Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa
File:                     c9de73e4-ff6f-3544-9755-08941b2cafbb.roa (raw, json)
Hash identifier:          XAh6Y6ICwLJAFGV0oW4IWpkUu9wPlcKM9ShtIwnGQfY=
Subject key identifier:   99:E9:C8:32:40:7C:5E:E9:6B:6A:E8:09:59:BB:0F:9A:84:11:EB:A4
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584B44B1BCA1271AA9685F1E0C00
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     7764
IP address blocks:        2610:20:2020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:bc:a1:27:1a:a9:68:5f:1e:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=c421f0da-8f4a-4170-ab29-4d23edc1cba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:5c:ef:da:9e:17:9f:fd:81:b2:4e:17:58:
                    c6:b1:7a:f9:7d:26:7d:89:97:93:83:07:ed:2c:0c:
                    7e:5d:aa:c7:20:4c:93:87:c9:9a:4e:bd:4c:5f:72:
                    83:77:2b:cf:3b:a0:b0:93:05:d0:6f:a1:db:9a:83:
                    b5:2f:2e:2d:38:f5:46:4f:d0:d6:a1:a3:ed:7b:ee:
                    11:c2:34:57:70:af:ca:79:a1:a1:bc:11:a6:be:19:
                    c6:ac:27:34:04:45:41:c1:a8:27:5d:69:80:be:e1:
                    00:14:a9:07:a9:6b:7a:ad:9e:f5:61:72:e3:1f:67:
                    b4:2b:f3:97:b0:d3:31:8c:e6:40:de:2d:78:66:1c:
                    43:90:4c:ac:11:45:f8:ae:78:9d:2e:5d:7c:80:51:
                    13:c9:4e:7e:c7:45:d6:28:0b:25:91:cd:b9:c8:83:
                    31:a1:e5:c5:6e:60:7b:ae:6d:e7:b4:f1:6e:bd:4a:
                    20:11:8e:a1:ad:90:42:ab:bd:a8:d0:f0:6c:0d:97:
                    c0:1e:bf:a3:4f:f8:f2:68:63:a4:00:56:0a:19:23:
                    e9:47:c4:88:9f:a8:92:b4:27:16:8e:8b:be:9c:23:
                    ce:22:c4:60:c8:a1:cd:5c:68:26:9a:99:ef:20:68:
                    a7:55:b1:5b:9e:86:ec:f6:b6:84:2b:5a:cc:7c:93:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E9:C8:32:40:7C:5E:E9:6B:6A:E8:09:59:BB:0F:9A:84:11:EB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c9de73e4-ff6f-3544-9755-08941b2cafbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:2020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:79:8c:db:36:f7:72:e7:6b:23:ed:d8:51:77:30:3a:8e:
         fa:48:a1:76:6f:d1:e0:89:19:fa:3b:18:72:64:32:7c:16:74:
         36:64:83:a5:9e:54:e9:b0:77:03:70:63:de:96:b6:0c:8f:6d:
         7e:19:23:f2:58:81:c3:9b:e4:37:5d:1e:e1:0e:2f:73:c0:a7:
         f8:21:35:15:eb:d7:f7:ca:be:6e:cd:39:6f:0f:7f:4b:27:0a:
         26:81:f3:f9:df:6e:79:44:99:44:44:62:cb:fc:df:1a:90:de:
         19:b2:1c:4e:69:c8:b0:ab:28:38:a8:db:e6:3d:de:32:1d:2b:
         c2:5a:32:47:6f:70:e2:70:78:d4:4a:d6:69:0d:96:cf:27:fe:
         d8:96:36:62:03:fa:0f:ef:c2:22:53:26:64:d0:e7:6f:72:73:
         cd:c8:bc:07:26:66:98:19:85:f8:25:1b:fe:d4:71:22:25:33:
         11:be:58:24:cb:40:45:ce:fd:37:51:4b:89:32:66:93:39:3c:
         62:6f:ac:65:63:4e:8c:9d:27:de:08:62:d5:a3:88:7d:29:27:
         92:81:fe:94:8f:dd:8e:ac:8e:54:c2:f8:b3:71:77:ff:d4:31:
         52:59:b7:70:ae:a9:c1:5a:a2:74:11:27:a4:70:46:66:ce:d5:
         87:7f:dd:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtEsbyhJxqpaF8eDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm
YWI3MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk
YzQyMWYwZGEtOGY0YS00MTcwLWFiMjktNGQyM2VkYzFjYmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlxc79qeF5/9gbJOF1jGsXr5fSZ9iZeTgwft
LAx+XarHIEyTh8maTr1MX3KDdyvPO6CwkwXQb6HbmoO1Ly4tOPVGT9DWoaPte+4R
wjRXcK/KeaGhvBGmvhnGrCc0BEVBwagnXWmAvuEAFKkHqWt6rZ71YXLjH2e0K/OX
sNMxjOZA3i14ZhxDkEysEUX4rnidLl18gFETyU5+x0XWKAslkc25yIMxoeXFbmB7
rm3ntPFuvUogEY6hrZBCq72o0PBsDZfAHr+jT/jyaGOkAFYKGSPpR8SIn6iStCcW
jou+nCPOIsRgyKHNXGgmmpnvIGinVbFbnobs9raEK1rMfJMkFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJnpyDJAfF7pa2roCVm7D5qEEeukMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk
NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvYzlkZTczZTQtZmY2Zi0z
NTQ0LTk3NTUtMDg5NDFiMmNhZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2
ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3
ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4
ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAICAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHnJeYzbNvdy52sj7dhRdzA6jvpIoXZv0eCJGfo7GHJkMnwWdDZk
g6WeVOmwdwNwY96WtgyPbX4ZI/JYgcOb5DddHuEOL3PAp/ghNRXr1/fKvm7NOW8P
f0snCiaB8/nfbnlEmUREYsv83xqQ3hmyHE5pyLCrKDio2+Y93jIdK8JaMkdvcOJw
eNRK1mkNls8n/tiWNmID+g/vwiJTJmTQ529yc83IvAcmZpgZhfglG/7UcSIlMxG+
WCTLQEXO/TdRS4kyZpM5PGJvrGVjToydJ94IYtWjiH0pJ5KB/pSP3Y6sjlTC+LNx
d//UMVJZt3CuqcFaonQRJ6RwRmbO1Yd/3f0=
-----END CERTIFICATE-----
Generated at Sat Oct 11 12:34:23 2025 by rpki-client