Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/e33bbd30-5261-340f-820d-c23282954daf.roa
File:                     e33bbd30-5261-340f-820d-c23282954daf.roa (raw, json)
Hash identifier:          shSuQXxWTw5/RuLgROhClDWQbzwVWXq4drCTIs78jYI=
Subject key identifier:   5B:B3:8C:89:89:84:BA:06:4B:47:7E:C0:CE:F3:13:AE:85:01:C4:8B
Certificate issuer:       /CN=5cc1a2c5-2615-4740-8c70-3bc7ed132d98
Certificate serial:       010D0C9F4328584A374AC4F29C2300A400C84080
Authority key identifier: C5:7D:6E:DB:5C:90:20:CD:51:B2:95:9E:FB:2E:C4:2A:D0:1D:21:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/e33bbd30-5261-340f-820d-c23282954daf.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     399206
IP address blocks:        2602:fc84::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c4:f2:9c:23:00:a4:00:c8:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc1a2c5-2615-4740-8c70-3bc7ed132d98
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=e668efe1-0174-44db-9725-404244890bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:a3:f1:fe:39:0b:0a:f9:78:30:b2:78:cf:
                    99:e9:9b:aa:83:55:69:81:b1:f6:75:45:3f:89:6a:
                    fc:b6:03:60:06:a3:19:63:72:26:08:ff:0c:2f:05:
                    43:6b:3f:8d:d0:5a:6a:6a:92:aa:d6:12:f2:35:06:
                    53:71:9e:90:63:b4:4f:b4:8c:24:19:ab:13:19:b6:
                    46:6c:5e:19:5c:5d:a6:25:0b:c3:b7:5e:c7:30:52:
                    70:49:ad:7f:5e:4b:33:ef:a2:74:45:b4:f3:79:73:
                    0f:54:e6:e9:46:5f:e3:a4:42:7c:75:0c:3d:af:22:
                    e4:6e:f7:c8:73:18:e4:5e:52:42:0d:46:ac:9a:58:
                    46:f7:93:92:99:00:58:30:41:2a:53:fb:5a:9c:bb:
                    67:5a:fc:66:84:57:dc:b9:0f:dd:9b:14:3e:6c:cb:
                    97:96:1c:f5:92:05:93:3a:fa:03:f2:9e:ad:90:3e:
                    7f:56:f5:f4:a5:a9:fd:38:4a:c4:13:80:73:b4:26:
                    5e:b3:22:0d:36:32:ef:b2:29:5f:e0:3e:05:cc:08:
                    f5:24:77:d1:00:72:19:7d:96:09:2c:fd:32:34:a6:
                    c0:ba:25:99:00:d1:41:4e:c7:99:48:5a:64:dc:fa:
                    5c:32:a5:db:81:4d:e1:55:03:f8:8c:8c:34:29:1c:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B3:8C:89:89:84:BA:06:4B:47:7E:C0:CE:F3:13:AE:85:01:C4:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/e33bbd30-5261-340f-820d-c23282954daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.crl

            X509v3 Authority Key Identifier:
                keyid:C5:7D:6E:DB:5C:90:20:CD:51:B2:95:9E:FB:2E:C4:2A:D0:1D:21:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc84::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d4:cf:fd:f5:35:d9:98:79:e1:9d:7e:af:99:58:f3:ac:00:
         f3:c2:f6:5c:f4:10:72:2e:66:7f:92:3d:01:3d:4e:0c:c9:17:
         f8:bb:97:ff:4e:36:24:86:5e:e5:1e:0e:cb:c4:83:0e:87:25:
         f4:0f:69:28:7e:77:dd:ba:47:4d:91:b4:cb:6e:60:cc:7f:45:
         7d:1c:36:1b:f3:bd:9b:bd:a0:23:1f:5e:bf:7f:a6:e7:1a:ec:
         fc:51:57:cf:eb:0f:51:51:1f:b2:c3:85:62:d4:4a:d9:12:19:
         dd:a6:d4:ca:c4:c8:b7:0f:a8:40:20:84:64:5d:cb:fa:36:a2:
         6b:e7:9a:87:13:64:a3:97:57:a6:ef:23:50:ff:48:84:ff:1b:
         51:b5:79:5a:a3:9f:33:28:0e:b5:0c:ed:a0:0d:d2:d9:fa:b3:
         59:a7:04:05:6a:08:35:a1:4d:b6:55:6d:93:85:62:c4:a7:d9:
         e0:f4:85:f7:96:b6:b6:83:1e:06:45:e1:06:f4:f1:1d:fd:6e:
         00:32:af:d8:69:10:11:a7:8b:d4:de:7d:34:8f:f9:4b:3e:69:
         b6:ca:5b:fc:96:64:57:34:e3:9d:ed:f9:9c:ed:a7:47:09:8f:
         63:31:0a:d9:7f:bd:ce:a7:45:d1:a2:ee:d8:3f:32:bd:f9:01:
         2f:d1:44:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEo3SsTynCMApADIQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjMWEyYzUtMjYxNS00NzQwLThjNzAtM2JjN2VkMTMy
ZDk4MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
ZTY2OGVmZTEtMDE3NC00NGRiLTk3MjUtNDA0MjQ0ODkwYmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/uj8f45Cwr5eDCyeM+Z6Zuqg1VpgbH2dUU/
iWr8tgNgBqMZY3ImCP8MLwVDaz+N0FpqapKq1hLyNQZTcZ6QY7RPtIwkGasTGbZG
bF4ZXF2mJQvDt17HMFJwSa1/Xksz76J0RbTzeXMPVObpRl/jpEJ8dQw9ryLkbvfI
cxjkXlJCDUasmlhG95OSmQBYMEEqU/tanLtnWvxmhFfcuQ/dmxQ+bMuXlhz1kgWT
OvoD8p6tkD5/VvX0pan9OErEE4BztCZesyINNjLvsilf4D4FzAj1JHfRAHIZfZYJ
LP0yNKbAuiWZANFBTseZSFpk3PpcMqXbgU3hVQP4jIw0KRzIYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFuzjImJhLoGS0d+wM7zE66FAcSLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Y2Mx
YTJjNS0yNjE1LTQ3NDAtOGM3MC0zYmM3ZWQxMzJkOTgvZTMzYmJkMzAtNTI2MS0z
NDBmLTgyMGQtYzIzMjgyOTU0ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWNjMWEyYzUtMjYxNS00NzQwLThj
NzAtM2JjN2VkMTMyZDk4LzVjYzFhMmM1LTI2MTUtNDc0MC04YzcwLTNiYzdlZDEz
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUxX1u21yQIM1RspWe+y7EKtAdITwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81Y2MxYTJjNS0yNjE1LTQ3NDAtOGM3MC0zYmM3
ZWQxMzJkOTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8hAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAENTP/fU12Zh54Z1+r5lY86wA88L2XPQQci5mf5I9AT1ODMkX+LuX
/042JIZe5R4Oy8SDDocl9A9pKH533bpHTZG0y25gzH9FfRw2G/O9m72gIx9ev3+m
5xrs/FFXz+sPUVEfssOFYtRK2RIZ3abUysTItw+oQCCEZF3L+jaia+eahxNko5dX
pu8jUP9IhP8bUbV5WqOfMygOtQztoA3S2fqzWacEBWoINaFNtlVtk4VixKfZ4PSF
95a2toMeBkXhBvTxHf1uADKv2GkQEaeL1N59NI/5Sz5ptspb/JZkVzTjne35nO2n
RwmPYzEK2X+9zqdF0aLu2D8yvfkBL9FE7Q==
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:34:19 2025 by rpki-client