Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/a3da1a5d-6d8c-356a-87ca-cf8a020c71d3.roa
File:                     a3da1a5d-6d8c-356a-87ca-cf8a020c71d3.roa (raw, json)
Hash identifier:          hMGFytTGfk51F1Bg9SS48rc9hDQW3SC0fKOclxALkuo=
Subject key identifier:   B2:76:5E:E9:73:1B:E5:93:57:F8:06:A9:5D:68:E3:79:A7:8A:88:6C
Certificate issuer:       /CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
Certificate serial:       010D0C9F4328584A374AC1D52D18CD1E9A946E80
Authority key identifier: 1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/a3da1a5d-6d8c-356a-87ca-cf8a020c71d3.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     214483
IP address blocks:        2602:f756:32::/48 maxlen: 48
                          2602:f756:33::/48 maxlen: 48
                          2602:f756:34::/48 maxlen: 48
                          2602:f756:35::/48 maxlen: 48
                          2602:f756:36::/48 maxlen: 48
                          2602:f756:37::/48 maxlen: 48
                          2602:f756:38::/48 maxlen: 48
                          2602:f756:39::/48 maxlen: 48
                          2602:f756:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c1:d5:2d:18:cd:1e:9a:94:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=0268df17-8577-46cf-b47f-1b3e889be16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:52:af:5c:23:3e:39:1a:88:4b:9b:c1:33:25:
                    71:1c:81:91:02:53:12:c2:e4:ee:90:b7:a4:3f:d8:
                    7b:d2:76:3e:a6:a2:30:10:64:ad:50:b1:68:46:96:
                    93:c2:db:4c:36:b9:fe:40:aa:6c:28:44:2a:9e:86:
                    1c:18:0a:ee:8c:77:7a:52:71:43:63:62:3c:a0:19:
                    34:20:21:1a:60:31:b6:12:17:21:d5:45:a9:4c:9c:
                    1b:be:84:1b:52:b4:86:18:40:3b:88:ca:73:a4:e8:
                    ea:13:d1:f4:58:89:12:77:3b:2a:95:56:27:99:db:
                    50:6c:79:3b:ba:ce:46:31:b6:c7:d9:f1:22:74:a8:
                    c5:b7:10:3d:35:5a:98:fe:73:23:1f:c4:4f:1b:0a:
                    ff:ec:f0:bd:77:26:78:b9:13:0f:15:ad:72:fc:b6:
                    f3:89:99:93:83:45:43:e6:94:c4:0d:94:32:c3:af:
                    6a:b8:5c:57:37:72:93:0a:00:5b:e7:9b:44:81:ef:
                    7a:1e:5f:6d:1d:3b:69:68:3b:53:19:a1:a8:09:95:
                    aa:54:ea:ee:83:22:f8:15:9f:ce:8f:3e:6a:a3:30:
                    a4:41:ec:cb:94:31:83:d5:9d:8c:9b:4d:74:90:77:
                    03:82:bd:0d:95:c7:26:20:96:bb:35:45:ec:d3:5f:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:5E:E9:73:1B:E5:93:57:F8:06:A9:5D:68:E3:79:A7:8A:88:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/a3da1a5d-6d8c-356a-87ca-cf8a020c71d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f756:32::-2602:f756:3a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:06:49:2b:a8:63:d5:23:8a:3a:24:81:92:a5:6f:46:c2:19:
         b6:e2:6f:a0:33:f8:05:8d:d5:db:d5:32:97:49:27:72:7f:ba:
         58:7d:67:80:73:7e:f5:d6:ad:01:e3:11:56:70:14:8c:21:e9:
         89:d6:71:77:5d:39:fb:2f:3e:d2:eb:f6:a2:01:ee:01:e4:c0:
         47:11:b8:9e:bb:92:5f:79:2f:42:56:d4:5a:de:94:6c:b6:cd:
         7e:e3:72:a3:52:ff:05:bf:ee:89:41:09:39:3f:22:b7:a9:9e:
         6c:83:c2:1f:7d:27:25:86:1e:93:50:b8:0b:21:a1:3b:38:c1:
         a0:c7:6f:aa:23:d7:84:8c:33:91:d3:fd:fd:81:33:9a:14:ad:
         bf:75:40:dc:1e:84:29:bf:56:24:6f:8a:58:5e:2b:1c:0e:4f:
         ab:b2:04:ac:59:c8:6c:bc:24:58:3a:0d:82:b4:49:90:ae:4d:
         66:59:45:43:34:2e:4e:df:eb:c1:b4:30:43:29:e3:07:5b:74:
         09:59:76:22:39:ba:8b:04:b3:24:09:be:c6:d3:fc:e2:b4:f5:
         f5:07:6c:35:aa:9e:bc:19:0b:d0:84:4b:08:e8:e2:89:71:97:
         a3:48:d7:4b:2b:e5:33:2e:d9:22:44:cf:19:f2:14:fa:02:8f:
         69:2a:c7:45
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEo3SsHVLRjNHpqUboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdiYmEwZTAtZmI3Yi00OWU1LWJjZjgtNTQ5NGExZjRj
ZGU3MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
MDI2OGRmMTctODU3Ny00NmNmLWI0N2YtMWIzZTg4OWJlMTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFKvXCM+ORqIS5vBMyVxHIGRAlMSwuTukLek
P9h70nY+pqIwEGStULFoRpaTwttMNrn+QKpsKEQqnoYcGArujHd6UnFDY2I8oBk0
ICEaYDG2Ehch1UWpTJwbvoQbUrSGGEA7iMpzpOjqE9H0WIkSdzsqlVYnmdtQbHk7
us5GMbbH2fEidKjFtxA9NVqY/nMjH8RPGwr/7PC9dyZ4uRMPFa1y/LbziZmTg0VD
5pTEDZQyw69quFxXN3KTCgBb55tEge96Hl9tHTtpaDtTGaGoCZWqVOrugyL4FZ/O
jz5qozCkQezLlDGD1Z2Mm010kHcDgr0NlccmIJa7NUXs01+p7QIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFLJ2XulzG+WTV/gGqV1o43mniohsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Ji
YTBlMC1mYjdiLTQ5ZTUtYmNmOC01NDk0YTFmNGNkZTcvYTNkYTFhNWQtNmQ4Yy0z
NTZhLTg3Y2EtY2Y4YTAyMGM3MWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdiYmEwZTAtZmI3Yi00OWU1LWJj
ZjgtNTQ5NGExZjRjZGU3L2M3YmJhMGUwLWZiN2ItNDllNS1iY2Y4LTU0OTRhMWY0
Y2RlNy5jcmwwHwYDVR0jBBgwFoAUHcEwUKNSLTycF61s8O5VgkIzk/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2JiYTBlMC1mYjdiLTQ5ZTUtYmNmOC01NDk0
YTFmNGNkZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwEmAvdW
ADIDBwAmAvdWADowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAwAZJK6hj1SOKOiSBkqVvRsIZtuJvoDP4BY3V
29Uyl0kncn+6WH1ngHN+9datAeMRVnAUjCHpidZxd105+y8+0uv2ogHuAeTARxG4
nruSX3kvQlbUWt6UbLbNfuNyo1L/Bb/uiUEJOT8it6mebIPCH30nJYYek1C4CyGh
OzjBoMdvqiPXhIwzkdP9/YEzmhStv3VA3B6EKb9WJG+KWF4rHA5Pq7IErFnIbLwk
WDoNgrRJkK5NZllFQzQuTt/rwbQwQynjB1t0CVl2Ijm6iwSzJAm+xtP84rT19Qds
NaqevBkL0IRLCOjiiXGXo0jXSyvlMy7ZIkTPGfIU+gKPaSrHRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:27:10 2025 by rpki-client