Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa
File:                     e9561f82-c553-311c-84e7-0aabf2d00674.roa (raw, json)
Hash identifier:          ztALEYpowJxwMNwlLZlP/rv80nNNvoxrejP1nzqGx2g=
Subject key identifier:   C4:A7:0E:98:BF:6C:CD:BA:01:7C:66:AA:DE:2C:68:19:AA:AE:CF:0C
Certificate issuer:       /CN=ac683038-c192-4fba-ae61-c511683cdb6a
Certificate serial:       010D0C9F4328584A58CB036F8117F6E363161500
Authority key identifier: D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     13549
IP address blocks:        2604:8fc0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:03:6f:81:17:f6:e3:63:16:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac683038-c192-4fba-ae61-c511683cdb6a
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=fcf43e35-3827-45f6-bbb0-0975ebe270c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:dd:d0:43:1d:c0:b5:03:0f:ce:4d:84:f0:
                    68:e3:5e:65:ba:8c:96:15:03:7d:a4:ed:86:ba:ce:
                    6f:d0:fa:14:8a:cf:e8:e3:a0:ba:2a:1d:0b:8a:78:
                    33:1f:0c:9a:6b:f0:b6:38:7d:f3:98:6e:f2:df:6e:
                    54:21:52:c1:73:3b:65:23:06:3c:99:03:fe:15:ef:
                    ba:ab:7b:53:89:66:5f:39:08:99:23:6a:1c:34:51:
                    75:8e:23:29:01:e1:a3:e2:a8:9c:60:ad:73:c4:90:
                    31:0b:e1:46:d3:b8:f3:51:fd:3c:f9:ad:f3:89:7e:
                    80:4b:aa:5c:aa:89:c7:10:3f:b5:2c:e7:d2:ff:94:
                    55:85:05:79:d9:7d:31:0d:12:fe:f2:ae:c7:3e:5d:
                    26:59:cc:12:d3:2c:04:9d:2c:80:77:6d:90:72:25:
                    bb:66:40:6f:cd:16:1d:dc:9e:c6:73:66:ad:40:d5:
                    8f:43:b7:d4:2a:ce:f1:83:9c:1b:9f:b8:a7:6c:35:
                    50:d1:b6:c7:4f:8e:b2:54:dc:64:b9:7d:c8:44:8e:
                    1d:c9:58:3f:46:56:7a:7a:31:a5:f6:1d:bd:c4:78:
                    bf:6c:50:f5:46:7e:41:a4:97:c7:d0:ae:aa:f0:10:
                    d3:8b:69:94:5f:b7:b0:51:e5:28:5f:93:20:10:f9:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A7:0E:98:BF:6C:CD:BA:01:7C:66:AA:DE:2C:68:19:AA:AE:CF:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl

            X509v3 Authority Key Identifier:
                keyid:D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:8d:77:66:33:f4:a6:e6:e1:a4:9c:aa:e7:b5:a1:03:62:
         c9:0c:c1:6d:ea:a5:2b:0c:06:a7:5c:ff:ae:78:8a:02:4a:6d:
         55:22:98:4c:f3:10:1b:54:6b:c8:ae:4d:03:3b:c0:22:9a:f7:
         27:bc:31:13:7e:60:9a:30:33:55:1d:34:40:0e:40:d1:7e:dd:
         83:9e:6a:50:fc:57:ba:8f:28:a5:84:ac:29:10:67:73:3a:b4:
         7f:10:9b:ac:2f:2f:59:20:5e:7d:2b:a1:a0:cc:71:09:ea:b9:
         02:7a:75:4b:22:f3:f3:b6:c3:86:e8:b6:18:db:6e:ec:a6:ac:
         af:bb:05:a4:1e:2d:30:0e:53:66:2f:13:e9:3f:e8:81:2c:82:
         29:85:34:53:5b:c7:e4:c4:64:90:27:19:9d:60:21:88:8a:a0:
         a4:0f:aa:3a:20:28:69:b5:6f:c1:09:08:5a:c8:b4:bc:6a:2e:
         b1:40:fa:4e:72:c4:6c:3b:1a:68:6a:6c:98:18:01:a8:52:1f:
         88:95:c1:b1:7b:a6:13:13:2a:34:e7:8f:88:84:a9:7f:67:49:
         aa:6e:91:ac:b7:8e:9d:6c:c7:5d:42:cd:fd:a4:87:ab:00:72:
         2a:03:e5:82:13:3e:83:34:f7:c3:a6:79:36:0c:f0:00:a5:36:
         92:f9:ff:c1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpYywNvgRf242MWFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM2ODMwMzgtYzE5Mi00ZmJhLWFlNjEtYzUxMTY4M2Nk
YjZhMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk
ZmNmNDNlMzUtMzgyNy00NWY2LWJiYjAtMDk3NWViZTI3MGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPXd0EMdwLUDD85NhPBo415luoyWFQN9pO2G
us5v0PoUis/o46C6Kh0LingzHwyaa/C2OH3zmG7y325UIVLBcztlIwY8mQP+Fe+6
q3tTiWZfOQiZI2ocNFF1jiMpAeGj4qicYK1zxJAxC+FG07jzUf08+a3ziX6AS6pc
qonHED+1LOfS/5RVhQV52X0xDRL+8q7HPl0mWcwS0ywEnSyAd22QciW7ZkBvzRYd
3J7Gc2atQNWPQ7fUKs7xg5wbn7inbDVQ0bbHT46yVNxkuX3IRI4dyVg/RlZ6ejGl
9h29xHi/bFD1Rn5BpJfH0K6q8BDTi2mUX7ewUeUoX5MgEPlfMQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMSnDpi/bM26AXxmqt4saBmqrs8MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYzY4
MzAzOC1jMTkyLTRmYmEtYWU2MS1jNTExNjgzY2RiNmEvZTk1NjFmODItYzU1My0z
MTFjLTg0ZTctMGFhYmYyZDAwNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWM2ODMwMzgtYzE5Mi00ZmJhLWFl
NjEtYzUxMTY4M2NkYjZhL2FjNjgzMDM4LWMxOTItNGZiYS1hZTYxLWM1MTE2ODNj
ZGI2YS5jcmwwHwYDVR0jBBgwFoAU0fQd2ydOO6Cle0sRF8kWXYUhHhEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYzY4MzAzOC1jMTkyLTRmYmEtYWU2MS1jNTEx
NjgzY2RiNmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSPwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCdMo13ZjP0pubhpJyq57WhA2LJDMFt6qUrDAanXP+ueIoCSm1VIphM
8xAbVGvIrk0DO8AimvcnvDETfmCaMDNVHTRADkDRft2DnmpQ/Fe6jyilhKwpEGdz
OrR/EJusLy9ZIF59K6GgzHEJ6rkCenVLIvPztsOG6LYY227spqyvuwWkHi0wDlNm
LxPpP+iBLIIphTRTW8fkxGSQJxmdYCGIiqCkD6o6IChptW/BCQhayLS8ai6xQPpO
csRsOxpoamyYGAGoUh+IlcGxe6YTEyo054+IhKl/Z0mqbpGst46dbMddQs39pIer
AHIqA+WCEz6DNPfDpnk2DPAApTaS+f/B
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:43:51 2025 by rpki-client