Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa
File:                     468cfc20-af9f-3468-bf97-835ce5245200.roa (raw, json)
Hash identifier:          WT7zWMZ63Cl+VEH0xwNA53q+nEOQ75gjGcT2uBCsqvc=
Subject key identifier:   84:40:41:55:08:3C:69:28:47:D8:4C:FA:8E:25:47:EF:B5:27:93:33
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F43285849B149F69FD7B1A79D25EDB800
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     14956
IP address blocks:        2602:fa59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f6:9f:d7:b1:a7:9d:25:ed:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=d4109807-763e-46cb-a4c2-524bf11f23cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:a6:ed:a2:78:61:dc:0b:86:1c:26:e2:1f:
                    04:b5:f4:97:99:cd:a8:13:1a:67:07:9c:a0:df:64:
                    c7:36:6a:ac:18:8f:7d:23:3a:80:53:75:e7:6e:68:
                    0e:05:3e:aa:52:aa:a0:3f:c6:69:c1:32:04:9a:87:
                    b8:d8:58:7a:39:8a:b6:74:60:98:4e:ec:ae:16:b3:
                    3d:67:bb:ec:20:28:fa:75:d7:62:01:9c:69:05:45:
                    8f:ff:00:4e:42:29:14:f1:f5:47:6f:1b:68:4b:4b:
                    12:02:d1:f1:82:11:c7:98:3c:00:82:05:39:93:7f:
                    cd:94:e2:f9:b1:86:d0:25:8c:1b:f7:6a:d5:01:bc:
                    85:d9:3e:5c:8a:93:18:5d:66:5a:d1:2a:e3:00:82:
                    ee:6e:40:13:42:f6:96:0d:14:94:8e:83:e4:34:b4:
                    16:b2:8d:90:1e:4d:f4:7f:63:01:14:ec:82:ed:ff:
                    e7:53:11:32:d3:a2:4b:46:76:1f:cf:6a:69:cf:93:
                    ab:22:da:a6:f9:86:ce:76:d7:2a:45:f1:e4:65:b0:
                    39:82:0e:60:41:1c:1d:3d:20:01:5f:4e:c7:e2:dc:
                    c8:1e:9e:93:9e:bc:34:23:0e:de:cb:33:74:a8:f4:
                    09:98:cc:a4:fd:13:37:03:d5:1b:e6:e0:6c:ff:34:
                    ad:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:40:41:55:08:3C:69:28:47:D8:4C:FA:8E:25:47:EF:B5:27:93:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:82:e7:32:cf:be:09:42:fe:29:37:e5:06:38:dd:a2:af:66:
         ed:e1:cf:b2:85:01:c7:36:79:42:61:14:f5:55:f6:4e:eb:a7:
         a3:83:77:c7:4d:89:aa:59:41:35:f6:6f:63:d0:c1:e8:f0:17:
         7d:fb:f1:ea:24:a0:e6:89:fe:6f:e1:8d:3d:2b:22:81:4c:76:
         eb:8b:9f:59:ba:05:2e:23:0c:b9:21:03:e6:a3:83:fc:50:32:
         2d:97:d3:14:b5:67:a9:8a:3b:8c:ee:b5:63:0d:56:51:a2:d0:
         df:5a:a5:61:88:c2:3a:f1:c9:66:98:a0:ad:b8:18:6b:3b:a6:
         5e:cf:2d:2f:01:1b:fe:c6:9a:0d:f6:0b:04:d6:12:14:3d:40:
         9b:19:d4:fc:b7:64:e2:43:9f:12:c1:d4:09:0a:d1:f5:04:47:
         2b:46:59:8c:55:37:83:bd:eb:d9:42:3b:a3:a2:1b:d3:94:2e:
         89:66:cf:41:2c:d5:cb:65:bb:9a:cc:38:b1:e7:25:0f:e6:68:
         cb:24:df:a5:e4:08:98:6c:25:90:d2:3c:b6:bc:a3:79:0a:52:
         a3:7b:e6:1e:09:20:3f:5b:8d:c4:d5:bf:09:24:f0:cd:6e:13:
         be:30:dd:8b:4d:dd:94:af:08:91:e8:f9:d2:e2:cc:a0:ef:ed:
         92:ea:76:a4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSfaf17GnnSXtuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZlMTRhNzQtODMzOS00ZmExLTg4NWEtMmVkMzc5NDcz
OTlhMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
ZDQxMDk4MDctNzYzZS00NmNiLWE0YzItNTI0YmYxMWYyM2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyACm7aJ4YdwLhhwm4h8EtfSXmc2oExpnB5yg
32THNmqsGI99IzqAU3XnbmgOBT6qUqqgP8ZpwTIEmoe42Fh6OYq2dGCYTuyuFrM9
Z7vsICj6dddiAZxpBUWP/wBOQikU8fVHbxtoS0sSAtHxghHHmDwAggU5k3/NlOL5
sYbQJYwb92rVAbyF2T5cipMYXWZa0SrjAILubkATQvaWDRSUjoPkNLQWso2QHk30
f2MBFOyC7f/nUxEy06JLRnYfz2ppz5OrItqm+YbOdtcqRfHkZbA5gg5gQRwdPSAB
X07H4tzIHp6Tnrw0Iw7eyzN0qPQJmMyk/RM3A9Ub5uBs/zStBwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIRAQVUIPGkoR9hM+o4lR++1J5MzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZmUx
NGE3NC04MzM5LTRmYTEtODg1YS0yZWQzNzk0NzM5OWEvNDY4Y2ZjMjAtYWY5Zi0z
NDY4LWJmOTctODM1Y2U1MjQ1MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWZlMTRhNzQtODMzOS00ZmExLTg4
NWEtMmVkMzc5NDczOTlhL2VmZTE0YTc0LTgzMzktNGZhMS04ODVhLTJlZDM3OTQ3
Mzk5YS5jcmwwHwYDVR0jBBgwFoAUxJedZ9C2K++jq54cejCwbRqIXeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lZmUxNGE3NC04MzM5LTRmYTEtODg1YS0yZWQz
Nzk0NzM5OWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6WQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAc4LnMs++CUL+KTflBjjdoq9m7eHPsoUBxzZ5QmEU9VX2Tuuno4N3
x02JqllBNfZvY9DB6PAXffvx6iSg5on+b+GNPSsigUx264ufWboFLiMMuSED5qOD
/FAyLZfTFLVnqYo7jO61Yw1WUaLQ31qlYYjCOvHJZpigrbgYazumXs8tLwEb/saa
DfYLBNYSFD1AmxnU/Ldk4kOfEsHUCQrR9QRHK0ZZjFU3g73r2UI7o6Ib05QuiWbP
QSzVy2W7msw4seclD+ZoyyTfpeQImGwlkNI8tryjeQpSo3vmHgkgP1uNxNW/CSTw
zW4TvjDdi03dlK8Ikej50uLMoO/tkup2pA==
-----END CERTIFICATE-----
Generated at Fri May 9 13:32:30 2025 by rpki-client