Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/198a9e65-2615-3b6d-8693-9d7ec9b7fd13.roa
File:                     198a9e65-2615-3b6d-8693-9d7ec9b7fd13.roa (raw, json)
Hash identifier:          HgEFFEv1xmi16AGFo4B2N/LSKybxvQ07mP2I9SG8QiM=
Subject key identifier:   FE:2F:0D:FB:31:0B:52:F7:4D:11:84:2E:9C:94:03:13:74:1B:7D:5A
Certificate issuer:       /CN=cf35609e-0e1f-484a-af8f-815006d97f11
Certificate serial:       010D0C9F4328584A5765CF17251349EB7D899086
Authority key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/198a9e65-2615-3b6d-8693-9d7ec9b7fd13.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     14694
IP address blocks:        2602:fa5c::/41 maxlen: 48
                          2602:fa5c:80::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cf:17:25:13:49:eb:7d:89:90:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf35609e-0e1f-484a-af8f-815006d97f11
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=079bc354-65be-417c-8118-54b9a6325a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:c0:53:db:72:32:bd:7d:b5:ea:6e:14:b9:
                    9a:67:ea:aa:c2:e3:3a:0b:b2:35:92:d4:5d:ea:cb:
                    b9:15:7c:8c:c7:b8:e5:55:64:d0:d0:41:71:d8:40:
                    42:52:40:aa:fe:00:ab:d3:c4:80:82:56:cd:9a:37:
                    80:7e:84:51:08:20:60:0a:97:14:2a:70:2f:ea:f9:
                    2e:aa:a6:8c:71:77:ef:ad:96:0e:b4:86:ef:1a:3f:
                    e4:2c:fa:3c:5e:93:51:2f:f3:0f:cf:d6:a9:30:a9:
                    f0:6d:38:12:3a:2e:4d:45:8f:22:ae:6b:29:b3:fb:
                    e2:06:8b:bc:a0:1b:6c:45:3f:a8:42:1e:1a:1a:9b:
                    22:da:a6:bd:0c:33:26:49:45:22:27:7f:c5:ca:68:
                    0a:6d:96:4c:e7:1c:2d:0f:83:e6:eb:cf:15:fd:03:
                    03:dc:73:c0:51:42:b8:df:7a:d4:08:cc:86:0e:f5:
                    27:73:9a:8c:4b:7f:50:bf:a9:25:c3:95:47:48:c1:
                    e1:53:28:f6:3a:95:c8:64:5a:2c:cf:bc:67:d5:5a:
                    84:4b:db:56:60:e0:e2:03:e8:d5:86:16:b9:29:fd:
                    e8:2e:16:77:ab:40:fa:35:c0:58:72:74:87:4c:bb:
                    54:4e:fa:fb:6a:b5:7c:f1:37:20:29:14:b2:ef:43:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2F:0D:FB:31:0B:52:F7:4D:11:84:2E:9C:94:03:13:74:1B:7D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/198a9e65-2615-3b6d-8693-9d7ec9b7fd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl

            X509v3 Authority Key Identifier:
                keyid:CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa5c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:98:cc:45:67:bf:f5:e7:37:7c:ca:03:7e:e3:2d:99:e0:
         60:1e:c6:65:e1:83:56:13:85:04:43:5b:92:14:92:3c:4e:df:
         0e:c4:6c:6f:c4:c6:df:28:42:68:1c:e9:7f:fb:c9:59:6f:02:
         6d:a3:ff:ae:ff:69:00:94:86:1f:bb:ff:d1:e6:37:b8:6c:cf:
         20:89:e1:74:e3:f6:ef:0f:be:93:71:38:26:de:25:e4:3e:ce:
         a0:d0:b0:da:fe:5f:b9:36:4d:1b:2a:ae:a5:3e:e3:87:01:e0:
         b7:52:5f:e2:1d:63:88:92:b1:95:a8:b0:7f:1c:75:b8:d4:7e:
         89:9c:71:ca:e6:cc:46:28:a6:e7:ad:c1:b0:4e:50:54:89:3c:
         1d:37:af:e5:f3:45:54:44:bc:26:1b:c1:19:43:39:87:8f:0a:
         e6:e8:8d:12:74:3c:8e:97:89:f7:dd:8d:93:a0:e0:b1:44:65:
         13:87:ff:b1:59:79:c2:38:8c:f5:e5:8a:2a:10:a3:1c:45:67:
         52:dc:99:b2:08:44:76:40:12:64:93:a8:9b:ae:aa:ac:3b:f1:
         4b:35:24:d3:a6:63:9f:cc:f0:d0:c4:a2:50:cf:7d:d9:ad:59:
         77:9a:33:f6:ea:00:18:f5:ce:14:fd:21:28:61:ae:ed:48:b9:
         85:3e:6a:ba
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpXZc8XJRNJ632JkIYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YzNTYwOWUtMGUxZi00ODRhLWFmOGYtODE1MDA2ZDk3
ZjExMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk
MDc5YmMzNTQtNjViZS00MTdjLTgxMTgtNTRiOWE2MzI1YTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql/AU9tyMr19tepuFLmaZ+qqwuM6C7I1ktRd
6su5FXyMx7jlVWTQ0EFx2EBCUkCq/gCr08SAglbNmjeAfoRRCCBgCpcUKnAv6vku
qqaMcXfvrZYOtIbvGj/kLPo8XpNRL/MPz9apMKnwbTgSOi5NRY8irmsps/viBou8
oBtsRT+oQh4aGpsi2qa9DDMmSUUiJ3/FymgKbZZM5xwtD4Pm688V/QMD3HPAUUK4
33rUCMyGDvUnc5qMS39Qv6klw5VHSMHhUyj2OpXIZFosz7xn1VqES9tWYODiA+jV
hha5Kf3oLhZ3q0D6NcBYcnSHTLtUTvr7arV88TcgKRSy70NxfQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP4vDfsxC1L3TRGELpyUAxN0G31aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZjM1
NjA5ZS0wZTFmLTQ4NGEtYWY4Zi04MTUwMDZkOTdmMTEvMTk4YTllNjUtMjYxNS0z
YjZkLTg2OTMtOWQ3ZWM5YjdmZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2YzNTYwOWUtMGUxZi00ODRhLWFm
OGYtODE1MDA2ZDk3ZjExL2NmMzU2MDllLTBlMWYtNDg0YS1hZjhmLTgxNTAwNmQ5
N2YxMS5jcmwwHwYDVR0jBBgwFoAUzpoIfCEGnAg9xnm627IoNHEbL2QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZjM1NjA5ZS0wZTFmLTQ4NGEtYWY4Zi04MTUw
MDZkOTdmMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6XAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXpeYzEVnv/XnN3zKA37jLZngYB7GZeGDVhOFBENbkhSSPE7fDsRs
b8TG3yhCaBzpf/vJWW8CbaP/rv9pAJSGH7v/0eY3uGzPIInhdOP27w++k3E4Jt4l
5D7OoNCw2v5fuTZNGyqupT7jhwHgt1Jf4h1jiJKxlaiwfxx1uNR+iZxxyubMRiim
563BsE5QVIk8HTev5fNFVES8JhvBGUM5h48K5uiNEnQ8jpeJ992Nk6DgsURlE4f/
sVl5wjiM9eWKKhCjHEVnUtyZsghEdkASZJOom66qrDvxSzUk06Zjn8zw0MSiUM99
2a1Zd5oz9uoAGPXOFP0hKGGu7Ui5hT5qug==
-----END CERTIFICATE-----
Generated at Sun Jun 29 20:08:39 2025 by rpki-client