Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa
File:                     7a86ba22-c035-3bfb-a1df-7032c02b18de.roa (raw, json)
Hash identifier:          hSll4VKm1wS8daNUGdLdBeCYp21QMddu37IRhIhZSWQ=
Subject key identifier:   37:AA:E3:23:D9:F8:CF:A7:97:20:24:49:2E:5B:F5:B4:BF:BB:74:C3
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584A73509C59348029984003FC00
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     30823
IP address blocks:        2605:7980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:9c:59:34:80:29:98:40:03:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=6191c2cd-3057-4131-9985-e8238760fba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:a8:1c:d6:1d:fe:8c:d6:d0:9e:95:2b:ac:
                    27:ea:ed:c5:ba:e6:a5:3a:45:ef:c0:8b:18:d9:ce:
                    ef:5e:91:3a:55:8d:e9:e6:1a:19:42:4d:31:78:bd:
                    7e:59:cb:9a:54:0d:26:fd:8b:70:2a:d6:bf:08:b6:
                    37:9e:4e:a9:84:59:a2:5e:f4:9c:9c:94:87:fd:89:
                    da:27:5f:c2:8f:6c:0b:c2:50:a0:46:d6:0b:01:d7:
                    f8:b9:9c:66:ea:6a:d2:7c:d8:28:df:9a:1a:5c:93:
                    77:1d:a2:5a:00:e5:54:3e:92:f8:6b:8d:98:6b:f7:
                    bb:52:bc:b7:dd:26:00:47:e8:c1:c7:90:31:d3:a0:
                    e6:68:ec:11:47:8b:79:0f:a0:ef:91:36:a4:4a:3f:
                    6d:34:b5:70:12:84:f6:f1:84:3c:92:97:e9:e4:79:
                    c4:97:d1:1d:bb:2c:d4:6c:c5:2d:1f:28:86:50:d4:
                    6c:b9:dd:fe:9f:0e:52:86:f5:bd:97:a0:25:65:04:
                    94:af:f6:26:41:dc:e7:45:96:c0:75:09:3b:49:45:
                    27:62:c2:5c:fb:09:1d:38:ed:1d:ad:02:4c:14:5f:
                    e9:2f:1f:60:5c:f7:34:57:54:91:21:aa:45:8f:c8:
                    f3:bf:d1:08:3a:e4:59:88:ff:25:9d:2c:12:6f:f2:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AA:E3:23:D9:F8:CF:A7:97:20:24:49:2E:5B:F5:B4:BF:BB:74:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a86ba22-c035-3bfb-a1df-7032c02b18de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:30:fa:2d:a7:47:eb:c8:bd:43:3b:81:0f:04:c1:06:ec:17:
         42:4c:e0:8b:b3:95:9d:3a:49:8a:07:f5:32:5d:a7:9b:f3:f7:
         46:07:4e:79:fb:53:fa:db:e4:81:b3:d2:fd:68:0b:4a:a4:36:
         53:c6:ba:bc:d4:7a:78:f3:02:e9:cb:56:23:c5:c9:20:c2:bb:
         0f:45:c2:4f:c3:4e:df:e3:cc:df:fb:46:95:5c:6d:12:3e:9d:
         a4:bb:58:ac:6d:97:52:ec:06:2a:b4:98:9c:86:34:a0:51:40:
         57:12:e0:66:f7:61:88:fc:bf:9c:b4:a5:09:0d:cb:19:d6:e7:
         e1:c2:08:fa:51:b6:c2:d1:aa:4e:c5:4a:90:4e:41:0e:05:43:
         95:5f:d4:eb:2c:2e:09:dd:ec:b7:df:fe:2e:59:aa:cc:b3:66:
         b4:62:fd:92:a4:50:e2:ce:e9:c4:ed:68:88:03:0a:19:56:0a:
         61:c1:b7:16:9c:7d:26:51:5b:50:15:4a:3f:23:44:26:64:ba:
         56:51:d5:91:ea:23:47:b3:2e:ad:29:6a:99:26:d4:e1:82:cb:
         6c:5c:cc:3d:69:a9:70:94:d2:70:0e:d1:7f:11:0a:e6:b6:ff:
         5c:b0:da:b0:5c:df:9b:f0:c4:1c:2b:83:25:10:89:8b:a3:f4:
         9b:5d:88:cf
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzUJxZNIApmEAD/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
NjE5MWMyY2QtMzA1Ny00MTMxLTk5ODUtZTgyMzg3NjBmYmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+qoHNYd/ozW0J6VK6wn6u3FuualOkXvwIsY
2c7vXpE6VY3p5hoZQk0xeL1+WcuaVA0m/YtwKta/CLY3nk6phFmiXvScnJSH/Yna
J1/Cj2wLwlCgRtYLAdf4uZxm6mrSfNgo35oaXJN3HaJaAOVUPpL4a42Ya/e7Ury3
3SYAR+jBx5Ax06DmaOwRR4t5D6DvkTakSj9tNLVwEoT28YQ8kpfp5HnEl9EduyzU
bMUtHyiGUNRsud3+nw5ShvW9l6AlZQSUr/YmQdznRZbAdQk7SUUnYsJc+wkdOO0d
rQJMFF/pLx9gXPc0V1SRIapFj8jzv9EIOuRZiP8lnSwSb/LjWQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDeq4yPZ+M+nlyAkSS5b9bS/u3TDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvN2E4NmJhMjItYzAzNS0z
YmZiLWExZGYtNzAzMmMwMmIxOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgV5gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAAMPotp0fryL1DO4EPBMEG7BdCTOCLs5WdOkmKB/UyXaeb8/dGB055
+1P62+SBs9L9aAtKpDZTxrq81Hp48wLpy1YjxckgwrsPRcJPw07f48zf+0aVXG0S
Pp2ku1isbZdS7AYqtJichjSgUUBXEuBm92GI/L+ctKUJDcsZ1ufhwgj6UbbC0apO
xUqQTkEOBUOVX9TrLC4J3ey33/4uWarMs2a0Yv2SpFDizunE7WiIAwoZVgphwbcW
nH0mUVtQFUo/I0QmZLpWUdWR6iNHsy6tKWqZJtThgstsXMw9aalwlNJwDtF/EQrm
tv9csNqwXN+b8MQcK4MlEImLo/SbXYjP
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:43:01 2025 by rpki-client