Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/4df7686b-cc08-3fc3-99b6-ac3f98d79051.roa
File:                     4df7686b-cc08-3fc3-99b6-ac3f98d79051.roa (raw, json)
Hash identifier:          KCxQ7eAIY7HSxzVXlOiTIbl7xU0ZQByX5uUNUa6uw4Q=
Subject key identifier:   26:B7:80:F1:B7:4F:D1:09:37:4F:60:E1:B6:97:4F:7C:0C:63:EF:AD
Certificate issuer:       /CN=f2f18c6b-b590-4e09-b5a7-b0c417d79fd4
Certificate serial:       010D0C9F4328584A3A157D6AEA59317B337A7200
Authority key identifier: 41:31:EF:08:16:8D:16:6B:C6:E1:C5:84:BD:51:46:61:44:CF:73:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/4df7686b-cc08-3fc3-99b6-ac3f98d79051.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     25615
IP address blocks:        2606:fb80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7d:6a:ea:59:31:7b:33:7a:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f18c6b-b590-4e09-b5a7-b0c417d79fd4
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=582ea156-e5ff-4a54-9421-11b43231e9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:8a:03:ac:c9:a0:a3:e7:7c:b4:a1:af:b5:
                    b1:40:fa:77:21:fd:fa:6a:dc:07:98:f4:b0:3e:50:
                    43:d8:7d:f5:cf:cb:07:d1:ba:99:d2:39:9a:ce:e8:
                    3c:de:2b:31:be:7d:3b:ac:b8:a7:65:e4:3d:bb:62:
                    0e:a0:52:6a:31:f0:c4:c2:82:33:b3:fc:99:36:3d:
                    df:ad:d1:c1:a0:ac:3f:c9:11:51:a0:25:91:6d:0d:
                    54:8e:de:43:fa:4c:89:1d:55:67:5b:1d:49:1c:92:
                    59:5c:13:ed:97:3b:a4:c6:9a:01:a8:c9:b4:5f:4a:
                    36:0e:93:8d:f0:45:86:af:30:04:ee:e9:0a:bd:64:
                    e4:98:d8:7c:41:4b:67:f0:ad:c6:41:d6:00:0a:da:
                    0c:83:94:a6:d5:2e:d2:63:4a:7a:f0:c3:0e:04:4f:
                    03:d4:aa:fa:03:7b:74:0e:ab:f8:e0:36:d0:c0:45:
                    8e:32:e9:f5:a2:89:cd:33:f2:7b:cf:b7:f3:75:d4:
                    55:82:53:f3:ec:a7:0b:37:85:d3:a0:65:2f:55:63:
                    14:6f:ab:91:27:3f:5f:b8:7c:4c:fb:53:6d:b1:a2:
                    a0:ea:eb:54:ce:ac:fa:37:64:05:b2:d1:05:83:52:
                    27:9c:cd:9d:0e:3c:cf:78:4e:bf:9a:3b:c8:44:b9:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B7:80:F1:B7:4F:D1:09:37:4F:60:E1:B6:97:4F:7C:0C:63:EF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/4df7686b-cc08-3fc3-99b6-ac3f98d79051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.crl

            X509v3 Authority Key Identifier:
                keyid:41:31:EF:08:16:8D:16:6B:C6:E1:C5:84:BD:51:46:61:44:CF:73:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f2f18c6b-b590-4e09-b5a7-b0c417d79fd4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:0b:69:7f:51:63:f6:04:e6:69:dd:3e:f0:63:19:6e:7f:
         82:6e:dc:8f:cf:09:f3:1a:bd:49:65:da:12:69:d1:92:d7:73:
         3c:a3:ae:3e:49:49:25:a3:af:e1:91:14:b9:67:35:11:7f:74:
         6b:68:c2:f2:0b:11:17:ff:51:1d:bd:49:91:9d:dd:2b:ae:b2:
         f0:73:66:0f:01:86:57:02:f0:c2:07:e9:fb:c8:2d:d8:e0:3e:
         c4:a3:a3:79:88:59:e5:29:3b:c4:83:e9:68:46:3f:8b:e1:86:
         e7:bb:e3:1d:33:03:93:c2:ff:be:17:67:81:3f:7d:8e:76:8f:
         e9:d6:4b:6b:a6:dc:cf:02:6b:2d:e1:1b:10:d4:ba:84:4c:bb:
         36:c1:6c:06:c7:ce:6b:41:f7:44:f6:2f:11:58:4f:b9:38:b1:
         42:e7:36:a2:44:4c:2f:8b:75:c5:02:ef:20:1d:d0:0d:ae:6d:
         59:5f:68:46:10:c5:8a:e3:8c:e7:b4:12:29:5f:3d:d5:f1:e9:
         2f:6b:f3:f2:89:89:00:3c:fa:b0:c7:33:0f:be:31:51:07:ec:
         01:c4:29:36:59:10:cd:17:aa:19:24:2a:d1:1d:9f:e6:db:49:
         86:77:05:9b:e7:68:a5:ae:04:4f:fe:f4:81:2f:ce:35:fe:54:
         87:60:21:94
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo6FX1q6lkxezN6cgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJmMThjNmItYjU5MC00ZTA5LWI1YTctYjBjNDE3ZDc5
ZmQ0MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
NTgyZWExNTYtZTVmZi00YTU0LTk0MjEtMTFiNDMyMzFlOWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieOKA6zJoKPnfLShr7WxQPp3If36atwHmPSw
PlBD2H31z8sH0bqZ0jmazug83isxvn07rLinZeQ9u2IOoFJqMfDEwoIzs/yZNj3f
rdHBoKw/yRFRoCWRbQ1Ujt5D+kyJHVVnWx1JHJJZXBPtlzukxpoBqMm0X0o2DpON
8EWGrzAE7ukKvWTkmNh8QUtn8K3GQdYACtoMg5Sm1S7SY0p68MMOBE8D1Kr6A3t0
Dqv44DbQwEWOMun1oonNM/J7z7fzddRVglPz7KcLN4XToGUvVWMUb6uRJz9fuHxM
+1NtsaKg6utUzqz6N2QFstEFg1InnM2dDjzPeE6/mjvIRLkJDwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCa3gPG3T9EJN09g4baXT3wMY++tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMmYx
OGM2Yi1iNTkwLTRlMDktYjVhNy1iMGM0MTdkNzlmZDQvNGRmNzY4NmItY2MwOC0z
ZmMzLTk5YjYtYWMzZjk4ZDc5MDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjJmMThjNmItYjU5MC00ZTA5LWI1
YTctYjBjNDE3ZDc5ZmQ0L2YyZjE4YzZiLWI1OTAtNGUwOS1iNWE3LWIwYzQxN2Q3
OWZkNC5jcmwwHwYDVR0jBBgwFoAUQTHvCBaNFmvG4cWEvVFGYUTPc4swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMmYxOGM2Yi1iNTkwLTRlMDktYjVhNy1iMGM0
MTdkNzlmZDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBAPAtpf1Fj9gTmad0+8GMZbn+CbtyPzwnzGr1JZdoSadGS13M8o64+
SUklo6/hkRS5ZzURf3RraMLyCxEX/1EdvUmRnd0rrrLwc2YPAYZXAvDCB+n7yC3Y
4D7Eo6N5iFnlKTvEg+loRj+L4Ybnu+MdMwOTwv++F2eBP32Odo/p1ktrptzPAmst
4RsQ1LqETLs2wWwGx85rQfdE9i8RWE+5OLFC5zaiREwvi3XFAu8gHdANrm1ZX2hG
EMWK44zntBIpXz3V8ekva/PyiYkAPPqwxzMPvjFRB+wBxCk2WRDNF6oZJCrRHZ/m
20mGdwWb52ilrgRP/vSBL841/lSHYCGU
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:35:19 2025 by rpki-client