Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e8286f26-a565-3115-84ee-0c787fbac1bf.roa
File:                     e8286f26-a565-3115-84ee-0c787fbac1bf.roa (raw, json)
Hash identifier:          nG+hi9HxH8+OG02PxbpgXfBTfn26CbJ2XP2egzrQAZc=
Subject key identifier:   E0:80:E1:28:5B:52:5D:63:02:28:49:BC:81:2B:CF:76:7F:1F:ED:24
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584A4C3B415574D1A8C153B16D80
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e8286f26-a565-3115-84ee-0c787fbac1bf.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     27385
IP address blocks:        2602:fdaa:60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:41:55:74:d1:a8:c1:53:b1:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=4c821e47-50c1-4ea2-8db2-bee5372de87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:34:c2:ed:8c:a8:f2:1b:23:ae:49:4f:b4:
                    06:48:d7:a8:ab:2c:49:be:80:94:c6:55:60:7a:18:
                    ea:d4:fb:0b:29:80:f8:66:77:e4:3b:a6:e5:de:4b:
                    3a:90:b0:d2:45:4a:17:4b:3e:f1:21:1e:2c:29:02:
                    ba:fe:6b:f8:32:f0:b3:32:3e:8a:f2:50:9a:e1:0c:
                    e0:8f:2e:48:f2:4b:7e:e4:b3:b8:f1:6a:44:85:47:
                    82:74:1a:41:ab:84:8b:93:4f:48:78:d6:b1:b7:8d:
                    73:ad:47:88:c1:f7:86:77:ab:ad:7f:5d:5d:07:3c:
                    06:cf:7f:fc:b6:44:d9:3a:b0:4c:29:6a:15:07:e9:
                    68:de:6c:dc:04:e2:2b:27:2f:8a:2f:4d:ad:a1:b2:
                    32:68:6f:9d:54:5d:a1:65:3b:bc:45:33:83:cd:bf:
                    1e:c8:d4:e2:f0:af:8e:e2:dd:0d:a7:a1:92:c0:e6:
                    7f:e0:49:f4:16:f5:d8:b0:7e:04:d2:ea:d3:ef:66:
                    fb:31:4f:36:b2:0b:10:e7:48:2e:23:76:cf:1b:84:
                    f6:d8:c9:40:07:16:5f:47:20:d1:28:7e:14:9c:54:
                    a1:3b:55:17:25:d5:35:d8:57:c3:27:4a:69:f3:5a:
                    04:1e:25:25:4b:21:43:32:3e:0c:4d:b7:e5:a2:13:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:80:E1:28:5B:52:5D:63:02:28:49:BC:81:2B:CF:76:7F:1F:ED:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e8286f26-a565-3115-84ee-0c787fbac1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e5:0d:58:69:93:3d:61:c7:45:65:18:fe:9e:f7:f4:1b:ba:
         70:d0:30:5b:29:c2:33:f0:ff:6a:27:45:7c:c5:4f:0c:e8:86:
         e3:7e:88:d9:28:91:4d:52:44:48:1e:f5:c5:d0:78:48:b9:7e:
         47:04:b8:00:2d:20:33:76:d8:15:b2:aa:a6:55:d8:4c:19:e6:
         4a:39:94:be:cd:11:26:35:23:87:54:5c:1a:33:46:b3:88:d1:
         67:04:65:86:96:6d:27:15:87:1f:ee:c3:62:a2:33:60:7b:bf:
         04:ae:2a:6a:76:f5:5e:b7:bf:5b:2a:5d:3b:75:4d:43:f7:86:
         a5:9d:da:c1:44:89:fd:a7:23:ba:03:f5:6d:2a:49:76:82:22:
         3e:b4:22:4d:33:69:dd:b1:65:25:02:2f:cb:41:7b:b2:64:fd:
         ca:bc:d9:16:4a:f8:a5:70:90:bf:c3:30:9b:00:f4:e8:c8:52:
         9d:f8:72:a6:17:df:27:18:5b:8c:ec:eb:97:bb:91:e8:16:b8:
         dd:9f:48:1a:e6:b3:fd:a8:67:0d:d2:19:39:3b:e4:dc:90:18:
         e5:f1:2b:93:ba:80:0c:66:d4:80:b2:70:4d:39:20:af:f0:b5:
         49:84:03:b1:06:1d:93:22:99:ae:54:0e:db:03:c3:06:13:4c:
         f9:58:28:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMO0FVdNGowVOxbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
NGM4MjFlNDctNTBjMS00ZWEyLThkYjItYmVlNTM3MmRlODdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv80wu2MqPIbI65JT7QGSNeoqyxJvoCUxlVg
ehjq1PsLKYD4ZnfkO6bl3ks6kLDSRUoXSz7xIR4sKQK6/mv4MvCzMj6K8lCa4Qzg
jy5I8kt+5LO48WpEhUeCdBpBq4SLk09IeNaxt41zrUeIwfeGd6utf11dBzwGz3/8
tkTZOrBMKWoVB+lo3mzcBOIrJy+KL02tobIyaG+dVF2hZTu8RTODzb8eyNTi8K+O
4t0Np6GSwOZ/4En0FvXYsH4E0urT72b7MU82sgsQ50guI3bPG4T22MlABxZfRyDR
KH4UnFShO1UXJdU12FfDJ0pp81oEHiUlSyFDMj4MTbflohM5iQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOCA4ShbUl1jAihJvIErz3Z/H+0kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvZTgyODZmMjYtYTU2NS0z
MTE1LTg0ZWUtMGM3ODdmYmFjMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgBg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADLlDVhpkz1hx0VlGP6e9/QbunDQMFspwjPw/2onRXzFTwzohuN+
iNkokU1SREge9cXQeEi5fkcEuAAtIDN22BWyqqZV2EwZ5ko5lL7NESY1I4dUXBoz
RrOI0WcEZYaWbScVhx/uw2KiM2B7vwSuKmp29V63v1sqXTt1TUP3hqWd2sFEif2n
I7oD9W0qSXaCIj60Ik0zad2xZSUCL8tBe7Jk/cq82RZK+KVwkL/DMJsA9OjIUp34
cqYX3ycYW4zs65e7kegWuN2fSBrms/2oZw3SGTk75NyQGOXxK5O6gAxm1ICycE05
IK/wtUmEA7EGHZMima5UDtsDwwYTTPlYKHM=
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:47:22 2025 by rpki-client