Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8b73b9c-bd55-3728-bfab-76af83f6c107.roa
File:                     f8b73b9c-bd55-3728-bfab-76af83f6c107.roa (raw, json)
Hash identifier:          8KxFXfL1fqLQFoCXH3n0yE/LX0TFC9yTOhqW5GT/GvQ=
Subject key identifier:   BE:D8:1C:E2:34:09:E3:B7:63:D4:6E:AD:C3:D2:02:65:16:DE:F4:43
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A7A4B3F90891EABF8AE9BB200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8b73b9c-bd55-3728-bfab-76af83f6c107.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     20115
IP address blocks:        2602:107:e870::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3f:90:89:1e:ab:f8:ae:9b:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=47583e18-127e-43e4-b560-68ad1d11eeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:22:ea:c5:43:d1:e9:f9:b2:35:b6:16:7e:
                    c3:a1:72:e0:84:8c:51:4b:e4:bb:2f:02:ea:85:fa:
                    a8:e9:83:dd:76:b6:05:59:27:48:4a:2b:78:00:bd:
                    d5:70:ff:31:1a:1b:b6:b1:0f:14:f5:8c:06:fb:3d:
                    cb:86:6e:eb:a2:17:ee:a3:26:88:d0:67:6b:f1:e4:
                    ca:06:54:84:28:d5:2f:b5:f7:27:b0:d9:3c:da:1f:
                    89:a8:7b:c0:39:02:92:49:4f:4f:a6:3e:03:d2:4f:
                    5b:d5:cf:1b:7e:eb:57:bf:b4:d8:2f:46:0b:b9:f3:
                    8d:01:92:ea:6d:db:08:0f:07:ae:53:fd:3b:98:c5:
                    06:44:7f:0c:3a:a2:24:e5:d1:78:56:a3:4e:49:10:
                    4a:1a:c4:70:df:c7:78:cc:0f:93:d6:dc:12:44:1d:
                    59:34:0e:2b:7f:bd:28:83:79:f2:15:d1:3f:c4:9a:
                    b1:1a:a5:b5:c8:a8:6f:3c:4c:bb:4d:94:b6:af:f4:
                    b1:b6:3e:92:83:b6:20:3f:1e:97:a5:b3:aa:b9:54:
                    49:31:bb:86:c0:a9:f4:46:49:5b:31:1e:57:d6:94:
                    01:94:c3:e8:d9:60:d9:8d:11:f0:4e:db:2f:d0:67:
                    2b:86:c0:d1:6b:15:44:57:09:de:bd:42:fc:e6:7d:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D8:1C:E2:34:09:E3:B7:63:D4:6E:AD:C3:D2:02:65:16:DE:F4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f8b73b9c-bd55-3728-bfab-76af83f6c107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:e870::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:c3:d4:c5:d3:1f:dd:c4:18:dd:6a:6d:e5:37:29:80:c6:
         72:30:da:62:7e:3f:ee:68:09:8e:43:e7:10:ab:d8:0e:78:0f:
         ea:bd:70:86:5c:70:d0:26:79:25:bb:07:df:cd:b7:2b:6f:2b:
         df:3f:d8:07:ab:0a:03:7b:b3:35:37:9c:96:4d:01:6c:dd:e2:
         85:47:a3:9b:ad:84:8a:f7:53:3d:97:fa:9a:3f:f8:f2:b5:52:
         e8:09:8a:55:53:94:6c:18:d9:f5:e0:a4:e0:f1:50:7b:59:49:
         33:cd:0a:b2:f4:74:71:56:c3:c3:29:ba:11:0a:ed:4c:ea:22:
         39:00:b3:91:85:d4:ff:a3:8e:8e:d5:60:e0:82:ca:8b:ad:2a:
         97:a9:2c:0b:14:5b:c8:3b:df:97:bc:6f:a7:3f:dc:dd:9e:1f:
         93:d5:5a:a7:35:a1:47:57:b3:a6:49:fa:20:14:bc:18:36:d9:
         96:6e:f4:6c:47:7a:4b:49:4c:da:64:2b:e2:8e:61:45:81:78:
         53:f5:f8:9e:65:e3:a5:b0:3b:27:22:9f:01:26:ba:05:aa:30:
         7a:02:9d:86:bc:db:a2:37:76:9a:2b:b1:6f:58:d5:65:84:de:
         6a:3e:5a:83:a1:50:5d:30:f2:81:56:b3:75:f7:5b:9d:03:3f:
         f8:0a:e4:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp6Sz+QiR6r+K6bsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
NDc1ODNlMTgtMTI3ZS00M2U0LWI1NjAtNjhhZDFkMTFlZWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuQi6sVD0en5sjW2Fn7DoXLghIxRS+S7LwLq
hfqo6YPddrYFWSdISit4AL3VcP8xGhu2sQ8U9YwG+z3Lhm7rohfuoyaI0Gdr8eTK
BlSEKNUvtfcnsNk82h+JqHvAOQKSSU9Ppj4D0k9b1c8bfutXv7TYL0YLufONAZLq
bdsIDweuU/07mMUGRH8MOqIk5dF4VqNOSRBKGsRw38d4zA+T1twSRB1ZNA4rf70o
g3nyFdE/xJqxGqW1yKhvPEy7TZS2r/Sxtj6Sg7YgPx6XpbOquVRJMbuGwKn0Rklb
MR5X1pQBlMPo2WDZjRHwTtsv0GcrhsDRaxVEVwnevUL85n2IuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL7YHOI0CeO3Y9RurcPSAmUW3vRDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjhiNzNiOWMtYmQ1NS0z
NzI4LWJmYWItNzZhZjgzZjZjMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIBB+hw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADo+w9TF0x/dxBjdam3lNymAxnIw2mJ+P+5oCY5D5xCr2A54D+q9
cIZccNAmeSW7B9/NtytvK98/2AerCgN7szU3nJZNAWzd4oVHo5uthIr3Uz2X+po/
+PK1UugJilVTlGwY2fXgpODxUHtZSTPNCrL0dHFWw8MpuhEK7UzqIjkAs5GF1P+j
jo7VYOCCyoutKpepLAsUW8g735e8b6c/3N2eH5PVWqc1oUdXs6ZJ+iAUvBg22ZZu
9GxHektJTNpkK+KOYUWBeFP1+J5l46WwOycinwEmugWqMHoCnYa826I3dporsW9Y
1WWE3mo+WoOhUF0w8oFWs3X3W50DP/gK5JM=
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:08:45 2025 by rpki-client