Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa
File:                     7d68b9ce-b762-3e17-8013-4ff3f5937365.roa (raw, json)
Hash identifier:          co1LCBRDNJGBUvtTX+dIhO4Dk6CE2H9uzXKFA/rNzpQ=
Subject key identifier:   E0:02:31:75:AC:E6:BE:10:B1:02:6E:0A:59:17:C1:09:7D:B5:BD:65
Certificate issuer:       /CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec
Certificate serial:       010D0C9F4328584A3CE0240586BD698629283080
Authority key identifier: 5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     401268
IP address blocks:        2602:f86d::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:24:05:86:bd:69:86:29:28:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=c7774786-4753-4a2d-ab4c-d2d9acabee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:7d:87:8a:a6:ee:e4:f1:87:67:1e:c2:04:
                    cf:9d:82:03:11:e3:f6:6e:03:e9:7f:3f:f0:77:55:
                    c2:d6:c4:58:27:6f:c0:89:f8:0c:24:1a:9b:6b:b7:
                    fc:63:f4:b2:b0:8c:7a:10:99:4b:80:e6:17:ba:6a:
                    40:b8:ca:a5:ae:6b:78:34:ed:76:e3:c6:f3:5a:de:
                    2e:87:e7:44:40:4e:be:c0:ae:38:ef:46:79:6b:26:
                    69:54:ba:2d:13:32:b0:cf:b7:21:9a:2b:6c:f5:c9:
                    ae:49:0e:68:59:f2:2f:ea:53:ac:25:60:3d:dd:81:
                    c5:4d:b2:8d:6c:a8:f4:b9:28:53:1a:25:9c:7e:76:
                    c9:db:14:c0:f7:85:0b:07:36:e5:c9:af:6e:e5:4f:
                    d1:8e:83:aa:5f:8d:6b:35:d1:f0:8f:17:8e:02:32:
                    44:89:38:ef:51:ce:52:cf:06:73:4d:da:b2:b8:26:
                    8c:1e:66:b4:63:3d:ba:53:fa:e8:13:55:9d:26:38:
                    fa:46:cc:7f:60:e3:06:a1:f2:b8:85:58:0b:d2:f0:
                    32:2a:82:6b:3a:e0:ae:01:80:f0:1f:82:3f:2e:9c:
                    35:ae:fc:aa:51:46:10:8e:3f:67:ba:94:c6:a1:46:
                    a7:35:12:a6:d4:28:fb:38:1a:5e:22:51:bd:d7:e2:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:02:31:75:AC:E6:BE:10:B1:02:6E:0A:59:17:C1:09:7D:B5:BD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl

            X509v3 Authority Key Identifier:
                keyid:5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:68:0b:53:2b:7f:4b:79:ef:1f:22:ee:34:dd:35:de:c5:d0:
         e7:f1:8c:17:d6:17:73:30:68:0d:2f:b1:36:b4:87:24:21:4b:
         88:af:0a:02:24:ef:f2:28:35:52:9e:ca:fb:a8:7a:3d:1f:e7:
         d1:10:d2:d7:21:70:34:19:a0:6b:3a:d3:11:d3:0b:f7:67:f0:
         8d:95:53:e2:1b:64:de:ea:31:f9:0f:03:a9:7b:d6:59:6e:9b:
         5e:53:d7:42:6b:ce:5c:47:15:59:6c:e7:ce:7a:38:46:d0:2f:
         11:05:bb:d4:c4:5d:20:29:8d:dc:4a:2b:29:4d:a3:20:7d:e4:
         70:df:c5:09:31:04:b5:87:87:32:27:6e:49:5a:0b:19:72:31:
         95:ea:43:91:77:b5:a1:e4:9e:4d:0b:ef:d5:d6:88:82:7b:2c:
         ca:cf:7e:7a:80:51:2c:41:43:59:75:90:5e:dd:a7:a7:7f:47:
         c0:7b:ed:ad:da:bd:bd:cb:76:61:ec:cf:a7:db:54:b9:c7:c6:
         41:d0:a7:02:8f:49:fc:17:b7:75:10:27:17:71:dc:a4:35:90:
         89:10:7f:38:c9:8b:c8:eb:09:ba:eb:57:d8:3d:2d:e8:65:5f:
         45:59:5d:db:7f:05:e8:d2:12:54:d3:26:f3:8f:94:6b:12:ef:
         7b:b2:b3:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEo84CQFhr1phikoMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQwM2Y4ZTItMmM2Yi00MWFiLThhNGYtYTIwZjk1ODcx
OWVjMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk
Yzc3NzQ3ODYtNDc1My00YTJkLWFiNGMtZDJkOWFjYWJlZTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ap9h4qm7uTxh2cewgTPnYIDEeP2bgPpfz/w
d1XC1sRYJ2/AifgMJBqba7f8Y/SysIx6EJlLgOYXumpAuMqlrmt4NO1248bzWt4u
h+dEQE6+wK4470Z5ayZpVLotEzKwz7chmits9cmuSQ5oWfIv6lOsJWA93YHFTbKN
bKj0uShTGiWcfnbJ2xTA94ULBzblya9u5U/RjoOqX41rNdHwjxeOAjJEiTjvUc5S
zwZzTdqyuCaMHma0Yz26U/roE1WdJjj6Rsx/YOMGofK4hVgL0vAyKoJrOuCuAYDw
H4I/Lpw1rvyqUUYQjj9nupTGoUanNRKm1Cj7OBpeIlG91+K90wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOACMXWs5r4QsQJuClkXwQl9tb1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZDAz
ZjhlMi0yYzZiLTQxYWItOGE0Zi1hMjBmOTU4NzE5ZWMvN2Q2OGI5Y2UtYjc2Mi0z
ZTE3LTgwMTMtNGZmM2Y1OTM3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWQwM2Y4ZTItMmM2Yi00MWFiLThh
NGYtYTIwZjk1ODcxOWVjL2FkMDNmOGUyLTJjNmItNDFhYi04YTRmLWEyMGY5NTg3
MTllYy5jcmwwHwYDVR0jBBgwFoAUXV/xvjb29/cOe7YtxcZ5Fl6HVbwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZDAzZjhlMi0yYzZiLTQxYWItOGE0Zi1hMjBm
OTU4NzE5ZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4bQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANmgLUyt/S3nvHyLuNN013sXQ5/GMF9YXczBoDS+xNrSHJCFLiK8K
AiTv8ig1Up7K+6h6PR/n0RDS1yFwNBmgazrTEdML92fwjZVT4htk3uox+Q8DqXvW
WW6bXlPXQmvOXEcVWWznzno4RtAvEQW71MRdICmN3EorKU2jIH3kcN/FCTEEtYeH
MiduSVoLGXIxlepDkXe1oeSeTQvv1daIgnssys9+eoBRLEFDWXWQXt2np39HwHvt
rdq9vct2YezPp9tUucfGQdCnAo9J/Be3dRAnF3HcpDWQiRB/OMmLyOsJuutX2D0t
6GVfRVld238F6NISVNMm84+UaxLve7KzEQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 23:41:24 2025 by rpki-client