Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/85a6b6a3-31a4-3681-bbb4-7387e27578f8.roa
File:                     85a6b6a3-31a4-3681-bbb4-7387e27578f8.roa (raw, json)
Hash identifier:          ReUnLbl1jSkMekQnihP/hGPK9TJc3GBO/WGkIP8y6Hg=
Subject key identifier:   75:29:EF:14:DC:D6:4E:A8:47:40:79:3F:7A:5D:EB:03:FF:72:4C:10
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584A560056611812D80F40453580
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/85a6b6a3-31a4-3681-bbb4-7387e27578f8.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     401390
IP address blocks:        2602:f7da:3b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:56:61:18:12:d8:0f:40:45:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=4e8e6594-fb23-47dc-9280-23042af0f39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:70:ab:53:81:b6:95:5c:3f:86:c4:17:f9:
                    12:c4:25:a9:5e:4b:82:08:22:af:1c:22:dc:36:4b:
                    92:c0:9b:0a:0e:c2:cd:0e:cb:0b:83:b0:2f:1d:56:
                    54:86:1a:43:69:cd:2e:fb:bc:0a:88:6a:41:b8:bc:
                    7a:d3:d8:b5:1c:01:8d:8f:68:92:be:be:33:a2:22:
                    d9:ec:8e:b6:77:a5:69:6a:75:67:a8:fc:3d:dc:24:
                    63:32:a0:f2:e7:42:5f:97:ed:37:94:af:0d:c3:63:
                    18:27:b9:73:76:21:a8:3a:31:c3:a7:05:d7:7a:13:
                    d2:f9:e6:c4:ca:6b:ab:fa:ee:d5:6f:31:78:31:6b:
                    cc:64:73:11:16:6d:aa:46:46:6b:71:b0:aa:42:37:
                    21:3e:49:b4:5c:58:26:c6:f9:9a:bc:79:fb:e9:d2:
                    e1:73:d8:08:e2:63:e4:18:72:65:fd:54:10:cc:04:
                    97:36:63:6a:bb:16:82:48:6e:8d:db:c4:54:ee:4a:
                    49:78:fc:66:d5:6b:6f:63:f9:b9:b6:64:f2:ff:42:
                    f7:27:8c:dc:15:96:32:5a:20:56:84:25:34:8e:8f:
                    7d:1e:d8:93:d8:f5:49:de:db:b6:d1:b0:d8:00:a3:
                    79:ef:8e:6d:fe:16:a9:60:e3:22:54:87:be:32:a0:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:29:EF:14:DC:D6:4E:A8:47:40:79:3F:7A:5D:EB:03:FF:72:4C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/85a6b6a3-31a4-3681-bbb4-7387e27578f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:5f:f2:69:73:e4:cc:73:45:6f:df:16:bd:3d:0a:d0:85:29:
         eb:de:88:16:af:d5:19:9a:ef:c7:81:31:61:c7:9d:9a:ae:4e:
         07:c8:6c:1d:56:89:67:d1:b7:dc:d9:91:53:e7:16:5a:dc:fa:
         79:de:93:95:bd:12:32:a2:aa:60:cf:24:82:89:b6:b8:54:da:
         66:ae:30:74:0b:c9:8a:76:11:bb:0c:bc:41:33:24:a8:bc:b9:
         63:b2:29:55:5b:03:58:d8:42:00:b2:4d:8f:5e:a5:ed:0e:ec:
         79:d2:17:25:eb:61:65:fe:6f:43:d4:74:25:17:d9:5d:4f:a8:
         a4:d2:b7:40:1b:3e:51:55:0f:cd:87:ee:f5:a4:93:41:20:9e:
         38:e2:30:ab:9b:ed:49:a9:42:06:8c:31:35:1d:eb:13:56:31:
         cf:de:97:40:19:f9:6e:f5:14:00:c2:8b:59:48:06:97:66:5b:
         74:41:b9:7a:be:04:3f:ac:fe:34:ef:56:45:00:83:2e:e2:3b:
         43:41:df:d7:7d:d5:f6:3c:7c:73:75:11:60:87:ce:87:05:98:
         68:9e:2f:03:4c:5b:7a:73:69:79:03:8a:b1:fd:b9:1e:08:2f:
         93:46:ca:de:28:5a:5e:a2:e8:8a:3a:60:63:64:35:9a:88:5e:
         15:0e:7a:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpWAFZhGBLYD0BFNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy
MzM0MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk
NGU4ZTY1OTQtZmIyMy00N2RjLTkyODAtMjMwNDJhZjBmMzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFRwq1OBtpVcP4bEF/kSxCWpXkuCCCKvHCLc
NkuSwJsKDsLNDssLg7AvHVZUhhpDac0u+7wKiGpBuLx609i1HAGNj2iSvr4zoiLZ
7I62d6VpanVnqPw93CRjMqDy50Jfl+03lK8Nw2MYJ7lzdiGoOjHDpwXXehPS+ebE
ymur+u7VbzF4MWvMZHMRFm2qRkZrcbCqQjchPkm0XFgmxvmavHn76dLhc9gI4mPk
GHJl/VQQzASXNmNquxaCSG6N28RU7kpJePxm1WtvY/m5tmTy/0L3J4zcFZYyWiBW
hCU0jo99HtiT2PVJ3tu20bDYAKN5745t/hapYOMiVIe+MqA1PwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHUp7xTc1k6oR0B5P3pd6wP/ckwQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2
OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvODVhNmI2YTMtMzFhNC0z
NjgxLWJiYjQtNzM4N2UyNzU3OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2
MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm
MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1
ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gA7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ1f8mlz5MxzRW/fFr09CtCFKeveiBav1Rma78eBMWHHnZquTgfI
bB1WiWfRt9zZkVPnFlrc+nnek5W9EjKiqmDPJIKJtrhU2mauMHQLyYp2EbsMvEEz
JKi8uWOyKVVbA1jYQgCyTY9epe0O7HnSFyXrYWX+b0PUdCUX2V1PqKTSt0AbPlFV
D82H7vWkk0EgnjjiMKub7UmpQgaMMTUd6xNWMc/el0AZ+W71FADCi1lIBpdmW3RB
uXq+BD+s/jTvVkUAgy7iO0NB39d91fY8fHN1EWCHzocFmGieLwNMW3pzaXkDirH9
uR4IL5NGyt4oWl6i6Io6YGNkNZqIXhUOeus=
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:59:50 2025 by rpki-client