Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2cec105a-4cfc-3be3-871f-f8991e2da5a3.roa
File:                     2cec105a-4cfc-3be3-871f-f8991e2da5a3.roa (raw, json)
Hash identifier:          oYahRj0qyOSCU4l4s+CDuBuho21O4XCFgvw6CxQJceU=
Subject key identifier:   E1:FB:44:78:23:D4:3C:49:D5:43:D8:48:5A:2A:6A:DC:1C:BB:D2:01
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584A74B5D71256DB96C304405B00
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2cec105a-4cfc-3be3-871f-f8991e2da5a3.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     40676
IP address blocks:        2602:fb54:210::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d7:12:56:db:96:c3:04:40:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=54d6686d-ac6b-4b31-9993-69f3e459f633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:06:12:c2:e9:7a:ea:a3:46:01:79:93:51:
                    10:f1:55:7f:dd:c1:bc:6b:a2:c7:88:89:91:fc:5d:
                    6c:58:89:18:15:64:3f:f8:db:c3:26:91:c6:73:e0:
                    59:b9:86:42:0f:30:d6:b6:80:6a:61:b9:77:1f:e0:
                    c8:ea:06:9c:eb:c5:52:25:f6:ce:87:d3:d7:ec:74:
                    bb:38:53:42:8f:cc:9f:5f:37:c0:97:14:ba:b5:cd:
                    73:1e:96:6f:d2:f7:04:fb:3a:ac:e6:a3:d0:2d:19:
                    85:3e:5c:8a:e2:d2:ab:3c:5a:16:28:7c:6b:01:5d:
                    86:3d:94:39:ab:5e:84:1d:8f:b8:d3:85:ea:70:e3:
                    28:8e:9e:bb:3a:0d:27:76:92:d4:af:5e:cc:d3:e7:
                    6c:c8:be:e2:7e:c4:e0:00:d3:92:5f:c9:9e:3b:3e:
                    24:ec:98:f7:3c:82:7f:73:d9:29:01:81:57:64:3a:
                    44:f8:4d:62:74:2e:ca:18:ec:c9:14:ab:a2:a9:e1:
                    c8:2e:1a:d2:c8:15:bd:2f:4b:f4:2b:3b:50:48:a6:
                    7e:31:71:21:e5:57:ff:04:af:b5:f1:51:6d:a8:2b:
                    ee:06:7a:89:f5:ff:cd:d6:e7:80:26:19:89:10:18:
                    03:94:c0:a7:06:b3:b0:17:d1:8b:49:97:51:b0:3a:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FB:44:78:23:D4:3C:49:D5:43:D8:48:5A:2A:6A:DC:1C:BB:D2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2cec105a-4cfc-3be3-871f-f8991e2da5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:210::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:bb:6d:5d:c7:5f:1d:23:27:66:ab:83:63:b7:09:45:e8:65:
         7b:0e:b4:23:10:06:11:3f:3d:f5:48:38:77:9f:0b:52:c8:5c:
         b8:ba:53:e1:20:d5:e3:d6:0a:ac:41:36:43:f4:53:af:72:73:
         ec:63:da:c9:c5:99:df:28:74:c6:f2:4f:41:9f:75:d5:49:00:
         2f:bc:ee:1f:c3:33:78:4d:92:cb:cc:f3:9a:00:b2:98:fa:76:
         97:eb:f6:35:49:b8:d7:11:93:c7:7c:ac:7f:56:31:a1:11:7c:
         e1:f7:47:54:b0:dc:08:1a:6d:58:06:37:7b:ff:44:b8:45:84:
         c0:44:17:90:23:47:27:94:29:a6:90:c7:91:98:77:e0:fe:6a:
         25:c3:88:ee:cf:ab:5c:70:8d:b7:24:2a:58:70:2f:e6:53:5e:
         aa:13:55:67:a2:42:c6:34:fc:27:ef:23:73:87:17:cc:9b:0f:
         9d:b4:d8:c3:b6:c3:5b:66:b4:d1:a9:1b:99:46:7a:f9:8f:7a:
         92:33:bc:d0:1e:56:14:73:a1:29:b9:c8:0d:d4:ca:42:b4:c5:
         d2:ad:e8:64:a9:78:fe:1b:2c:d7:c3:dc:52:ce:c8:fe:9a:9c:
         4c:7f:a1:ea:b9:8d:60:d4:8a:c0:0e:72:3c:c3:71:d5:9a:05:
         22:99:53:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp0tdcSVtuWwwRAWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
NTRkNjY4NmQtYWM2Yi00YjMxLTk5OTMtNjlmM2U0NTlmNjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VEGEsLpeuqjRgF5k1EQ8VV/3cG8a6LHiImR
/F1sWIkYFWQ/+NvDJpHGc+BZuYZCDzDWtoBqYbl3H+DI6gac68VSJfbOh9PX7HS7
OFNCj8yfXzfAlxS6tc1zHpZv0vcE+zqs5qPQLRmFPlyK4tKrPFoWKHxrAV2GPZQ5
q16EHY+404XqcOMojp67Og0ndpLUr17M0+dsyL7ifsTgANOSX8meOz4k7Jj3PIJ/
c9kpAYFXZDpE+E1idC7KGOzJFKuiqeHILhrSyBW9L0v0KztQSKZ+MXEh5Vf/BK+1
8VFtqCvuBnqJ9f/N1ueAJhmJEBgDlMCnBrOwF9GLSZdRsDr8OwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOH7RHgj1DxJ1UPYSFoqatwcu9IBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvMmNlYzEwNWEtNGNmYy0z
YmUzLTg3MWYtZjg5OTFlMmRhNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL7VAIQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADy7bV3HXx0jJ2arg2O3CUXoZXsOtCMQBhE/PfVIOHefC1LIXLi6
U+Eg1ePWCqxBNkP0U69yc+xj2snFmd8odMbyT0GfddVJAC+87h/DM3hNksvM85oA
spj6dpfr9jVJuNcRk8d8rH9WMaERfOH3R1Sw3AgabVgGN3v/RLhFhMBEF5AjRyeU
KaaQx5GYd+D+aiXDiO7Pq1xwjbckKlhwL+ZTXqoTVWeiQsY0/CfvI3OHF8ybD520
2MO2w1tmtNGpG5lGevmPepIzvNAeVhRzoSm5yA3UykK0xdKt6GSpeP4bLNfD3FLO
yP6anEx/oeq5jWDUisAOcjzDcdWaBSKZUzU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:52 2025 by rpki-client