ad:
         29:b0:83:3e:11:07:bc:8d:cd:4a:b8:58:bc:41:fc:3e:45:f9:
         33:87:45:46
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqhYdV/7q0CJZJobQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZDhlYTY3NzMtMzU0My00OWIwLWJhZjctOWRkYWNhYzExODkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGM1Nsoj66BwD+gfjTsuBA//khHQ0kqvNiKb
zS/94OiWkdq8hvSJJr/OZPIV4IEjkbXKhlidOixR1ii2wQTy7I+E2hCR0ZQMQf8D
K7pNaMQw2Teb6P1PKV9RnSpsIu/nY/axGw01QZX/klmoAb0PgLokQw7oFTZXrPqP
+aoOBoIA164zSk6pOVF8zKK2b0b54XTPhqX/Xe89qrydx6+4S+v90tyxT0uiIg7O
kbptq7x3ERHJyAE5Q27j/aMkLRunPFRpi7yOx27Y786g8NEotSzVovsud+HpmuZL
FJyr8LhMZaj0JkdTNePU+ngADbIgk06H5ABgX6/hCDVqiXtxpwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFACO4IyHyovTmiu4XgZkSQKulQV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDc0NjhkZmUtMzg0YS0z
MWEwLWI0NDctYWE2OWFkNDQ1OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIBDZAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWs+PBHLH94KX8urEyf2JFQVOAQFJLvsd5Knugz98P2pOr2tdVeV+
qJHnbA/Cgv7waFp6hxXbERXWed39bJWrwUxFZX8n+q9J8xEBo1X9fUCdFPup7ido
MwAxxC0/UIZ+APWncSBbMgZplOe6L1UW+AMlET8hNDyzcF3u5qx0a8cDwgEAWzmp
o+iyyfvTfWSfOqKJVqYWUfZyuAsG2L/YdiPURTJGA3QbIFIcDEIsN1nTIK2hMk32
UxnekJGvjP2ic+gA7KuZC+dNmT0nGIO9ZDXINb7FJ6F3Jy5L/d9xrx0EuwGthnYs
A7mtKbCDPhEHvI3NSrhYvEH8PkX5M4dFRg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:25 2025 by rpki-client