Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
File:                     fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa (raw, json)
Hash identifier:          pZfTf0bmUvInHsSJqE2x3+D7i3tf5VeoRFbAZoeK4pg=
Subject key identifier:   3F:E6:B1:82:4B:27:58:F6:88:9E:D6:F0:27:02:C8:AD:4D:D9:9C:F1
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F43285849A4BA4FB28F1B5BD52ECF7C00
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     198983
IP address blocks:        2602:fa59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4f:b2:8f:1b:5b:d5:2e:cf:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=80275dd7-0cef-4a8f-8b6f-f1071f2caef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:c1:26:de:b0:6f:f6:33:96:a9:7f:c7:54:
                    fb:10:a7:a6:f1:80:b1:2c:60:8f:04:df:99:d3:5f:
                    a7:c8:c4:79:c7:59:a1:00:61:d3:32:0c:78:63:62:
                    4b:ee:bd:e6:76:ef:e2:0c:82:eb:b0:65:47:4d:0a:
                    20:09:40:7f:78:99:62:2b:f8:f8:19:32:db:ba:1e:
                    e7:9b:1e:00:eb:e3:66:c3:0e:a8:16:26:ba:74:1c:
                    61:c6:16:c9:70:1f:a8:03:ac:eb:4e:3a:44:69:69:
                    db:b0:5e:0e:9e:78:22:55:d8:66:68:a0:44:a2:dc:
                    d1:11:db:2d:75:15:8d:00:85:ef:ee:91:84:ea:49:
                    ae:9f:7b:c5:32:df:2e:7a:a9:37:cd:32:90:aa:31:
                    de:8b:8c:8e:7d:84:3c:af:e7:29:f2:1b:40:37:f9:
                    e0:03:ea:82:da:71:e0:71:ea:50:c2:1a:ed:56:a6:
                    bc:3b:58:47:a9:dd:d0:44:2f:04:c9:ce:4c:c5:ac:
                    e2:56:75:0c:d7:ab:7d:ec:d6:a4:54:b9:a2:39:e9:
                    47:8b:ac:30:64:3a:59:70:c8:04:e0:cf:d5:12:1a:
                    25:6e:3d:36:73:cd:c1:25:d2:c1:78:51:51:29:81:
                    5b:f2:00:6a:db:a1:4e:78:4b:7b:c6:bf:32:39:66:
                    5c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E6:B1:82:4B:27:58:F6:88:9E:D6:F0:27:02:C8:AD:4D:D9:9C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:e2:ae:13:35:30:83:39:8e:cd:6a:49:a7:a6:c7:e7:09:
         04:e8:49:e7:af:86:c8:cf:fa:24:de:9a:15:16:38:02:9b:4c:
         ec:91:09:d0:b0:40:33:c6:42:97:f2:80:17:3e:89:27:da:90:
         0b:bd:48:09:de:ab:af:25:1d:86:a2:3a:e4:34:48:82:45:7e:
         6e:03:8f:72:7e:4a:68:14:06:a1:35:75:a1:06:5a:f4:5e:7f:
         8f:ee:46:c6:1e:f8:c3:eb:71:93:d2:12:1e:5b:5c:52:98:2d:
         49:76:35:82:fe:89:3b:d9:f2:99:36:c0:19:9f:85:fa:9a:c3:
         1b:c1:17:76:0e:7e:96:b4:4d:67:30:d0:88:e4:c2:ff:45:19:
         9a:27:7a:63:73:15:15:5e:db:d1:82:82:5c:71:5b:5f:5b:08:
         7f:f4:7d:43:fa:94:86:11:c4:42:69:e5:a9:84:b1:b2:09:47:
         df:4d:6f:32:ea:c4:f0:74:b8:ba:f6:1f:80:6f:5b:03:a2:98:
         2d:ee:de:ee:c5:44:65:4a:b1:a4:03:3e:55:5f:13:8b:c8:97:
         23:a5:5b:84:7c:7a:4a:ba:48:84:74:1e:ee:29:9d:9f:7a:53:
         78:d9:c5:03:e8:50:48:5c:7e:4a:03:80:5b:65:b5:a8:45:3b:
         41:02:80:c1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuk+yjxtb1S7PfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZlMTRhNzQtODMzOS00ZmExLTg4NWEtMmVkMzc5NDcz
OTlhMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ODAyNzVkZDctMGNlZi00YThmLThiNmYtZjEwNzFmMmNhZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHvBJt6wb/Yzlql/x1T7EKem8YCxLGCPBN+Z
01+nyMR5x1mhAGHTMgx4Y2JL7r3mdu/iDILrsGVHTQogCUB/eJliK/j4GTLbuh7n
mx4A6+Nmww6oFia6dBxhxhbJcB+oA6zrTjpEaWnbsF4OnngiVdhmaKBEotzREdst
dRWNAIXv7pGE6kmun3vFMt8ueqk3zTKQqjHei4yOfYQ8r+cp8htAN/ngA+qC2nHg
cepQwhrtVqa8O1hHqd3QRC8Eyc5MxaziVnUM16t97NakVLmiOelHi6wwZDpZcMgE
4M/VEholbj02c83BJdLBeFFRKYFb8gBq26FOeEt7xr8yOWZc5wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD/msYJLJ1j2iJ7W8CcCyK1N2ZzxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZmUx
NGE3NC04MzM5LTRmYTEtODg1YS0yZWQzNzk0NzM5OWEvZmVkNmQ5M2YtOWU2NC0z
YjA1LTkyZGUtM2JkMmJiZTVjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWZlMTRhNzQtODMzOS00ZmExLTg4
NWEtMmVkMzc5NDczOTlhL2VmZTE0YTc0LTgzMzktNGZhMS04ODVhLTJlZDM3OTQ3
Mzk5YS5jcmwwHwYDVR0jBBgwFoAUxJedZ9C2K++jq54cejCwbRqIXeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lZmUxNGE3NC04MzM5LTRmYTEtODg1YS0yZWQz
Nzk0NzM5OWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6WQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYpzirhM1MIM5js1qSaemx+cJBOhJ56+GyM/6JN6aFRY4AptM7JEJ
0LBAM8ZCl/KAFz6JJ9qQC71ICd6rryUdhqI65DRIgkV+bgOPcn5KaBQGoTV1oQZa
9F5/j+5Gxh74w+txk9ISHltcUpgtSXY1gv6JO9nymTbAGZ+F+prDG8EXdg5+lrRN
ZzDQiOTC/0UZmid6Y3MVFV7b0YKCXHFbX1sIf/R9Q/qUhhHEQmnlqYSxsglH301v
MurE8HS4uvYfgG9bA6KYLe7e7sVEZUqxpAM+VV8Ti8iXI6VbhHx6SrpIhHQe7imd
n3pTeNnFA+hQSFx+SgOAW2W1qEU7QQKAwQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:43:46 2025 by rpki-client