Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/f0e81a19-4a7f-39ff-9574-0ed58e878c83.roa
File:                     f0e81a19-4a7f-39ff-9574-0ed58e878c83.roa (raw, json)
Hash identifier:          8YCTOdiHwkOjv8Z+asZt94Q4r50etx8Rp/FGTvT+HOU=
Subject key identifier:   17:B1:8B:43:8D:47:69:AD:77:6B:0E:25:6A:00:A9:30:38:14:6B:3F
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584A46A5B1AF41001585A035FEC0
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/f0e81a19-4a7f-39ff-9574-0ed58e878c83.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     401390
IP address blocks:        2602:f7da:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:b1:af:41:00:15:85:a0:35:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=5ab49524-019f-48a0-b80d-6a4a97174f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:29:79:b4:a9:57:7b:dc:fb:d9:a1:f7:d4:
                    c4:3d:1e:ec:93:55:60:66:2a:f6:67:9f:2c:b5:e2:
                    03:e2:66:ec:f6:12:db:ab:fd:64:7a:a0:cb:a3:de:
                    0a:3e:35:5d:f9:a4:08:a9:fb:5e:a7:0b:d3:5f:d5:
                    e7:b8:a0:c3:06:5d:97:92:5a:ff:79:17:55:20:7b:
                    68:f1:a7:cb:cd:17:ff:de:1e:eb:51:21:b8:65:69:
                    36:0f:e1:20:42:56:6a:2a:b9:94:90:b1:22:f7:81:
                    7a:7c:ce:ff:58:15:a8:d1:c9:d1:ad:1f:5a:4e:fd:
                    cb:8d:78:e6:78:75:02:23:62:31:20:0a:98:4d:c1:
                    f1:5a:12:8e:35:68:43:b0:01:06:b0:c0:77:02:bd:
                    cf:ed:03:3a:ae:fa:67:9c:d8:ca:8a:b8:be:e5:e8:
                    b2:b7:fd:39:55:95:4a:d3:93:c4:1c:67:58:25:fb:
                    48:f3:e1:b4:01:4a:a8:25:eb:d4:53:79:04:fd:14:
                    ad:a0:18:c0:11:90:f1:89:6b:a7:ec:1b:c5:19:60:
                    55:e1:d5:eb:30:e9:54:22:c4:44:cf:68:2c:4a:24:
                    38:1f:72:07:ef:11:db:df:e8:b9:8e:b1:8e:3b:93:
                    ff:32:43:cf:16:58:76:7a:49:1c:33:fe:30:2c:9c:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B1:8B:43:8D:47:69:AD:77:6B:0E:25:6A:00:A9:30:38:14:6B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/f0e81a19-4a7f-39ff-9574-0ed58e878c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:9c:db:e6:b8:f1:f2:f9:8e:83:79:45:b8:77:8f:41:f7:
         27:fd:99:aa:4f:47:a7:61:cf:e9:27:8d:ed:23:ea:12:ab:eb:
         14:59:29:d3:1b:ee:c5:41:68:67:15:08:c5:ba:27:f0:f7:e8:
         5f:f7:93:ad:83:f9:16:2c:65:29:c1:b9:a4:56:69:63:eb:4d:
         54:df:12:8d:ed:72:0c:bb:a6:be:8a:08:4c:11:dd:68:9d:44:
         0c:c1:06:be:ba:60:f4:8c:76:ee:85:dc:ed:d0:8b:20:2c:55:
         b4:62:e9:38:28:f3:aa:34:70:03:d8:b0:93:a8:fe:ea:8b:4d:
         f1:44:a1:72:5e:5e:ec:87:07:2e:ce:6b:b1:89:7c:9c:f8:e8:
         33:ad:02:13:27:e0:3a:62:cf:77:41:a5:ec:56:b4:2b:a2:2a:
         0d:95:46:76:34:64:8c:c9:f5:c1:20:1f:a6:4b:12:53:66:40:
         8a:e8:2a:d8:b6:03:ca:86:ec:01:12:73:5e:07:c1:22:a7:18:
         3d:f1:a4:fa:84:d5:6b:73:99:73:70:8c:95:b7:3c:b1:7a:27:
         21:12:28:a5:fc:3a:e2:3d:1e:98:58:37:7e:e6:7b:b1:9c:82:
         0b:26:d0:73:36:57:76:d9:c7:b0:d1:14:1c:85:54:08:24:e1:
         04:39:98:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpGpbGvQQAVhaA1/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYy
MzM0MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk
NWFiNDk1MjQtMDE5Zi00OGEwLWI4MGQtNmE0YTk3MTc0ZjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTEpebSpV3vc+9mh99TEPR7sk1VgZir2Z58s
teID4mbs9hLbq/1keqDLo94KPjVd+aQIqftepwvTX9XnuKDDBl2Xklr/eRdVIHto
8afLzRf/3h7rUSG4ZWk2D+EgQlZqKrmUkLEi94F6fM7/WBWo0cnRrR9aTv3LjXjm
eHUCI2IxIAqYTcHxWhKONWhDsAEGsMB3Ar3P7QM6rvpnnNjKiri+5eiyt/05VZVK
05PEHGdYJftI8+G0AUqoJevUU3kE/RStoBjAEZDxiWun7BvFGWBV4dXrMOlUIsRE
z2gsSiQ4H3IH7xHb3+i5jrGOO5P/MkPPFlh2ekkcM/4wLJzfewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBexi0ONR2mtd2sOJWoAqTA4FGs/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zN2U2
OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvZjBlODFhMTktNGE3Zi0z
OWZmLTk1NzQtMGVkNThlODc4YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzdlNjkzMzAtMzAyNC00MDZiLWI2
MGEtMGQ5NWUyNWYyMzM0LzM3ZTY5MzMwLTMwMjQtNDA2Yi1iNjBhLTBkOTVlMjVm
MjMzNC5jcmwwHwYDVR0jBBgwFoAUlxapq2aVPz8sQPwdM2OFp0XUZTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1
ZTI1ZjIzMzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL32gAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIFMnNvmuPHy+Y6DeUW4d49B9yf9mapPR6dhz+knje0j6hKr6xRZ
KdMb7sVBaGcVCMW6J/D36F/3k62D+RYsZSnBuaRWaWPrTVTfEo3tcgy7pr6KCEwR
3WidRAzBBr66YPSMdu6F3O3QiyAsVbRi6Tgo86o0cAPYsJOo/uqLTfFEoXJeXuyH
By7Oa7GJfJz46DOtAhMn4Dpiz3dBpexWtCuiKg2VRnY0ZIzJ9cEgH6ZLElNmQIro
Kti2A8qG7AESc14HwSKnGD3xpPqE1WtzmXNwjJW3PLF6JyESKKX8OuI9HphYN37m
e7Gcggsm0HM2V3bZx7DRFByFVAgk4QQ5mEE=
-----END CERTIFICATE-----
Generated at Tue Jul 1 23:28:06 2025 by rpki-client