Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa
File:                     2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa (raw, json)
Hash identifier:          oZZUZJcfXBQNyRcYKY6sHdF+m9UXi26LyiKmMuMQocc=
Subject key identifier:   5B:51:9D:0B:BC:31:DB:6E:F3:67:AC:B4:35:B0:CB:09:52:41:F2:6A
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584A331AF39BBB2742DBA296CD00
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        2602:fa28:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f3:9b:bb:27:42:db:a2:96:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=a6ce8ec9-201f-468e-af19-ee8c4425dc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:65:df:f3:b8:1c:72:92:5f:27:53:7e:67:
                    2a:60:8b:a4:78:6b:89:24:a8:32:55:91:81:5a:34:
                    db:59:79:d5:d5:34:ac:a5:aa:4b:0f:56:cb:4c:33:
                    30:b0:20:43:1c:6d:6f:2f:ef:bf:31:af:34:dd:49:
                    52:7b:f2:2e:96:13:f2:8b:73:df:1e:d8:07:03:63:
                    c9:25:1a:c0:80:a1:40:d2:1a:e1:31:ce:5d:c8:db:
                    75:b6:c0:53:fc:a1:47:8f:6e:13:fc:d7:75:e7:c1:
                    32:e0:30:d9:70:42:2a:34:1f:bc:22:68:77:86:ee:
                    f1:24:6f:fc:fb:f3:b8:fd:e7:f4:0e:3b:50:c6:14:
                    af:ab:87:d4:4b:9a:bf:1c:b5:a5:2b:5d:8a:0b:db:
                    9e:0c:98:e8:6f:7c:1b:0a:9f:41:86:1f:90:9f:32:
                    39:5b:e9:e7:6f:cf:82:b4:54:eb:d0:2f:52:90:a1:
                    89:70:7c:fd:66:8a:33:13:34:47:55:83:d5:2c:04:
                    60:cc:56:45:6a:17:58:37:53:ae:c3:58:a3:ab:64:
                    8c:dd:94:72:41:4f:d2:93:35:e2:88:98:67:59:e4:
                    34:c0:07:3c:81:1d:ce:3c:33:e0:af:c6:66:b7:b9:
                    e0:83:83:7b:a8:ed:49:f7:f5:fa:e6:c9:e0:43:c9:
                    b6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:51:9D:0B:BC:31:DB:6E:F3:67:AC:B4:35:B0:CB:09:52:41:F2:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/2da0e5df-a7c9-3b09-985e-f06d4fa73f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:3f:6a:a4:9a:10:f0:15:4a:96:32:d1:8b:7e:3a:87:7c:
         75:fc:b4:a4:a0:d5:66:e2:37:42:2e:be:fe:4b:0f:b2:54:da:
         f6:37:9c:bb:93:ba:2d:b3:78:01:7c:68:28:f9:b3:fc:74:a4:
         a2:de:e8:05:a6:a8:20:cb:10:3d:55:30:1a:1d:1d:05:15:53:
         ae:b6:f5:e2:26:7a:4c:fa:72:fb:79:c3:cb:ab:8a:7b:28:76:
         35:f7:a9:aa:b2:b2:ce:86:45:be:82:3a:47:6c:10:39:94:d1:
         32:e2:69:38:91:09:18:94:4e:c4:2c:73:a5:fd:cd:d8:49:ce:
         73:93:68:90:22:1f:67:01:b5:60:94:c5:22:ad:00:a2:79:7f:
         de:92:09:65:bc:be:a0:48:64:b8:81:63:66:ea:c6:10:29:e3:
         bb:6b:13:5f:63:15:b0:0f:a9:47:7d:b6:3b:6c:26:2e:5e:e8:
         a5:bd:60:09:71:9b:1a:63:d8:e5:34:f7:b4:f4:a4:b5:d7:87:
         79:bd:8f:be:f9:9b:32:23:6e:40:61:e9:32:24:fe:d7:51:f4:
         38:a2:83:e2:08:7c:71:64:0f:4a:9a:79:06:f9:cb:95:8d:ed:
         9a:f2:95:0c:4d:a3:13:f4:7f:63:a9:38:dd:32:ba:14:c4:45:
         45:f5:1a:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEozGvObuydC26KWzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM2MzBmODItMTY5Yy00YjAzLWFkNDItYWE2ZjViNzFk
OTFkMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
YTZjZThlYzktMjAxZi00NjhlLWFmMTktZWU4YzQ0MjVkYzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOll3/O4HHKSXydTfmcqYIukeGuJJKgyVZGB
WjTbWXnV1TSspapLD1bLTDMwsCBDHG1vL++/Ma803UlSe/IulhPyi3PfHtgHA2PJ
JRrAgKFA0hrhMc5dyNt1tsBT/KFHj24T/Nd158Ey4DDZcEIqNB+8Imh3hu7xJG/8
+/O4/ef0DjtQxhSvq4fUS5q/HLWlK12KC9ueDJjob3wbCp9Bhh+QnzI5W+nnb8+C
tFTr0C9SkKGJcHz9ZoozEzRHVYPVLARgzFZFahdYN1Ouw1ijq2SM3ZRyQU/SkzXi
iJhnWeQ0wAc8gR3OPDPgr8Zmt7ngg4N7qO1J9/X65sngQ8m2GQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFtRnQu8Mdtu82estDWwywlSQfJqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYz
MGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZmNWI3MWQ5MWQvMmRhMGU1ZGYtYTdjOS0z
YjA5LTk4NWUtZjA2ZDRmYTczZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTM2MzBmODItMTY5Yy00YjAzLWFk
NDItYWE2ZjViNzFkOTFkL2EzNjMwZjgyLTE2OWMtNGIwMy1hZDQyLWFhNmY1Yjcx
ZDkxZC5jcmwwHwYDVR0jBBgwFoAUjLsSDojg5BDceZoRzF7g6sFADkYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzYzMGY4Mi0xNjljLTRiMDMtYWQ0Mi1hYTZm
NWI3MWQ5MWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6KAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA8nP2qkmhDwFUqWMtGLfjqHfHX8tKSg1WbiN0Iuvv5LD7JU2vY3
nLuTui2zeAF8aCj5s/x0pKLe6AWmqCDLED1VMBodHQUVU6629eImekz6cvt5w8ur
insodjX3qaqyss6GRb6COkdsEDmU0TLiaTiRCRiUTsQsc6X9zdhJznOTaJAiH2cB
tWCUxSKtAKJ5f96SCWW8vqBIZLiBY2bqxhAp47trE19jFbAPqUd9tjtsJi5e6KW9
YAlxmxpj2OU097T0pLXXh3m9j775mzIjbkBh6TIk/tdR9Diig+IIfHFkD0qaeQb5
y5WN7ZrylQxNoxP0f2OpON0yuhTERUX1Ggs=
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:35:41 2025 by rpki-client