Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/0f7acc26-2509-366b-b3a8-4c637e179b79.roa
File:                     0f7acc26-2509-366b-b3a8-4c637e179b79.roa (raw, json)
Hash identifier:          RY3v/vXaWnzpOjcZlJMRWhLaOvoA254a2xJRVig/rJk=
Subject key identifier:   86:65:65:F6:06:E1:A1:42:08:58:76:5F:B2:35:63:CF:04:4B:F7:3E
Certificate issuer:       /CN=a1ebd94e-8686-4da0-85d9-3d3935cc3951
Certificate serial:       010D0C9F4328584A41104CC1F2D7D57D9A6D957C
Authority key identifier: A4:7E:E4:B9:97:20:3A:EC:F4:91:29:17:72:30:ED:E6:50:B9:AE:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/0f7acc26-2509-366b-b3a8-4c637e179b79.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     19303
IP address blocks:        2602:fb03::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:4c:c1:f2:d7:d5:7d:9a:6d:95:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ebd94e-8686-4da0-85d9-3d3935cc3951
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=481b08c6-67fd-4061-84e7-f190c1783e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:ed:29:1a:f1:47:46:67:d1:8b:70:f8:62:
                    af:2b:e2:72:ff:7a:72:ce:50:99:7f:aa:29:2a:28:
                    5c:c9:dc:e8:a0:0f:d6:4f:6c:e3:93:e3:bb:e3:a0:
                    2e:c1:cd:de:f3:5c:6f:49:9d:a5:4e:3c:c5:ff:d4:
                    1e:d9:a8:50:34:8f:e9:e1:d3:af:ef:6f:1c:26:de:
                    e9:f2:81:94:ff:80:a0:f0:14:20:0c:1f:2a:55:be:
                    f2:13:44:19:2b:4c:d2:10:fd:cd:93:ca:05:2b:03:
                    d1:78:b9:69:b6:5d:50:e1:0b:65:f6:4a:51:c1:24:
                    de:68:d3:7e:ae:27:27:fb:2f:c7:5e:e7:a2:6d:4b:
                    04:5a:1b:af:7c:e0:8a:c8:52:d1:16:d2:c9:6c:04:
                    c1:2b:2a:41:f2:37:72:06:d4:00:bd:ee:3f:f3:c6:
                    c2:ce:7a:af:46:99:6e:a6:2a:eb:96:3b:bd:e0:0a:
                    c5:2b:bc:77:64:6c:57:87:13:0d:a3:b2:cf:94:db:
                    59:c1:aa:cd:38:1e:38:1d:2f:8b:ca:69:d5:75:e5:
                    11:44:fc:d0:29:1e:db:3e:57:07:67:43:7d:65:79:
                    ef:36:92:5b:25:36:96:73:ac:f1:86:99:10:01:60:
                    1d:7e:7c:ce:69:e2:6a:47:35:c0:1c:99:f9:d7:60:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:65:65:F6:06:E1:A1:42:08:58:76:5F:B2:35:63:CF:04:4B:F7:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/0f7acc26-2509-366b-b3a8-4c637e179b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.crl

            X509v3 Authority Key Identifier:
                keyid:A4:7E:E4:B9:97:20:3A:EC:F4:91:29:17:72:30:ED:E6:50:B9:AE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb03::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f3:fe:79:5b:d9:bd:3d:62:11:5e:a4:f4:a5:a9:a4:9d:73:
         02:dd:4a:d7:0d:33:c2:11:2e:11:77:9b:3b:76:df:62:17:3a:
         de:c7:f3:1d:4b:9c:8e:b7:3e:e1:29:39:38:6e:a3:7c:7e:20:
         1e:bc:53:b6:40:05:97:dc:64:c1:26:8d:8d:17:26:84:df:f2:
         f9:1b:db:e7:cb:68:48:d1:10:f0:59:7a:f2:54:a1:8f:94:61:
         18:f4:3b:24:3e:6b:0a:28:b7:9d:44:a2:16:fc:07:f6:32:c6:
         bc:3a:13:d5:08:92:b8:5a:80:3c:1d:da:61:55:51:84:4d:84:
         d2:20:a6:99:5d:c6:dc:d2:39:dc:6d:04:bb:e2:6e:d4:de:ac:
         66:a3:89:2e:ca:1d:9d:9f:a0:28:ec:91:15:ca:ac:dc:3c:26:
         d3:73:bf:e7:c4:19:34:31:c0:07:31:12:cf:35:00:9e:cf:02:
         ed:3a:36:51:89:19:f6:3c:7a:52:82:c7:a9:c8:92:03:8f:7f:
         f5:03:dc:79:01:89:46:b2:c6:f0:47:44:56:e3:9c:04:1b:ff:
         72:3e:34:95:28:5c:d3:6d:95:ab:73:b0:19:37:6f:40:a3:30:
         20:b9:29:76:50:d7:9b:8a:c8:3e:cc:84:e0:f7:40:47:84:3c:
         1f:bc:08:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpBEEzB8tfVfZptlXwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFlYmQ5NGUtODY4Ni00ZGEwLTg1ZDktM2QzOTM1Y2Mz
OTUxMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
NDgxYjA4YzYtNjdmZC00MDYxLTg0ZTctZjE5MGMxNzgzZTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojntKRrxR0Zn0Ytw+GKvK+Jy/3pyzlCZf6op
KihcydzooA/WT2zjk+O746Auwc3e81xvSZ2lTjzF/9Qe2ahQNI/p4dOv728cJt7p
8oGU/4Cg8BQgDB8qVb7yE0QZK0zSEP3Nk8oFKwPReLlptl1Q4Qtl9kpRwSTeaNN+
ricn+y/HXueibUsEWhuvfOCKyFLRFtLJbATBKypB8jdyBtQAve4/88bCznqvRplu
pirrlju94ArFK7x3ZGxXhxMNo7LPlNtZwarNOB44HS+LymnVdeURRPzQKR7bPlcH
Z0N9ZXnvNpJbJTaWc6zxhpkQAWAdfnzOaeJqRzXAHJn512BwUQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIZlZfYG4aFCCFh2X7I1Y88ES/c+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMWVi
ZDk0ZS04Njg2LTRkYTAtODVkOS0zZDM5MzVjYzM5NTEvMGY3YWNjMjYtMjUwOS0z
NjZiLWIzYTgtNGM2MzdlMTc5Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTFlYmQ5NGUtODY4Ni00ZGEwLTg1
ZDktM2QzOTM1Y2MzOTUxL2ExZWJkOTRlLTg2ODYtNGRhMC04NWQ5LTNkMzkzNWNj
Mzk1MS5jcmwwHwYDVR0jBBgwFoAUpH7kuZcgOuz0kSkXcjDt5lC5rpMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMWViZDk0ZS04Njg2LTRkYTAtODVkOS0zZDM5
MzVjYzM5NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7AwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANfP+eVvZvT1iEV6k9KWppJ1zAt1K1w0zwhEuEXebO3bfYhc63sfz
HUucjrc+4Sk5OG6jfH4gHrxTtkAFl9xkwSaNjRcmhN/y+Rvb58toSNEQ8Fl68lSh
j5RhGPQ7JD5rCii3nUSiFvwH9jLGvDoT1QiSuFqAPB3aYVVRhE2E0iCmmV3G3NI5
3G0Eu+Ju1N6sZqOJLsodnZ+gKOyRFcqs3Dwm03O/58QZNDHABzESzzUAns8C7To2
UYkZ9jx6UoLHqciSA49/9QPceQGJRrLG8EdEVuOcBBv/cj40lShc022Vq3OwGTdv
QKMwILkpdlDXm4rIPsyE4PdAR4Q8H7wIwA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:00:20 2025 by rpki-client