Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/14fe8f30-8678-31d1-911f-18215dcdb7b3.roa
File:                     14fe8f30-8678-31d1-911f-18215dcdb7b3.roa (raw, json)
Hash identifier:          uUIolsoiTJP8rc+Vn8vH6LWehyk3pYnc3w35bEtnP4A=
Subject key identifier:   B0:AF:1D:C9:2F:AE:F0:68:B3:CE:BC:AB:98:BD:2F:40:44:4A:58:DC
Certificate issuer:       /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
Certificate serial:       010D0C9F4328584A940AD7831D59887673CE3160
Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/14fe8f30-8678-31d1-911f-18215dcdb7b3.roa
Signing time:             Sat 19 Jul 2025 06:49:20 +0000
ROA not before:           Sat 19 Jul 2025 06:49:20 +0000
ROA not after:            Fri 17 Oct 2025 06:49:20 +0000
asID:                     401815
IP address blocks:        2604:1760::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:0a:d7:83:1d:59:88:76:73:ce:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
        Validity
            Not Before: Jul 19 06:49:20 2025 GMT
            Not After : Oct 17 06:49:20 2025 GMT
        Subject: CN=7ad14b7b-63cf-4cb7-b6f2-10ab7f96d1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:d8:8d:c4:6f:65:5a:43:07:46:83:90:b2:
                    72:2e:26:4c:ee:58:28:ca:73:e0:52:5b:56:f2:64:
                    f4:9e:b7:4e:96:ea:7e:3b:26:cc:64:00:32:e4:6b:
                    bf:da:ac:2e:76:35:09:75:36:e1:1f:24:c4:5b:2b:
                    9a:5d:f2:28:04:5e:e7:78:f2:16:a0:f8:e0:5d:f7:
                    3c:12:11:48:56:7f:08:c9:0b:f0:72:0c:6a:42:05:
                    e1:73:f7:6c:55:48:be:a1:5b:09:e2:4d:56:c5:5a:
                    8f:c6:71:cf:7a:d9:4a:36:f9:5f:c7:78:23:6e:c1:
                    fd:8f:8e:4b:d1:e8:14:29:d1:41:de:d9:66:74:d0:
                    a8:49:ad:95:20:23:08:08:81:eb:5a:cc:1d:35:31:
                    95:a9:9d:72:75:b3:5e:54:d7:84:4f:86:9d:8f:37:
                    de:9d:5f:a3:7d:2a:ae:cc:09:6b:81:d3:8e:ca:13:
                    f9:f3:b0:a2:2b:32:fa:2c:32:42:cf:3d:80:45:b5:
                    75:4d:9e:db:aa:40:68:88:c1:a4:06:dc:e0:70:d5:
                    d1:2c:32:e1:bd:c9:d5:d8:0b:73:7c:15:bb:e8:08:
                    25:3f:8e:c3:77:00:59:21:07:80:c4:f8:c9:93:42:
                    21:11:87:f6:21:54:b0:48:31:50:ae:df:54:83:6e:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:1D:C9:2F:AE:F0:68:B3:CE:BC:AB:98:BD:2F:40:44:4A:58:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/14fe8f30-8678-31d1-911f-18215dcdb7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1760::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:00:cd:34:c4:a2:51:94:04:41:10:bc:33:13:96:53:62:b8:
         e9:bb:63:83:b8:f6:3c:07:76:bc:0d:eb:a0:35:8d:7b:36:7f:
         51:db:39:13:14:dc:25:8b:77:59:fb:37:9e:16:a2:7e:a9:f8:
         e4:e4:2f:04:39:25:9f:48:ea:bf:66:f0:cd:95:8f:d4:2a:39:
         11:61:24:44:61:e6:a3:79:02:64:c4:2e:54:37:9a:6c:99:10:
         4a:75:f2:7d:50:37:53:e1:78:20:cf:76:d3:78:2b:68:a8:91:
         cc:c8:73:ac:f1:25:79:cf:38:42:92:0f:f9:e0:f7:14:9f:f0:
         5f:9f:c0:dd:28:63:5d:a2:fb:3d:82:93:77:51:93:9d:92:3a:
         40:e1:5f:81:95:dc:6a:c5:fc:d9:de:95:1b:be:be:28:02:33:
         d0:96:75:76:9f:24:70:ec:06:ce:ae:a0:cb:82:87:f6:27:92:
         f2:c3:24:f0:86:3b:d1:f8:8b:a3:39:a1:1c:12:df:8d:ff:3f:
         26:80:dc:a0:d8:bc:e9:48:34:92:58:74:e0:be:6e:27:8f:11:
         cc:47:f5:d3:93:56:4c:2c:f8:88:7e:ed:5c:7b:1a:f3:fc:02:
         6a:1e:ea:65:7f:d1:68:b8:82:81:0c:30:a1:18:9a:66:48:e6:
         44:45:65:9a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqUCteDHVmIdnPOMWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQxZTMxMGUtMmI2Zi00ZjkwLTlmNzAtYmMzMDNiNjRh
ODIzMB4XDTI1MDcxOTA2NDkyMFoXDTI1MTAxNzA2NDkyMFowLzEtMCsGA1UEAxMk
N2FkMTRiN2ItNjNjZi00Y2I3LWI2ZjItMTBhYjdmOTZkMWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbrYjcRvZVpDB0aDkLJyLiZM7lgoynPgUltW
8mT0nrdOlup+OybMZAAy5Gu/2qwudjUJdTbhHyTEWyuaXfIoBF7nePIWoPjgXfc8
EhFIVn8IyQvwcgxqQgXhc/dsVUi+oVsJ4k1WxVqPxnHPetlKNvlfx3gjbsH9j45L
0egUKdFB3tlmdNCoSa2VICMICIHrWswdNTGVqZ1ydbNeVNeET4adjzfenV+jfSqu
zAlrgdOOyhP587CiKzL6LDJCzz2ARbV1TZ7bqkBoiMGkBtzgcNXRLDLhvcnV2Atz
fBW76AglP47DdwBZIQeAxPjJk0IhEYf2IVSwSDFQrt9Ug26S0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLCvHckvrvBos868q5i9L0BESljcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFl
MzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMwM2I2NGE4MjMvMTRmZThmMzAtODY3OC0z
MWQxLTkxMWYtMTgyMTVkY2RiN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQxZTMxMGUtMmI2Zi00ZjkwLTlm
NzAtYmMzMDNiNjRhODIzL2Q0MWUzMTBlLTJiNmYtNGY5MC05ZjcwLWJjMzAzYjY0
YTgyMy5jcmwwHwYDVR0jBBgwFoAU1x8CfQ7TMbr1xYDOtNKVMQcRuiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFlMzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMw
M2I2NGE4MjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgQXYAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFcAzTTEolGUBEEQvDMTllNiuOm7Y4O49jwHdrwN66A1jXs2f1Hb
ORMU3CWLd1n7N54Won6p+OTkLwQ5JZ9I6r9m8M2Vj9QqORFhJERh5qN5AmTELlQ3
mmyZEEp18n1QN1PheCDPdtN4K2iokczIc6zxJXnPOEKSD/ng9xSf8F+fwN0oY12i
+z2Ck3dRk52SOkDhX4GV3GrF/NnelRu+vigCM9CWdXafJHDsBs6uoMuCh/YnkvLD
JPCGO9H4i6M5oRwS343/PyaA3KDYvOlINJJYdOC+biePEcxH9dOTVkws+Ih+7Vx7
GvP8Amoe6mV/0Wi4goEMMKEYmmZI5kRFZZo=
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:03 2025 by rpki-client