Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6238038a-869e-3775-ae7b-b340d12bbefa.roa
File:                     6238038a-869e-3775-ae7b-b340d12bbefa.roa (raw, json)
Hash identifier:          s4+583x3YKJYlG76UCdwCp/Eve9AEooLd4Fq+MsAAmU=
Subject key identifier:   1B:9D:61:B2:73:F1:A4:3C:BA:05:A7:FD:FA:EA:FE:B3:01:6E:A3:0E
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285849B9AA04A536A3ABCCCCD7EDB0
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6238038a-869e-3775-ae7b-b340d12bbefa.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     51965
IP address blocks:        2602:f9ec:cc::/48 maxlen: 48
                          2602:f9ec:cd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:04:a5:36:a3:ab:cc:cc:d7:ed:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=d3265fcc-f3fa-4365-97f7-316be2af52ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:71:78:38:47:72:d3:27:06:c7:6d:69:cd:
                    41:d2:3e:97:bd:f9:9d:17:0e:2c:93:3c:06:93:59:
                    46:86:83:36:a1:af:4a:f9:a1:f2:da:d4:6b:d7:78:
                    f2:f0:d7:b9:c0:83:8a:8f:56:c1:fa:85:03:be:85:
                    6d:a0:d0:ad:ad:10:b5:18:17:33:df:02:1d:b9:fa:
                    e1:51:11:b8:62:63:7d:c1:90:35:6d:2c:d2:29:b3:
                    be:c4:7a:14:7b:75:c0:b1:6b:7a:bf:ba:f3:b7:37:
                    9b:48:d0:10:9d:f0:d0:4d:62:2f:bd:4d:84:af:31:
                    90:b4:b7:99:f6:4f:8a:1e:18:54:90:2b:ef:9f:80:
                    5b:c9:5c:76:72:e7:6b:2d:2f:1f:16:6b:78:5c:2d:
                    c8:47:f6:67:62:f3:92:97:d7:66:6d:e0:86:af:a9:
                    89:4c:3f:aa:b7:9e:95:ee:a1:58:d8:5d:87:94:ae:
                    4f:b1:5f:13:62:98:34:cc:8b:5e:fc:b4:db:a9:51:
                    c7:ce:96:5f:f0:f9:2b:20:83:2b:5e:0d:4e:03:cd:
                    29:66:89:fe:95:3f:21:f4:98:76:4e:41:f5:ab:ed:
                    81:e3:d7:17:10:4e:1d:17:cc:b9:47:6e:2b:71:5c:
                    c8:29:14:13:bf:59:2c:ab:02:7c:a5:27:e9:b7:d3:
                    16:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9D:61:B2:73:F1:A4:3C:BA:05:A7:FD:FA:EA:FE:B3:01:6E:A3:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6238038a-869e-3775-ae7b-b340d12bbefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:cc::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fe:dd:70:4e:d4:ad:6c:01:23:6c:e8:9f:33:95:76:d1:9a:
         71:0f:06:f3:77:4c:0b:09:96:c9:98:27:89:b9:5b:21:ee:b0:
         42:90:ef:1c:e7:48:bd:8c:7d:39:f2:c6:a1:69:b9:a3:eb:66:
         4b:6f:1c:19:9f:6c:58:9c:bb:fe:ba:cb:53:c4:dc:47:15:da:
         db:ba:93:fe:45:af:93:4f:e4:94:1c:1f:0e:99:fb:e3:91:55:
         c6:4d:8c:0a:79:18:ac:f9:ae:bf:97:3d:32:e2:75:96:3d:3f:
         16:1c:d8:ce:8f:d1:72:bd:57:8e:65:cc:e8:f6:16:8a:f1:9e:
         9f:7d:03:a4:7a:2d:73:39:2d:13:a8:be:5f:b3:f9:67:db:d4:
         f2:2e:0b:ab:d5:e1:14:0c:2b:f3:26:e7:fc:ba:15:ff:b6:4e:
         85:35:f8:1c:04:e7:2b:55:93:eb:01:8f:5c:f8:e0:52:55:14:
         46:a6:a0:37:69:d9:ac:e9:76:79:e9:68:93:d9:8d:b6:22:7f:
         4a:be:a7:35:31:fd:b7:99:7f:84:6c:54:fa:5e:a6:bb:75:f8:
         66:40:df:82:7a:91:e7:b3:47:39:aa:8e:3e:96:04:58:62:e8:
         8a:f0:1c:23:72:3a:10:f7:cc:bf:a9:16:b2:e4:ef:01:91:f0:
         73:62:ee:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm5qgSlNqOrzMzX7bAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw
NDdkMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZDMyNjVmY2MtZjNmYS00MzY1LTk3ZjctMzE2YmUyYWY1MmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxZxeDhHctMnBsdtac1B0j6XvfmdFw4skzwG
k1lGhoM2oa9K+aHy2tRr13jy8Ne5wIOKj1bB+oUDvoVtoNCtrRC1GBcz3wIdufrh
URG4YmN9wZA1bSzSKbO+xHoUe3XAsWt6v7rztzebSNAQnfDQTWIvvU2ErzGQtLeZ
9k+KHhhUkCvvn4BbyVx2cudrLS8fFmt4XC3IR/ZnYvOSl9dmbeCGr6mJTD+qt56V
7qFY2F2HlK5PsV8TYpg0zIte/LTbqVHHzpZf8PkrIIMrXg1OA80pZon+lT8h9Jh2
TkH1q+2B49cXEE4dF8y5R24rcVzIKRQTv1ksqwJ8pSfpt9MWpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBudYbJz8aQ8ugWn/frq/rMBbqMOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1
NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvNjIzODAzOGEtODY5ZS0z
Nzc1LWFlN2ItYjM0MGQxMmJiZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0
MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi
MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli
OGI0YjA0N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL57ADM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAn+3XBO1K1sASNs6J8zlXbRmnEPBvN3TAsJlsmYJ4m5WyHusEKQ
7xznSL2MfTnyxqFpuaPrZktvHBmfbFicu/66y1PE3EcV2tu6k/5Fr5NP5JQcHw6Z
++ORVcZNjAp5GKz5rr+XPTLidZY9PxYc2M6P0XK9V45lzOj2Forxnp99A6R6LXM5
LROovl+z+Wfb1PIuC6vV4RQMK/Mm5/y6Ff+2ToU1+BwE5ytVk+sBj1z44FJVFEam
oDdp2azpdnnpaJPZjbYif0q+pzUx/beZf4RsVPpeprt1+GZA34J6keezRzmqjj6W
BFhi6IrwHCNyOhD3zL+pFrLk7wGR8HNi7to=
-----END CERTIFICATE-----
Generated at Thu May 8 14:41:35 2025 by rpki-client