Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
File:                     643dea32-ad94-36d9-a6c5-90366af478b2.roa (raw, json)
Hash identifier:          zNDg/x/VyIfKbcl1FqDtfDpWpg+ANIEjpCkIN4ZvA1U=
Subject key identifier:   CE:08:19:2E:F0:5A:41:F7:43:DB:0A:26:96:D4:7C:EF:B8:83:88:5C
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584A331AE47AF088E0633C38FF00
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     40249
IP address blocks:        2602:fb78:10::/44 maxlen: 48
                          2602:fb78:20::/44 maxlen: 48
                          2602:fb78:30::/44 maxlen: 48
                          2602:fb78:40::/44 maxlen: 48
                          2602:fb78:50::/44 maxlen: 48
                          2602:fb78:60::/44 maxlen: 48
                          2602:fb78:70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e4:7a:f0:88:e0:63:3c:38:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=7a26f9be-8f67-4a77-86b7-f640bf7dd36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:e1:b5:d5:4e:ef:e8:a3:6e:c1:2c:dd:a1:
                    2d:5d:90:36:3c:e3:cf:18:2d:51:4f:78:f9:57:07:
                    e5:59:4d:97:f8:75:4e:a6:f0:9e:6b:4a:e3:20:db:
                    b9:08:99:bd:82:bc:bf:39:6a:61:1f:16:62:6d:fe:
                    3e:af:0e:ae:85:80:33:11:2a:39:f4:61:34:36:ca:
                    d8:88:0f:3a:58:63:b7:22:0b:1a:ab:ff:44:a8:ea:
                    72:2f:42:db:67:af:61:8c:7e:42:df:9b:20:2f:ef:
                    9c:fe:bb:7f:5c:b0:5a:5a:b9:02:70:05:b5:84:64:
                    1b:5c:4d:4d:14:83:dd:00:b1:d2:3e:f0:52:01:c1:
                    d9:27:0c:1b:cb:f7:ff:ce:95:7a:8e:21:a4:eb:df:
                    cd:cc:eb:ad:a3:02:2f:4a:97:e5:a4:21:06:b0:74:
                    28:cc:05:43:77:54:83:de:39:f1:cd:47:73:0b:c9:
                    f7:d7:f1:c8:a6:ac:82:0a:5c:72:0a:09:e8:68:6e:
                    3a:db:ad:8f:6d:5e:0b:3a:0f:32:44:b3:b1:86:22:
                    9a:ed:4d:aa:3e:3e:4e:a9:d0:cd:76:c0:08:ba:7c:
                    d3:ec:25:ce:94:5f:a6:e1:7c:cc:4d:8a:34:b2:df:
                    72:6e:0b:67:ab:a2:be:7c:40:6f:6d:5c:89:4f:86:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:08:19:2E:F0:5A:41:F7:43:DB:0A:26:96:D4:7C:EF:B8:83:88:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:58:d8:c6:f5:94:b0:50:4c:47:0e:1d:56:11:f3:ee:ef:84:
         54:b9:67:1f:cf:8f:dc:39:9b:91:f6:e7:6e:64:3f:69:27:81:
         df:be:dc:bd:fb:46:c6:01:9f:26:8b:73:3a:ef:2b:6c:35:33:
         4c:d3:95:91:67:02:d3:40:e3:36:ab:ed:eb:fd:0f:b0:30:aa:
         2e:c3:c2:2d:29:c2:58:f9:16:63:b2:82:1f:60:d1:ef:f1:d8:
         e0:f9:ad:5f:b6:27:fa:c9:5b:26:4a:49:2d:a8:4c:a3:f4:a5:
         24:69:29:ac:50:52:d3:9c:a9:e1:2b:fd:29:23:16:b5:6e:fa:
         06:f5:76:ef:e6:55:4e:da:2d:6b:db:7d:45:1d:79:01:74:dd:
         bc:7e:a3:94:d1:f3:89:ed:f0:d3:27:c5:4b:26:dd:26:e6:db:
         42:a7:40:44:41:d1:2e:c4:37:5f:71:47:14:c8:c5:b8:dc:d6:
         06:34:4f:c9:d8:f7:e2:4f:7f:d9:fa:0f:fa:db:e4:db:67:4c:
         6d:de:4a:37:5f:7b:e7:19:0d:28:f2:77:3b:03:18:f6:b0:c5:
         c7:d5:dc:fb:39:ba:ea:8f:5a:fa:f4:32:be:49:6e:e2:f4:9a:
         a1:b5:ea:6e:af:58:56:4e:da:46:c8:40:a8:62:df:9b:7c:cf:
         c7:2f:28:25
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEozGuR68IjgYzw4/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3
YTEzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
N2EyNmY5YmUtOGY2Ny00YTc3LTg2YjctZjY0MGJmN2RkMzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HLhtdVO7+ijbsEs3aEtXZA2POPPGC1RT3j5
VwflWU2X+HVOpvCea0rjINu5CJm9gry/OWphHxZibf4+rw6uhYAzESo59GE0NsrY
iA86WGO3Igsaq/9EqOpyL0LbZ69hjH5C35sgL++c/rt/XLBaWrkCcAW1hGQbXE1N
FIPdALHSPvBSAcHZJwwby/f/zpV6jiGk69/NzOutowIvSpflpCEGsHQozAVDd1SD
3jnxzUdzC8n31/HIpqyCClxyCgnoaG46262PbV4LOg8yRLOxhiKa7U2qPj5OqdDN
dsAIunzT7CXOlF+m4XzMTYo0st9ybgtnq6K+fEBvbVyJT4YJHwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFM4IGS7wWkH3Q9sKJpbUfO+4g4hcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3
MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvNjQzZGVhMzItYWQ5NC0z
NmQ5LWE2YzUtOTAzNjZhZjQ3OGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll
NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi
N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw
MWY1YjdhMTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQmAvt4
ABADBwcmAvt4AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEARljYxvWUsFBMRw4dVhHz7u+EVLlnH8+P3Dmb
kfbnbmQ/aSeB377cvftGxgGfJotzOu8rbDUzTNOVkWcC00DjNqvt6/0PsDCqLsPC
LSnCWPkWY7KCH2DR7/HY4PmtX7Yn+slbJkpJLahMo/SlJGkprFBS05yp4Sv9KSMW
tW76BvV27+ZVTtota9t9RR15AXTdvH6jlNHzie3w0yfFSybdJubbQqdAREHRLsQ3
X3FHFMjFuNzWBjRPydj34k9/2foP+tvk22dMbd5KN1975xkNKPJ3OwMY9rDFx9Xc
+zm66o9a+vQyvklu4vSaobXqbq9YVk7aRshAqGLfm3zPxy8oJQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:47 2025 by rpki-client