Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa
File:                     aa6eff33-96af-372a-b751-bf677d5949f9.roa (raw, json)
Hash identifier:          eSO33N05FgeWL3DDfEwJRDPmKJTY26zTbQ/TTHp0F4o=
Subject key identifier:   D3:9C:9D:AA:40:47:4A:59:FD:DB:BA:07:15:AF:07:E1:F1:59:ED:20
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F4328584A1035349409C60156B6DD13C0
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     401085
IP address blocks:        2602:f802::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:34:94:09:c6:01:56:b6:dd:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=cddaed8f-a4fd-4309-87bb-7ce8028c4e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:25:6a:78:b3:2c:e2:fd:fa:6b:c3:9e:e6:
                    ff:c7:c9:96:47:3b:11:7a:b5:3e:a1:42:f2:68:39:
                    ca:5a:a4:50:3f:7e:0a:86:08:fe:c0:15:7a:6b:ed:
                    99:00:66:a1:5e:87:4f:ec:03:43:de:79:f5:a2:fb:
                    ff:1c:e0:f3:f9:d6:72:fd:a8:dd:85:1a:2d:e2:39:
                    3c:87:74:0e:5e:c2:bc:d8:c7:83:7b:ec:f3:b3:d9:
                    04:94:19:17:a6:35:cc:f7:70:9f:f1:e2:98:5f:8f:
                    d8:38:a1:50:3e:79:0f:d2:3c:d8:b8:79:1b:97:71:
                    bc:c6:18:6a:7e:5f:30:41:92:cf:a3:73:4d:97:a9:
                    d9:6f:45:46:0b:ba:96:fc:94:02:73:5e:ce:d5:03:
                    34:c0:b2:ff:ab:a1:85:67:0f:ff:fc:00:aa:fe:19:
                    95:1d:1d:55:a5:68:aa:0f:c5:d7:04:69:96:45:86:
                    d0:d8:f2:62:ce:95:b9:f7:98:1d:6b:46:38:85:ca:
                    53:94:db:c5:4d:ad:d8:8d:e7:3a:0d:2e:52:af:7d:
                    19:2d:bf:d3:52:e0:8f:ff:8b:47:2b:17:f0:a4:6c:
                    75:f9:1b:eb:aa:00:42:49:dc:34:b0:47:83:cd:eb:
                    f7:0c:12:01:42:6a:f3:76:a1:dd:13:b2:d9:60:be:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9C:9D:AA:40:47:4A:59:FD:DB:BA:07:15:AF:07:E1:F1:59:ED:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f802::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:c5:2a:dd:9e:0e:bb:69:80:95:57:91:3f:07:57:00:cb:
         a3:36:37:d3:09:79:67:d2:6c:c0:a8:33:e3:c5:3c:2e:37:3b:
         04:c0:60:40:92:51:38:40:3a:73:8f:86:e8:74:fd:7b:ff:01:
         f8:30:54:d9:c6:a3:74:7b:3a:1f:0a:49:5d:62:cd:f2:0b:b0:
         ff:44:99:33:6a:9f:8d:41:36:4c:9c:ff:66:1d:d2:41:78:37:
         d5:f2:fb:61:8b:ac:6e:cb:c6:12:e9:4f:7f:69:88:cc:46:a9:
         24:0c:1b:43:3e:99:c8:f9:38:24:b9:fb:87:64:d6:0f:cc:fb:
         be:5b:85:1e:50:8c:5e:1e:5f:51:70:04:d4:dc:52:6c:ac:32:
         c5:82:30:37:11:63:57:e6:d9:57:91:23:7a:c3:0e:3f:8c:27:
         a5:c8:64:21:92:17:85:73:4d:73:66:b7:b4:62:57:97:f1:ec:
         e9:30:fd:fc:66:b1:af:c7:72:1d:1b:06:d2:58:ba:48:b1:e3:
         53:af:42:64:cc:e7:1b:e2:a3:00:a8:6c:41:0c:f5:39:5f:4f:
         a8:5d:fc:f1:17:4e:36:5e:ed:57:b3:f7:e3:32:ae:82:db:6c:
         23:f3:71:e5:aa:c6:e3:85:fc:5a:a5:6a:f5:ed:aa:fb:8d:5a:
         fa:dd:2b:67
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoQNTSUCcYBVrbdE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ1MzAxOTctODk2OC00MjVmLWI2YWItZDA3NTk0MWRj
OTVjMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
Y2RkYWVkOGYtYTRmZC00MzA5LTg3YmItN2NlODAyOGM0ZTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpAlanizLOL9+mvDnub/x8mWRzsRerU+oULy
aDnKWqRQP34Khgj+wBV6a+2ZAGahXodP7AND3nn1ovv/HODz+dZy/ajdhRot4jk8
h3QOXsK82MeDe+zzs9kElBkXpjXM93Cf8eKYX4/YOKFQPnkP0jzYuHkbl3G8xhhq
fl8wQZLPo3NNl6nZb0VGC7qW/JQCc17O1QM0wLL/q6GFZw///ACq/hmVHR1VpWiq
D8XXBGmWRYbQ2PJizpW595gda0Y4hcpTlNvFTa3Yjec6DS5Sr30ZLb/TUuCP/4tH
KxfwpGx1+RvrqgBCSdw0sEeDzev3DBIBQmrzdqHdE7LZYL6+DwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNOcnapAR0pZ/du6BxWvB+HxWe0gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNDUz
MDE5Ny04OTY4LTQyNWYtYjZhYi1kMDc1OTQxZGM5NWMvYWE2ZWZmMzMtOTZhZi0z
NzJhLWI3NTEtYmY2NzdkNTk0OWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTQ1MzAxOTctODk2OC00MjVmLWI2
YWItZDA3NTk0MWRjOTVjL2E0NTMwMTk3LTg5NjgtNDI1Zi1iNmFiLWQwNzU5NDFk
Yzk1Yy5jcmwwHwYDVR0jBBgwFoAUrHWd4ZiN/v1KFB7SrDAzw7F14vkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNDUzMDE5Ny04OTY4LTQyNWYtYjZhYi1kMDc1
OTQxZGM5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgL4AgAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABnoxSrdng67aYCVV5E/B1cAy6M2N9MJeWfSbMCoM+PFPC43OwTA
YECSUThAOnOPhuh0/Xv/AfgwVNnGo3R7Oh8KSV1izfILsP9EmTNqn41BNkyc/2Yd
0kF4N9Xy+2GLrG7LxhLpT39piMxGqSQMG0M+mcj5OCS5+4dk1g/M+75bhR5QjF4e
X1FwBNTcUmysMsWCMDcRY1fm2VeRI3rDDj+MJ6XIZCGSF4VzTXNmt7RiV5fx7Okw
/fxmsa/Hch0bBtJYukix41OvQmTM5xviowCobEEM9TlfT6hd/PEXTjZe7Vez9+My
roLbbCPzceWqxuOF/FqlavXtqvuNWvrdK2c=
-----END CERTIFICATE-----
Generated at Thu Jun 19 19:19:23 2025 by rpki-client