Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/39673ca6-7a2a-39a0-8f57-61b941ecf145.roa
File:                     39673ca6-7a2a-39a0-8f57-61b941ecf145.roa (raw, json)
Hash identifier:          bhxLSJpYG+Aitwn95nFLMdFb6f+P/jSpgMNQkeUqcPc=
Subject key identifier:   D6:83:7C:5F:73:06:E7:EC:CC:8B:BD:5E:05:DE:E7:98:9C:F8:F5:52
Certificate issuer:       /CN=059e9b3f-205b-4b5d-b677-52e2bf626fc6
Certificate serial:       010D0C9F4328584A7085ED4C21762F9C66839820
Authority key identifier: 2D:48:3D:B3:8A:0D:5C:1C:DE:B0:90:B7:CA:5A:F3:A2:B7:D6:A8:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/39673ca6-7a2a-39a0-8f57-61b941ecf145.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     26
IP address blocks:        2620:110:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/059e9b3f-205b-4b5d-b677-52e2bf626fc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/059e9b3f-205b-4b5d-b677-52e2bf626fc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:ed:4c:21:76:2f:9c:66:83:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059e9b3f-205b-4b5d-b677-52e2bf626fc6
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=c38b37fa-4635-4b9f-9fa9-03c899f33a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:6b:ee:16:0a:89:21:25:d4:24:53:f4:bb:
                    af:9f:86:35:d5:45:44:34:3d:ab:11:e9:78:f3:4c:
                    76:e0:f1:ae:ab:2a:3c:a0:1a:95:d8:af:1d:9f:94:
                    ad:34:d0:28:67:db:27:ae:e0:c0:42:50:bc:69:aa:
                    6b:ff:0d:88:84:ec:a4:3b:ab:49:e6:34:7b:a9:b9:
                    e4:72:a2:93:18:17:d3:b8:18:35:97:66:84:0d:38:
                    a1:98:20:0c:5a:fc:e6:a5:82:5c:1c:12:13:c8:07:
                    37:82:6c:7d:2f:85:af:55:09:1e:b2:72:ee:c9:26:
                    a7:fe:ae:a2:83:c6:2d:bc:98:7b:51:e3:9f:48:92:
                    ca:4c:86:c7:22:b6:15:ec:56:7b:49:9b:ed:26:52:
                    bb:d8:54:ce:d5:c8:72:c2:41:39:8c:72:c8:5c:3e:
                    d3:7b:a6:6a:79:b6:23:fb:5a:4b:81:70:3e:c3:0c:
                    00:43:73:1c:08:b4:c8:d5:8e:39:6f:66:f0:59:b7:
                    1e:15:fc:ad:f7:dc:92:5a:bf:ec:5a:2e:85:34:8c:
                    0e:5b:e1:fc:16:15:96:85:c0:1a:0c:2c:b4:c6:de:
                    fd:5c:19:92:68:f7:86:f6:8d:b2:47:6b:45:a1:39:
                    5f:f8:8b:15:13:23:fe:8e:de:f5:6e:c7:2d:a2:58:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:83:7C:5F:73:06:E7:EC:CC:8B:BD:5E:05:DE:E7:98:9C:F8:F5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/39673ca6-7a2a-39a0-8f57-61b941ecf145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/059e9b3f-205b-4b5d-b677-52e2bf626fc6.crl

            X509v3 Authority Key Identifier:
                keyid:2D:48:3D:B3:8A:0D:5C:1C:DE:B0:90:B7:CA:5A:F3:A2:B7:D6:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:110:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b5:22:a3:c1:74:b6:30:92:bf:8a:83:8f:42:53:df:20:4b:
         46:15:e7:ec:35:45:9d:9e:b5:bc:b1:aa:a4:c4:d2:19:bb:ba:
         f8:a6:a6:33:19:7e:bc:a4:61:29:b6:34:7b:40:b9:34:fb:2e:
         b7:17:32:34:30:7e:f2:41:8e:58:9d:62:d0:bc:0d:a1:50:13:
         01:b2:29:6d:12:6c:aa:4b:e2:8b:83:40:86:6a:d2:d7:8b:b8:
         0f:35:8d:33:7a:cd:bf:48:5f:02:df:79:32:96:cc:a3:ae:76:
         89:41:5f:82:64:80:f4:61:94:c3:64:dd:9c:e1:cf:44:d7:5e:
         54:d7:e4:ee:0a:f6:51:b3:c6:a5:8f:d8:bd:9f:e8:12:2b:0e:
         99:7e:9c:ba:73:5e:00:67:2a:fe:58:57:b5:bd:a4:64:ca:40:
         74:e9:78:50:03:9b:17:21:3a:e9:fa:97:c3:99:90:c4:e8:30:
         ba:f6:5b:ef:e5:d0:0f:de:26:6b:b0:38:39:7a:d2:67:e3:2f:
         92:c2:70:1e:fe:8b:b2:e6:b0:1d:6e:05:a9:84:93:5c:27:92:
         38:be:25:03:60:dc:d3:b2:fd:da:0b:36:0f:32:4b:e2:74:e3:
         f9:b3:57:a8:a9:83:a2:60:54:d4:a2:f1:e7:20:30:9d:76:03:
         be:96:f9:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpwhe1MIXYvnGaDmCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU5ZTliM2YtMjA1Yi00YjVkLWI2NzctNTJlMmJmNjI2
ZmM2MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
YzM4YjM3ZmEtNDYzNS00YjlmLTlmYTktMDNjODk5ZjMzYTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH9r7hYKiSEl1CRT9Luvn4Y11UVEND2rEel4
80x24PGuqyo8oBqV2K8dn5StNNAoZ9snruDAQlC8aapr/w2IhOykO6tJ5jR7qbnk
cqKTGBfTuBg1l2aEDTihmCAMWvzmpYJcHBITyAc3gmx9L4WvVQkesnLuySan/q6i
g8YtvJh7UeOfSJLKTIbHIrYV7FZ7SZvtJlK72FTO1chywkE5jHLIXD7Te6ZqebYj
+1pLgXA+wwwAQ3McCLTI1Y45b2bwWbceFfyt99ySWr/sWi6FNIwOW+H8FhWWhcAa
DCy0xt79XBmSaPeG9o2yR2tFoTlf+IsVEyP+jt71bsctolhukQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNaDfF9zBufszIu9XgXe55ic+PVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTll
OWIzZi0yMDViLTRiNWQtYjY3Ny01MmUyYmY2MjZmYzYvMzk2NzNjYTYtN2EyYS0z
OWEwLThmNTctNjFiOTQxZWNmMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDU5ZTliM2YtMjA1Yi00YjVkLWI2
NzctNTJlMmJmNjI2ZmM2LzA1OWU5YjNmLTIwNWItNGI1ZC1iNjc3LTUyZTJiZjYy
NmZjNi5jcmwwHwYDVR0jBBgwFoAULUg9s4oNXBzesJC3ylrzorfWqNMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTllOWIzZi0yMDViLTRiNWQtYjY3Ny01MmUy
YmY2MjZmYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABENAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHK1IqPBdLYwkr+Kg49CU98gS0YV5+w1RZ2etbyxqqTE0hm7uvim
pjMZfrykYSm2NHtAuTT7LrcXMjQwfvJBjlidYtC8DaFQEwGyKW0SbKpL4ouDQIZq
0teLuA81jTN6zb9IXwLfeTKWzKOudolBX4JkgPRhlMNk3Zzhz0TXXlTX5O4K9lGz
xqWP2L2f6BIrDpl+nLpzXgBnKv5YV7W9pGTKQHTpeFADmxchOun6l8OZkMToMLr2
W+/l0A/eJmuwODl60mfjL5LCcB7+i7LmsB1uBamEk1wnkji+JQNg3NOy/doLNg8y
S+J04/mzV6ipg6JgVNSi8ecgMJ12A76W+bs=
-----END CERTIFICATE-----
Generated at Thu Jul 10 09:07:23 2025 by rpki-client