Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88a68f76-70d7-3de1-98c4-185b8b22d1c2.roa
File:                     88a68f76-70d7-3de1-98c4-185b8b22d1c2.roa (raw, json)
Hash identifier:          JBsz95cIsvjMsZJsipSE8VFqqE4pm9Hk7UGbVJcBLE8=
Subject key identifier:   25:DC:1F:06:2C:1A:81:68:65:F0:5C:06:23:4F:1E:00:6C:97:66:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849E2253745DE38E5C154A41B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88a68f76-70d7-3de1-98c4-185b8b22d1c2.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     23222
IP address blocks:        2602:107:e800::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:37:45:de:38:e5:c1:54:a4:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=570a8aae-a1a4-4097-a53d-13000b792e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:75:f6:6b:d2:58:0b:7d:a6:4c:85:22:6f:
                    e4:85:d6:0e:49:1d:24:4d:c2:e7:e4:26:2c:62:f0:
                    35:79:f2:2f:f6:ed:d0:37:f1:0b:b1:27:b2:cf:0f:
                    5a:f3:7b:89:56:19:ff:ef:8d:10:6d:44:8e:0b:47:
                    b4:d8:7b:c3:7e:ee:0f:5b:d5:f3:1d:02:15:fb:0f:
                    00:27:cf:53:36:8b:50:eb:ed:08:08:ba:ce:5b:b2:
                    3f:db:8a:9e:d2:33:b0:29:94:de:1d:fa:33:eb:43:
                    2c:92:44:d0:b9:a5:75:b9:e6:a3:8f:5a:7e:48:d3:
                    e3:38:b7:1c:88:a7:18:a8:f5:37:1c:51:66:e2:ab:
                    f1:6e:14:c4:f1:2d:a8:59:e5:42:40:c9:dd:30:09:
                    f0:64:45:4e:ce:22:e5:e0:fb:19:7c:eb:9f:19:17:
                    a8:e7:b6:b6:0d:ac:fd:88:13:7f:f0:62:75:d8:a2:
                    a8:e9:3f:24:bf:b2:3b:6c:81:03:c8:79:70:75:a9:
                    c9:70:9a:11:c2:fe:0d:43:26:67:e5:67:b3:a0:4a:
                    05:97:73:2a:8a:23:b1:69:a7:01:a9:7d:3e:d9:e8:
                    4a:ee:29:05:e7:62:12:cd:8f:9b:ca:23:3c:f9:18:
                    d4:ff:77:66:5d:d6:28:65:d3:b4:7d:f7:d9:52:36:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DC:1F:06:2C:1A:81:68:65:F0:5C:06:23:4F:1E:00:6C:97:66:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88a68f76-70d7-3de1-98c4-185b8b22d1c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:e800::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:a9:76:00:af:9d:08:23:2a:e1:a0:1d:11:b0:c4:c0:08:
         20:a0:29:b1:e4:9b:81:ca:27:13:91:84:92:83:a8:eb:e3:a1:
         83:db:3d:79:a3:46:10:5b:20:4d:10:f4:89:6f:ed:a7:53:8f:
         3a:13:64:b2:8e:25:91:f0:1f:2f:cb:aa:33:59:cf:1e:f5:d7:
         1e:0e:9c:06:3b:13:c4:f6:64:16:aa:4e:71:ef:84:8e:32:85:
         cd:f8:68:b6:d6:e0:81:f5:09:59:c3:b9:ff:8b:c0:bb:a9:d1:
         db:7e:39:31:00:aa:1b:ab:72:fe:bf:35:92:13:bc:62:1b:61:
         fb:2a:88:3b:e2:f0:2b:ef:7e:fc:b0:e4:1d:a7:09:21:16:d0:
         45:18:8d:dd:1d:da:df:33:79:b4:cc:e6:07:92:0b:43:76:87:
         f7:cb:79:0c:1a:b4:69:f7:25:88:5d:90:fe:54:f4:05:ed:43:
         31:3b:11:5d:98:bb:79:f9:cc:78:a9:85:c8:4a:b1:90:fc:cb:
         19:47:df:3a:5b:53:c5:4d:df:3d:ec:6f:d5:92:1a:7e:0f:bb:
         be:d1:25:5e:1e:81:3b:b8:3c:d2:39:8a:a7:1a:82:82:98:e7:
         03:ba:c9:8e:fa:a5:42:5e:d1:00:a8:a0:c7:67:1f:1a:aa:02:
         7d:ca:03:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJTdF3jjlwVSkGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
NTcwYThhYWUtYTFhNC00MDk3LWE1M2QtMTMwMDBiNzkyZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFN19mvSWAt9pkyFIm/khdYOSR0kTcLn5CYs
YvA1efIv9u3QN/ELsSeyzw9a83uJVhn/740QbUSOC0e02HvDfu4PW9XzHQIV+w8A
J89TNotQ6+0ICLrOW7I/24qe0jOwKZTeHfoz60MskkTQuaV1ueajj1p+SNPjOLcc
iKcYqPU3HFFm4qvxbhTE8S2oWeVCQMndMAnwZEVOziLl4PsZfOufGReo57a2Daz9
iBN/8GJ12KKo6T8kv7I7bIEDyHlwdanJcJoRwv4NQyZn5WezoEoFl3MqiiOxaacB
qX0+2ehK7ikF52ISzY+byiM8+RjU/3dmXdYoZdO0fffZUjaMPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCXcHwYsGoFoZfBcBiNPHgBsl2awMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODhhNjhmNzYtNzBkNy0z
ZGUxLTk4YzQtMTg1YjhiMjJkMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgIBB+gA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAaqqXYAr50IIyrhoB0RsMTACCCgKbHkm4HKJxORhJKDqOvjoYPb
PXmjRhBbIE0Q9Ilv7adTjzoTZLKOJZHwHy/LqjNZzx711x4OnAY7E8T2ZBaqTnHv
hI4yhc34aLbW4IH1CVnDuf+LwLup0dt+OTEAqhurcv6/NZITvGIbYfsqiDvi8Cvv
fvyw5B2nCSEW0EUYjd0d2t8zebTM5geSC0N2h/fLeQwatGn3JYhdkP5U9AXtQzE7
EV2Yu3n5zHiphchKsZD8yxlH3zpbU8VN3z3sb9WSGn4Pu77RJV4egTu4PNI5iqca
goKY5wO6yY76pUJe0QCooMdnHxqqAn3KAzk=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:40:59 2025 by rpki-client