Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dd6653a7-febc-3d06-a9a9-20cda339adc1.roa
File:                     dd6653a7-febc-3d06-a9a9-20cda339adc1.roa (raw, json)
Hash identifier:          StGS4ndhhO5bcJLA/YcqYHMgJo6WIG9CFvVETyXMWaM=
Subject key identifier:   F5:09:69:FC:5B:F4:87:1B:07:D6:79:37:4B:9D:5D:54:A5:96:2E:30
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584A5DCF9589A6190CDFA732A600
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dd6653a7-febc-3d06-a9a9-20cda339adc1.roa
Signing time:             Mon 30 Jun 2025 20:09:12 +0000
ROA not before:           Mon 30 Jun 2025 20:09:12 +0000
ROA not after:            Sun 28 Sep 2025 20:09:12 +0000
asID:                     3477
IP address blocks:        2610:20:8c20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:cf:95:89:a6:19:0c:df:a7:32:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jun 30 20:09:12 2025 GMT
            Not After : Sep 28 20:09:12 2025 GMT
        Subject: CN=3a4da7ab-911f-42c0-a88d-9d9c62a1e22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:c4:76:c0:01:36:91:c6:ef:d4:85:fc:3e:
                    55:f7:4a:9d:32:54:55:fc:46:a7:c8:1c:d5:ca:0a:
                    76:10:fe:8b:5f:f5:12:ce:8d:40:a4:1f:b5:19:d1:
                    16:ef:5d:1e:8f:ee:3b:c4:bd:b1:41:60:75:0b:91:
                    06:b9:93:f4:99:0a:f0:bb:cb:0a:ff:77:a3:f9:47:
                    b6:67:db:ea:e5:9e:6f:60:3c:40:22:e5:a2:a9:a6:
                    fe:1c:73:3f:48:cb:50:a9:24:34:27:bf:e0:42:19:
                    a2:c1:76:83:3e:55:26:9c:cf:60:e0:ff:ed:95:75:
                    12:5e:45:b0:5f:ea:9c:c4:ac:67:db:c9:9b:5b:35:
                    40:04:4a:a3:ab:eb:7c:3f:a1:fb:17:50:24:69:d3:
                    eb:07:58:90:f3:1c:49:e3:7f:84:d9:38:4a:c9:82:
                    ac:84:d4:6f:b8:d3:6d:c0:f7:56:d1:71:c8:79:e5:
                    3f:8d:00:cb:a0:8d:6b:48:2c:d9:47:31:17:ff:5d:
                    31:e0:b2:ae:00:df:3c:79:d4:66:61:fd:ff:54:8c:
                    55:84:1e:14:cd:1d:ce:74:89:0f:81:a6:37:41:b1:
                    95:7b:f1:18:a6:b0:99:95:68:3d:df:9d:c3:07:6c:
                    7a:ef:a8:98:28:55:a5:41:80:fc:8b:cd:5c:a0:c5:
                    57:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:69:FC:5B:F4:87:1B:07:D6:79:37:4B:9D:5D:54:A5:96:2E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dd6653a7-febc-3d06-a9a9-20cda339adc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8c20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:de:08:01:ea:a6:a9:b4:60:b1:02:35:33:10:69:c4:16:4d:
         33:6e:30:f8:34:3e:b3:39:06:37:87:61:91:36:19:d2:55:ee:
         43:e4:35:75:88:bb:be:97:66:ec:83:9f:73:02:79:2a:06:6c:
         f8:4e:87:82:7a:41:6f:df:60:a4:cf:a6:0e:de:44:c8:48:32:
         ae:a3:87:af:35:55:e0:79:af:b3:38:3d:7b:bc:c0:79:d9:37:
         f9:fc:97:75:08:b9:26:81:f8:9a:7b:96:17:1e:56:b3:01:75:
         a7:1b:c2:7b:67:21:ab:5d:73:57:97:1b:bd:8c:80:5f:a9:eb:
         84:60:1c:e1:86:5e:cb:03:e2:91:e9:c7:26:4e:e7:9a:33:94:
         21:05:d4:17:5f:0c:ce:86:d9:93:8c:b0:af:c4:eb:91:8a:5e:
         2d:1c:dd:9c:b3:6c:1b:20:04:e6:e0:5e:20:3e:45:c9:6f:39:
         1f:6d:57:f8:ef:b6:d4:ad:ff:9d:90:48:d3:5e:92:39:f6:40:
         26:44:eb:49:47:da:03:3e:ec:8b:4d:70:e5:19:30:49:fc:64:
         49:d7:73:65:23:b7:f7:d3:43:ae:60:fd:70:27:a4:18:f5:2d:
         83:3c:26:53:b1:31:c7:c8:bf:15:f3:b2:7b:43:4f:fc:b2:d2:
         4a:95:7a:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpdz5WJphkM36cypgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI1MDYzMDIwMDkxMloXDTI1MDkyODIwMDkxMlowLzEtMCsGA1UEAxMk
M2E0ZGE3YWItOTExZi00MmMwLWE4OGQtOWQ5YzYyYTFlMjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CHEdsABNpHG79SF/D5V90qdMlRV/EanyBzV
ygp2EP6LX/USzo1ApB+1GdEW710ej+47xL2xQWB1C5EGuZP0mQrwu8sK/3ej+Ue2
Z9vq5Z5vYDxAIuWiqab+HHM/SMtQqSQ0J7/gQhmiwXaDPlUmnM9g4P/tlXUSXkWw
X+qcxKxn28mbWzVABEqjq+t8P6H7F1AkadPrB1iQ8xxJ43+E2ThKyYKshNRvuNNt
wPdW0XHIeeU/jQDLoI1rSCzZRzEX/10x4LKuAN88edRmYf3/VIxVhB4UzR3OdIkP
gaY3QbGVe/EYprCZlWg9353DB2x676iYKFWlQYD8i81coMVXCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPUJafxb9IcbB9Z5N0udXVSlli4wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvZGQ2NjUzYTctZmViYy0z
ZDA2LWE5YTktMjBjZGEzMzlhZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIIwg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAELeCAHqpqm0YLECNTMQacQWTTNuMPg0PrM5BjeHYZE2GdJV7kPk
NXWIu76XZuyDn3MCeSoGbPhOh4J6QW/fYKTPpg7eRMhIMq6jh681VeB5r7M4PXu8
wHnZN/n8l3UIuSaB+Jp7lhceVrMBdacbwntnIatdc1eXG72MgF+p64RgHOGGXssD
4pHpxyZO55ozlCEF1BdfDM6G2ZOMsK/E65GKXi0c3ZyzbBsgBObgXiA+RclvOR9t
V/jvttSt/52QSNNekjn2QCZE60lH2gM+7ItNcOUZMEn8ZEnXc2Ujt/fTQ65g/XAn
pBj1LYM8JlOxMcfIvxXzsntDT/yy0kqVerw=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:27:09 2025 by rpki-client