Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa
File:                     651d2b54-918a-399f-9d4d-c66a10805267.roa (raw, json)
Hash identifier:          /n8+4+Wr07MTdivzm7Xkse2wh6ChLXk/wtNvsZBsg2I=
Subject key identifier:   05:B9:C6:91:AF:7E:55:0D:29:5C:5C:5B:14:1A:2F:32:A7:C3:3D:59
Certificate issuer:       /CN=e39e30b0-0750-4b85-a454-b97ac36b3e14
Certificate serial:       010D0C9F4328584A5765D30E8A8A661A237FF700
Authority key identifier: 31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     401443
IP address blocks:        2602:f7c1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d3:0e:8a:8a:66:1a:23:7f:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39e30b0-0750-4b85-a454-b97ac36b3e14
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=fb75494a-4607-4456-a8fa-02827440ba31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:64:d0:91:25:e5:98:d5:e9:31:1a:b1:a1:
                    b1:9f:b4:f8:e1:72:eb:6e:94:f5:f1:37:75:3e:7c:
                    d3:23:93:ec:3c:9a:96:17:e0:bd:94:15:fd:7a:50:
                    3f:1a:c0:6e:3c:78:d6:fd:5a:b8:3d:68:bb:4c:58:
                    76:6c:22:07:27:f9:26:d7:b3:cc:f3:7a:22:c2:d0:
                    cb:32:4b:46:21:23:7b:78:54:2b:34:53:38:36:08:
                    c9:8a:4c:25:05:69:eb:8f:68:7e:d4:52:a3:ee:75:
                    53:1b:4f:48:9d:b4:14:c5:cc:67:c4:b5:a1:d7:16:
                    1d:f6:79:91:35:da:d3:c3:fd:31:95:af:d6:a5:5a:
                    a6:1b:dd:9a:0d:3d:66:a7:ef:b2:ba:7c:e0:b6:86:
                    73:3c:5a:5d:53:42:1e:6f:ce:1f:8a:62:9d:79:80:
                    ab:48:d8:28:c1:8f:7c:43:73:a5:f4:38:5f:59:3f:
                    56:fa:f3:df:0f:bd:ba:e2:d5:7c:23:39:28:8a:1d:
                    a5:57:18:ed:26:72:8e:ce:8c:90:f3:78:9d:83:0b:
                    8d:1f:91:ef:68:a1:fa:7e:63:7b:e9:49:aa:2e:a0:
                    b4:b2:b1:2f:da:9f:b7:9b:58:03:67:70:2a:ae:70:
                    86:cf:35:ea:69:d5:ce:27:0b:74:77:ed:24:86:85:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B9:C6:91:AF:7E:55:0D:29:5C:5C:5B:14:1A:2F:32:A7:C3:3D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl

            X509v3 Authority Key Identifier:
                keyid:31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e3:01:af:41:2a:5d:b5:66:c4:37:9d:91:c0:a8:59:7e:3f:
         48:ec:11:4d:28:5f:2a:86:27:b3:97:ae:f3:62:2f:70:6c:40:
         29:a7:ec:81:b1:11:20:d3:82:0e:3e:84:db:e4:79:12:a1:5d:
         18:f9:54:a0:c5:eb:2b:5b:58:50:4d:e0:4c:fe:82:dc:5a:bc:
         28:f5:7a:e5:cc:7d:61:e2:59:d9:1d:04:9a:cb:23:14:f1:02:
         91:2b:6b:ed:4d:38:49:ae:69:2b:86:97:11:52:56:f3:13:0d:
         dd:3e:02:a9:5f:3c:70:e8:a1:99:61:72:4e:71:15:0c:ef:84:
         3d:ab:24:7b:cf:cc:ad:3a:88:c8:fe:03:89:04:bb:0a:95:e2:
         d5:c8:02:93:a2:e4:ea:d7:cd:90:4c:0e:d2:4c:7f:48:4d:bf:
         00:66:04:63:60:b1:6e:25:b0:65:c5:a8:23:42:4c:74:d9:7c:
         47:98:aa:b9:35:38:b1:97:60:cc:f8:dd:5d:d0:9b:81:8e:2e:
         57:a2:8f:a1:0f:93:cc:0c:03:7d:5e:91:67:0d:cf:79:a2:98:
         82:6c:ad:97:c1:d3:ad:b7:48:7e:76:8b:77:26:b2:a8:e9:25:
         6f:91:1c:7b:0a:21:ea:e9:5f:fb:26:22:e7:c1:70:6e:59:37:
         84:6c:93:04
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpXZdMOiopmGiN/9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5ZTMwYjAtMDc1MC00Yjg1LWE0NTQtYjk3YWMzNmIz
ZTE0MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk
ZmI3NTQ5NGEtNDYwNy00NDU2LWE4ZmEtMDI4Mjc0NDBiYTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS9k0JEl5ZjV6TEasaGxn7T44XLrbpT18Td1
PnzTI5PsPJqWF+C9lBX9elA/GsBuPHjW/Vq4PWi7TFh2bCIHJ/km17PM83oiwtDL
MktGISN7eFQrNFM4NgjJikwlBWnrj2h+1FKj7nVTG09InbQUxcxnxLWh1xYd9nmR
NdrTw/0xla/WpVqmG92aDT1mp++yunzgtoZzPFpdU0Ieb84fimKdeYCrSNgowY98
Q3Ol9DhfWT9W+vPfD7264tV8Izkoih2lVxjtJnKOzoyQ83idgwuNH5HvaKH6fmN7
6UmqLqC0srEv2p+3m1gDZ3AqrnCGzzXqadXOJwt0d+0khoUPWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAW5xpGvflUNKVxcWxQaLzKnwz1ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMzll
MzBiMC0wNzUwLTRiODUtYTQ1NC1iOTdhYzM2YjNlMTQvNjUxZDJiNTQtOTE4YS0z
OTlmLTlkNGQtYzY2YTEwODA1MjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTM5ZTMwYjAtMDc1MC00Yjg1LWE0
NTQtYjk3YWMzNmIzZTE0L2UzOWUzMGIwLTA3NTAtNGI4NS1hNDU0LWI5N2FjMzZi
M2UxNC5jcmwwHwYDVR0jBBgwFoAUMVx0VP28K7ST+U0O/siwXvZiUVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMzllMzBiMC0wNzUwLTRiODUtYTQ1NC1iOTdh
YzM2YjNlMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3wQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABOMBr0EqXbVmxDedkcCoWX4/SOwRTShfKoYns5eu82IvcGxAKafs
gbERINOCDj6E2+R5EqFdGPlUoMXrK1tYUE3gTP6C3Fq8KPV65cx9YeJZ2R0Emssj
FPECkStr7U04Sa5pK4aXEVJW8xMN3T4CqV88cOihmWFyTnEVDO+EPaske8/MrTqI
yP4DiQS7CpXi1cgCk6Lk6tfNkEwO0kx/SE2/AGYEY2CxbiWwZcWoI0JMdNl8R5iq
uTU4sZdgzPjdXdCbgY4uV6KPoQ+TzAwDfV6RZw3PeaKYgmytl8HTrbdIfnaLdyay
qOklb5Ecewoh6ulf+yYi58Fwblk3hGyTBA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 12:06:11 2025 by rpki-client