Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa
File:                     e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa (raw, json)
Hash identifier:          7UgR0DcFT1oCb/XsUWggHGRVXDVI6a6Q2rMHrQwvj+s=
Subject key identifier:   F9:0B:27:1B:14:B4:97:8B:F3:33:B4:AE:F1:AA:70:FE:6B:C1:92:EC
Certificate issuer:       /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial:       010D0C9F4328584A4110643CCAC3CD7349E518C0
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     40124
IP address blocks:        2602:299:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:64:3c:ca:c3:cd:73:49:e5:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=6e08b0a5-2a02-429a-a15f-c764ba7b49bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:4c:47:fc:62:ae:f8:6e:3d:b3:fb:d9:fd:
                    c4:dd:c8:3b:00:ee:bd:67:29:35:35:b7:39:75:8b:
                    cf:49:77:11:9a:b9:70:e5:6c:94:ff:41:78:11:f5:
                    da:43:d0:cc:e7:a6:30:67:8d:d1:98:5d:2f:50:81:
                    ce:e6:11:4b:07:d3:9f:64:b3:c6:6a:61:96:3f:93:
                    19:82:92:12:c8:4b:cc:14:f4:a9:bf:c5:9e:9d:7c:
                    7e:63:8a:f0:55:a9:cb:e7:1b:f3:44:13:a9:27:af:
                    3c:e4:1a:17:fa:92:96:f7:ea:f1:6d:65:63:b3:70:
                    ef:f6:50:b3:34:b2:6c:cb:a0:a3:fc:9c:9e:6b:4a:
                    08:d8:ea:ca:b3:6b:bd:43:17:a3:d2:81:04:c4:e6:
                    fd:76:4f:52:2d:7e:41:0d:6e:46:70:2f:7f:b7:25:
                    3b:f7:91:6e:74:4a:e7:81:5e:dd:21:d9:8d:4b:45:
                    8b:14:53:19:fc:e1:2c:77:07:56:65:0c:64:51:dd:
                    0c:80:f4:3c:2a:8c:93:76:8d:56:cb:8d:85:3b:94:
                    d9:82:66:fa:62:e2:76:13:39:f0:b1:06:41:d3:f4:
                    b6:e5:64:04:c3:ff:19:af:b2:b5:fa:54:82:22:3f:
                    b5:92:e5:7b:9e:b8:7e:bc:26:f7:c8:c8:e3:77:f4:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0B:27:1B:14:B4:97:8B:F3:33:B4:AE:F1:AA:70:FE:6B:C1:92:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:299:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:90:bd:62:a1:93:b7:bb:d2:a6:a5:87:58:42:11:0b:ef:06:
         c3:0d:da:8c:c3:93:7b:b9:0f:e5:b9:23:93:db:12:c2:15:8d:
         98:b6:41:5a:eb:67:d1:a2:04:10:a9:76:5b:85:dc:fe:ff:7f:
         8b:c9:06:56:51:e3:3c:76:98:cb:53:68:b5:27:d7:4d:53:46:
         37:91:11:c9:eb:83:be:e5:52:28:20:97:2e:0c:56:5a:0c:dd:
         07:e8:75:93:8a:c3:fa:5b:ce:46:59:b9:c1:be:93:01:20:23:
         d4:00:ff:55:9e:ab:a6:d9:95:4d:bc:a1:d9:ab:1d:da:08:6f:
         ac:94:a2:af:4b:7b:22:cb:2f:1e:6a:dd:bc:a0:d0:fb:d7:a5:
         fd:7d:5b:52:ad:eb:0f:92:f7:2e:de:51:88:f3:0e:b1:8b:a5:
         81:1b:61:2d:68:c7:2a:09:94:a8:5a:eb:8c:fa:c5:cc:26:56:
         ef:0d:ca:10:6c:d0:c6:a7:44:61:69:4d:54:1b:60:9e:5b:d0:
         ae:d9:1c:5a:0d:d6:8f:d4:67:6d:9e:ba:ac:3b:59:0b:75:89:
         8a:ae:e1:5e:7d:b8:29:e0:4c:76:12:13:c0:9a:48:44:53:1d:
         a9:90:8c:3a:35:11:13:0b:89:25:c3:7f:8e:bf:d5:b8:ee:75:
         e6:07:bc:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpBEGQ8ysPNc0nlGMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl
NmEwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
NmUwOGIwYTUtMmEwMi00MjlhLWExNWYtYzc2NGJhN2I0OWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMRMR/xirvhuPbP72f3E3cg7AO69Zyk1Nbc5
dYvPSXcRmrlw5WyU/0F4EfXaQ9DM56YwZ43RmF0vUIHO5hFLB9OfZLPGamGWP5MZ
gpISyEvMFPSpv8WenXx+Y4rwVanL5xvzRBOpJ6885BoX+pKW9+rxbWVjs3Dv9lCz
NLJsy6Cj/Jyea0oI2OrKs2u9Qxej0oEExOb9dk9SLX5BDW5GcC9/tyU795FudErn
gV7dIdmNS0WLFFMZ/OEsdwdWZQxkUd0MgPQ8KoyTdo1Wy42FO5TZgmb6YuJ2Eznw
sQZB0/S25WQEw/8Zr7K1+lSCIj+1kuV7nrh+vCb3yMjjd/TbVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPkLJxsUtJeL8zO0rvGqcP5rwZLsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj
OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvZTU1ZWY4ZTUtMGY2Yy0z
ODcyLTlmYTYtZGYwNjEwYTkzZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm
Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm
ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw
ZjkzZmU2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgICmQAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACyQvWKhk7e70qalh1hCEQvvBsMN2ozDk3u5D+W5I5PbEsIVjZi2
QVrrZ9GiBBCpdluF3P7/f4vJBlZR4zx2mMtTaLUn101TRjeREcnrg77lUiggly4M
VloM3QfodZOKw/pbzkZZucG+kwEgI9QA/1Weq6bZlU28odmrHdoIb6yUoq9LeyLL
Lx5q3byg0PvXpf19W1Kt6w+S9y7eUYjzDrGLpYEbYS1oxyoJlKha64z6xcwmVu8N
yhBs0ManRGFpTVQbYJ5b0K7ZHFoN1o/UZ22euqw7WQt1iYqu4V59uCngTHYSE8Ca
SERTHamQjDo1ERMLiSXDf46/1bjudeYHvJI=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:09:46 2025 by rpki-client