Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/60496c52-a25c-38f5-89a5-b827e0f749ee.roa
File:                     60496c52-a25c-38f5-89a5-b827e0f749ee.roa (raw, json)
Hash identifier:          Lpp/OVCebZJi/jDaqlS/Bj5ym3gq2SeEV4DfEB5i7yg=
Subject key identifier:   A6:2B:04:D0:2D:02:FB:ED:D9:A5:16:A3:2A:DD:36:9B:FC:52:02:78
Certificate issuer:       /CN=78ee10d3-06d4-4947-8f57-ae2f32ccfa96
Certificate serial:       010D0C9F4328584A5D85F9E0924ECB18F6F7DD00
Authority key identifier: A8:86:57:E6:DA:6F:41:B1:06:DC:DB:9B:33:EF:FC:D4:71:53:F5:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/60496c52-a25c-38f5-89a5-b827e0f749ee.roa
Signing time:             Mon 30 Jun 2025 17:40:53 +0000
ROA not before:           Mon 30 Jun 2025 17:40:53 +0000
ROA not after:            Sun 28 Sep 2025 17:40:53 +0000
asID:                     401786
IP address blocks:        2602:f601::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:85:f9:e0:92:4e:cb:18:f6:f7:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ee10d3-06d4-4947-8f57-ae2f32ccfa96
        Validity
            Not Before: Jun 30 17:40:53 2025 GMT
            Not After : Sep 28 17:40:53 2025 GMT
        Subject: CN=3ebca48c-917f-429d-a037-1841c5051309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:f2:2c:0b:d6:d1:a2:c2:7f:10:6b:7d:df:
                    12:23:ee:1d:bd:fa:44:7b:bf:3b:44:bc:a8:68:7a:
                    6c:ab:f4:12:93:1b:83:59:16:3e:6c:91:c2:35:af:
                    ef:ae:e3:8b:a7:5c:32:94:4e:18:e6:7e:45:ef:10:
                    9d:7a:6d:60:ee:62:1c:5c:75:60:c2:01:13:5d:84:
                    08:03:85:c1:9d:b5:09:35:b9:ef:be:79:b7:40:9c:
                    0b:f6:84:5b:ab:49:66:84:f5:00:18:2a:54:c3:a6:
                    0a:b3:22:ca:46:5d:6e:a9:a3:81:a8:e6:90:3e:43:
                    3b:5a:44:95:32:70:5c:b1:f9:76:bf:60:3d:8b:9c:
                    8f:4a:9d:8d:2a:62:63:5e:34:25:bb:a4:27:ed:3a:
                    35:42:f9:a0:7b:57:14:36:f4:62:18:88:c8:7f:d7:
                    57:6a:b3:e4:1d:90:63:12:5c:c3:73:37:30:7c:a3:
                    b0:39:cb:f4:91:46:f9:e2:a5:c8:e7:9e:df:37:68:
                    5c:79:7e:3c:53:ae:95:c5:b0:d2:97:92:a8:fc:d5:
                    fa:37:83:81:e5:91:05:83:7c:f4:af:4a:df:01:ea:
                    6f:45:3d:37:eb:e6:29:2c:f3:b1:81:b5:61:b4:18:
                    6d:af:1f:28:89:a6:09:5d:3c:fe:93:e0:ec:03:ea:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2B:04:D0:2D:02:FB:ED:D9:A5:16:A3:2A:DD:36:9B:FC:52:02:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/60496c52-a25c-38f5-89a5-b827e0f749ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.crl

            X509v3 Authority Key Identifier:
                keyid:A8:86:57:E6:DA:6F:41:B1:06:DC:DB:9B:33:EF:FC:D4:71:53:F5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/78ee10d3-06d4-4947-8f57-ae2f32ccfa96.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f601::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:ee:ed:73:3f:a6:df:bb:b7:7c:4f:f5:a4:d6:ab:c9:ae:
         0a:7d:6a:88:62:04:5f:ae:b7:6e:5b:32:0e:98:86:6f:c1:59:
         b4:7c:e9:77:2e:6c:89:6d:c3:14:57:f6:f7:7a:71:75:f8:1a:
         8d:2d:ec:8a:7d:c4:89:f4:c0:a9:ab:59:4f:d6:71:92:ee:06:
         14:23:e4:43:a9:ee:6f:ed:ee:78:2f:e5:b8:da:7a:6c:fb:10:
         65:05:d5:e4:47:36:e9:d3:57:8c:0e:8a:0e:71:79:e2:f1:9d:
         58:ad:e2:b2:56:12:2d:e6:c0:fe:3f:83:ac:74:05:ac:7f:a0:
         57:53:d1:05:55:ad:62:50:33:df:0f:75:db:3a:f7:5f:a8:ca:
         9b:8c:76:84:f2:80:8e:c3:5f:a0:4c:da:10:65:f8:09:e8:70:
         47:09:c6:62:cd:08:2b:6c:f3:a4:0b:4a:01:c0:7a:c8:99:0b:
         b8:36:fc:f5:4a:7e:81:a1:88:d7:44:33:0e:66:58:e5:9c:fa:
         da:39:6a:ec:3f:b8:fd:40:a4:75:81:7e:18:b1:2a:cb:62:98:
         e0:16:ab:30:ab:06:10:cb:cb:ee:2f:1d:cc:09:94:f2:53:0d:
         e3:d3:7d:25:54:6c:e6:0b:7f:48:84:7e:fe:76:e8:50:fb:0d:
         26:b6:71:a1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpdhfngkk7LGPb33QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhlZTEwZDMtMDZkNC00OTQ3LThmNTctYWUyZjMyY2Nm
YTk2MB4XDTI1MDYzMDE3NDA1M1oXDTI1MDkyODE3NDA1M1owLzEtMCsGA1UEAxMk
M2ViY2E0OGMtOTE3Zi00MjlkLWEwMzctMTg0MWM1MDUxMzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEzyLAvW0aLCfxBrfd8SI+4dvfpEe787RLyo
aHpsq/QSkxuDWRY+bJHCNa/vruOLp1wylE4Y5n5F7xCdem1g7mIcXHVgwgETXYQI
A4XBnbUJNbnvvnm3QJwL9oRbq0lmhPUAGCpUw6YKsyLKRl1uqaOBqOaQPkM7WkSV
MnBcsfl2v2A9i5yPSp2NKmJjXjQlu6Qn7To1Qvmge1cUNvRiGIjIf9dXarPkHZBj
ElzDczcwfKOwOcv0kUb54qXI557fN2hceX48U66VxbDSl5Ko/NX6N4OB5ZEFg3z0
r0rfAepvRT036+YpLPOxgbVhtBhtrx8oiaYJXTz+k+DsA+obGwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKYrBNAtAvvt2aUWoyrdNpv8UgJ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83OGVl
MTBkMy0wNmQ0LTQ5NDctOGY1Ny1hZTJmMzJjY2ZhOTYvNjA0OTZjNTItYTI1Yy0z
OGY1LTg5YTUtYjgyN2UwZjc0OWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzhlZTEwZDMtMDZkNC00OTQ3LThm
NTctYWUyZjMyY2NmYTk2Lzc4ZWUxMGQzLTA2ZDQtNDk0Ny04ZjU3LWFlMmYzMmNj
ZmE5Ni5jcmwwHwYDVR0jBBgwFoAUqIZX5tpvQbEG3NubM+/81HFT9SAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy83OGVlMTBkMy0wNmQ0LTQ5NDctOGY1Ny1hZTJm
MzJjY2ZhOTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL2AQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMDvu7XM/pt+7t3xP9aTWq8muCn1qiGIEX663blsyDpiGb8FZtHzp
dy5siW3DFFf293pxdfgajS3sin3EifTAqatZT9Zxku4GFCPkQ6nub+3ueC/luNp6
bPsQZQXV5Ec26dNXjA6KDnF54vGdWK3islYSLebA/j+DrHQFrH+gV1PRBVWtYlAz
3w912zr3X6jKm4x2hPKAjsNfoEzaEGX4CehwRwnGYs0IK2zzpAtKAcB6yJkLuDb8
9Up+gaGI10QzDmZY5Zz62jlq7D+4/UCkdYF+GLEqy2KY4BarMKsGEMvL7i8dzAmU
8lMN49N9JVRs5gt/SIR+/nboUPsNJrZxoQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 22:59:37 2025 by rpki-client