Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa
File:                     5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa (raw, json)
Hash identifier:          7/7o/MHIpb+ZePJcOqPiG2VT7ULbJ5gR6QW15AHZKsc=
Subject key identifier:   8C:67:FD:09:EB:47:E9:26:CF:67:2F:9C:4F:48:10:04:D1:F0:09:0D
Certificate issuer:       /CN=62f9290e-905b-4384-a03f-fbec24a43858
Certificate serial:       010D0C9F4328584A81465467E2EC9D1F5E873980
Authority key identifier: DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     683
IP address blocks:        2602:278::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:54:67:e2:ec:9d:1f:5e:87:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f9290e-905b-4384-a03f-fbec24a43858
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=df98b0f8-6c67-48b0-a2d6-d1ce0186a139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:4a:bc:8e:c4:06:71:c7:2e:12:26:ce:83:
                    18:58:f2:92:74:b3:4e:95:90:0d:b3:38:84:bc:5f:
                    47:45:8d:a5:83:26:df:bd:5b:35:94:65:12:13:ad:
                    a7:c2:fa:25:74:be:a1:f8:a3:0a:8b:fb:ef:2d:4f:
                    1e:55:76:ab:bc:81:31:97:76:19:4c:45:30:d6:7f:
                    fb:5b:07:6b:9a:b0:79:e2:dd:2c:1a:c1:89:b0:4e:
                    88:cb:ef:75:4d:98:22:9a:4f:a2:af:80:3d:3f:43:
                    74:3f:b2:cc:0e:f9:1b:b6:42:aa:24:1b:ba:08:5c:
                    de:fc:03:a6:b7:aa:25:51:0f:e7:52:48:47:51:b5:
                    d5:db:f1:d4:4b:13:af:76:7f:fd:9d:50:af:8a:1a:
                    c3:35:8b:e2:3b:75:d2:55:05:80:0f:63:b5:f7:ce:
                    e0:4f:24:3e:c5:b9:1f:16:1d:14:2c:29:a2:32:18:
                    92:24:7e:25:cb:ab:2b:f0:27:7b:b5:23:ef:49:2a:
                    10:1f:32:dd:1c:45:c7:02:91:40:3f:d5:ea:75:7d:
                    8b:a8:65:02:7c:29:43:01:f7:80:e2:1f:4d:52:5d:
                    e0:82:fa:60:f3:ab:80:5d:0e:60:8f:e0:da:f1:13:
                    b2:ff:a0:58:14:16:59:c9:de:48:68:9e:c5:aa:ee:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:FD:09:EB:47:E9:26:CF:67:2F:9C:4F:48:10:04:D1:F0:09:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl

            X509v3 Authority Key Identifier:
                keyid:DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:278::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:53:2b:fc:33:70:bd:99:33:3f:d5:a6:a7:7e:c8:95:6c:
         56:72:22:80:2a:de:7c:9c:b7:9c:ac:79:1d:d4:c4:e7:90:44:
         10:e7:8d:01:3e:71:86:f9:a1:f5:0d:6d:18:7c:cf:92:88:d5:
         f3:52:5a:83:cb:4d:78:55:6a:20:4e:d7:a8:de:fb:0b:9d:41:
         01:1b:2c:07:08:cc:90:80:c1:f7:d9:f5:51:35:94:e9:84:39:
         e1:1b:d9:fe:ec:53:df:a5:38:78:d7:44:55:1d:b2:bf:22:7b:
         d9:8b:e7:42:c5:02:71:91:29:fe:0b:fb:ea:52:35:05:bf:4b:
         9e:a1:b7:80:57:e5:70:40:8f:c0:27:d3:22:dc:48:23:18:d5:
         8c:2b:20:0f:a0:b5:cf:19:28:b5:38:65:4f:35:6a:83:33:79:
         35:65:f3:f5:a3:7e:6b:88:79:70:a1:f2:20:a3:34:f5:6e:f8:
         bc:03:f1:99:6d:bc:13:da:45:ad:e5:d8:fe:4b:b7:a4:d3:c8:
         64:e8:60:1a:ed:43:ad:ec:b6:91:da:fb:8e:d7:e5:28:e7:b2:
         38:0e:59:f8:d3:53:32:df:cf:c2:c4:29:5a:21:de:ff:c7:6d:
         2d:2d:7d:22:bb:50:2b:5c:bf:09:f5:48:cc:36:96:4c:d7:8b:
         8a:9c:0f:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqBRlRn4uydH16HOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjJmOTI5MGUtOTA1Yi00Mzg0LWEwM2YtZmJlYzI0YTQz
ODU4MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZGY5OGIwZjgtNmM2Ny00OGIwLWEyZDYtZDFjZTAxODZhMTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBRKvI7EBnHHLhImzoMYWPKSdLNOlZANsziE
vF9HRY2lgybfvVs1lGUSE62nwvoldL6h+KMKi/vvLU8eVXarvIExl3YZTEUw1n/7
WwdrmrB54t0sGsGJsE6Iy+91TZgimk+ir4A9P0N0P7LMDvkbtkKqJBu6CFze/AOm
t6olUQ/nUkhHUbXV2/HUSxOvdn/9nVCvihrDNYviO3XSVQWAD2O1987gTyQ+xbkf
Fh0ULCmiMhiSJH4ly6sr8Cd7tSPvSSoQHzLdHEXHApFAP9XqdX2LqGUCfClDAfeA
4h9NUl3ggvpg86uAXQ5gj+Da8ROy/6BYFBZZyd5IaJ7Fqu6RvwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIxn/QnrR+kmz2cvnE9IEATR8AkNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5
MjkwZS05MDViLTQzODQtYTAzZi1mYmVjMjRhNDM4NTgvNWFkNjI4ZDItY2ZmMC0z
ZWVhLWFkNWQtYWY2YWY0YTZkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjJmOTI5MGUtOTA1Yi00Mzg0LWEw
M2YtZmJlYzI0YTQzODU4LzYyZjkyOTBlLTkwNWItNDM4NC1hMDNmLWZiZWMyNGE0
Mzg1OC5jcmwwHwYDVR0jBBgwFoAU3KRHHf5OfHHIQDtzYK8GU+EkT98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5MjkwZS05MDViLTQzODQtYTAzZi1mYmVj
MjRhNDM4NTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICeDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBVK1Mr/DNwvZkzP9Wmp37IlWxWciKAKt58nLecrHkd1MTnkEQQ540B
PnGG+aH1DW0YfM+SiNXzUlqDy014VWogTteo3vsLnUEBGywHCMyQgMH32fVRNZTp
hDnhG9n+7FPfpTh410RVHbK/InvZi+dCxQJxkSn+C/vqUjUFv0ueobeAV+VwQI/A
J9Mi3EgjGNWMKyAPoLXPGSi1OGVPNWqDM3k1ZfP1o35riHlwofIgozT1bvi8A/GZ
bbwT2kWt5dj+S7ek08hk6GAa7UOt7LaR2vuO1+Uo57I4Dln401My38/CxClaId7/
x20tLX0iu1ArXL8J9UjMNpZM14uKnA8Z
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:42:47 2025 by rpki-client