Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa
File:                     6aaf0b5d-0ce4-34be-91b8-468066365036.roa (raw, json)
Hash identifier:          n6T9RiXht8vTq0QlQ6IWiUjZeoVoTfXE7J925XtpLJw=
Subject key identifier:   3E:78:7B:9A:E6:B4:A9:53:61:C4:57:6E:FD:2E:99:F5:65:69:2A:F7
Certificate issuer:       /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial:       010D0C9F4328584A30503710F51CA56591743700
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     46432
IP address blocks:        2602:fe59:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:37:10:f5:1c:a5:65:91:74:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=83901ece-3928-4641-a34f-d982fa56aeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:15:e2:ad:24:a8:8f:c0:53:37:8e:5e:47:
                    ba:87:fa:d8:2e:1d:33:f7:18:e3:78:5e:d9:d8:ad:
                    08:7e:ed:d7:37:57:ce:04:0f:64:25:76:8c:04:2f:
                    7d:69:61:78:a5:d0:11:fb:8c:52:fb:98:08:92:a5:
                    e9:b4:9f:f8:fd:85:ab:7d:82:ee:42:1b:7e:04:1c:
                    cf:f0:4f:d5:46:bc:a9:d1:f8:d9:94:75:9c:2c:ec:
                    93:ab:db:fc:74:c3:f1:7d:36:63:61:74:f8:d7:ab:
                    61:b7:a0:2d:78:35:eb:39:d4:84:5c:7d:33:9f:35:
                    b1:fd:ea:77:33:91:3d:01:b0:a3:f3:a4:14:d9:5e:
                    29:46:b4:60:0a:fb:87:b9:8e:fe:53:0a:a0:14:10:
                    c0:54:03:23:09:16:2b:c8:cb:4d:cf:f2:ff:83:c4:
                    c5:0e:65:59:23:1a:36:6a:d7:a0:72:d1:7c:19:fb:
                    0c:df:1c:0d:27:3f:88:fc:19:41:de:a7:54:6f:d3:
                    d2:b0:7a:d1:1d:40:32:95:0f:42:0d:a8:4b:00:53:
                    8b:9d:1a:ab:ce:3a:a7:dd:e1:28:8f:5e:5b:a0:39:
                    b9:d8:fa:0b:34:4f:90:9b:82:5b:8e:65:af:09:0d:
                    76:f8:e0:77:23:45:4e:0e:da:c9:c1:95:16:33:40:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:78:7B:9A:E6:B4:A9:53:61:C4:57:6E:FD:2E:99:F5:65:69:2A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6aaf0b5d-0ce4-34be-91b8-468066365036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl

            X509v3 Authority Key Identifier:
                keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe59:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0d:30:31:6f:b8:d9:14:c2:41:4b:01:1f:95:bb:fc:4f:2d:
         0a:28:d8:12:65:07:9f:fc:12:f6:1f:d3:5e:62:33:07:f6:60:
         8e:03:7f:0b:d0:d8:be:b9:eb:97:17:a6:1c:1f:0f:37:fb:a3:
         98:37:2c:c6:c5:3f:46:b2:e4:fc:9a:17:d0:76:19:4d:e9:65:
         fa:de:44:26:da:5e:7c:0e:22:92:5b:bd:9d:6a:28:5b:75:72:
         10:8c:1c:71:54:a7:d5:88:11:58:7a:dd:ef:6f:1c:d0:a5:d5:
         d7:39:8a:30:cd:79:a4:28:80:fb:cf:09:14:d1:22:cc:c6:8c:
         d2:30:43:e3:70:a1:60:36:1c:85:8d:c3:b2:28:cd:1c:a1:4c:
         18:70:1e:57:72:ab:5a:24:46:d0:e9:23:27:55:85:40:97:b5:
         ca:d9:06:a0:f6:9e:06:73:06:a5:45:6a:e1:e1:fb:07:e6:67:
         12:90:2c:f1:c4:5d:fd:17:96:c6:d3:63:9e:a0:c9:a1:e9:d2:
         b7:b5:a8:b5:46:96:06:3d:c7:b3:6a:3c:03:7a:37:f3:c7:05:
         81:4f:ae:9b:bd:b5:eb:48:04:f8:9b:bf:d0:98:84:1f:ea:84:
         ce:a6:2a:94:65:5a:b8:74:fa:83:3f:6d:a9:0a:16:cd:30:d5:
         05:df:11:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEowUDcQ9RylZZF0NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm
Yjg1MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ODM5MDFlY2UtMzkyOC00NjQxLWEzNGYtZDk4MmZhNTZhZWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWoV4q0kqI/AUzeOXke6h/rYLh0z9xjjeF7Z
2K0Ifu3XN1fOBA9kJXaMBC99aWF4pdAR+4xS+5gIkqXptJ/4/YWrfYLuQht+BBzP
8E/VRryp0fjZlHWcLOyTq9v8dMPxfTZjYXT416tht6AteDXrOdSEXH0znzWx/ep3
M5E9AbCj86QU2V4pRrRgCvuHuY7+UwqgFBDAVAMjCRYryMtNz/L/g8TFDmVZIxo2
ategctF8GfsM3xwNJz+I/BlB3qdUb9PSsHrRHUAylQ9CDahLAFOLnRqrzjqn3eEo
j15boDm52PoLNE+Qm4JbjmWvCQ12+OB3I0VODtrJwZUWM0AzMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD54e5rmtKlTYcRXbv0umfVlaSr3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw
ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNmFhZjBiNWQtMGNlNC0z
NGJlLTkxYjgtNDY4MDY2MzY1MDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh
NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm
ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1
Y2U3ZmZiODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+WQAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD4NMDFvuNkUwkFLAR+Vu/xPLQoo2BJlB5/8EvYf015iMwf2YI4D
fwvQ2L6565cXphwfDzf7o5g3LMbFP0ay5PyaF9B2GU3pZfreRCbaXnwOIpJbvZ1q
KFt1chCMHHFUp9WIEVh63e9vHNCl1dc5ijDNeaQogPvPCRTRIszGjNIwQ+NwoWA2
HIWNw7IozRyhTBhwHldyq1okRtDpIydVhUCXtcrZBqD2ngZzBqVFauHh+wfmZxKQ
LPHEXf0XlsbTY56gyaHp0re1qLVGlgY9x7NqPAN6N/PHBYFPrpu9tetIBPibv9CY
hB/qhM6mKpRlWrh0+oM/bakKFs0w1QXfEQQ=
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:54:07 2025 by rpki-client