Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d81bbce7-7912-39e2-8761-91a7e43f109e.roa
File:                     d81bbce7-7912-39e2-8761-91a7e43f109e.roa (raw, json)
Hash identifier:          BcPJOn7kFb/Ad5VTsxE8P2oBeQUQteqttjdMFmzTBc8=
Subject key identifier:   99:ED:6D:DF:03:40:09:C4:C5:46:E0:BF:D4:40:6E:22:71:C2:BF:58
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1612D7F3ACDC542B60AC660
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d81bbce7-7912-39e2-8761-91a7e43f109e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        2602:104:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:2d:7f:3a:cd:c5:42:b6:0a:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=840d8dad-46a2-4ecd-ac3b-2d5a87655b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:6d:96:63:2c:c1:b5:02:c4:bc:db:35:12:
                    38:81:e5:b5:60:59:e4:3e:d0:27:55:b5:83:a4:11:
                    10:b2:f5:16:b0:ae:27:99:a1:51:96:7c:d1:83:b1:
                    8a:ae:4d:6a:ef:a8:60:20:34:3d:bd:6f:19:f7:fe:
                    46:9a:bd:49:7f:de:8f:d6:ae:ac:a6:f2:2b:3a:0b:
                    95:be:73:83:c4:e3:b6:68:50:e5:b3:6b:f9:73:4c:
                    ca:2e:ed:d2:32:cf:d2:dd:09:4c:2b:3b:84:7b:ac:
                    e5:0e:0c:c0:19:40:7a:2f:5e:1a:16:41:01:b2:fa:
                    4e:bd:40:e9:a0:1c:25:31:ed:db:59:2a:f1:1e:00:
                    cd:5b:ae:e6:48:f0:23:d1:8f:be:df:42:a0:fb:43:
                    32:88:6a:23:35:76:f2:94:74:e0:56:57:c3:17:c3:
                    42:f1:2d:40:7f:9d:33:5c:60:f4:51:d5:93:e5:02:
                    40:7d:1d:1e:8f:a0:52:d0:da:de:be:5c:bf:b9:ae:
                    43:55:1a:38:8c:42:d6:28:d3:aa:f1:cc:62:d3:60:
                    9a:2e:bb:a7:57:ec:2c:a0:41:20:28:0e:c3:5f:76:
                    13:d5:8e:73:f4:1b:0c:88:01:c0:5c:9f:38:20:e1:
                    04:e6:66:85:1d:35:e6:7d:bd:36:4b:c5:68:0d:46:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:ED:6D:DF:03:40:09:C4:C5:46:E0:BF:D4:40:6E:22:71:C2:BF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d81bbce7-7912-39e2-8761-91a7e43f109e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:104:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:be:d1:69:d6:d5:0c:d0:a8:d7:29:91:fc:49:8c:9a:d5:13:
         eb:1c:7e:9c:87:b7:5d:e8:ad:4f:eb:46:5b:2d:2c:bb:9d:9d:
         18:5b:65:a3:35:cb:83:b6:86:55:ef:05:c6:01:c1:f8:34:52:
         de:b2:90:aa:6e:e1:dd:74:0b:0f:4b:86:ed:5c:e9:fe:a6:49:
         a0:a5:cd:3e:fb:fc:06:d5:a7:cd:5d:c6:a6:96:56:07:45:79:
         ce:48:ee:f3:07:32:7d:2f:c4:17:88:0f:9e:3d:82:1e:79:2d:
         1c:9c:bb:d0:8e:9d:be:27:e7:1a:e2:ec:72:e5:74:aa:13:71:
         68:73:75:d5:73:83:41:7c:57:b3:70:de:ac:47:d5:3f:42:45:
         b9:97:da:41:89:a2:18:30:1c:ea:b2:05:12:8b:b4:8c:f8:ea:
         77:0e:50:f3:72:85:0c:ed:83:0e:f4:61:2e:db:af:dc:d8:a5:
         32:69:85:29:51:56:7c:09:ce:40:93:88:cb:66:26:48:01:fb:
         fe:f2:c9:1f:ee:81:cd:9c:70:65:6d:ec:28:8c:21:14:4f:cd:
         e4:b4:af:02:77:5b:5f:8f:f3:95:26:71:f2:d8:d7:1c:79:55:
         f3:ce:60:b1:37:61:77:e9:b4:68:48:f4:13:86:23:bf:16:a1:
         70:eb:e1:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqhYS1/Os3FQrYKxmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ODQwZDhkYWQtNDZhMi00ZWNkLWFjM2ItMmQ1YTg3NjU1Yjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4ttlmMswbUCxLzbNRI4geW1YFnkPtAnVbWD
pBEQsvUWsK4nmaFRlnzRg7GKrk1q76hgIDQ9vW8Z9/5Gmr1Jf96P1q6spvIrOguV
vnODxOO2aFDls2v5c0zKLu3SMs/S3QlMKzuEe6zlDgzAGUB6L14aFkEBsvpOvUDp
oBwlMe3bWSrxHgDNW67mSPAj0Y++30Kg+0MyiGojNXbylHTgVlfDF8NC8S1Af50z
XGD0UdWT5QJAfR0ej6BS0Nrevly/ua5DVRo4jELWKNOq8cxi02CaLrunV+wsoEEg
KA7DX3YT1Y5z9BsMiAHAXJ84IOEE5maFHTXmfb02S8VoDUbC3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJntbd8DQAnExUbgv9RAbiJxwr9YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDgxYmJjZTctNzkxMi0z
OWUyLTg3NjEtOTFhN2U0M2YxMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIBBAAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANK+0WnW1QzQqNcpkfxJjJrVE+scfpyHt13orU/rRlstLLudnRhb
ZaM1y4O2hlXvBcYBwfg0Ut6ykKpu4d10Cw9Lhu1c6f6mSaClzT77/AbVp81dxqaW
VgdFec5I7vMHMn0vxBeID549gh55LRycu9COnb4n5xri7HLldKoTcWhzddVzg0F8
V7Nw3qxH1T9CRbmX2kGJohgwHOqyBRKLtIz46ncOUPNyhQztgw70YS7br9zYpTJp
hSlRVnwJzkCTiMtmJkgB+/7yyR/ugc2ccGVt7CiMIRRPzeS0rwJ3W1+P85UmcfLY
1xx5VfPOYLE3YXfptGhI9BOGI78WoXDr4Sc=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:11 2025 by rpki-client