Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/19b54d00-8c77-38da-95d8-df833940e979.roa
File:                     19b54d00-8c77-38da-95d8-df833940e979.roa (raw, json)
Hash identifier:          ErC7DnFELvrxBBd7nzhJMWZZz8y8YjFtd2e5RWIuF5Q=
Subject key identifier:   4C:DA:71:62:8D:0A:BC:0B:01:73:A4:B1:4C:E6:20:29:19:A2:24:1E
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285849FCAA76034234C0B819D01240
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/19b54d00-8c77-38da-95d8-df833940e979.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     4186
IP address blocks:        2602:fbdc::/40 maxlen: 40
                          2602:fbdc:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:76:03:42:34:c0:b8:19:d0:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=99a7adb6-f030-41dc-88c2-648ab0c214d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:06:64:90:54:0c:de:69:b5:21:aa:b9:94:
                    68:50:a3:c5:ae:4b:d1:56:66:17:30:aa:f2:19:d7:
                    59:6d:de:cf:d5:22:08:d2:87:63:81:b9:2b:c9:d1:
                    bb:40:4d:7f:e9:62:1d:1b:a0:58:31:b4:77:62:82:
                    a0:9d:48:69:33:97:01:7f:93:04:2b:df:46:43:de:
                    94:4d:7a:bb:a0:f0:9a:e7:e9:41:92:54:49:00:18:
                    ec:23:32:53:38:db:55:9d:fb:c0:a6:34:e1:39:e8:
                    76:bc:6d:b0:02:48:c1:33:9d:81:5e:f8:9e:6c:63:
                    7f:09:03:dd:c2:76:d1:56:aa:58:ae:1e:12:50:14:
                    a7:01:56:dd:46:57:49:49:61:b6:48:11:86:f1:34:
                    b3:18:56:20:3e:e8:1a:71:52:db:47:ab:7b:30:f4:
                    6e:1e:30:66:3d:3b:f5:e7:26:5c:e0:4c:81:8b:7c:
                    0b:1c:6f:da:c3:71:bc:2e:6d:25:ad:26:46:6b:a6:
                    cc:c1:a0:39:d3:43:be:cb:7b:ca:08:0e:d4:f9:89:
                    46:17:5d:ba:10:28:75:b9:6e:7b:e5:e4:c1:81:af:
                    be:65:45:9a:e3:08:10:4c:95:ad:13:d6:85:84:f1:
                    53:c5:e7:5f:b0:e6:f0:b8:99:03:69:8b:2a:b2:5d:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DA:71:62:8D:0A:BC:0B:01:73:A4:B1:4C:E6:20:29:19:A2:24:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/19b54d00-8c77-38da-95d8-df833940e979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:26:6a:1d:df:c5:c1:9c:e8:32:26:88:78:63:f8:9b:18:aa:
         28:7b:c2:71:5e:00:2c:78:79:d3:51:1f:6f:80:60:d2:ae:f7:
         ab:37:c1:9b:be:a6:8e:05:33:3f:cf:3b:61:d7:90:16:df:12:
         77:ab:51:99:da:64:21:19:f6:c2:2a:e8:db:22:62:a0:ad:d2:
         eb:b7:a4:77:54:a5:03:77:3a:28:05:bf:96:4b:bb:c9:13:a8:
         f5:c5:ec:6c:b5:c1:b6:06:8a:04:d2:4a:f8:0d:89:67:8f:2d:
         4a:45:fe:ff:f9:dc:7f:fb:8b:08:52:22:4c:84:c4:b3:4d:c8:
         99:e5:a2:8f:74:2b:d2:36:27:a8:b1:10:45:39:9f:1c:a8:61:
         5d:8b:71:6d:c5:e9:d0:fa:8f:77:d9:1d:0d:02:a3:60:e2:ea:
         32:70:5d:65:7e:c2:4d:74:12:c0:0d:54:3f:3b:d8:d4:49:fb:
         da:04:be:41:45:2b:59:ef:40:5e:20:9c:67:3c:c5:c7:82:bf:
         20:57:65:1b:02:00:f6:7c:bc:4e:ab:aa:e3:77:13:71:9f:ad:
         fe:45:3b:fc:d6:f8:da:cc:e4:20:ef:cc:64:36:3c:43:92:21:
         9b:ff:53:e0:ef:47:f9:95:6d:35:0b:6d:65:1b:3d:7a:8b:cd:
         d4:04:d4:86
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn8qnYDQjTAuBnQEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
OTlhN2FkYjYtZjAzMC00MWRjLTg4YzItNjQ4YWIwYzIxNGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAIGZJBUDN5ptSGquZRoUKPFrkvRVmYXMKry
GddZbd7P1SII0odjgbkrydG7QE1/6WIdG6BYMbR3YoKgnUhpM5cBf5MEK99GQ96U
TXq7oPCa5+lBklRJABjsIzJTONtVnfvApjThOeh2vG2wAkjBM52BXviebGN/CQPd
wnbRVqpYrh4SUBSnAVbdRldJSWG2SBGG8TSzGFYgPugacVLbR6t7MPRuHjBmPTv1
5yZc4EyBi3wLHG/aw3G8Lm0lrSZGa6bMwaA500O+y3vKCA7U+YlGF126ECh1uW57
5eTBga++ZUWa4wgQTJWtE9aFhPFTxedfsObwuJkDaYsqsl2bKQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEzacWKNCrwLAXOksUzmICkZoiQeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvMTliNTRkMDAtOGM3Ny0z
OGRhLTk1ZDgtZGY4MzM5NDBlOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL73AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXCZqHd/FwZzoMiaIeGP4mxiqKHvCcV4ALHh501Efb4Bg0q73qzfB
m76mjgUzP887YdeQFt8Sd6tRmdpkIRn2wiro2yJioK3S67ekd1SlA3c6KAW/lku7
yROo9cXsbLXBtgaKBNJK+A2JZ48tSkX+//ncf/uLCFIiTITEs03ImeWij3Qr0jYn
qLEQRTmfHKhhXYtxbcXp0PqPd9kdDQKjYOLqMnBdZX7CTXQSwA1UPzvY1En72gS+
QUUrWe9AXiCcZzzFx4K/IFdlGwIA9ny8Tquq43cTcZ+t/kU7/Nb42szkIO/MZDY8
Q5Ihm/9T4O9H+ZVtNQttZRs9eovN1ATUhg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:31:32 2025 by rpki-client