Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa
File:                     1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (raw, json)
Hash identifier:          V7bBPvkLWhgMhYKJsUPJ7gmZ6djYVsD5tgMFTcQFsSU=
Subject key identifier:   71:67:51:FA:DC:B3:7C:3D:7D:17:97:59:F6:E4:D2:F4:32:BA:B9:AD
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F4328584A31B5660F63B85BA181235080
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa
Signing time:             Sun 15 Jun 2025 01:00:49 +0000
ROA not before:           Sun 15 Jun 2025 01:00:49 +0000
ROA not after:            Sat 13 Sep 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2602:faca:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:31:b5:66:0f:63:b8:5b:a1:81:23:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Jun 15 01:00:49 2025 GMT
            Not After : Sep 13 01:00:49 2025 GMT
        Subject: CN=1f070788-36d9-42e2-971a-7cbe788eaf26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:b7:b4:90:2a:a3:ce:8a:2a:75:eb:f5:1f:
                    e2:b3:ba:4b:f1:37:08:87:75:0d:c0:b5:70:5d:48:
                    ad:92:26:71:bd:67:5a:36:51:93:ee:05:03:44:ee:
                    77:74:18:fb:2c:3b:ed:75:64:2b:28:54:95:f7:96:
                    84:81:7a:0f:c0:07:1f:79:fc:61:19:85:11:bd:25:
                    9f:77:bf:8f:61:59:8e:a5:e7:20:d4:44:b6:bd:b5:
                    50:9c:40:bf:12:81:0d:de:7d:ce:1a:57:ff:4c:cf:
                    6b:ce:ab:3c:d3:7f:e4:c0:9b:48:c7:58:56:ff:bc:
                    e3:06:3f:9f:d3:fb:4b:d7:ae:f9:71:07:7a:f3:63:
                    15:59:01:f5:fc:21:87:40:35:26:27:b1:41:6f:98:
                    8a:14:a9:9f:7f:c1:f2:21:27:f8:72:34:a0:32:56:
                    7f:55:9c:49:f4:9b:83:4b:b7:8b:1e:89:17:57:4c:
                    00:a4:60:fc:98:70:67:9f:6d:6d:85:fc:e5:6d:49:
                    51:c2:e5:ab:02:93:f6:d7:17:f4:47:15:cf:b0:8d:
                    01:98:95:8d:fd:f1:2d:92:2a:af:6e:79:7a:76:2e:
                    39:49:2b:b9:a3:9b:37:ee:85:77:f2:89:fd:a2:a9:
                    1f:41:7c:34:62:e0:78:fe:a0:01:b4:c8:4e:de:8c:
                    5f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:67:51:FA:DC:B3:7C:3D:7D:17:97:59:F6:E4:D2:F4:32:BA:B9:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faca:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:75:f4:00:84:69:fd:d8:d9:69:97:88:24:57:32:08:e2:
         e5:29:d1:b3:1b:af:38:c4:19:59:3d:77:63:4d:40:78:15:fe:
         0e:aa:38:e5:ad:bc:cf:d8:09:73:ad:f4:d4:0a:7e:82:cd:43:
         80:55:cb:f1:11:9f:6e:03:88:2f:e4:36:b9:eb:f1:80:95:ae:
         3e:dc:c6:d2:df:ce:72:15:41:52:8c:a6:27:43:10:57:9f:3b:
         85:ab:58:02:3c:19:55:a1:8f:6d:ae:b0:d8:e2:c1:c7:ec:90:
         2f:00:9b:85:de:1a:29:d9:16:5b:ee:85:d0:9e:c5:50:dd:9f:
         e0:01:c4:56:7a:2c:3d:f7:ff:08:8d:6d:82:15:51:63:95:af:
         80:69:e9:5a:a9:dc:c5:04:dd:1f:74:3a:01:77:f4:bb:eb:36:
         9c:6f:bd:95:3d:d2:88:f4:7a:51:cb:bc:f0:55:80:1b:8d:5e:
         59:10:d8:4d:ce:2c:ec:2c:bd:1d:94:b4:1b:d1:6f:0d:15:aa:
         10:94:d7:27:eb:1a:5e:f5:df:f7:c8:80:c0:eb:73:2e:74:03:
         a6:ea:13:c6:a7:6b:3f:e5:63:77:71:73:9d:92:bb:49:c5:66:
         6f:84:19:4c:66:87:6c:ad:db:a8:06:c2:06:57:d8:dc:98:c8:
         bf:77:db:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoxtWYPY7hboYEjUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0
OWY4MB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk
MWYwNzA3ODgtMzZkOS00MmUyLTk3MWEtN2NiZTc4OGVhZjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyle3tJAqo86KKnXr9R/is7pL8TcIh3UNwLVw
XUitkiZxvWdaNlGT7gUDRO53dBj7LDvtdWQrKFSV95aEgXoPwAcfefxhGYURvSWf
d7+PYVmOpecg1ES2vbVQnEC/EoEN3n3OGlf/TM9rzqs803/kwJtIx1hW/7zjBj+f
0/tL1675cQd682MVWQH1/CGHQDUmJ7FBb5iKFKmff8HyISf4cjSgMlZ/VZxJ9JuD
S7eLHokXV0wApGD8mHBnn21thfzlbUlRwuWrApP21xf0RxXPsI0BmJWN/fEtkiqv
bnl6di45SSu5o5s37oV38on9oqkfQXw0YuB4/qABtMhO3oxfnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHFnUfrcs3w9fReXWfbk0vQyurmtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz
M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvMWRiNTlhZGYtMWMzZi0z
MDVkLWJhMTEtN2NmZDAxZmMyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw
OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh
NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4
NjM0YTQ5ZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ygEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABvfdfQAhGn92Nlpl4gkVzII4uUp0bMbrzjEGVk9d2NNQHgV/g6q
OOWtvM/YCXOt9NQKfoLNQ4BVy/ERn24DiC/kNrnr8YCVrj7cxtLfznIVQVKMpidD
EFefO4WrWAI8GVWhj22usNjiwcfskC8Am4XeGinZFlvuhdCexVDdn+ABxFZ6LD33
/wiNbYIVUWOVr4Bp6Vqp3MUE3R90OgF39LvrNpxvvZU90oj0elHLvPBVgBuNXlkQ
2E3OLOwsvR2UtBvRbw0VqhCU1yfrGl713/fIgMDrcy50A6bqE8anaz/lY3dxc52S
u0nFZm+EGUxmh2yt26gGwgZX2NyYyL9321U=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:12 2025 by rpki-client