Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa
File:                     a795d652-aec5-344a-8f1b-02328428e50c.roa (raw, json)
Hash identifier:          AbbicsxChutEwknJ62/CrMgcDo1F3VgBVbuYyWhQTb8=
Subject key identifier:   DA:4C:F3:A1:54:80:2A:73:BD:00:78:C9:70:38:DA:26:4D:A9:1E:49
Certificate issuer:       /CN=3cb45979-c30c-4872-8a79-7c08e9178605
Certificate serial:       010D0C9F4328584A4AD59617C7CF6968A9C30980
Authority key identifier: F3:4E:B7:22:17:4A:31:6F:0B:06:40:68:0B:62:CE:DF:A8:10:3D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     32169
IP address blocks:        2602:f8ee::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:96:17:c7:cf:69:68:a9:c3:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb45979-c30c-4872-8a79-7c08e9178605
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=b1edd36a-71dc-4faf-90a6-5cfa7b724ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:d7:29:8f:62:39:05:ed:8f:92:8b:2e:a4:
                    a2:ab:4e:8b:8a:e1:84:92:d0:32:7e:f0:42:a8:8b:
                    c3:2e:d1:8c:85:4e:13:ee:35:8e:9b:0a:37:46:97:
                    7a:70:88:64:d1:1c:fa:bb:90:bd:85:68:11:12:06:
                    9b:67:8a:f9:9f:7e:db:22:34:34:44:40:00:49:62:
                    41:df:d0:9a:f5:9f:a9:27:44:e8:36:ad:9b:aa:15:
                    5a:18:94:94:6c:59:f0:3e:35:f4:92:bb:eb:83:ce:
                    34:66:e5:d7:cf:73:57:4f:2d:9b:b2:22:ee:0b:d7:
                    c4:dc:ab:2e:a1:da:dc:1a:d8:66:0e:a6:70:84:34:
                    b4:ad:f8:a5:32:a8:f8:47:09:e4:7e:c1:fc:63:3a:
                    de:cd:e0:c1:ae:ea:77:e3:71:5a:a5:39:99:fd:6a:
                    3c:2e:6a:4f:e3:a6:e2:44:1a:48:10:02:48:b6:4a:
                    76:dc:05:a3:d7:84:af:14:20:76:fd:2e:ca:e2:95:
                    41:93:70:3c:5c:ca:9a:b8:c3:70:ad:eb:0a:90:a8:
                    cc:f0:2a:8f:09:c2:b9:b6:6b:1e:49:bc:0c:94:df:
                    ec:a6:11:15:53:d8:5f:da:31:6a:24:6c:d8:19:94:
                    ed:93:09:22:6b:4b:4a:b8:bc:88:ad:2c:0c:47:09:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4C:F3:A1:54:80:2A:73:BD:00:78:C9:70:38:DA:26:4D:A9:1E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.crl

            X509v3 Authority Key Identifier:
                keyid:F3:4E:B7:22:17:4A:31:6F:0B:06:40:68:0B:62:CE:DF:A8:10:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:6e:ff:03:55:67:18:de:18:01:af:05:8c:a3:93:fd:48:
         88:a5:8c:d2:dd:e7:9f:31:b0:9f:8c:b2:72:ea:92:90:3a:51:
         50:5a:c8:e9:3f:94:f6:8c:f1:02:4a:5d:ed:0c:0f:47:69:47:
         78:98:52:de:5c:2a:ce:eb:84:80:b9:d1:f7:ce:3f:80:1c:0f:
         8d:1d:30:fb:ab:c4:01:0d:80:db:93:92:13:a5:66:dd:98:10:
         d3:c7:b2:5b:53:10:d5:81:45:45:72:19:90:01:88:41:25:c5:
         e7:79:1c:8b:1f:df:9f:1a:f6:35:a0:33:7a:66:cc:8d:c5:e9:
         61:b8:de:09:ed:d6:e2:2d:20:82:dd:30:a1:46:2e:1d:ad:2a:
         1a:60:70:54:c9:ab:dc:b7:f2:d4:4f:25:c8:db:cb:a7:74:0e:
         d3:70:45:e7:97:3c:d5:69:bb:6e:9f:68:d8:ec:0d:5c:1b:57:
         2f:e6:90:aa:61:6a:6f:65:e0:82:f6:ef:74:3a:5f:d5:90:bd:
         e8:6e:3f:c4:20:87:fe:d5:cb:c1:5c:08:76:5f:3a:12:ac:86:
         4e:a1:8d:ed:9e:d4:c6:2e:ca:a7:e1:b5:b7:e8:a4:cc:f8:6a:
         f1:c2:13:27:9b:83:f5:58:31:3f:64:08:95:42:14:98:40:57:
         b8:37:aa:09
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpK1ZYXx89paKnDCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2NiNDU5NzktYzMwYy00ODcyLThhNzktN2MwOGU5MTc4
NjA1MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk
YjFlZGQzNmEtNzFkYy00ZmFmLTkwYTYtNWNmYTdiNzI0YWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwbXKY9iOQXtj5KLLqSiq06LiuGEktAyfvBC
qIvDLtGMhU4T7jWOmwo3Rpd6cIhk0Rz6u5C9hWgREgabZ4r5n37bIjQ0REAASWJB
39Ca9Z+pJ0ToNq2bqhVaGJSUbFnwPjX0krvrg840ZuXXz3NXTy2bsiLuC9fE3Ksu
odrcGthmDqZwhDS0rfilMqj4RwnkfsH8YzrezeDBrup343FapTmZ/Wo8LmpP46bi
RBpIEAJItkp23AWj14SvFCB2/S7K4pVBk3A8XMqauMNwresKkKjM8CqPCcK5tmse
SbwMlN/sphEVU9hf2jFqJGzYGZTtkwkia0tKuLyIrSwMRwmKhQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNpM86FUgCpzvQB4yXA42iZNqR5JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zY2I0
NTk3OS1jMzBjLTQ4NzItOGE3OS03YzA4ZTkxNzg2MDUvYTc5NWQ2NTItYWVjNS0z
NDRhLThmMWItMDIzMjg0MjhlNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2NiNDU5NzktYzMwYy00ODcyLThh
NzktN2MwOGU5MTc4NjA1LzNjYjQ1OTc5LWMzMGMtNDg3Mi04YTc5LTdjMDhlOTE3
ODYwNS5jcmwwHwYDVR0jBBgwFoAU8063IhdKMW8LBkBoC2LO36gQPfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zY2I0NTk3OS1jMzBjLTQ4NzItOGE3OS03YzA4
ZTkxNzg2MDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL47gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAayVu/wNVZxjeGAGvBYyjk/1IiKWM0t3nnzGwn4yycuqSkDpRUFrI
6T+U9ozxAkpd7QwPR2lHeJhS3lwqzuuEgLnR984/gBwPjR0w+6vEAQ2A25OSE6Vm
3ZgQ08eyW1MQ1YFFRXIZkAGIQSXF53kcix/fnxr2NaAzembMjcXpYbjeCe3W4i0g
gt0woUYuHa0qGmBwVMmr3Lfy1E8lyNvLp3QO03BF55c81Wm7bp9o2OwNXBtXL+aQ
qmFqb2XggvbvdDpf1ZC96G4/xCCH/tXLwVwIdl86EqyGTqGN7Z7Uxi7Kp+G1t+ik
zPhq8cITJ5uD9VgxP2QIlUIUmEBXuDeqCQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:44:10 2025 by rpki-client