Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7c7f0b46-fee4-36ff-96f1-9f7c1f257503.roa
File:                     7c7f0b46-fee4-36ff-96f1-9f7c1f257503.roa (raw, json)
Hash identifier:          BZufZiaWzUWZgkC+LrJF343Hjjdp4/YY0NMHcAsHvZA=
Subject key identifier:   30:F3:C6:BB:32:04:17:F8:49:DA:F1:95:D7:DE:3B:ED:DC:61:0A:2F
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584A374AC8567DD7D39BDD06B0C0
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7c7f0b46-fee4-36ff-96f1-9f7c1f257503.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     396998
IP address blocks:        2602:fd00::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c8:56:7d:d7:d3:9b:dd:06:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=b9745b97-7ef5-4684-8c88-2936f42c048d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:88:6d:fe:de:1a:55:62:e1:48:03:a4:4c:c0:
                    cd:c1:fe:f7:ae:38:63:2c:11:0f:c3:65:02:dd:10:
                    d1:42:59:d7:d9:ee:c6:00:03:f6:ce:5a:ca:00:69:
                    e9:66:ff:9c:76:47:a3:d0:60:4b:db:da:7e:c1:62:
                    30:b0:fc:ea:b4:37:16:a6:48:81:5f:c2:5a:2e:1d:
                    f0:33:10:1c:f2:f3:d1:0e:78:dd:ff:1b:8f:c3:00:
                    ea:9d:cd:33:6d:71:c9:b2:90:b8:10:f9:69:dc:3a:
                    25:bc:08:26:d2:d0:47:db:79:22:c5:63:5b:05:46:
                    05:56:2b:f7:c9:87:b8:ea:b5:62:e6:a5:ea:60:4f:
                    a7:0c:ca:db:36:d5:f1:ef:8c:2b:90:f3:e6:27:7c:
                    e5:7d:a3:43:73:96:7f:06:22:82:85:8b:71:d7:b3:
                    e7:94:29:f2:7e:0b:17:e8:34:a2:7f:54:ea:f3:96:
                    53:0f:ca:79:09:c5:ad:3d:8c:e9:c0:a8:18:5f:fa:
                    93:38:7c:e5:2c:df:fe:a2:d2:b8:82:8a:28:bb:ce:
                    61:13:e6:ca:40:d7:d9:5b:64:fd:ae:dc:5d:cf:f5:
                    de:69:76:e5:01:8f:3b:b6:6f:a0:11:15:c5:95:50:
                    9a:3c:2c:67:3f:a3:89:28:2b:1d:68:5e:7a:28:ac:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F3:C6:BB:32:04:17:F8:49:DA:F1:95:D7:DE:3B:ED:DC:61:0A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7c7f0b46-fee4-36ff-96f1-9f7c1f257503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd00::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fb:42:03:a8:89:cb:90:fc:e2:0b:ef:7e:98:49:76:11:c3:
         73:d7:0d:f0:be:35:2a:45:9a:94:79:6b:75:5f:3e:43:90:a6:
         06:86:c2:fd:73:40:16:e8:1c:10:f1:f5:ec:86:15:02:ae:fa:
         9a:c5:4c:27:13:93:b8:4f:8b:0d:20:f0:6f:2c:84:6d:7c:ee:
         8e:0a:0a:8d:02:b4:18:93:22:4f:b9:75:f1:6f:8c:cf:48:d8:
         c6:42:00:3c:ef:4f:3e:57:c5:f8:62:da:eb:7b:3c:a8:60:0d:
         fa:eb:e2:08:3f:f7:fb:32:9e:11:8a:05:17:79:1b:15:fc:8f:
         94:09:43:21:1a:bd:4e:43:6b:aa:de:09:87:7b:13:ea:0e:d0:
         81:bd:04:40:f3:4f:af:ef:22:84:89:26:39:09:dc:93:06:55:
         5b:0d:74:53:27:75:f0:0d:25:11:2e:8a:ff:ec:ea:e4:6b:f8:
         e2:26:d4:59:c3:06:06:9a:11:91:61:7d:2d:8b:73:16:0b:d4:
         6c:d7:fd:93:12:4c:bb:58:70:6d:be:4f:53:2a:b7:88:f2:93:
         f8:21:9e:15:ef:73:74:a7:4a:1d:70:22:59:2b:57:1c:a2:c7:
         21:15:53:40:4f:16:66:57:96:07:51:55:87:59:3f:28:ac:d4:
         ad:76:c2:8a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEo3SshWfdfTm90GsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4
ZjNjMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
Yjk3NDViOTctN2VmNS00Njg0LThjODgtMjkzNmY0MmMwNDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYht/t4aVWLhSAOkTMDNwf73rjhjLBEPw2UC
3RDRQlnX2e7GAAP2zlrKAGnpZv+cdkej0GBL29p+wWIwsPzqtDcWpkiBX8JaLh3w
MxAc8vPRDnjd/xuPwwDqnc0zbXHJspC4EPlp3DolvAgm0tBH23kixWNbBUYFViv3
yYe46rVi5qXqYE+nDMrbNtXx74wrkPPmJ3zlfaNDc5Z/BiKChYtx17PnlCnyfgsX
6DSif1Tq85ZTD8p5CcWtPYzpwKgYX/qTOHzlLN/+otK4gooou85hE+bKQNfZW2T9
rtxdz/XeaXblAY87tm+gERXFlVCaPCxnP6OJKCsdaF56KKzezQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDDzxrsyBBf4SdrxldfeO+3cYQovMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi
MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvN2M3ZjBiNDYtZmVlNC0z
NmZmLTk2ZjEtOWY3YzFmMjU3NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz
ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi
OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1
NDkwYjhmM2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9AAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHPtCA6iJy5D84gvvfphJdhHDc9cN8L41KkWalHlrdV8+Q5CmBobC
/XNAFugcEPH17IYVAq76msVMJxOTuE+LDSDwbyyEbXzujgoKjQK0GJMiT7l18W+M
z0jYxkIAPO9PPlfF+GLa63s8qGAN+uviCD/3+zKeEYoFF3kbFfyPlAlDIRq9TkNr
qt4Jh3sT6g7Qgb0EQPNPr+8ihIkmOQnckwZVWw10Uyd18A0lES6K/+zq5Gv44ibU
WcMGBpoRkWF9LYtzFgvUbNf9kxJMu1hwbb5PUyq3iPKT+CGeFe9zdKdKHXAiWStX
HKLHIRVTQE8WZleWB1FVh1k/KKzUrXbCig==
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:02:24 2025 by rpki-client