Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa
File:                     08ee47d2-b37e-3af6-8b02-286bce4dae50.roa (raw, json)
Hash identifier:          GmdvirOxQCyddHDBDJlC088EeAJW9/rF7EiO1odXMjE=
Subject key identifier:   F1:12:3E:FE:0B:75:23:E0:03:8C:4A:87:2B:BB:15:41:DF:95:40:DB
Certificate issuer:       /CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
Certificate serial:       010D0C9F43285849DC8FAC19AA0485669CBB1C18
Authority key identifier: 46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     397095
IP address blocks:        2602:fe34::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ac:19:aa:04:85:66:9c:bb:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=8e74a093-cc08-4123-9a1c-a54b162ddc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:18:f0:f1:aa:82:c9:18:1f:02:46:ae:7f:
                    4a:dc:8d:40:7e:a1:1a:10:6c:8d:89:b9:9f:b6:19:
                    b6:2d:97:ef:df:1d:40:87:7d:b7:1a:3e:69:be:88:
                    81:7d:80:e7:a3:d3:f0:75:55:30:07:1a:e4:29:10:
                    32:b3:9c:24:08:02:d6:dc:9d:b3:55:09:6e:1d:77:
                    51:bb:22:c8:af:ce:e9:a4:47:b6:6a:29:6b:11:fd:
                    54:65:72:1f:6d:3f:00:0b:a6:3f:4c:93:a3:73:69:
                    71:be:a2:4e:97:c8:29:81:4d:04:3d:4c:88:bd:f6:
                    57:33:eb:6e:c9:1b:36:ed:e7:30:81:23:a2:56:52:
                    01:6b:05:01:bf:a5:38:4c:aa:67:e0:1e:19:de:7b:
                    13:5f:35:53:fa:79:f5:25:b5:79:bb:80:02:35:c9:
                    0a:c0:4d:7a:f0:bf:81:47:60:c6:cb:81:af:da:11:
                    72:1d:ee:79:e6:d2:99:99:e2:7e:75:00:29:ab:0f:
                    2b:4f:bb:bb:4e:d3:56:6f:66:13:94:07:9e:4d:95:
                    a7:ca:73:ae:b0:5c:90:83:f2:e0:8e:58:4e:ef:3c:
                    81:89:21:9c:7c:cd:9e:d4:63:1e:e3:0a:17:80:34:
                    a1:5b:79:ed:3a:41:36:ab:5f:77:e6:d0:76:18:7b:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:12:3E:FE:0B:75:23:E0:03:8C:4A:87:2B:BB:15:41:DF:95:40:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl

            X509v3 Authority Key Identifier:
                keyid:46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe34::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:56:c8:04:59:db:2c:e6:31:79:af:49:fe:08:28:17:6f:55:
         6c:89:fd:81:0c:be:bd:f7:8c:99:89:9f:f9:fb:c0:47:5a:7f:
         7f:a0:d3:c7:d0:f5:b9:4a:73:a1:5c:7c:dc:1e:ce:10:dd:c0:
         87:2f:10:2b:33:ba:a3:e5:14:a4:69:a0:b8:e8:59:ee:b7:24:
         2f:5b:6e:84:c1:c3:e9:25:72:62:18:0e:a0:39:db:94:c5:4b:
         8d:5f:20:c4:68:64:e1:75:97:9b:5e:52:08:57:c6:f4:e1:be:
         ad:b4:11:a0:4a:84:51:55:c7:b9:da:c4:91:e6:a6:27:a6:72:
         5e:8b:fe:ce:98:b2:9c:cc:97:e1:73:cd:57:10:3b:51:f7:84:
         36:be:ea:e7:63:47:1f:ad:71:ca:3b:ce:88:44:1e:81:e2:59:
         13:59:00:95:ea:fc:65:36:12:90:d7:55:97:05:a1:61:29:ba:
         60:31:6d:b9:87:52:0a:c4:ab:55:7b:7f:36:ed:04:02:41:e3:
         20:bf:26:42:5a:e9:e1:69:e3:29:fd:69:a8:87:ee:0e:5d:34:
         fb:2d:15:36:d1:06:a5:9b:ae:8c:fb:ed:a4:7d:ee:a6:5a:57:
         09:1a:29:af:07:3d:bd:be:32:b2:d5:31:88:84:67:ab:db:98:
         62:15:33:89
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEncj6wZqgSFZpy7HBgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTYwNDcyZDgtNDI4OC00NWY3LWExOWMtYWFmN2IxNDNj
OGI2MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
OGU3NGEwOTMtY2MwOC00MTIzLTlhMWMtYTU0YjE2MmRkYzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzUY8PGqgskYHwJGrn9K3I1AfqEaEGyNibmf
thm2LZfv3x1Ah323Gj5pvoiBfYDno9PwdVUwBxrkKRAys5wkCALW3J2zVQluHXdR
uyLIr87ppEe2ailrEf1UZXIfbT8AC6Y/TJOjc2lxvqJOl8gpgU0EPUyIvfZXM+tu
yRs27ecwgSOiVlIBawUBv6U4TKpn4B4Z3nsTXzVT+nn1JbV5u4ACNckKwE168L+B
R2DGy4Gv2hFyHe555tKZmeJ+dQApqw8rT7u7TtNWb2YTlAeeTZWnynOusFyQg/Lg
jlhO7zyBiSGcfM2e1GMe4woXgDShW3ntOkE2q1935tB2GHuEJwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPESPv4LdSPgA4xKhyu7FUHflUDbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NjA0
NzJkOC00Mjg4LTQ1ZjctYTE5Yy1hYWY3YjE0M2M4YjYvMDhlZTQ3ZDItYjM3ZS0z
YWY2LThiMDItMjg2YmNlNGRhZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTYwNDcyZDgtNDI4OC00NWY3LWEx
OWMtYWFmN2IxNDNjOGI2Lzk2MDQ3MmQ4LTQyODgtNDVmNy1hMTljLWFhZjdiMTQz
YzhiNi5jcmwwHwYDVR0jBBgwFoAURpQJ2l32vxyufRuRoqQp80r7n1wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85NjA0NzJkOC00Mjg4LTQ1ZjctYTE5Yy1hYWY3
YjE0M2M4YjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL+NAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAqFbIBFnbLOYxea9J/ggoF29VbIn9gQy+vfeMmYmf+fvAR1p/f6DT
x9D1uUpzoVx83B7OEN3Ahy8QKzO6o+UUpGmguOhZ7rckL1tuhMHD6SVyYhgOoDnb
lMVLjV8gxGhk4XWXm15SCFfG9OG+rbQRoEqEUVXHudrEkeamJ6ZyXov+zpiynMyX
4XPNVxA7UfeENr7q52NHH61xyjvOiEQegeJZE1kAler8ZTYSkNdVlwWhYSm6YDFt
uYdSCsSrVXt/Nu0EAkHjIL8mQlrp4WnjKf1pqIfuDl00+y0VNtEGpZuujPvtpH3u
plpXCRoprwc9vb4ystUxiIRnq9uYYhUziQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:25:51 2025 by rpki-client