Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa
File:                     59990428-91ee-3746-8405-ef5d22c38294.roa (raw, json)
Hash identifier:          n8OJKPtsWRyjdGrwu8IXSKqW5OT7MtpRLam1Qk2NLRw=
Subject key identifier:   75:32:04:35:D3:49:AC:6C:AA:EC:29:6C:85:E4:ED:16:A7:48:77:3B
Certificate issuer:       /CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
Certificate serial:       010D0C9F432858496A1995355E6A40DB2E816400
Authority key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     30201
IP address blocks:        2602:fcb5::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:95:35:5e:6a:40:db:2e:81:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=1ca85938-c952-4e54-ad7c-671fbd13ec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:d8:b3:50:b4:d5:bc:59:a8:81:f8:23:d7:
                    46:b6:bb:f3:49:41:0d:21:b6:ed:b3:9e:09:67:d2:
                    47:21:8a:3c:ad:fb:2d:31:fc:e1:48:c2:63:7d:2d:
                    b4:aa:19:60:fd:d8:75:bb:6a:32:fd:7e:5d:08:26:
                    ba:c5:2e:d0:e2:6e:c8:f0:f3:97:fd:34:76:f9:f3:
                    96:6d:39:9b:59:85:fb:73:fc:85:94:f4:ee:a7:c0:
                    ae:6e:ca:89:01:e5:b2:8c:a0:eb:df:87:16:51:f1:
                    e8:94:8e:37:e4:8b:46:35:a5:d2:10:d7:b3:70:0e:
                    f6:0e:41:0b:31:72:fc:4f:76:03:7b:71:b1:d8:8f:
                    d5:a5:0b:ae:64:e3:ea:80:ad:e9:fb:25:4b:53:a3:
                    b6:48:55:c8:92:03:99:07:ac:f2:59:da:2e:8d:2f:
                    49:3b:43:c4:1b:c1:11:ef:c0:d0:48:83:4d:2d:81:
                    65:7f:be:69:2a:3c:4d:a7:e8:43:3e:33:35:6d:45:
                    78:45:1f:a2:0b:2c:09:d3:9c:64:2b:bd:b1:a6:04:
                    d3:9c:76:a7:fe:3a:b2:b9:93:53:d7:ca:8e:33:e1:
                    c4:f8:0e:01:a1:8e:74:46:d3:e0:58:84:2e:bd:d0:
                    28:e6:1a:ba:09:57:34:46:3a:31:2d:80:2c:27:64:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:04:35:D3:49:AC:6C:AA:EC:29:6C:85:E4:ED:16:A7:48:77:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcb5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:44:c6:aa:2a:0e:a8:a8:36:2d:6d:e3:48:2f:79:8d:f8:cd:
         e8:59:a8:16:f6:9b:b9:ce:bb:25:01:42:e0:c4:b9:04:4a:d5:
         53:55:ea:9a:9b:6d:35:e1:dd:a1:a4:6c:2d:3b:c3:19:5a:c6:
         de:01:56:d1:9d:b4:02:d8:c0:37:f2:63:b0:71:84:db:e7:7b:
         c9:6f:2c:41:2f:c0:0a:bf:31:fa:9c:26:7e:45:da:5f:cc:e4:
         01:64:9c:ae:cd:68:20:87:ac:27:1b:91:59:34:f7:c2:97:74:
         10:76:cb:3a:8a:8b:35:e2:f6:76:6a:8c:76:bb:36:22:b8:6c:
         15:8c:96:75:84:20:59:34:72:de:11:4f:97:e6:3f:b4:93:5f:
         91:b8:38:d1:d1:73:b6:67:4b:d3:6e:75:fe:66:1e:b4:9b:ac:
         8a:89:b7:85:27:55:71:66:3d:aa:77:75:76:0c:a8:99:65:2d:
         67:18:fd:a1:e7:0e:30:bd:b9:c8:7a:4d:c7:42:0b:02:87:e3:
         38:b7:5f:ef:22:6b:69:05:04:d5:7f:5d:44:d9:74:82:ea:9e:
         c8:dd:b3:88:bb:ae:11:42:12:97:e8:23:2c:03:00:3b:41:48:
         b5:76:95:50:9c:10:97:3c:f9:a1:e4:76:9b:60:82:8c:81:f9:
         e6:3b:10:cd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElqGZU1XmpA2y6BZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM4YzdjYTQtM2E0MS00MTM0LWExMjctODFkYzE0MGJj
N2E5MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
MWNhODU5MzgtYzk1Mi00ZTU0LWFkN2MtNjcxZmJkMTNlYzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9TYs1C01bxZqIH4I9dGtrvzSUENIbbts54J
Z9JHIYo8rfstMfzhSMJjfS20qhlg/dh1u2oy/X5dCCa6xS7Q4m7I8POX/TR2+fOW
bTmbWYX7c/yFlPTup8CubsqJAeWyjKDr34cWUfHolI435ItGNaXSENezcA72DkEL
MXL8T3YDe3Gx2I/VpQuuZOPqgK3p+yVLU6O2SFXIkgOZB6zyWdoujS9JO0PEG8ER
78DQSINNLYFlf75pKjxNp+hDPjM1bUV4RR+iCywJ05xkK72xpgTTnHan/jqyuZNT
18qOM+HE+A4BoY50RtPgWIQuvdAo5hq6CVc0RjoxLYAsJ2R00QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHUyBDXTSaxsquwpbIXk7RanSHc7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzhj
N2NhNC0zYTQxLTQxMzQtYTEyNy04MWRjMTQwYmM3YTkvNTk5OTA0MjgtOTFlZS0z
NzQ2LTg0MDUtZWY1ZDIyYzM4Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM4YzdjYTQtM2E0MS00MTM0LWEx
MjctODFkYzE0MGJjN2E5L2YzOGM3Y2E0LTNhNDEtNDEzNC1hMTI3LTgxZGMxNDBi
YzdhOS5jcmwwHwYDVR0jBBgwFoAUocfcL5AVBoPAPHxbaIA+jBhWHHkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzhjN2NhNC0zYTQxLTQxMzQtYTEyNy04MWRj
MTQwYmM3YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8tQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUkTGqioOqKg2LW3jSC95jfjN6FmoFvabuc67JQFC4MS5BErVU1Xq
mpttNeHdoaRsLTvDGVrG3gFW0Z20AtjAN/JjsHGE2+d7yW8sQS/ACr8x+pwmfkXa
X8zkAWScrs1oIIesJxuRWTT3wpd0EHbLOoqLNeL2dmqMdrs2IrhsFYyWdYQgWTRy
3hFPl+Y/tJNfkbg40dFztmdL0251/mYetJusiom3hSdVcWY9qnd1dgyomWUtZxj9
oecOML25yHpNx0ILAofjOLdf7yJraQUE1X9dRNl0guqeyN2ziLuuEUISl+gjLAMA
O0FItXaVUJwQlzz5oeR2m2CCjIH55jsQzQ==
-----END CERTIFICATE-----
Generated at Fri May 2 10:47:29 2025 by rpki-client