Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3af6c421-8d2f-333e-b3d8-ef43fc57fcfc.roa
File:                     3af6c421-8d2f-333e-b3d8-ef43fc57fcfc.roa (raw, json)
Hash identifier:          uKGjuvMwsDILklGlTdeU2XEQwvtxyhWucgji7fB3TkI=
Subject key identifier:   BF:2D:67:23:D5:30:86:90:D4:11:DB:D2:0F:E4:6E:7B:88:BD:76:16
Certificate issuer:       /CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
Certificate serial:       010D0C9F4328584A225AC9B7020D7FC9878A7BE0
Authority key identifier: EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3af6c421-8d2f-333e-b3d8-ef43fc57fcfc.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        2602:f883::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:c9:b7:02:0d:7f:c9:87:8a:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb083c-1c52-44e2-a39b-2fc903cf9da2
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=a845fced-e514-4996-9db9-4d3f96c7b7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:e9:d9:83:05:cf:62:75:bc:70:73:d1:70:
                    23:c4:0b:d9:2d:aa:ed:07:39:42:2e:3e:8a:76:18:
                    36:f3:4d:a9:07:5a:86:11:ba:bb:b6:bc:d4:37:95:
                    90:de:32:90:00:61:27:bd:32:b5:a7:55:36:38:d3:
                    e4:0d:79:4f:76:91:36:bb:19:b6:29:42:70:46:51:
                    0e:69:10:3e:46:f9:f4:65:6c:f1:e0:d8:9e:76:69:
                    52:3a:cb:8f:5d:0f:b5:07:49:28:5f:24:51:bf:79:
                    e9:4c:e4:b8:dd:b6:f6:7c:9d:0e:e4:c2:be:11:fd:
                    b4:d2:1f:18:30:13:f7:f1:96:66:b1:c0:bb:ab:63:
                    23:9d:9a:da:a5:29:77:45:46:7a:2f:91:9f:aa:90:
                    06:20:da:1a:ec:e9:82:6f:2d:69:53:ea:fe:ba:eb:
                    7a:72:49:a1:7b:47:a4:7e:f3:0a:00:8b:ac:ef:e7:
                    d8:b4:70:aa:ae:0a:48:1e:ea:9c:7f:4c:7b:82:b6:
                    bb:68:27:96:99:d8:56:74:09:4b:04:f5:69:fe:91:
                    a4:af:34:e6:e9:5b:a3:3b:db:2a:cc:76:34:76:f3:
                    6d:ff:ec:cb:d9:70:d0:d1:f4:9b:75:3f:a1:d1:5b:
                    f3:3b:1d:d2:4a:ba:77:7b:dc:c3:f7:07:7d:9b:f2:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2D:67:23:D5:30:86:90:D4:11:DB:D2:0F:E4:6E:7B:88:BD:76:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/3af6c421-8d2f-333e-b3d8-ef43fc57fcfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.crl

            X509v3 Authority Key Identifier:
                keyid:EE:5E:03:1C:54:D7:50:4D:52:7B:DE:BD:03:28:CF:F7:61:9E:9B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7eeb083c-1c52-44e2-a39b-2fc903cf9da2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f883::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:19:69:f4:18:59:38:61:ed:fb:89:c9:37:8e:71:07:40:7e:
         37:5c:ad:2f:e6:3e:f2:09:e6:43:b5:16:4f:2e:fe:2f:fe:24:
         60:24:8e:a5:f2:17:1a:8d:2e:e8:ba:ce:dc:d3:94:89:85:2f:
         95:a5:dc:66:d1:8b:2e:37:c0:67:85:b1:6b:9b:c0:7a:31:d9:
         24:b4:e1:a4:de:d2:66:1c:9b:10:8d:cb:e8:ab:bd:1d:cb:18:
         2b:67:98:45:34:e9:1b:6c:a7:4f:4c:80:27:05:96:16:58:50:
         23:ff:2e:23:d0:a5:06:85:4f:05:13:a5:6f:d3:fe:97:f1:67:
         03:a3:29:3e:6b:83:87:a4:d2:cd:c1:bc:3e:82:ec:36:e2:88:
         b6:89:ea:30:ac:ac:08:1a:c8:aa:2b:dc:84:2f:f2:2e:4f:3a:
         87:43:4a:dc:23:1a:83:56:01:91:bc:d2:36:9b:49:95:50:32:
         ea:b4:15:0e:1b:19:30:84:b3:6f:19:25:e2:a7:94:4e:e4:e1:
         e4:29:66:0e:f6:e4:a5:52:b3:3e:a1:0a:51:63:f4:cd:5c:ad:
         a2:5d:c7:59:b8:2a:e3:e5:de:b0:cc:7f:5c:5e:36:f2:50:6f:
         49:82:84:3f:43:9a:1d:87:28:13:85:12:d8:60:eb:ff:b6:14:
         85:f3:1a:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoiWsm3Ag1/yYeKe+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VlYjA4M2MtMWM1Mi00NGUyLWEzOWItMmZjOTAzY2Y5
ZGEyMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk
YTg0NWZjZWQtZTUxNC00OTk2LTlkYjktNGQzZjk2YzdiN2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Xp2YMFz2J1vHBz0XAjxAvZLartBzlCLj6K
dhg2802pB1qGEbq7trzUN5WQ3jKQAGEnvTK1p1U2ONPkDXlPdpE2uxm2KUJwRlEO
aRA+Rvn0ZWzx4NiedmlSOsuPXQ+1B0koXyRRv3npTOS43bb2fJ0O5MK+Ef200h8Y
MBP38ZZmscC7q2MjnZrapSl3RUZ6L5GfqpAGINoa7OmCby1pU+r+uut6ckmhe0ek
fvMKAIus7+fYtHCqrgpIHuqcf0x7gra7aCeWmdhWdAlLBPVp/pGkrzTm6VujO9sq
zHY0dvNt/+zL2XDQ0fSbdT+h0VvzOx3SSrp3e9zD9wd9m/LTtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL8tZyPVMIaQ1BHb0g/kbnuIvXYWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZWVi
MDgzYy0xYzUyLTQ0ZTItYTM5Yi0yZmM5MDNjZjlkYTIvM2FmNmM0MjEtOGQyZi0z
MzNlLWIzZDgtZWY0M2ZjNTdmY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2VlYjA4M2MtMWM1Mi00NGUyLWEz
OWItMmZjOTAzY2Y5ZGEyLzdlZWIwODNjLTFjNTItNDRlMi1hMzliLTJmYzkwM2Nm
OWRhMi5jcmwwHwYDVR0jBBgwFoAU7l4DHFTXUE1Se969AyjP92Gem7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZWViMDgzYy0xYzUyLTQ0ZTItYTM5Yi0yZmM5
MDNjZjlkYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL4gwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALsZafQYWThh7fuJyTeOcQdAfjdcrS/mPvIJ5kO1Fk8u/i/+JGAk
jqXyFxqNLui6ztzTlImFL5Wl3GbRiy43wGeFsWubwHox2SS04aTe0mYcmxCNy+ir
vR3LGCtnmEU06Rtsp09MgCcFlhZYUCP/LiPQpQaFTwUTpW/T/pfxZwOjKT5rg4ek
0s3BvD6C7DbiiLaJ6jCsrAgayKor3IQv8i5POodDStwjGoNWAZG80jabSZVQMuq0
FQ4bGTCEs28ZJeKnlE7k4eQpZg725KVSsz6hClFj9M1craJdx1m4KuPl3rDMf1xe
NvJQb0mChD9Dmh2HKBOFEthg6/+2FIXzGgo=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:32:48 2025 by rpki-client