Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/07db8689-7eb5-3cbe-a546-22401eb77738.roa
File:                     07db8689-7eb5-3cbe-a546-22401eb77738.roa (raw, json)
Hash identifier:          jWyYaExqc2Q3lNfUIWJ05ASi971G52ivvUMtY1fDQd0=
Subject key identifier:   7E:80:EB:EE:05:FE:7A:36:F1:2D:F7:51:1E:A8:CC:7B:71:BA:06:E9
Certificate issuer:       /CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
Certificate serial:       010D0C9F43285849C4E60DC439F38A105C795000
Authority key identifier: 53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/07db8689-7eb5-3cbe-a546-22401eb77738.roa
Signing time:             Wed 07 May 2025 01:35:47 +0000
ROA not before:           Wed 07 May 2025 01:35:47 +0000
ROA not after:            Tue 05 Aug 2025 01:35:47 +0000
asID:                     400941
IP address blocks:        2602:f66b:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:e6:0d:c4:39:f3:8a:10:5c:79:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
        Validity
            Not Before: May  7 01:35:47 2025 GMT
            Not After : Aug  5 01:35:47 2025 GMT
        Subject: CN=e885a8b6-0014-4dc3-8243-da6233b4f806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:6f:02:79:e8:41:2a:96:1b:22:bd:de:0b:
                    4c:91:5b:74:76:2b:4f:c9:cb:b0:f5:08:f7:43:ba:
                    7f:37:aa:e2:82:e6:0c:d7:cf:3c:b4:8b:4d:34:55:
                    da:83:1f:9d:dd:cf:70:74:da:33:b0:9e:d2:9d:45:
                    0e:3b:22:20:7a:89:ae:6f:23:1d:ed:20:5f:e4:6b:
                    87:1b:56:f8:a0:ce:e4:12:ff:88:33:f8:e2:11:8d:
                    10:26:86:8c:0e:ce:7c:c0:e0:31:e9:5a:53:21:32:
                    de:f9:d1:f2:9c:b2:56:a2:15:1b:b2:27:ce:79:14:
                    e5:94:4a:38:d7:04:1a:60:d3:66:49:fc:f1:db:9e:
                    1d:80:d6:07:c7:a4:6f:b7:e0:95:aa:05:4e:29:4f:
                    e0:1a:af:8a:b8:3d:15:34:cd:0d:50:e7:bb:f3:77:
                    60:26:ef:d4:16:6a:f0:1c:01:23:ae:8d:86:4f:0f:
                    d3:9d:6d:cc:05:f7:85:10:29:b8:9d:0c:48:0f:19:
                    48:4b:05:74:f1:82:d7:2f:9c:49:9c:0c:bb:e3:d1:
                    11:75:1b:f6:15:bc:3f:82:2e:14:75:a2:df:6b:db:
                    d2:fa:1b:d6:5c:fd:71:bd:89:92:30:2d:1d:75:1d:
                    af:9e:21:48:83:09:64:59:a0:75:3a:18:11:c1:12:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:80:EB:EE:05:FE:7A:36:F1:2D:F7:51:1E:A8:CC:7B:71:BA:06:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/07db8689-7eb5-3cbe-a546-22401eb77738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66b:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:52:90:2c:35:53:88:a0:f2:6a:38:2c:73:e5:6b:ea:0f:d4:
         99:26:42:87:26:bd:c2:fc:b1:03:e2:bc:7a:b4:45:6d:5f:61:
         9a:17:f7:99:27:f8:02:5e:24:af:ce:45:1c:cb:a8:82:f2:52:
         f3:22:0e:5e:c6:e6:79:8b:03:d2:c1:3c:67:21:00:54:dd:71:
         4c:44:c2:e1:b0:41:aa:05:5f:bc:f4:f1:1a:a0:df:35:d2:a7:
         a9:06:2b:b9:87:e0:88:0e:6f:07:90:dc:f8:a2:83:44:aa:80:
         fb:fb:1b:9d:e3:ff:33:17:fc:25:9f:29:02:e1:65:39:91:7e:
         a5:bc:89:ec:74:6f:46:c2:a9:70:bb:de:d5:d8:a9:07:ec:b3:
         d1:77:9b:ec:0d:f6:b7:46:4f:b4:a9:48:f6:fa:4e:6b:4d:bd:
         2a:26:3c:b7:e2:32:ec:40:54:d2:c9:dd:59:a3:64:a9:f6:0e:
         1e:41:e7:be:b9:ae:74:f0:7a:e3:0a:d8:8f:f9:00:8c:ce:41:
         b4:25:d5:06:f4:ad:16:80:fd:29:f7:d3:53:d1:9c:bc:f7:15:
         4e:b6:e6:1a:37:91:4c:1f:c2:9d:44:10:71:90:92:1c:a9:a0:
         de:93:bf:8f:69:24:37:80:87:75:29:bd:fc:3b:73:cd:48:0a:
         09:1f:90:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnE5g3EOfOKEFx5UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzU3MzA1ZDktMmIxZS00NzgzLTk0NWItZTdkNmNjMmU0
OWE4MB4XDTI1MDUwNzAxMzU0N1oXDTI1MDgwNTAxMzU0N1owLzEtMCsGA1UEAxMk
ZTg4NWE4YjYtMDAxNC00ZGMzLTgyNDMtZGE2MjMzYjRmODA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro5vAnnoQSqWGyK93gtMkVt0ditPycuw9Qj3
Q7p/N6riguYM1888tItNNFXagx+d3c9wdNozsJ7SnUUOOyIgeomubyMd7SBf5GuH
G1b4oM7kEv+IM/jiEY0QJoaMDs58wOAx6VpTITLe+dHynLJWohUbsifOeRTllEo4
1wQaYNNmSfzx254dgNYHx6Rvt+CVqgVOKU/gGq+KuD0VNM0NUOe783dgJu/UFmrw
HAEjro2GTw/TnW3MBfeFECm4nQxIDxlISwV08YLXL5xJnAy749ERdRv2Fbw/gi4U
daLfa9vS+hvWXP1xvYmSMC0ddR2vniFIgwlkWaB1OhgRwRLGHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH6A6+4F/no28S33UR6ozHtxugbpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NTcz
MDVkOS0yYjFlLTQ3ODMtOTQ1Yi1lN2Q2Y2MyZTQ5YTgvMDdkYjg2ODktN2ViNS0z
Y2JlLWE1NDYtMjI0MDFlYjc3NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzU3MzA1ZDktMmIxZS00NzgzLTk0
NWItZTdkNmNjMmU0OWE4Lzc1NzMwNWQ5LTJiMWUtNDc4My05NDViLWU3ZDZjYzJl
NDlhOC5jcmwwHwYDVR0jBBgwFoAUU8O4apAQxye9cxLJXxyxt9isDXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NTczMDVkOS0yYjFlLTQ3ODMtOTQ1Yi1lN2Q2
Y2MyZTQ5YTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2awAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI1SkCw1U4ig8mo4LHPla+oP1JkmQocmvcL8sQPivHq0RW1fYZoX
95kn+AJeJK/ORRzLqILyUvMiDl7G5nmLA9LBPGchAFTdcUxEwuGwQaoFX7z08Rqg
3zXSp6kGK7mH4IgObweQ3Piig0SqgPv7G53j/zMX/CWfKQLhZTmRfqW8iex0b0bC
qXC73tXYqQfss9F3m+wN9rdGT7SpSPb6TmtNvSomPLfiMuxAVNLJ3VmjZKn2Dh5B
5765rnTweuMK2I/5AIzOQbQl1Qb0rRaA/Sn301PRnLz3FU625ho3kUwfwp1EEHGQ
khypoN6Tv49pJDeAh3Upvfw7c81ICgkfkBM=
-----END CERTIFICATE-----
Generated at Sat May 10 19:20:47 2025 by rpki-client