Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dfbcdb82-14cb-388c-923c-c0b12fa6d5b7.roa
File:                     dfbcdb82-14cb-388c-923c-c0b12fa6d5b7.roa (raw, json)
Hash identifier:          xzE0PDCtp70/J7+eNTDDv4HAFqfu0EEzY3K8f9giE1E=
Subject key identifier:   C5:C5:17:B4:11:3E:E4:80:A0:D5:9F:A6:C2:76:1A:3A:5F:FA:99:F0
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584A6F207A8CA8F84211B0F04500
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dfbcdb82-14cb-388c-923c-c0b12fa6d5b7.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     6629
IP address blocks:        2610:20:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7a:8c:a8:f8:42:11:b0:f0:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=33d7e24d-3716-4fae-b6a6-a002eeb72ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:43:cc:83:ca:fb:bb:ca:21:69:23:1d:35:
                    c4:46:c0:98:ca:2f:5c:ca:57:72:7c:59:1e:00:14:
                    ab:37:5f:f5:ae:34:00:ac:db:32:83:69:34:ee:c9:
                    78:7b:83:04:44:ca:be:d1:3d:91:cf:95:df:6a:30:
                    6d:4f:db:d6:71:de:55:05:af:59:49:2c:ac:36:1f:
                    89:d3:ac:a7:b9:4e:32:98:cf:ae:7c:9d:e5:48:c0:
                    cf:d4:15:15:84:26:fa:04:7a:fa:a2:7e:28:d4:ba:
                    35:30:6b:fb:48:f2:1c:64:08:f7:6e:d1:9a:49:28:
                    67:d9:82:71:14:cf:97:d6:47:a4:15:2f:6a:77:4c:
                    94:53:7e:e5:55:47:30:59:6b:27:47:2f:5e:46:93:
                    f1:45:22:10:16:3b:fb:53:46:96:bc:1e:f2:af:b1:
                    48:48:2e:df:ba:7f:27:18:3e:d1:5f:0c:53:32:9b:
                    78:1c:0a:59:67:2e:2d:7e:b4:0c:73:3c:42:e1:73:
                    9f:ee:f2:23:9e:4e:e9:dc:51:75:3c:a8:b0:92:4b:
                    43:79:b0:35:db:42:82:70:ac:2d:fd:fb:1d:6b:b6:
                    e9:8e:fe:70:ee:9c:c5:a1:e2:d0:5b:f5:16:ce:b4:
                    e3:83:97:fa:34:2f:5d:ce:69:99:93:39:87:66:de:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:17:B4:11:3E:E4:80:A0:D5:9F:A6:C2:76:1A:3A:5F:FA:99:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dfbcdb82-14cb-388c-923c-c0b12fa6d5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:fb:ab:e4:ab:82:06:ae:87:06:72:dc:b2:d5:da:c1:34:
         82:ea:3f:4d:2e:bc:18:fb:c9:52:20:d7:45:ac:82:a6:a5:39:
         75:1f:62:11:4b:67:cd:c9:1c:56:4b:50:d6:20:20:64:91:90:
         ec:ec:81:7d:a4:99:c2:03:2e:6b:73:86:61:33:b2:17:88:2c:
         5f:98:05:d1:62:6f:e2:68:a5:dd:47:6b:e8:6b:5c:9a:47:9d:
         1a:4c:96:3a:cd:96:e9:43:50:e8:13:a9:3b:d0:1d:38:db:50:
         86:d2:a7:e7:c4:38:83:07:73:62:2e:0a:40:82:3a:31:38:06:
         c8:73:d3:e9:f2:5b:8c:5f:f5:d5:94:06:0b:93:bd:96:e7:33:
         78:b5:93:ec:15:49:00:28:fc:35:4c:5f:e9:ca:7d:85:c0:3b:
         00:6e:15:e6:29:c4:c8:79:1a:fb:b6:9f:7c:df:b1:22:da:1b:
         ca:e6:66:4a:ea:9b:d8:27:f9:01:7d:bb:ec:12:b7:e3:67:07:
         2d:98:e7:60:77:94:7c:d3:7e:fc:48:44:78:2d:02:71:88:07:
         f8:6d:e5:e5:da:0b:35:4f:33:24:35:c7:96:3d:da:fc:ef:3e:
         33:5d:62:74:1a:b7:8d:47:e0:c5:e8:58:dc:aa:6a:00:a4:d7:
         f9:c6:37:81
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpvIHqMqPhCEbDwRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk
MzNkN2UyNGQtMzcxNi00ZmFlLWI2YTYtYTAwMmVlYjcyZWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwpDzIPK+7vKIWkjHTXERsCYyi9cyldyfFke
ABSrN1/1rjQArNsyg2k07sl4e4MERMq+0T2Rz5XfajBtT9vWcd5VBa9ZSSysNh+J
06ynuU4ymM+ufJ3lSMDP1BUVhCb6BHr6on4o1Lo1MGv7SPIcZAj3btGaSShn2YJx
FM+X1kekFS9qd0yUU37lVUcwWWsnRy9eRpPxRSIQFjv7U0aWvB7yr7FISC7fun8n
GD7RXwxTMpt4HApZZy4tfrQMczxC4XOf7vIjnk7p3FF1PKiwkktDebA120KCcKwt
/fsda7bpjv5w7pzFoeLQW/UWzrTjg5f6NC9dzmmZkzmHZt5auwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMXFF7QRPuSAoNWfpsJ2Gjpf+pnwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvZGZiY2RiODItMTRjYi0z
ODhjLTkyM2MtYzBiMTJmYTZkNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJhAAIIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAccP7q+SrggauhwZy3LLV2sE0guo/TS68GPvJUiDXRayCpqU5dR9i
EUtnzckcVktQ1iAgZJGQ7OyBfaSZwgMua3OGYTOyF4gsX5gF0WJv4mil3Udr6Gtc
mkedGkyWOs2W6UNQ6BOpO9AdONtQhtKn58Q4gwdzYi4KQII6MTgGyHPT6fJbjF/1
1ZQGC5O9luczeLWT7BVJACj8NUxf6cp9hcA7AG4V5inEyHka+7affN+xItobyuZm
Suqb2Cf5AX277BK342cHLZjnYHeUfNN+/EhEeC0CcYgH+G3l5doLNU8zJDXHlj3a
/O8+M11idBq3jUfgxehY3KpqAKTX+cY3gQ==
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:39:55 2025 by rpki-client