Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/edd232e0-36e4-36cb-ba37-a3ee880b612d.roa
File:                     edd232e0-36e4-36cb-ba37-a3ee880b612d.roa (raw, json)
Hash identifier:          2792RhWIgwlEImnPyeS24BXwojBTgfFhH/hbetg6kro=
Subject key identifier:   65:89:EE:AD:14:00:E9:4B:65:65:F0:D2:64:88:4F:19:12:78:E2:4D
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584A682600F5639A2C0AF2D7C400
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/edd232e0-36e4-36cb-ba37-a3ee880b612d.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     31898
IP address blocks:        2620:1b2:3b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:00:f5:63:9a:2c:0a:f2:d7:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=65e85ae8-b8bf-4d08-b482-d6d6dc50b300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:40:6e:40:0d:d9:ea:37:d3:61:fc:d4:9b:
                    cb:c4:b8:ba:8a:a4:7a:0a:a5:1e:f8:c9:1b:72:89:
                    1c:e5:5b:1f:dc:ea:e9:85:1c:66:29:24:d7:b5:84:
                    fc:54:7c:a5:d7:58:81:1c:22:be:dd:e4:b0:3b:4a:
                    da:9e:94:7d:51:6a:bd:80:51:58:40:57:18:5f:6c:
                    61:15:8b:81:4e:c1:65:0b:21:c0:e2:8d:6f:97:37:
                    f0:b3:5a:e8:a7:f0:a2:29:b7:b3:44:ea:0f:1b:00:
                    29:c3:59:4d:e4:3d:fd:5a:e8:60:0d:ba:8d:54:91:
                    0b:c2:3f:29:21:cf:52:70:9b:f8:ac:b5:21:d3:ca:
                    67:66:42:0c:0e:d3:e9:3b:6e:32:43:f8:55:cb:44:
                    0c:dc:a2:1c:ac:93:0e:22:05:5a:71:64:14:a6:7e:
                    d2:7b:1d:3d:b6:10:2d:df:4c:bf:7c:21:f0:cd:94:
                    70:90:15:b2:cb:f8:a8:5b:c5:4f:2a:95:7c:84:29:
                    04:ca:03:cf:91:55:9b:2f:32:38:d0:43:3a:b4:f0:
                    c6:52:c1:dd:61:2e:cb:a3:d5:01:c4:2d:92:0b:1e:
                    bf:ba:c9:c0:5a:0e:3e:bb:78:e0:7e:46:b1:e1:d0:
                    05:3a:37:a2:4a:a3:9c:17:a8:cc:57:06:23:8f:b3:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:89:EE:AD:14:00:E9:4B:65:65:F0:D2:64:88:4F:19:12:78:E2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/edd232e0-36e4-36cb-ba37-a3ee880b612d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ab:10:b2:3f:65:d3:ce:8d:f9:56:ab:66:36:8a:4d:68:a8:
         88:49:34:fe:db:46:77:14:74:af:f5:d6:36:34:61:ac:19:ca:
         ac:90:d8:b7:cf:c8:ed:0e:92:ca:e2:9a:3b:f8:a6:07:dd:55:
         b0:77:4c:c2:14:82:68:cd:db:10:21:10:60:7f:96:fb:7d:3c:
         44:90:ac:a8:f0:63:a4:ef:5a:4e:6b:87:2a:ec:d0:12:52:09:
         0f:55:d8:88:85:1a:6a:88:90:ea:ec:51:f7:07:53:3c:d9:67:
         23:f7:9c:ed:be:5f:9d:a7:69:e4:8c:2b:14:61:56:14:90:00:
         1c:2c:61:35:31:1b:62:85:90:57:54:e7:f6:db:63:cd:d9:3d:
         54:70:54:79:e0:49:eb:86:25:4a:71:3a:d7:f3:8d:1c:a2:5e:
         cf:55:37:2d:a1:1d:63:34:78:9f:d1:5f:8d:e4:03:0b:d1:71:
         8a:f9:a1:69:7a:cd:c2:c5:0b:3b:07:21:69:49:81:2e:4d:dd:
         79:c3:4c:a2:7f:64:22:5a:b0:ee:40:6a:20:88:30:a7:fa:6d:
         cc:52:de:99:f1:f2:a0:54:67:3a:66:19:38:60:3b:6b:6c:a0:
         35:dc:da:57:d4:ca:07:6c:84:4d:cb:88:ae:a9:d1:31:b3:f1:
         50:36:b5:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJgD1Y5osCvLXxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
NjVlODVhZTgtYjhiZi00ZDA4LWI0ODItZDZkNmRjNTBiMzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyptAbkAN2eo302H81JvLxLi6iqR6CqUe+Mkb
cokc5Vsf3OrphRxmKSTXtYT8VHyl11iBHCK+3eSwO0ranpR9UWq9gFFYQFcYX2xh
FYuBTsFlCyHA4o1vlzfws1rop/CiKbezROoPGwApw1lN5D39WuhgDbqNVJELwj8p
Ic9ScJv4rLUh08pnZkIMDtPpO24yQ/hVy0QM3KIcrJMOIgVacWQUpn7Sex09thAt
30y/fCHwzZRwkBWyy/ioW8VPKpV8hCkEygPPkVWbLzI40EM6tPDGUsHdYS7Lo9UB
xC2SCx6/usnAWg4+u3jgfkax4dAFOjeiSqOcF6jMVwYjj7MwJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGWJ7q0UAOlLZWXw0mSITxkSeOJNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvZWRkMjMyZTAtMzZlNC0z
NmNiLWJhMzctYTNlZTg4MGI2MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABsgA7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKqrELI/ZdPOjflWq2Y2ik1oqIhJNP7bRncUdK/11jY0YawZyqyQ
2LfPyO0Oksrimjv4pgfdVbB3TMIUgmjN2xAhEGB/lvt9PESQrKjwY6TvWk5rhyrs
0BJSCQ9V2IiFGmqIkOrsUfcHUzzZZyP3nO2+X52naeSMKxRhVhSQABwsYTUxG2KF
kFdU5/bbY83ZPVRwVHngSeuGJUpxOtfzjRyiXs9VNy2hHWM0eJ/RX43kAwvRcYr5
oWl6zcLFCzsHIWlJgS5N3XnDTKJ/ZCJasO5AaiCIMKf6bcxS3pnx8qBUZzpmGThg
O2tsoDXc2lfUygdshE3LiK6p0TGz8VA2tZ8=
-----END CERTIFICATE-----
Generated at Fri Jul 11 04:52:57 2025 by rpki-client