Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa
File:                     9be113fd-a906-3adc-abd9-41ca44625fae.roa (raw, json)
Hash identifier:          syL5htTNl/6uM1R8dxB/2ML1MuqCLaqLL/uTbOVbeGc=
Subject key identifier:   5A:01:86:AF:DA:49:11:A2:77:58:4F:BA:5C:5E:40:C4:BD:85:9B:CE
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F43285849FF751ABFC3A699868E47CB80
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     4185
IP address blocks:        2620:0:610::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:1a:bf:c3:a6:99:86:8e:47:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=0fe918fd-cf2b-48ad-b214-ebbaddc1e792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dd:e1:27:46:82:98:e3:0a:b6:c8:e4:b1:21:
                    f1:04:e3:34:20:63:27:55:79:ba:58:ba:64:ab:f0:
                    1d:55:ed:69:6f:91:65:e6:3d:78:d3:00:97:55:05:
                    d9:b9:85:e3:da:d5:35:82:a3:a8:83:25:34:12:08:
                    a6:8e:d6:87:57:3a:bd:a8:73:53:6a:7c:0d:b5:ff:
                    15:5c:31:95:67:d0:33:28:0d:c0:1c:7e:ab:39:a0:
                    4f:3f:6d:7c:f8:f5:c1:a7:08:fc:46:92:27:b3:d2:
                    67:12:8c:10:bf:ed:d3:0a:50:05:03:5e:f0:af:80:
                    85:e5:6b:15:cd:be:01:8f:d5:d1:65:81:c7:cc:04:
                    74:94:c8:db:89:f5:bd:60:95:85:5c:97:09:f1:59:
                    1f:d4:49:e9:f0:de:c3:3f:5e:d9:59:a1:0f:e4:3e:
                    ab:67:4d:dd:f7:74:35:c1:9c:f3:bb:b0:c6:39:78:
                    49:7e:43:9f:0c:15:4f:cd:d2:82:18:ae:84:27:e5:
                    73:46:f6:bb:5b:15:62:40:cd:43:3b:04:d3:96:3b:
                    03:aa:49:76:65:b6:88:b7:2f:3e:ac:c6:d4:ad:f4:
                    56:bb:b6:22:ba:f9:06:69:7c:b1:9e:3d:16:de:57:
                    f9:79:0b:48:d4:62:29:f8:85:d2:50:0c:e9:14:23:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:01:86:AF:DA:49:11:A2:77:58:4F:BA:5C:5E:40:C4:BD:85:9B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:de:af:97:0e:64:31:ac:9c:fc:24:a3:43:48:82:a7:ba:03:
         a2:74:fe:79:b9:50:b7:4b:97:5e:54:4e:ef:86:eb:c3:44:dc:
         84:84:34:f8:60:9b:67:ea:cf:8b:4d:d9:43:00:08:a0:97:a2:
         76:f9:c3:35:37:31:60:03:c1:23:b3:fc:91:c0:78:28:c7:7b:
         8c:73:30:7d:01:88:60:6a:64:0f:a2:f1:55:c1:d0:33:54:20:
         77:7f:fb:60:16:b2:9b:22:bb:ef:57:57:a2:10:3c:d9:7c:d4:
         a0:64:a9:a6:33:3b:a0:a8:2f:82:04:6f:a6:69:e6:3a:04:6c:
         66:19:3d:61:08:f0:e8:79:b8:1c:b6:bf:f8:61:96:1e:17:f7:
         26:47:86:2b:01:ad:3d:46:4f:05:72:be:32:09:f0:cb:8c:58:
         f2:24:6e:b0:18:02:71:62:3b:40:b7:cd:43:14:b8:79:d5:85:
         61:bb:e1:5b:51:76:31:a1:eb:a3:a8:ab:65:ab:29:bf:e2:73:
         ad:6c:4a:53:2d:47:e0:cf:99:44:6b:a2:36:dc:50:73:11:fd:
         c6:7b:50:45:54:bb:e9:88:73:24:05:76:d3:92:e8:32:fd:e2:
         19:c8:19:8d:56:c6:fc:8c:8a:88:af:7e:58:e9:37:af:65:55:
         24:ea:75:ba
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn/dRq/w6aZho5Hy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNhNDg2MmUtNzMxNC00NDE1LWEyNjQtNGU1ZGMzMWI3
M2Q4MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
MGZlOTE4ZmQtY2YyYi00OGFkLWIyMTQtZWJiYWRkYzFlNzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN3hJ0aCmOMKtsjksSHxBOM0IGMnVXm6WLpk
q/AdVe1pb5Fl5j140wCXVQXZuYXj2tU1gqOogyU0EgimjtaHVzq9qHNTanwNtf8V
XDGVZ9AzKA3AHH6rOaBPP218+PXBpwj8RpIns9JnEowQv+3TClAFA17wr4CF5WsV
zb4Bj9XRZYHHzAR0lMjbifW9YJWFXJcJ8Vkf1Enp8N7DP17ZWaEP5D6rZ03d93Q1
wZzzu7DGOXhJfkOfDBVPzdKCGK6EJ+VzRva7WxViQM1DOwTTljsDqkl2ZbaIty8+
rMbUrfRWu7YiuvkGaXyxnj0W3lf5eQtI1GIp+IXSUAzpFCPyEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFoBhq/aSRGid1hPulxeQMS9hZvOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2E0
ODYyZS03MzE0LTQ0MTUtYTI2NC00ZTVkYzMxYjczZDgvOWJlMTEzZmQtYTkwNi0z
YWRjLWFiZDktNDFjYTQ0NjI1ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNhNDg2MmUtNzMxNC00NDE1LWEy
NjQtNGU1ZGMzMWI3M2Q4L2ZjYTQ4NjJlLTczMTQtNDQxNS1hMjY0LTRlNWRjMzFi
NzNkOC5jcmwwHwYDVR0jBBgwFoAU8yr+8X1nEtpqUNKYHz4xR2GCleQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2E0ODYyZS03MzE0LTQ0MTUtYTI2NC00ZTVk
YzMxYjczZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAAAYQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAfer5cOZDGsnPwko0NIgqe6A6J0/nm5ULdLl15UTu+G68NE3ISE
NPhgm2fqz4tN2UMACKCXonb5wzU3MWADwSOz/JHAeCjHe4xzMH0BiGBqZA+i8VXB
0DNUIHd/+2AWspsiu+9XV6IQPNl81KBkqaYzO6CoL4IEb6Zp5joEbGYZPWEI8Oh5
uBy2v/hhlh4X9yZHhisBrT1GTwVyvjIJ8MuMWPIkbrAYAnFiO0C3zUMUuHnVhWG7
4VtRdjGh66Ooq2WrKb/ic61sSlMtR+DPmURrojbcUHMR/cZ7UEVUu+mIcyQFdtOS
6DL94hnIGY1WxvyMioivfljpN69lVSTqdbo=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:14:29 2025 by rpki-client