Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/52f60f1a-8778-39fe-8a6b-4a95247ae134.roa
File:                     52f60f1a-8778-39fe-8a6b-4a95247ae134.roa (raw, json)
Hash identifier:          6v702d9tWAi8f09EhYQjoNr/n9OAU1VU/pO3KzH9Ze0=
Subject key identifier:   AF:40:31:8F:F1:E2:F4:7C:97:57:E9:35:E1:BA:DC:66:AD:B0:EB:2B
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285849FB452B0645A2222F330CEC00
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/52f60f1a-8778-39fe-8a6b-4a95247ae134.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     4473
IP address blocks:        2602:fbdc:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:2b:06:45:a2:22:2f:33:0c:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=32838cd6-6c7c-4dff-ac97-07d1efeedcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:03:16:7f:c1:e8:4d:db:0c:5d:30:15:aa:
                    49:07:52:a6:3b:68:90:46:20:cf:ff:34:a8:14:a4:
                    86:66:b8:98:d8:fc:75:58:fd:1d:da:f8:5f:98:d5:
                    38:79:d5:8e:d4:49:05:2a:08:06:49:c7:af:64:cc:
                    2d:3a:7e:41:74:bc:22:5d:e2:30:f4:57:52:b9:2d:
                    78:07:d6:50:f1:60:a5:5b:c1:fa:42:fd:31:9c:52:
                    5b:16:76:b4:66:21:d4:a6:81:82:28:8c:4d:4f:6b:
                    a5:3c:e5:71:3c:e7:d0:b9:93:2e:cd:96:33:2d:f1:
                    e3:33:21:74:df:28:ae:d9:d0:58:e3:3d:17:39:0b:
                    3f:60:c0:0f:d3:c2:8c:a0:e6:44:a3:86:5c:ad:43:
                    37:91:34:df:5c:94:7d:9c:80:3c:e4:ad:ec:4d:d5:
                    81:ec:ca:fb:83:b9:9d:6e:68:87:f9:59:f2:44:57:
                    9b:13:10:01:93:8e:79:0a:b5:44:d3:7b:b9:25:ba:
                    07:d4:2e:62:45:b6:02:05:be:bb:99:3f:87:48:78:
                    5f:b1:7b:03:3c:7f:ed:f5:c4:f6:f4:1c:63:41:6b:
                    fc:ce:f6:c4:74:61:2c:45:90:7d:4a:b1:73:5c:01:
                    8f:da:56:db:c8:57:f4:84:84:88:ff:f1:47:af:c7:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:40:31:8F:F1:E2:F4:7C:97:57:E9:35:E1:BA:DC:66:AD:B0:EB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/52f60f1a-8778-39fe-8a6b-4a95247ae134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:33:7d:92:98:07:82:98:ac:1c:a9:2b:b5:76:12:18:d1:2c:
         ad:96:25:91:28:59:f1:eb:12:db:05:d4:62:2c:cf:9a:c0:8c:
         13:2e:ca:5a:1e:92:78:72:1c:65:93:15:46:81:bb:5a:71:9e:
         15:32:d8:a0:87:af:f3:f9:21:05:c0:ca:e6:74:19:84:dd:aa:
         69:cb:b9:a4:db:ae:56:4f:9a:29:44:14:39:75:cd:97:09:a0:
         a7:06:e2:66:58:e1:ed:e4:7b:e0:ce:b3:6e:84:56:58:db:f3:
         cd:e9:02:34:64:22:bf:de:d6:01:bd:13:e0:04:1e:d1:b0:80:
         8e:c9:92:03:07:9c:94:41:0a:70:db:42:3a:16:ad:9e:a9:2e:
         0b:2e:da:51:7c:2c:f4:0c:f1:f6:34:78:5f:ae:2b:17:7f:14:
         25:9b:ed:53:de:80:58:62:b5:fe:b7:a1:0d:2a:ad:ab:8d:58:
         77:4c:d4:3b:93:9c:0a:8c:b7:38:a1:69:4e:b2:0d:0e:f5:6d:
         bc:1e:71:4c:50:67:a9:54:64:a0:71:39:c7:77:58:0b:45:b8:
         4f:9a:5e:9d:df:77:5b:2f:ea:76:bb:af:28:e9:ab:52:f4:78:
         63:0e:78:a5:f0:72:65:b3:d2:e2:4a:cb:86:9b:ad:8b:d6:52:
         2f:e7:fa:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn7RSsGRaIiLzMM7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDUyNjEzMDEwM1oXDTI1MDgyNDEzMDEwM1owLzEtMCsGA1UEAxMk
MzI4MzhjZDYtNmM3Yy00ZGZmLWFjOTctMDdkMWVmZWVkY2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25sDFn/B6E3bDF0wFapJB1KmO2iQRiDP/zSo
FKSGZriY2Px1WP0d2vhfmNU4edWO1EkFKggGScevZMwtOn5BdLwiXeIw9FdSuS14
B9ZQ8WClW8H6Qv0xnFJbFna0ZiHUpoGCKIxNT2ulPOVxPOfQuZMuzZYzLfHjMyF0
3yiu2dBY4z0XOQs/YMAP08KMoOZEo4ZcrUM3kTTfXJR9nIA85K3sTdWB7Mr7g7md
bmiH+VnyRFebExABk455CrVE03u5JboH1C5iRbYCBb67mT+HSHhfsXsDPH/t9cT2
9BxjQWv8zvbEdGEsRZB9SrFzXAGP2lbbyFf0hISI//FHr8eGYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK9AMY/x4vR8l1fpNeG63GatsOsrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNTJmNjBmMWEtODc3OC0z
OWZlLThhNmItNGE5NTI0N2FlMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIUzfZKYB4KYrBypK7V2EhjRLK2WJZEoWfHrEtsF1GIsz5rAjBMu
yloeknhyHGWTFUaBu1pxnhUy2KCHr/P5IQXAyuZ0GYTdqmnLuaTbrlZPmilEFDl1
zZcJoKcG4mZY4e3ke+DOs26EVljb883pAjRkIr/e1gG9E+AEHtGwgI7JkgMHnJRB
CnDbQjoWrZ6pLgsu2lF8LPQM8fY0eF+uKxd/FCWb7VPegFhitf63oQ0qrauNWHdM
1DuTnAqMtzihaU6yDQ71bbwecUxQZ6lUZKBxOcd3WAtFuE+aXp3fd1sv6na7ryjp
q1L0eGMOeKXwcmWz0uJKy4abrYvWUi/n+lg=
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:01:55 2025 by rpki-client