Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/19e6d66a-d1b3-3f71-9b04-c0dc420fd7d7.roa
File:                     19e6d66a-d1b3-3f71-9b04-c0dc420fd7d7.roa (raw, json)
Hash identifier:          fYIyJCHnTE+RQoDN6qHV2nVIRkfGs0lckG83pKNTH2w=
Subject key identifier:   01:8E:06:1C:D1:7E:4B:7C:C0:A9:17:7E:DE:45:EA:3E:45:E4:E2:0E
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584A00DABBCBBEB1C1D57BF08380
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/19e6d66a-d1b3-3f71-9b04-c0dc420fd7d7.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     26548
IP address blocks:        2602:ffc5:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:bb:cb:be:b1:c1:d5:7b:f0:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=60fe4f37-a2ee-4a3e-8460-ed60dd9377b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:e4:a9:00:4a:26:30:c5:34:36:9b:b6:77:
                    91:d7:22:87:17:64:5c:3e:d7:b0:3f:8f:99:47:80:
                    49:52:c8:73:c7:f9:d4:e7:1f:9d:c0:03:a1:08:91:
                    23:6f:15:a3:be:87:d7:78:76:58:cf:91:2a:9f:69:
                    59:6e:a4:09:d0:35:53:72:38:ea:1f:78:56:ac:8a:
                    32:50:cc:c1:d1:89:70:3a:00:50:64:33:d8:a6:41:
                    b1:58:39:f5:f6:d5:c5:48:ea:aa:f5:5e:5d:b8:6b:
                    b0:b7:88:32:e6:99:f9:6c:42:8a:fe:d6:89:92:50:
                    3b:0e:d7:92:73:7a:d9:a9:13:a0:f2:75:80:39:3b:
                    90:f3:34:f2:8d:2f:8c:02:91:f0:c9:3f:a5:6d:d8:
                    93:3c:7b:55:13:a6:0b:ff:b0:de:fb:b1:46:99:ae:
                    a2:49:cb:0c:3a:96:14:d6:02:e0:5c:40:04:15:5a:
                    cb:88:43:8c:f4:f6:bc:99:8f:b2:fa:ef:0e:81:69:
                    67:37:da:f8:28:1a:5a:e9:13:0b:8d:11:dd:e6:8f:
                    47:e1:4e:18:58:48:67:c6:30:d8:8b:52:d1:6b:17:
                    b5:d1:c7:2e:d1:30:85:03:55:a5:6a:31:c5:cd:db:
                    df:c2:0a:55:46:ae:87:40:f1:29:4c:d9:13:96:44:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:06:1C:D1:7E:4B:7C:C0:A9:17:7E:DE:45:EA:3E:45:E4:E2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/19e6d66a-d1b3-3f71-9b04-c0dc420fd7d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffc5:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:12:d5:4a:dc:af:d7:3e:34:4e:a4:4a:8d:82:1d:47:4d:05:
         45:1a:2a:ea:fe:41:cf:a1:6d:88:17:d4:d0:e5:c8:d0:0c:44:
         60:16:35:a7:db:5f:e4:c6:a8:29:0c:a7:92:6d:4f:17:fa:62:
         78:5f:59:a5:47:f4:d7:2c:a7:6c:73:93:ae:4b:01:6b:41:b7:
         a7:14:ae:dd:49:62:95:8f:41:02:92:bc:52:d2:e8:f1:9e:56:
         3e:0a:52:20:bc:3f:91:a0:45:d5:2a:24:93:db:6a:f5:cc:11:
         9b:22:48:b8:97:e1:61:97:4e:50:81:87:ed:55:7c:ed:56:49:
         cb:25:33:4f:76:d5:0d:3d:93:d8:84:05:bf:8a:b0:a6:ad:03:
         bf:28:0c:10:12:e3:4e:a2:78:10:07:43:be:36:89:70:28:72:
         9e:04:e0:ec:43:03:a4:2a:65:96:7b:0e:a7:6e:89:db:43:89:
         e9:da:2e:3c:0a:a4:b2:33:e8:cf:40:a9:a8:ae:ae:f8:36:aa:
         42:a1:f8:c4:1b:8c:99:4a:61:03:63:9a:40:bf:92:21:c1:87:
         29:a1:a5:aa:c7:9e:76:ae:43:a8:95:19:b9:9f:da:fc:8f:81:
         b7:1c:9b:d8:26:9f:ab:02:b9:99:6b:53:04:f9:e5:72:c3:96:
         be:8c:6e:a5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoA2rvLvrHB1Xvwg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NjBmZTRmMzctYTJlZS00YTNlLTg0NjAtZWQ2MGRkOTM3N2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK3kqQBKJjDFNDabtneR1yKHF2RcPtewP4+Z
R4BJUshzx/nU5x+dwAOhCJEjbxWjvofXeHZYz5Eqn2lZbqQJ0DVTcjjqH3hWrIoy
UMzB0YlwOgBQZDPYpkGxWDn19tXFSOqq9V5duGuwt4gy5pn5bEKK/taJklA7DteS
c3rZqROg8nWAOTuQ8zTyjS+MApHwyT+lbdiTPHtVE6YL/7De+7FGma6iScsMOpYU
1gLgXEAEFVrLiEOM9Pa8mY+y+u8OgWlnN9r4KBpa6RMLjRHd5o9H4U4YWEhnxjDY
i1LRaxe10ccu0TCFA1WlajHFzdvfwgpVRq6HQPEpTNkTlkQeRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAGOBhzRfkt8wKkXft5F6j5F5OIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvMTllNmQ2NmEtZDFiMy0z
ZjcxLTliMDQtYzBkYzQyMGZkN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL/xQUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAARLVStyv1z40TqRKjYIdR00FRRoq6v5Bz6FtiBfU0OXI0AxEYBY1
p9tf5MaoKQynkm1PF/pieF9ZpUf01yynbHOTrksBa0G3pxSu3UlilY9BApK8UtLo
8Z5WPgpSILw/kaBF1Sokk9tq9cwRmyJIuJfhYZdOUIGH7VV87VZJyyUzT3bVDT2T
2IQFv4qwpq0DvygMEBLjTqJ4EAdDvjaJcChyngTg7EMDpCpllnsOp26J20OJ6dou
PAqksjPoz0CpqK6u+DaqQqH4xBuMmUphA2OaQL+SIcGHKaGlqseedq5DqJUZuZ/a
/I+Btxyb2CafqwK5mWtTBPnlcsOWvoxupQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:13 2025 by rpki-client