Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa
File:                     6efa98ee-db36-34b0-94ad-e629f25e1218.roa (raw, json)
Hash identifier:          2+4H7Nqos8Hs9gn3YypMGOsW61E84jFl9KmP3ilZH7M=
Subject key identifier:   06:D6:57:4F:39:81:44:E4:F8:5D:6F:07:22:D9:BE:F1:F3:E7:10:F9
Certificate issuer:       /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial:       010D0C9F4328584A7A4B40C131648DEF109C5F00
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        2602:814:b00a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:40:c1:31:64:8d:ef:10:9c:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=b722ab13-a0f2-4ac6-8b81-740876e58928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c1:a6:16:3a:23:c9:6c:0a:86:f9:ee:db:b8:
                    f8:e0:1c:48:3a:56:9a:9a:ed:3e:46:8b:6c:10:f4:
                    6f:0e:7f:aa:2d:93:35:0d:76:c8:49:37:4f:fd:eb:
                    90:ed:e5:c0:cc:4a:39:f4:80:ad:fa:4e:bd:6d:f1:
                    f2:c7:71:2b:54:60:e7:29:59:8e:9d:22:f7:8b:61:
                    b6:66:79:cf:5d:98:8c:65:6f:6d:c6:61:c3:bf:eb:
                    e5:9e:c7:20:47:41:89:d2:07:6e:3e:b4:69:21:36:
                    9c:ce:9a:58:b4:35:7c:b7:6a:10:46:32:e0:0a:ef:
                    a3:97:4f:9a:39:7e:24:47:74:90:e8:b6:89:d9:c2:
                    f3:1e:13:e7:90:a8:6a:9f:8f:23:ec:71:df:32:86:
                    71:26:f5:2c:a2:8b:e3:e8:89:f8:0b:2d:03:9b:7b:
                    34:ad:6b:80:40:1d:9b:fb:55:3f:db:13:ad:ac:03:
                    c8:6b:29:3a:27:6f:98:51:82:a7:b7:06:16:b2:01:
                    7c:d7:8c:89:43:76:e9:e0:a2:e4:d4:a3:37:56:60:
                    29:6c:be:91:e4:7c:23:c6:ce:5d:10:fd:7f:b7:19:
                    63:46:c8:cb:2e:04:57:e4:58:2a:ca:c4:c3:da:da:
                    87:37:f4:fa:96:24:58:dc:c0:6e:3f:7b:0d:d5:3a:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:57:4F:39:81:44:E4:F8:5D:6F:07:22:D9:BE:F1:F3:E7:10:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/6efa98ee-db36-34b0-94ad-e629f25e1218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:b00a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:69:a7:08:8f:9b:b6:1e:99:cb:95:14:76:83:43:8c:5e:34:
         76:2e:d7:ef:7f:a4:5b:2d:1f:be:86:1c:12:ef:90:f2:a0:bb:
         d8:1b:b4:7c:db:ed:bd:16:28:80:6f:bf:5f:0d:c8:11:1b:39:
         0d:41:d7:80:c7:c5:3b:e1:be:d1:bc:51:5f:f1:fa:3b:24:1d:
         b8:0d:f2:94:92:c4:a4:ed:9f:fa:7f:9e:35:e3:b3:a3:bd:cb:
         60:8a:93:7b:fd:d4:3d:22:f2:57:7f:dc:26:52:4d:a4:a7:15:
         10:51:f3:20:98:94:0a:8f:07:7e:83:40:11:41:b6:11:ae:fb:
         4e:34:4f:3c:3a:80:80:09:81:9b:40:8a:59:78:1a:e8:07:e0:
         d4:bf:4f:6d:aa:b2:1a:1f:24:39:cf:b7:39:5e:96:48:f9:0d:
         8d:ee:38:43:5c:61:fb:5a:44:8e:31:ca:f4:f8:7c:b0:e5:b8:
         5e:6a:57:8d:06:eb:01:87:95:d6:b9:21:ca:2a:de:40:90:cc:
         c1:77:b3:f7:bd:bb:ed:8e:95:42:7f:05:a3:58:3b:46:0b:86:
         22:0b:1d:04:4f:73:1c:7b:6c:da:c6:25:d3:a8:2e:c0:4e:0f:
         5a:22:f2:81:35:38:67:b3:55:88:38:59:14:3f:67:11:26:e0:
         7c:51:6c:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp6S0DBMWSN7xCcXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz
MDczMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
YjcyMmFiMTMtYTBmMi00YWM2LThiODEtNzQwODc2ZTU4OTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcGmFjojyWwKhvnu27j44BxIOlaamu0+Rots
EPRvDn+qLZM1DXbISTdP/euQ7eXAzEo59ICt+k69bfHyx3ErVGDnKVmOnSL3i2G2
ZnnPXZiMZW9txmHDv+vlnscgR0GJ0gduPrRpITaczppYtDV8t2oQRjLgCu+jl0+a
OX4kR3SQ6LaJ2cLzHhPnkKhqn48j7HHfMoZxJvUsoovj6In4Cy0Dm3s0rWuAQB2b
+1U/2xOtrAPIayk6J2+YUYKntwYWsgF814yJQ3bp4KLk1KM3VmApbL6R5Hwjxs5d
EP1/txljRsjLLgRX5FgqysTD2tqHN/T6liRY3MBuP3sN1TrzMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAbWV085gUTk+F1vByLZvvHz5xD5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh
OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvNmVmYTk4ZWUtZGIzNi0z
NGIwLTk0YWQtZTYyOWYyNWUxMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk
MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx
MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx
ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFLAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ1ppwiPm7YemcuVFHaDQ4xeNHYu1+9/pFstH76GHBLvkPKgu9gb
tHzb7b0WKIBvv18NyBEbOQ1B14DHxTvhvtG8UV/x+jskHbgN8pSSxKTtn/p/njXj
s6O9y2CKk3v91D0i8ld/3CZSTaSnFRBR8yCYlAqPB36DQBFBthGu+040Tzw6gIAJ
gZtAill4GugH4NS/T22qshofJDnPtzlelkj5DY3uOENcYftaRI4xyvT4fLDluF5q
V40G6wGHlda5Icoq3kCQzMF3s/e9u+2OlUJ/BaNYO0YLhiILHQRPcxx7bNrGJdOo
LsBOD1oi8oE1OGezVYg4WRQ/ZxEm4HxRbME=
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:11 2025 by rpki-client