Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/af19c424-35e2-3f85-9270-2ee316929f19.roa
File:                     af19c424-35e2-3f85-9270-2ee316929f19.roa (raw, json)
Hash identifier:          CA2TeuauD+CKSdekNa7daAbPCLnXdSN687fLossGvYQ=
Subject key identifier:   8F:4B:A0:2E:F8:DC:38:A8:7A:A4:07:A8:7B:D8:8D:82:8D:45:41:D1
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F43285849FE0FE2DD01D1E8204ADA7C40
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/af19c424-35e2-3f85-9270-2ee316929f19.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     62787
IP address blocks:        2602:f6d0:a0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e2:dd:01:d1:e8:20:4a:da:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=7783e038-84e3-4a0d-ae4e-f3c6bca431d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:6f:7e:56:70:a5:3e:fa:2f:a8:d8:d2:a1:
                    a4:5d:af:ba:48:ac:25:09:8b:55:ad:ae:36:d3:59:
                    fc:b9:ae:2d:dd:9d:2a:b5:d6:7f:e4:ea:c1:91:85:
                    bc:0c:e5:f6:85:4e:cb:41:c2:77:a4:66:c5:e4:ba:
                    e0:2d:55:48:13:cc:03:13:e2:3e:66:32:4e:f4:a7:
                    bf:32:7f:3f:8f:3a:89:1f:f7:b5:87:40:6b:c0:1d:
                    d2:e0:fe:62:32:bc:8f:4d:74:59:89:23:3b:09:97:
                    1e:e2:8c:7d:b1:41:4a:f7:55:a4:34:2c:20:90:ae:
                    c3:61:e8:2c:a3:35:32:73:18:ca:a4:72:55:b3:05:
                    b9:a0:ca:1d:46:b0:d0:19:67:2c:0b:19:65:ba:52:
                    c0:70:83:38:f8:4a:b2:33:ef:22:17:10:9d:c4:b0:
                    de:f5:00:87:2d:b6:48:35:39:85:4c:46:72:bd:d1:
                    68:96:3a:99:90:87:e0:09:87:6b:72:5a:f7:c3:6d:
                    87:0d:79:70:f7:af:ac:de:63:d4:07:cb:5d:58:bc:
                    82:6d:12:be:34:b8:c6:87:7e:3f:f3:08:4f:66:6e:
                    ad:ba:9e:68:35:91:cc:3e:69:59:91:09:84:0e:77:
                    da:8d:99:c3:9d:9b:b4:b2:2f:bd:2e:41:bc:66:88:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4B:A0:2E:F8:DC:38:A8:7A:A4:07:A8:7B:D8:8D:82:8D:45:41:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/af19c424-35e2-3f85-9270-2ee316929f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:a0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:27:8a:23:26:3f:ca:bf:fb:8b:e3:fa:c7:a9:53:43:fe:3e:
         25:8d:05:0d:64:cb:91:ce:64:75:9f:56:21:a8:8f:bb:7f:42:
         de:0f:ed:bf:e8:94:4b:43:ca:15:9e:87:aa:3a:4f:ba:fc:2d:
         93:69:29:c0:fd:59:e7:a3:04:17:3a:e7:ac:fc:3b:ad:a9:9a:
         23:2a:06:4f:4e:ce:ee:dd:b6:9b:3f:8d:ad:9a:a3:e4:6e:40:
         2e:dc:bd:d9:24:84:61:1d:57:18:a9:b3:5f:6b:a5:fb:10:22:
         c0:3a:20:1e:aa:1f:1c:0b:4a:06:c2:4f:aa:f2:4e:af:b9:c0:
         48:39:ce:2b:7a:1b:07:dc:1c:93:df:fd:c8:77:0c:d9:d4:fd:
         61:fd:ad:cd:fe:08:91:5e:0e:bb:d0:10:72:7a:d8:2e:d6:11:
         8b:61:a6:33:44:59:dd:f3:c7:52:72:ed:e1:8a:d3:f6:d4:2c:
         0b:e5:32:3c:d1:ed:43:21:08:98:4d:a6:b3:28:88:26:e8:a1:
         59:0a:5b:18:d7:97:42:bf:5e:20:6f:d4:e3:18:c1:64:d0:d6:
         b9:1c:ee:b5:e9:1f:47:c1:d2:c7:b5:63:ea:81:53:b2:ff:4d:
         25:96:0a:dd:f4:09:7d:33:5e:ac:b2:91:b2:e9:f8:26:ed:d6:
         fb:a1:c0:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+D+LdAdHoIErafEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2
MTMxMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
Nzc4M2UwMzgtODRlMy00YTBkLWFlNGUtZjNjNmJjYTQzMWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSBvflZwpT76L6jY0qGkXa+6SKwlCYtVra42
01n8ua4t3Z0qtdZ/5OrBkYW8DOX2hU7LQcJ3pGbF5LrgLVVIE8wDE+I+ZjJO9Ke/
Mn8/jzqJH/e1h0BrwB3S4P5iMryPTXRZiSM7CZce4ox9sUFK91WkNCwgkK7DYegs
ozUycxjKpHJVswW5oModRrDQGWcsCxllulLAcIM4+EqyM+8iFxCdxLDe9QCHLbZI
NTmFTEZyvdFoljqZkIfgCYdrclr3w22HDXlw96+s3mPUB8tdWLyCbRK+NLjGh34/
8whPZm6tup5oNZHMPmlZkQmEDnfajZnDnZu0si+9LkG8ZoghewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI9LoC743DioeqQHqHvYjYKNRUHRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5
NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvYWYxOWM0MjQtMzVlMi0z
Zjg1LTkyNzAtMmVlMzE2OTI5ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5
YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy
NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh
MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgL20ACg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFoniiMmP8q/+4vj+sepU0P+PiWNBQ1ky5HOZHWfViGoj7t/Qt4P
7b/olEtDyhWeh6o6T7r8LZNpKcD9WeejBBc656z8O62pmiMqBk9Ozu7dtps/ja2a
o+RuQC7cvdkkhGEdVxips19rpfsQIsA6IB6qHxwLSgbCT6ryTq+5wEg5zit6Gwfc
HJPf/ch3DNnU/WH9rc3+CJFeDrvQEHJ62C7WEYthpjNEWd3zx1Jy7eGK0/bULAvl
MjzR7UMhCJhNprMoiCbooVkKWxjXl0K/XiBv1OMYwWTQ1rkc7rXpH0fB0se1Y+qB
U7L/TSWWCt30CX0zXqyykbLp+Cbt1vuhwO8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:32:37 2025 by rpki-client