Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa
File:                     520c3b1a-f279-31b1-ba65-308eb39e5402.roa (raw, json)
Hash identifier:          5m3KKrqVGnXdEZdd/rU89GMoBUc+i0keF5lWJLMpHKk=
Subject key identifier:   6E:99:00:21:D9:4B:1C:F5:EF:9E:95:A5:78:E1:A0:C6:1B:43:2B:27
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584A23C00154EA42524AB3EEFB00
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2602:fdeb:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:01:54:ea:42:52:4a:b3:ee:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=7e394b90-5318-4d7c-b736-408efe6d899d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:98:a4:71:a9:a1:d8:55:33:07:ae:93:7c:
                    71:4e:b9:59:5b:11:e0:97:9b:2f:70:14:0f:0c:40:
                    d4:ee:6d:67:a9:47:66:f4:c9:a3:23:a0:57:f3:be:
                    b0:58:b6:c2:4e:05:d2:39:39:42:da:14:c4:02:85:
                    1d:9e:47:cf:89:3f:5c:99:4f:b3:45:76:32:88:e5:
                    5f:98:1e:50:76:f2:93:2a:b3:3a:a1:bf:41:3f:38:
                    63:d1:06:c8:b6:57:9a:96:80:c5:cf:41:06:1d:21:
                    1e:e4:80:da:c4:b7:83:fe:b4:86:74:a6:24:01:1a:
                    bf:03:09:5e:ca:4b:8f:fa:9f:cc:90:f9:27:72:2c:
                    99:57:b2:ef:bc:12:ec:26:da:6c:b0:b2:77:bd:9c:
                    0a:84:f3:3f:38:93:a6:69:fe:a5:8f:c7:eb:34:15:
                    e5:54:62:41:24:8f:0c:f9:23:36:d8:ad:56:f5:d7:
                    84:e3:57:46:54:b3:c9:d0:85:3c:92:2f:26:90:85:
                    8f:91:92:36:49:15:3b:15:c0:53:5f:5c:e1:80:fb:
                    e9:4f:31:c4:81:bf:43:e7:31:93:c2:d8:d2:0d:2d:
                    68:29:cc:6d:66:a3:50:ce:18:a6:00:e8:38:83:09:
                    9b:a8:ac:23:5b:e0:0b:aa:b1:aa:42:3e:66:3b:c0:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:00:21:D9:4B:1C:F5:EF:9E:95:A5:78:E1:A0:C6:1B:43:2B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:e3:44:f6:4d:86:1b:70:fc:25:5d:b0:fd:d6:bb:c0:12:
         f0:1a:5b:99:22:dc:87:c3:80:a9:d0:09:3f:03:87:5c:1c:37:
         73:d2:6f:8a:d0:c5:23:7c:53:6f:47:88:a2:b1:37:c0:65:68:
         c5:b7:2a:07:8e:1b:d9:d4:5b:10:2b:57:1b:7f:fb:fd:53:66:
         5c:9a:01:d1:8e:84:03:89:75:28:67:37:0d:7c:46:03:f0:99:
         3e:6e:dc:45:10:1f:6b:a7:63:b8:d5:14:2e:e3:99:8c:0e:db:
         eb:5a:56:21:5b:01:47:ab:de:55:1b:95:29:c0:af:0e:03:7c:
         36:88:c4:b3:98:ad:60:93:96:21:69:12:3c:8f:0f:b4:d6:76:
         9a:79:06:73:fe:6e:cc:62:2f:df:03:26:cf:6f:d5:2a:cd:1b:
         1b:d6:a8:95:a2:6b:a1:e3:75:8e:d5:ce:73:fd:0c:e2:92:87:
         c6:96:31:f2:61:d5:5a:2e:b2:99:cb:62:9e:47:82:2b:6e:ec:
         7a:4d:a3:70:f9:7f:26:10:90:1b:14:b6:bb:72:dc:4d:82:c7:
         ad:40:fe:78:9f:a8:d4:52:2b:35:d9:0c:5f:6c:e1:fc:ed:ba:
         a3:67:f4:87:dc:d9:86:1a:7b:de:d3:45:f1:64:c7:2b:bb:4c:
         cf:7c:a5:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEojwAFU6kJSSrPu+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2
NTI1MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
N2UzOTRiOTAtNTMxOC00ZDdjLWI3MzYtNDA4ZWZlNmQ4OTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBOYpHGpodhVMweuk3xxTrlZWxHgl5svcBQP
DEDU7m1nqUdm9MmjI6BX876wWLbCTgXSOTlC2hTEAoUdnkfPiT9cmU+zRXYyiOVf
mB5QdvKTKrM6ob9BPzhj0QbItlealoDFz0EGHSEe5IDaxLeD/rSGdKYkARq/Awle
ykuP+p/MkPknciyZV7LvvBLsJtpssLJ3vZwKhPM/OJOmaf6lj8frNBXlVGJBJI8M
+SM22K1W9deE41dGVLPJ0IU8ki8mkIWPkZI2SRU7FcBTX1zhgPvpTzHEgb9D5zGT
wtjSDS1oKcxtZqNQzhimAOg4gwmbqKwjW+ALqrGqQj5mO8CHBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG6ZACHZSxz1756VpXjhoMYbQysnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5
MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvNTIwYzNiMWEtZjI3OS0z
MWIxLWJhNjUtMzA4ZWIzOWU1NDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3
ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz
NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk
NjU0MzY1MjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL96wAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA1F40T2TYYbcPwlXbD91rvAEvAaW5ki3IfDgKnQCT8Dh1wcN3PS
b4rQxSN8U29HiKKxN8BlaMW3KgeOG9nUWxArVxt/+/1TZlyaAdGOhAOJdShnNw18
RgPwmT5u3EUQH2unY7jVFC7jmYwO2+taViFbAUer3lUblSnArw4DfDaIxLOYrWCT
liFpEjyPD7TWdpp5BnP+bsxiL98DJs9v1SrNGxvWqJWia6HjdY7VznP9DOKSh8aW
MfJh1VouspnLYp5Hgitu7HpNo3D5fyYQkBsUtrty3E2Cx61A/nifqNRSKzXZDF9s
4fztuqNn9Ifc2YYae97TRfFkxyu7TM98pao=
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:16:50 2025 by rpki-client