Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/17d6aad3-952d-31f7-9131-7db20c37be3c.roa
File:                     17d6aad3-952d-31f7-9131-7db20c37be3c.roa (raw, json)
Hash identifier:          CaJK/gUgGRnbd+lvCznzqU5rjarJkkeI/LEI7gKWY24=
Subject key identifier:   B3:DA:A2:4D:60:D9:8C:61:D2:F2:A2:DB:51:EF:84:C7:E2:34:50:1F
Certificate issuer:       /CN=85012cde-de16-4e2c-88cc-fb082ace78b7
Certificate serial:       010D0C9F43285849F7151ACFD5D62410E82D60C0
Authority key identifier: 32:4C:86:C1:0F:92:C6:F4:A8:A8:E0:01:43:1B:BA:65:C9:7E:96:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/17d6aad3-952d-31f7-9131-7db20c37be3c.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     30654
IP address blocks:        2602:fa17::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/85012cde-de16-4e2c-88cc-fb082ace78b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/85012cde-de16-4e2c-88cc-fb082ace78b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1a:cf:d5:d6:24:10:e8:2d:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85012cde-de16-4e2c-88cc-fb082ace78b7
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=12c739df-c5c6-4e87-8f2f-783f8de5bc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:86:b4:eb:ea:5f:15:af:90:40:ae:e4:dc:
                    2b:52:7c:b6:6c:d1:97:44:90:da:cd:27:35:91:0f:
                    1d:2a:04:38:3d:5e:e1:1d:f8:3f:10:09:aa:52:c3:
                    9c:e2:70:56:ae:33:66:3c:a6:0c:34:b6:f5:a0:22:
                    9c:bf:df:1d:a3:89:5b:88:91:20:eb:f3:50:f4:66:
                    81:12:eb:3c:3d:0f:31:6d:99:bf:97:64:0f:16:d2:
                    fa:7e:15:6a:bf:04:7c:15:d9:3a:12:38:36:a2:6d:
                    73:8d:21:18:57:c4:d8:aa:fb:ef:24:6e:fe:e9:a1:
                    f8:a8:00:ce:4d:70:31:cf:c3:13:f2:6e:17:47:72:
                    47:a4:f3:ee:a0:53:5a:f2:74:b1:dc:72:d8:86:01:
                    df:c6:ee:a6:16:22:11:5f:6b:94:d1:fe:5e:3b:9c:
                    85:63:f3:12:46:5b:6f:17:98:9a:b0:73:e8:ab:31:
                    4c:d0:26:0c:e9:45:31:f2:7b:3a:58:18:67:f9:2c:
                    01:9e:87:6a:88:a9:0f:81:89:2e:16:5a:c5:d2:89:
                    e1:b8:0d:6f:fa:6d:75:ec:d8:1b:01:28:1a:7a:d0:
                    9f:b7:ec:22:a6:b0:92:70:f5:9b:93:75:43:73:01:
                    03:19:4f:5f:33:1c:c1:99:1f:b7:fd:d0:e3:ea:a6:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DA:A2:4D:60:D9:8C:61:D2:F2:A2:DB:51:EF:84:C7:E2:34:50:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/17d6aad3-952d-31f7-9131-7db20c37be3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/85012cde-de16-4e2c-88cc-fb082ace78b7.crl

            X509v3 Authority Key Identifier:
                keyid:32:4C:86:C1:0F:92:C6:F4:A8:A8:E0:01:43:1B:BA:65:C9:7E:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa17::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7e:58:f2:8e:86:d4:38:46:31:f0:a8:7e:01:db:e6:36:9e:
         e9:d9:b2:87:aa:22:ad:fe:e2:4f:9e:97:8f:f5:9c:7e:99:70:
         11:c1:a4:a6:50:8a:b0:e3:d8:f4:2e:8d:2d:e3:6d:d8:49:1e:
         99:4a:b3:1c:63:93:d7:e2:0b:fa:4d:2d:af:94:69:10:19:e5:
         24:2a:f3:c6:de:b8:a9:f2:e5:f6:c9:93:b7:bf:11:2c:81:8f:
         1c:d3:8b:19:6b:2d:e6:de:6b:25:01:55:64:d1:d5:4e:8f:85:
         77:77:78:27:0f:e8:8f:35:d6:cd:04:b8:fb:c7:0a:b1:b3:b6:
         9f:ba:3d:84:f1:7e:f7:0f:32:ef:77:2a:2e:f7:49:89:04:a1:
         31:bb:16:56:8d:46:64:e1:1b:8a:f8:f9:f7:af:31:10:61:d4:
         2e:ac:d4:63:52:ad:60:e3:57:55:5b:f0:c6:ef:f7:75:b5:fb:
         cf:4b:9b:2d:f2:4e:5e:2f:83:d6:5c:36:2d:ec:44:c3:f9:06:
         2f:ef:b9:3d:15:da:a2:8c:f9:ac:f5:c2:c1:67:16:1c:9b:f4:
         3f:4d:1d:71:a3:1d:6f:99:9b:7a:44:cf:c5:62:cd:64:37:a4:
         8c:bd:bb:ef:82:e8:ba:3f:05:5d:44:87:e0:f4:9f:0a:9c:55:
         1f:9d:a6:71
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn3FRrP1dYkEOgtYMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUwMTJjZGUtZGUxNi00ZTJjLTg4Y2MtZmIwODJhY2U3
OGI3MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
MTJjNzM5ZGYtYzVjNi00ZTg3LThmMmYtNzgzZjhkZTViYzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn36GtOvqXxWvkECu5NwrUny2bNGXRJDazSc1
kQ8dKgQ4PV7hHfg/EAmqUsOc4nBWrjNmPKYMNLb1oCKcv98do4lbiJEg6/NQ9GaB
Eus8PQ8xbZm/l2QPFtL6fhVqvwR8Fdk6Ejg2om1zjSEYV8TYqvvvJG7+6aH4qADO
TXAxz8MT8m4XR3JHpPPuoFNa8nSx3HLYhgHfxu6mFiIRX2uU0f5eO5yFY/MSRltv
F5iasHPoqzFM0CYM6UUx8ns6WBhn+SwBnodqiKkPgYkuFlrF0onhuA1v+m117Ngb
ASgaetCft+wiprCScPWbk3VDcwEDGU9fMxzBmR+3/dDj6qZO1QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLPaok1g2Yxh0vKi21HvhMfiNFAfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NTAx
MmNkZS1kZTE2LTRlMmMtODhjYy1mYjA4MmFjZTc4YjcvMTdkNmFhZDMtOTUyZC0z
MWY3LTkxMzEtN2RiMjBjMzdiZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODUwMTJjZGUtZGUxNi00ZTJjLTg4
Y2MtZmIwODJhY2U3OGI3Lzg1MDEyY2RlLWRlMTYtNGUyYy04OGNjLWZiMDgyYWNl
NzhiNy5jcmwwHwYDVR0jBBgwFoAUMkyGwQ+SxvSoqOABQxu6Zcl+lscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84NTAxMmNkZS1kZTE2LTRlMmMtODhjYy1mYjA4
MmFjZTc4YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6FwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKH5Y8o6G1DhGMfCofgHb5jae6dmyh6oirf7iT56Xj/WcfplwEcGk
plCKsOPY9C6NLeNt2EkemUqzHGOT1+IL+k0tr5RpEBnlJCrzxt64qfLl9smTt78R
LIGPHNOLGWst5t5rJQFVZNHVTo+Fd3d4Jw/ojzXWzQS4+8cKsbO2n7o9hPF+9w8y
73cqLvdJiQShMbsWVo1GZOEbivj5968xEGHULqzUY1KtYONXVVvwxu/3dbX7z0ub
LfJOXi+D1lw2LexEw/kGL++5PRXaooz5rPXCwWcWHJv0P00dcaMdb5mbekTPxWLN
ZDekjL2774Louj8FXUSH4PSfCpxVH52mcQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:55 2025 by rpki-client