Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2d09ca3-bf63-3f6e-b8df-f1bdaa7d6f5e.roa
File:                     a2d09ca3-bf63-3f6e-b8df-f1bdaa7d6f5e.roa (raw, json)
Hash identifier:          TrtobRI3zT9eJY/1fMYMzHRaYHX8tEK4utjz4k+6XGg=
Subject key identifier:   74:9C:43:27:02:F8:26:FB:3D:EF:31:00:3E:C4:26:52:99:3A:47:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161D5F8D35652DB6C2EF880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2d09ca3-bf63-3f6e-b8df-f1bdaa7d6f5e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        2600:6c54::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:d5:f8:d3:56:52:db:6c:2e:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3dc2cda9-ad3f-4733-a55e-0bcf4a01b445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:31:f2:a7:3d:72:c4:7d:67:07:54:e3:ca:
                    de:66:12:75:87:37:16:6d:17:86:d3:86:fb:33:01:
                    65:6b:9f:2c:ca:bb:ae:ac:31:36:ad:db:61:19:19:
                    50:31:50:74:78:9f:cb:8d:03:14:0d:2c:b0:1d:f1:
                    e0:7b:fa:6d:53:11:71:17:b9:fc:51:76:e2:bc:40:
                    b3:ae:ed:ff:aa:93:88:e7:3f:e1:a0:00:68:56:52:
                    e4:57:48:bd:98:94:ac:ee:ca:45:09:9e:85:cb:3d:
                    50:f3:99:c0:95:93:f7:f0:82:d9:4a:6a:1b:f9:78:
                    17:f3:62:55:51:27:83:b3:7d:b4:33:b5:c2:d8:1a:
                    cd:48:24:2c:37:4e:e6:48:f4:52:01:8a:9d:42:35:
                    da:8d:04:2c:d6:b0:c4:5d:e9:a0:21:42:94:cb:ac:
                    65:04:74:d2:bb:84:25:f6:11:bc:ee:48:81:93:5e:
                    d6:16:86:4f:fb:a5:82:15:fb:cc:da:30:34:bc:95:
                    04:0b:bc:7c:1a:79:93:31:ee:7f:f7:27:a4:e8:05:
                    b7:c2:20:c0:e9:ac:b9:4d:ab:46:33:b3:ac:52:12:
                    0f:39:99:e5:e7:27:94:43:41:cd:73:71:07:df:16:
                    85:05:66:30:7a:ea:d0:5f:f3:29:89:e6:62:da:1b:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9C:43:27:02:F8:26:FB:3D:EF:31:00:3E:C4:26:52:99:3A:47:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2d09ca3-bf63-3f6e-b8df-f1bdaa7d6f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c54::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:de:0b:b3:cb:14:39:5e:e1:33:7c:a3:3d:43:4f:05:3e:
         fb:e1:53:f1:9a:21:97:3b:45:ca:06:e1:55:8a:6f:2d:99:69:
         51:42:a1:4a:e7:59:f2:1e:80:c3:0d:bb:de:11:25:f8:91:85:
         1e:6f:4a:48:ac:69:33:69:fb:ea:78:9e:41:4e:cb:29:3b:7b:
         b8:3d:8f:94:ea:ca:b5:92:54:70:8a:46:43:17:b3:94:49:aa:
         76:bf:ca:4d:47:1a:cb:e8:21:26:a3:94:b5:5c:37:a5:6f:5f:
         18:c1:9a:b6:6b:b1:93:98:6e:b0:9d:18:c2:e9:75:72:47:85:
         f3:a2:ff:47:7a:d6:25:8a:5e:d6:da:54:9c:c8:de:fe:cd:fd:
         4e:68:4d:dd:c9:cf:a3:f2:01:53:93:e2:a9:49:a9:26:29:16:
         56:73:fd:e2:24:68:ce:42:24:ab:7c:5f:44:b2:19:40:07:f7:
         d1:02:5f:72:a4:50:09:36:ce:53:b5:a5:f2:8f:4f:6d:0a:85:
         a4:44:0d:9f:76:2e:e9:cc:14:41:74:52:0a:26:e6:62:b2:b3:
         91:84:67:14:f3:13:cc:c2:57:b1:3b:94:93:06:fd:2c:fc:6b:
         03:fd:35:09:f0:be:70:1c:66:5f:bb:b3:f7:09:c8:1c:7f:01:
         c7:68:7c:33
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqhYdX401ZS22wu+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
M2RjMmNkYTktYWQzZi00NzMzLWE1NWUtMGJjZjRhMDFiNDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHwx8qc9csR9ZwdU48reZhJ1hzcWbReG04b7
MwFla58syruurDE2rdthGRlQMVB0eJ/LjQMUDSywHfHge/ptUxFxF7n8UXbivECz
ru3/qpOI5z/hoABoVlLkV0i9mJSs7spFCZ6Fyz1Q85nAlZP38ILZSmob+XgX82JV
USeDs320M7XC2BrNSCQsN07mSPRSAYqdQjXajQQs1rDEXemgIUKUy6xlBHTSu4Ql
9hG87kiBk17WFoZP+6WCFfvM2jA0vJUEC7x8GnmTMe5/9yek6AW3wiDA6ay5TatG
M7OsUhIPOZnl5yeUQ0HNc3EH3xaFBWYweurQX/MpieZi2hsYnwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHScQycC+Cb7Pe8xAD7EJlKZOkdCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTJkMDljYTMtYmY2My0z
ZjZlLWI4ZGYtZjFiZGFhN2Q2ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsVDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB+WN4Ls8sUOV7hM3yjPUNPBT774VPxmiGXO0XKBuFVim8tmWlRQqFK
51nyHoDDDbveESX4kYUeb0pIrGkzafvqeJ5BTsspO3u4PY+U6sq1klRwikZDF7OU
Sap2v8pNRxrL6CEmo5S1XDelb18YwZq2a7GTmG6wnRjC6XVyR4Xzov9HetYlil7W
2lScyN7+zf1OaE3dyc+j8gFTk+KpSakmKRZWc/3iJGjOQiSrfF9EshlAB/fRAl9y
pFAJNs5TtaXyj09tCoWkRA2fdi7pzBRBdFIKJuZisrORhGcU8xPMwlexO5STBv0s
/GsD/TUJ8L5wHGZfu7P3CcgcfwHHaHwz
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:50:05 2025 by rpki-client