Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/3414d1ad-32bc-3a20-aaf7-5d3dac7c3e8e.roa
File:                     3414d1ad-32bc-3a20-aaf7-5d3dac7c3e8e.roa (raw, json)
Hash identifier:          BeIrc7IXEdbO9s+LH1rUE24BIs7dXLzcuul6paZQBwU=
Subject key identifier:   D8:B7:B0:51:22:D8:09:82:DB:43:D5:3D:EE:F0:3B:3A:83:70:F2:74
Certificate issuer:       /CN=bce2ace0-971c-48f1-8361-962ad02d9618
Certificate serial:       010D0C9F43285849E2253E4C004684D5952E4F40
Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/3414d1ad-32bc-3a20-aaf7-5d3dac7c3e8e.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     32943
IP address blocks:        2602:f937::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:3e:4c:00:46:84:d5:95:2e:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=03c0458f-74bf-4dcc-b297-b0bf0060e653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:0e:f9:b6:bc:b5:c9:43:ce:6e:53:aa:d1:
                    de:8b:c1:c2:e4:1b:ac:3e:66:f6:98:01:5d:0e:4a:
                    98:77:62:e3:4f:70:17:f1:92:4b:45:0b:02:a9:be:
                    9c:45:8a:0d:ec:0e:cf:91:7b:a0:aa:f4:77:9b:8d:
                    88:b7:f9:de:fc:c2:b0:2a:b1:ba:8a:59:5a:d9:90:
                    b7:a0:97:d6:cf:31:eb:4d:a1:77:5c:c8:eb:2c:5a:
                    56:1b:94:ca:f6:00:8a:76:27:e8:58:d1:1e:d6:83:
                    cd:8c:68:1d:fd:1e:57:1b:d2:d8:59:70:75:26:81:
                    05:b7:ae:5f:ef:02:f4:d9:ec:a2:9b:df:56:40:a7:
                    93:76:6c:22:9b:07:0f:a2:5f:d4:21:22:4b:65:fd:
                    e3:e5:3d:32:16:14:59:6e:fe:f9:5a:cc:24:37:11:
                    6e:39:ce:bb:f9:6f:81:17:42:32:c4:a8:60:24:03:
                    40:dc:9b:42:4a:c6:9d:60:da:1b:ec:8c:d2:9f:58:
                    5f:03:f8:be:1a:81:42:b6:09:5f:3f:83:38:05:6e:
                    3c:f1:4e:9d:7d:54:1e:43:df:84:0e:5e:5c:e7:2f:
                    24:dc:b4:22:cb:00:cb:07:a7:13:c5:4d:79:7d:6b:
                    ad:12:b6:b0:5f:19:fb:9d:e3:45:e1:37:8f:f5:d9:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B7:B0:51:22:D8:09:82:DB:43:D5:3D:EE:F0:3B:3A:83:70:F2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/3414d1ad-32bc-3a20-aaf7-5d3dac7c3e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl

            X509v3 Authority Key Identifier:
                keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f937::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f1:91:48:5b:2a:8a:5e:ed:e5:89:43:b1:b3:25:4b:72:d4:
         52:6f:2e:d6:70:20:00:9f:b9:a0:f5:83:ca:dd:16:73:24:79:
         bb:fc:30:6b:42:9d:4f:71:9c:16:6c:06:e6:9a:e9:54:ab:4d:
         f2:c7:f5:ec:5b:72:b3:5d:e4:c1:20:b1:bc:05:93:40:61:d2:
         55:8e:69:e1:3a:65:43:cd:07:a7:8e:f5:f4:fb:c6:c1:61:ff:
         72:50:08:13:da:76:43:a3:2d:48:a8:34:e0:99:c2:f5:f7:ec:
         e5:5e:6f:53:8f:f1:e9:21:eb:c9:b0:1d:31:46:82:a4:1a:53:
         b6:02:ad:ba:3d:37:e3:24:6e:ea:4f:f1:fb:7c:0f:86:f9:74:
         d1:4c:aa:07:dd:26:ff:eb:94:72:be:14:9a:0b:49:57:4f:7e:
         32:bb:e2:35:50:48:7d:5a:a9:92:ad:57:b0:53:e6:6a:24:ac:
         f6:47:11:a9:5f:7e:0d:c1:cd:9f:5f:5a:5a:0d:46:dd:78:da:
         37:61:1d:d3:ab:d3:3d:d8:90:5d:5e:ed:95:a2:d5:48:27:10:
         a0:ff:60:a5:55:aa:11:15:60:e6:85:31:f9:5a:8f:90:62:9d:
         4d:00:1f:ae:d5:18:f3:4f:75:57:04:06:ce:b1:e4:f1:09:a8:
         35:35:db:38
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEniJT5MAEaE1ZUuT0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNlMmFjZTAtOTcxYy00OGYxLTgzNjEtOTYyYWQwMmQ5
NjE4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
MDNjMDQ1OGYtNzRiZi00ZGNjLWIyOTctYjBiZjAwNjBlNjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLIO+ba8tclDzm5TqtHei8HC5BusPmb2mAFd
DkqYd2LjT3AX8ZJLRQsCqb6cRYoN7A7PkXugqvR3m42It/ne/MKwKrG6illa2ZC3
oJfWzzHrTaF3XMjrLFpWG5TK9gCKdifoWNEe1oPNjGgd/R5XG9LYWXB1JoEFt65f
7wL02eyim99WQKeTdmwimwcPol/UISJLZf3j5T0yFhRZbv75WswkNxFuOc67+W+B
F0IyxKhgJANA3JtCSsadYNob7IzSn1hfA/i+GoFCtglfP4M4BW488U6dfVQeQ9+E
Dl5c5y8k3LQiywDLB6cTxU15fWutErawXxn7neNF4TeP9dnYXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNi3sFEi2AmC20PVPe7wOzqDcPJ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2Uy
YWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAyZDk2MTgvMzQxNGQxYWQtMzJiYy0z
YTIwLWFhZjctNWQzZGFjN2MzZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNlMmFjZTAtOTcxYy00OGYxLTgz
NjEtOTYyYWQwMmQ5NjE4L2JjZTJhY2UwLTk3MWMtNDhmMS04MzYxLTk2MmFkMDJk
OTYxOC5jcmwwHwYDVR0jBBgwFoAU4JcMaElFCKkWaQGDznYRnoOpb0QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iY2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJh
ZDAyZDk2MTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5NwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmPGRSFsqil7t5YlDsbMlS3LUUm8u1nAgAJ+5oPWDyt0WcyR5u/ww
a0KdT3GcFmwG5prpVKtN8sf17Ftys13kwSCxvAWTQGHSVY5p4TplQ80Hp4719PvG
wWH/clAIE9p2Q6MtSKg04JnC9ffs5V5vU4/x6SHrybAdMUaCpBpTtgKtuj034yRu
6k/x+3wPhvl00UyqB90m/+uUcr4UmgtJV09+MrviNVBIfVqpkq1XsFPmaiSs9kcR
qV9+DcHNn19aWg1G3XjaN2Ed06vTPdiQXV7tlaLVSCcQoP9gpVWqERVg5oUx+VqP
kGKdTQAfrtUY8091VwQGzrHk8QmoNTXbOA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:43:27 2025 by rpki-client