Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa
File:                     b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa (raw, json)
Hash identifier:          qeEBZhhSuUNNEjR/XGO4q5NwcOGfCm/OT0dPHHI1MOs=
Subject key identifier:   8C:A8:EB:04:89:FC:46:DC:3C:3B:9F:A0:52:D9:C3:C3:F1:AA:AB:8B
Certificate issuer:       /CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
Certificate serial:       010D0C9F4328584A5DBF79FFCC55FD7C4F047100
Authority key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa
Signing time:             Mon 30 Jun 2025 19:36:44 +0000
ROA not before:           Mon 30 Jun 2025 19:36:44 +0000
ROA not after:            Sun 28 Sep 2025 19:36:44 +0000
asID:                     398338
IP address blocks:        2602:f605::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:bf:79:ff:cc:55:fd:7c:4f:04:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
        Validity
            Not Before: Jun 30 19:36:44 2025 GMT
            Not After : Sep 28 19:36:44 2025 GMT
        Subject: CN=2ae06173-c92f-4fd2-a09b-b93b41229c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:a3:63:1e:e8:c3:19:97:35:d6:0d:2a:ee:
                    ce:b7:2f:f6:77:d5:e7:c7:68:98:03:f5:91:f9:fd:
                    41:09:11:51:81:aa:19:03:13:b4:a8:67:fd:5f:35:
                    f6:3c:96:70:8d:29:61:16:47:87:f1:fb:62:f0:b0:
                    b1:51:d7:8a:28:a4:f1:9c:89:1c:ea:a2:5b:e5:ca:
                    24:d8:24:d8:9b:d6:6a:36:ec:ff:d2:a1:c0:07:a4:
                    5e:fe:6e:ee:1d:1f:31:17:95:62:04:58:98:23:fd:
                    b6:34:0d:5d:cf:67:f2:d1:e0:28:88:23:bf:4c:d1:
                    00:68:09:cc:f7:b7:a9:cd:63:c7:04:7c:ab:2c:65:
                    61:ad:83:14:6a:68:57:c3:42:4b:3a:f7:bc:6d:d4:
                    1e:b7:96:d4:d0:1f:c4:f6:ca:bf:dd:ed:94:e2:c1:
                    21:b0:7e:04:37:f6:f1:c7:fb:cd:1b:37:f9:27:53:
                    7a:d5:39:72:fc:41:01:66:14:7a:6e:e7:45:98:97:
                    05:3a:62:d7:d5:bd:98:98:77:2f:4a:96:46:b0:ae:
                    6d:9f:2d:cc:82:ce:86:b9:ef:23:8c:0c:eb:4e:be:
                    ad:8b:43:df:4d:50:9c:8b:0d:d3:57:28:94:97:17:
                    5c:a4:4d:25:c8:4a:26:35:c6:b0:1c:76:ec:a5:41:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:EB:04:89:FC:46:DC:3C:3B:9F:A0:52:D9:C3:C3:F1:AA:AB:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/b6cae054-cc53-3983-bd1c-ac6989c6a32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f605::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f6:1a:99:d2:8d:9f:4e:db:75:79:67:0d:b6:05:a8:11:dc:
         c8:79:93:c2:89:26:03:52:c2:d3:0e:dc:f0:88:03:cb:b3:8d:
         e7:49:4b:fb:c4:e6:ec:aa:da:17:61:e5:a3:34:fb:b0:9c:5a:
         bf:85:4d:1c:00:c6:71:c6:2b:43:d6:6a:5d:51:8a:94:9c:7d:
         7e:68:f4:7e:b3:84:ec:92:7c:f5:1f:cc:9e:c5:3d:6e:55:f8:
         20:1c:f4:75:6d:18:8d:3f:d0:cc:1d:e2:ef:9c:21:65:53:f3:
         67:f5:ca:c7:04:e6:50:2f:a3:d2:e9:5d:a8:ca:2b:2d:f0:f3:
         d3:85:f6:82:df:64:e8:27:8e:cf:5f:d2:5b:64:df:dc:c5:2f:
         bf:f1:6d:58:31:47:84:87:9b:ba:4b:ef:01:bf:46:30:99:28:
         27:18:85:94:a4:ae:af:c4:96:23:bc:9a:71:90:9c:ea:ac:56:
         f2:7f:85:b0:8f:15:41:16:76:df:95:ca:94:95:95:98:07:e7:
         e1:c0:07:66:30:7c:77:30:3a:ab:f4:f0:4b:c1:82:7c:5e:c0:
         ca:a0:43:85:26:ea:02:cc:78:c3:8a:dc:4a:89:cc:a8:8c:72:
         da:dd:18:a5:1b:42:25:02:69:5c:c1:bd:9e:13:ed:06:79:7f:
         c5:c1:c8:1e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpdv3n/zFX9fE8EcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJmNzIwNTMtNmU4OS00ZThiLThhMDQtMDIxNTBmZjdj
MDEwMB4XDTI1MDYzMDE5MzY0NFoXDTI1MDkyODE5MzY0NFowLzEtMCsGA1UEAxMk
MmFlMDYxNzMtYzkyZi00ZmQyLWEwOWItYjkzYjQxMjI5YzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGWjYx7owxmXNdYNKu7Oty/2d9Xnx2iYA/WR
+f1BCRFRgaoZAxO0qGf9XzX2PJZwjSlhFkeH8fti8LCxUdeKKKTxnIkc6qJb5cok
2CTYm9ZqNuz/0qHAB6Re/m7uHR8xF5ViBFiYI/22NA1dz2fy0eAoiCO/TNEAaAnM
97epzWPHBHyrLGVhrYMUamhXw0JLOve8bdQet5bU0B/E9sq/3e2U4sEhsH4EN/bx
x/vNGzf5J1N61Tly/EEBZhR6budFmJcFOmLX1b2YmHcvSpZGsK5tny3Mgs6Gue8j
jAzrTr6ti0PfTVCciw3TVyiUlxdcpE0lyEomNcawHHbspUFJBQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIyo6wSJ/EbcPDufoFLZw8PxqquLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmY3
MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1MGZmN2MwMTAvYjZjYWUwNTQtY2M1My0z
OTgzLWJkMWMtYWM2OTg5YzZhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJmNzIwNTMtNmU4OS00ZThiLThh
MDQtMDIxNTBmZjdjMDEwLzJiZjcyMDUzLTZlODktNGU4Yi04YTA0LTAyMTUwZmY3
YzAxMC5jcmwwHwYDVR0jBBgwFoAUxf4s5TdGT5CrmFfPeM8WzIuAz/8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmY3MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1
MGZmN2MwMTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2BQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANvYamdKNn07bdXlnDbYFqBHcyHmTwokmA1LC0w7c8IgDy7ON50lL
+8Tm7KraF2HlozT7sJxav4VNHADGccYrQ9ZqXVGKlJx9fmj0frOE7JJ89R/MnsU9
blX4IBz0dW0YjT/QzB3i75whZVPzZ/XKxwTmUC+j0uldqMorLfDz04X2gt9k6CeO
z1/SW2Tf3MUvv/FtWDFHhIebukvvAb9GMJkoJxiFlKSur8SWI7yacZCc6qxW8n+F
sI8VQRZ235XKlJWVmAfn4cAHZjB8dzA6q/TwS8GCfF7AyqBDhSbqAsx4w4rcSonM
qIxy2t0YpRtCJQJpXMG9nhPtBnl/xcHIHg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:11:22 2025 by rpki-client