Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dfa06e29-621a-3b33-b611-f969525e067c.roa
File:                     dfa06e29-621a-3b33-b611-f969525e067c.roa (raw, json)
Hash identifier:          ho+h95hxLZeGDHRLuMG+PG6nsASfQw3CptbES/YN18g=
Subject key identifier:   E9:3D:23:E1:A5:1E:FE:12:AB:2F:76:8B:8A:7C:72:75:F4:DF:90:B6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B18149572656BE566FE250DA0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dfa06e29-621a-3b33-b611-f969525e067c.roa
Signing time:             Fri 05 Sep 2025 13:28:34 +0000
ROA not before:           Fri 05 Sep 2025 13:28:34 +0000
ROA not after:            Thu 04 Dec 2025 14:28:34 +0000
asID:                     22516
IP address blocks:        2600:6c52::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:95:72:65:6b:e5:66:fe:25:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  5 13:28:34 2025 GMT
            Not After : Dec  4 14:28:34 2025 GMT
        Subject: CN=51592b05-33b2-428a-b7fc-b6245bfa548a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:63:d8:46:87:68:57:3f:b1:6d:ef:33:58:
                    6f:3e:de:4d:6b:92:7b:83:ed:8b:bd:b2:fc:65:d0:
                    64:69:a8:77:c0:9c:fa:2e:a5:d2:94:8c:e3:67:a8:
                    90:f9:55:72:19:a5:c9:e1:da:82:8d:c7:0f:4d:35:
                    d3:d3:78:f6:ac:4c:85:9f:16:36:b8:5c:9a:9c:16:
                    10:ba:f5:1c:2d:20:13:9f:a9:e0:cb:69:00:71:08:
                    86:59:4b:c8:46:a7:bd:03:79:96:bd:49:d2:0a:dc:
                    47:5c:a7:68:f2:b8:f8:4a:d3:a0:94:4d:d8:21:0e:
                    b3:31:a4:b8:d1:eb:9d:37:7a:89:6b:fc:f2:c7:0b:
                    e4:e2:6c:d8:ac:1a:b9:52:6f:4d:2d:7e:0d:d9:9b:
                    30:bb:18:a8:02:36:77:f5:c4:4c:e7:8e:52:77:45:
                    33:ac:5b:7b:ef:83:b7:5d:93:90:1f:fa:05:a1:fb:
                    ab:b9:25:be:05:99:1f:ff:dd:69:72:62:86:9d:e5:
                    0f:37:ec:31:69:64:de:06:bf:fb:00:1d:57:8c:8a:
                    2d:60:71:af:d3:52:e0:e4:aa:2f:58:63:e8:ca:36:
                    c8:f2:ed:4b:ad:18:74:70:59:7e:4b:47:8e:2f:d6:
                    3c:ab:f7:d8:dc:18:d0:b4:60:a2:77:87:4e:c9:24:
                    0e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3D:23:E1:A5:1E:FE:12:AB:2F:76:8B:8A:7C:72:75:F4:DF:90:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dfa06e29-621a-3b33-b611-f969525e067c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c52::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:c6:1d:fa:eb:a7:dc:1a:70:93:76:49:f6:1d:8f:0d:5d:03:
         08:f0:62:6e:ee:9e:fc:cc:31:51:8c:d0:98:18:4c:79:f4:73:
         40:43:6f:8d:1e:27:99:77:45:15:52:eb:73:c3:1a:9a:8f:73:
         20:f7:7b:6c:e8:45:9e:e2:f9:41:09:bb:4b:b7:20:2f:1a:82:
         7e:64:fb:21:58:e9:53:ba:49:dd:26:81:79:64:09:e9:8d:f8:
         cd:1a:1f:7c:82:de:b5:1d:d1:6e:80:6c:b6:41:47:97:8a:51:
         42:c7:3c:47:a4:39:21:c3:51:b8:86:bf:40:72:80:8f:d6:3c:
         a1:67:3d:4b:ec:03:fb:b2:2a:e0:29:0e:73:c5:24:34:f3:e9:
         fb:5d:fc:8a:ba:4c:60:8e:f1:15:50:15:1f:be:3d:5f:15:16:
         c0:11:e0:2b:43:7e:62:68:75:3b:96:9c:30:bc:58:67:51:ac:
         26:e2:0e:f2:a5:21:6a:eb:77:b9:45:9c:e4:27:b5:6a:12:ee:
         36:22:db:79:d3:df:13:da:56:2b:f2:55:a8:33:90:7b:82:7b:
         d2:0c:b7:e3:fe:ba:c4:7c:85:e5:0a:e6:52:a9:cc:90:53:a0:
         cb:50:92:27:f9:ba:f1:3b:4c:15:34:26:c6:42:ed:81:5f:dc:
         45:44:db:a8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsYFJVyZWvlZv4lDaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDkwNTEzMjgzNFoXDTI1MTIwNDE0MjgzNFowLzEtMCsGA1UEAxMk
NTE1OTJiMDUtMzNiMi00MjhhLWI3ZmMtYjYyNDViZmE1NDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqpj2EaHaFc/sW3vM1hvPt5Na5J7g+2LvbL8
ZdBkaah3wJz6LqXSlIzjZ6iQ+VVyGaXJ4dqCjccPTTXT03j2rEyFnxY2uFyanBYQ
uvUcLSATn6ngy2kAcQiGWUvIRqe9A3mWvUnSCtxHXKdo8rj4StOglE3YIQ6zMaS4
0eudN3qJa/zyxwvk4mzYrBq5Um9NLX4N2ZswuxioAjZ39cRM545Sd0UzrFt774O3
XZOQH/oFofuruSW+BZkf/91pcmKGneUPN+wxaWTeBr/7AB1XjIotYHGv01Lg5Kov
WGPoyjbI8u1LrRh0cFl+S0eOL9Y8q/fY3BjQtGCid4dOySQOhQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOk9I+GlHv4Sqy92i4p8cnX035C2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGZhMDZlMjktNjIxYS0z
YjMzLWI2MTEtZjk2OTUyNWUwNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsUjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDFxh3666fcGnCTdkn2HY8NXQMI8GJu7p78zDFRjNCYGEx59HNAQ2+N
HieZd0UVUutzwxqaj3Mg93ts6EWe4vlBCbtLtyAvGoJ+ZPshWOlTukndJoF5ZAnp
jfjNGh98gt61HdFugGy2QUeXilFCxzxHpDkhw1G4hr9AcoCP1jyhZz1L7AP7sirg
KQ5zxSQ08+n7XfyKukxgjvEVUBUfvj1fFRbAEeArQ35iaHU7lpwwvFhnUawm4g7y
pSFq63e5RZzkJ7VqEu42Itt5098T2lYr8lWoM5B7gnvSDLfj/rrEfIXlCuZSqcyQ
U6DLUJIn+brxO0wVNCbGQu2BX9xFRNuo
-----END CERTIFICATE-----
Generated at Sat Sep 6 02:13:55 2025 by rpki-client