Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a92c6ee3-6031-368e-8a60-743da2dd5f95.roa
File:                     a92c6ee3-6031-368e-8a60-743da2dd5f95.roa (raw, json)
Hash identifier:          PixY/v9zn42T61yMQ8lTvFkfWzwQ+eJQWSgaH08nxEk=
Subject key identifier:   A1:D7:57:0A:6E:E5:4D:56:77:89:DA:4B:A7:10:91:D3:A4:37:1B:B6
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584A6F207AAFE18FB73086CCA0C0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a92c6ee3-6031-368e-8a60-743da2dd5f95.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     2648
IP address blocks:        2610:20:8804::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7a:af:e1:8f:b7:30:86:cc:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=74b6901c-27a9-494a-9650-ef6d9e00af7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:54:f7:61:29:79:cc:90:c8:49:2d:7d:94:c7:
                    87:f1:d0:6c:7b:e0:3e:9d:35:3b:68:af:0f:5e:e1:
                    d4:d9:12:96:b3:07:57:d9:3c:28:9f:95:b0:e5:96:
                    41:3e:54:e0:87:cd:b7:89:b3:47:fb:b9:83:e3:5b:
                    c1:da:2b:df:c3:07:f6:e5:8c:95:16:ba:40:f3:b4:
                    64:42:fe:e8:4d:01:e5:9d:87:dc:97:33:9e:b0:b6:
                    71:45:e6:4f:92:b4:e3:f9:c9:3a:2c:66:84:3c:d1:
                    56:d3:32:8a:8d:47:39:3d:dc:7b:7e:42:a9:48:b5:
                    b4:77:4d:ff:06:a8:e1:2a:81:bf:6a:a4:db:0a:0b:
                    0a:6d:ba:91:af:a0:56:56:60:bc:c8:bc:f1:d1:eb:
                    09:73:41:77:5f:e8:b2:7d:98:e2:22:75:a0:75:ac:
                    47:fc:af:3b:89:91:4d:60:2d:69:73:9d:3c:05:11:
                    77:33:8f:69:1c:ce:11:c3:13:cf:bd:b3:7a:b7:e7:
                    25:0c:79:da:f7:c5:d0:ae:1a:a1:2d:b3:a4:41:8a:
                    33:fe:e9:d2:8c:cc:7a:57:a3:11:62:14:f1:ff:ad:
                    c0:f1:cb:32:f7:a9:bb:52:b6:db:a6:e2:4c:65:c6:
                    f8:57:bf:91:ca:3a:2c:e7:b9:b0:7b:30:2f:e8:ad:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D7:57:0A:6E:E5:4D:56:77:89:DA:4B:A7:10:91:D3:A4:37:1B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a92c6ee3-6031-368e-8a60-743da2dd5f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8804::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:5d:8f:7c:d9:ab:4d:ba:fe:5d:46:29:fd:96:5d:14:8f:
         ea:e7:af:01:08:b3:e6:de:3d:06:12:73:40:84:3b:11:df:d0:
         7c:e1:a8:82:82:a3:d1:eb:01:dd:e0:d8:a9:f5:06:85:43:89:
         13:7f:cd:36:c5:a7:9c:3a:f9:7b:ac:3a:a2:12:2d:6f:ae:c3:
         13:45:15:5f:79:d3:f6:d7:cb:bf:34:57:e7:78:dd:e1:8e:7a:
         1b:e1:ed:ff:f8:85:12:d3:50:0d:dc:bd:91:79:89:e6:f0:16:
         24:f2:ac:fd:42:2a:9f:8e:75:6b:6d:d1:43:cb:61:ab:a9:d1:
         a6:d7:23:82:5b:8b:15:bd:d0:b3:12:cb:f9:a3:e4:ec:1b:15:
         30:03:19:c4:4d:76:4e:50:5e:a8:d4:cf:8c:d4:62:95:3d:d4:
         e7:96:e0:28:bd:83:16:4d:64:d2:61:98:7d:80:8c:d2:3c:75:
         bb:3c:66:f3:4f:4a:19:d3:21:56:03:e8:26:14:ad:33:d2:95:
         64:96:c3:d2:50:9b:a9:a7:35:e0:77:56:f6:1f:c0:1d:84:c9:
         0f:3f:2a:ad:de:d1:93:30:22:44:fa:89:0e:d5:01:69:6e:92:
         06:fd:de:3a:b0:51:ba:d1:b8:ab:e9:68:e4:fd:85:94:c6:c5:
         24:d2:ab:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpvIHqv4Y+3MIbMoMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk
NzRiNjkwMWMtMjdhOS00OTRhLTk2NTAtZWY2ZDllMDBhZjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlT3YSl5zJDISS19lMeH8dBse+A+nTU7aK8P
XuHU2RKWswdX2Twon5Ww5ZZBPlTgh823ibNH+7mD41vB2ivfwwf25YyVFrpA87Rk
Qv7oTQHlnYfclzOesLZxReZPkrTj+ck6LGaEPNFW0zKKjUc5Pdx7fkKpSLW0d03/
BqjhKoG/aqTbCgsKbbqRr6BWVmC8yLzx0esJc0F3X+iyfZjiInWgdaxH/K87iZFN
YC1pc508BRF3M49pHM4RwxPPvbN6t+clDHna98XQrhqhLbOkQYoz/unSjMx6V6MR
YhTx/63A8csy96m7UrbbpuJMZcb4V7+Ryjos57mwezAv6K2cHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKHXVwpu5U1Wd4naS6cQkdOkNxu2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYTkyYzZlZTMtNjAzMS0z
NjhlLThhNjAtNzQzZGEyZGQ1Zjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJhAAIIgE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACn2XY982atNuv5dRin9ll0Uj+rnrwEIs+bePQYSc0CEOxHf0Hzh
qIKCo9HrAd3g2Kn1BoVDiRN/zTbFp5w6+XusOqISLW+uwxNFFV950/bXy780V+d4
3eGOehvh7f/4hRLTUA3cvZF5iebwFiTyrP1CKp+OdWtt0UPLYaup0abXI4JbixW9
0LMSy/mj5OwbFTADGcRNdk5QXqjUz4zUYpU91OeW4Ci9gxZNZNJhmH2AjNI8dbs8
ZvNPShnTIVYD6CYUrTPSlWSWw9JQm6mnNeB3VvYfwB2EyQ8/Kq3e0ZMwIkT6iQ7V
AWlukgb93jqwUbrRuKvpaOT9hZTGxSTSq4I=
-----END CERTIFICATE-----
Generated at Thu Jul 10 07:53:54 2025 by rpki-client