Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa
File:                     0b8209f0-781b-3505-b708-fdde1fbf3db3.roa (raw, json)
Hash identifier:          2ENzXKQFVKVkdgJgPaXTyeVLkbuoBOZ3IBAYokY3rJI=
Subject key identifier:   CC:80:BF:7E:32:A4:03:02:7E:13:6E:15:31:42:BA:3F:76:FB:1F:04
Certificate issuer:       /CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
Certificate serial:       010D0C9F43285849A089D0D7E93229D9309BB200
Authority key identifier: 88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     27485
IP address blocks:        2602:f8c5::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d0:d7:e9:32:29:d9:30:9b:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=1356176a-0d81-424f-9353-8d6b702274bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:84:69:32:5f:9c:09:80:ac:20:70:ef:84:
                    a8:39:39:11:4e:2f:29:7e:ca:ba:8d:23:40:58:73:
                    a7:79:27:1a:30:5f:ca:2d:d5:c9:0c:e1:70:f3:a3:
                    5d:b3:21:09:04:fe:2e:3d:30:c2:fc:95:c4:3f:03:
                    be:a7:ef:93:59:c7:2a:c5:aa:68:31:14:1c:d2:bb:
                    6b:47:0a:e2:4f:e8:42:0c:4d:fb:e4:d5:04:70:8b:
                    bf:bf:1e:d4:65:e4:f0:12:3f:b1:9d:5a:59:78:52:
                    65:eb:17:b1:c0:2c:bf:ca:1d:73:83:a7:cd:cb:66:
                    86:c4:fe:ab:b4:9c:2e:de:ef:76:e3:64:92:63:0d:
                    65:57:a7:b4:d1:5a:e4:5f:0d:a3:b4:89:ea:e5:b3:
                    00:2d:5d:bf:41:6a:f5:d9:e2:ee:3a:db:95:81:fa:
                    57:28:25:76:15:a2:bb:2e:4b:27:d9:95:da:d2:10:
                    4a:fe:b3:13:bf:fb:22:25:1f:8f:48:4a:92:ce:13:
                    52:8c:a8:fb:8e:4e:62:8b:cf:8e:9a:68:09:6c:b4:
                    4e:47:6b:3c:45:dd:22:7e:ea:49:0f:93:75:4c:0d:
                    ea:62:d3:cd:87:8a:4f:11:e4:c6:8b:9a:83:af:36:
                    02:49:08:91:7d:5c:66:93:58:68:dc:ad:97:c9:07:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:80:BF:7E:32:A4:03:02:7E:13:6E:15:31:42:BA:3F:76:FB:1F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl

            X509v3 Authority Key Identifier:
                keyid:88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:83:a7:0c:cc:80:17:d0:b0:4d:7f:bc:6b:7a:92:59:79:d5:
         c1:94:31:b9:12:77:2a:1c:c8:69:46:26:04:d6:cf:fa:83:73:
         db:a3:b5:dc:38:26:16:ed:f8:98:d3:09:85:08:b2:e9:c8:53:
         27:60:fe:df:d8:42:81:ba:78:4b:c5:09:9c:c4:f5:87:ff:0f:
         fb:7a:05:2e:6e:0d:db:a1:57:dc:d2:22:53:56:9a:1f:01:a9:
         78:a3:04:9d:a7:e8:bc:ef:82:ab:4e:ce:e9:52:43:86:33:10:
         73:10:59:8f:32:eb:f5:18:fb:52:f2:b5:4f:26:b0:58:68:34:
         c5:b8:27:b2:bf:53:b0:04:69:9b:e1:fc:6b:8d:48:2e:84:e9:
         f6:f6:54:fd:c1:25:39:b0:ae:0b:35:62:9f:ca:a6:3b:3a:db:
         be:49:ae:c6:33:e0:99:ff:e8:f1:b5:43:97:69:f2:7f:cb:f8:
         0a:8a:8e:4f:b5:28:f6:9f:bd:60:62:e1:1a:22:be:62:44:69:
         b3:dd:9a:15:bd:e7:be:8e:a9:99:e9:2d:da:2e:b1:5a:26:df:
         d3:9a:81:5a:bc:45:7a:8f:a0:7a:ac:3b:32:55:46:47:53:d1:
         83:7f:00:6a:5b:8b:ba:69:6b:af:ae:70:21:d7:5d:94:98:9e:
         a5:8b:bf:68
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmgidDX6TIp2TCbsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZjU1YmMtNGRhMy00ZGM4LTlhMTUtMzVlNTc4NmFh
YmYyMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
MTM1NjE3NmEtMGQ4MS00MjRmLTkzNTMtOGQ2YjcwMjI3NGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMuEaTJfnAmArCBw74SoOTkRTi8pfsq6jSNA
WHOneScaMF/KLdXJDOFw86NdsyEJBP4uPTDC/JXEPwO+p++TWccqxapoMRQc0rtr
RwriT+hCDE375NUEcIu/vx7UZeTwEj+xnVpZeFJl6xexwCy/yh1zg6fNy2aGxP6r
tJwu3u9242SSYw1lV6e00VrkXw2jtInq5bMALV2/QWr12eLuOtuVgfpXKCV2FaK7
Lksn2ZXa0hBK/rMTv/siJR+PSEqSzhNSjKj7jk5ii8+OmmgJbLROR2s8Rd0ifupJ
D5N1TA3qYtPNh4pPEeTGi5qDrzYCSQiRfVxmk1ho3K2XyQeccwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMyAv34ypAMCfhNuFTFCuj92+x8EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OWZm
NTViYy00ZGEzLTRkYzgtOWExNS0zNWU1Nzg2YWFiZjIvMGI4MjA5ZjAtNzgxYi0z
NTA1LWI3MDgtZmRkZTFmYmYzZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjlmZjU1YmMtNGRhMy00ZGM4LTlh
MTUtMzVlNTc4NmFhYmYyLzY5ZmY1NWJjLTRkYTMtNGRjOC05YTE1LTM1ZTU3ODZh
YWJmMi5jcmwwHwYDVR0jBBgwFoAUiOAuqJbm2SWcBUar+F5eZ2l8N9MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OWZmNTViYy00ZGEzLTRkYzgtOWExNS0zNWU1
Nzg2YWFiZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4xQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFoOnDMyAF9CwTX+8a3qSWXnVwZQxuRJ3KhzIaUYmBNbP+oNz26O1
3DgmFu34mNMJhQiy6chTJ2D+39hCgbp4S8UJnMT1h/8P+3oFLm4N26FX3NIiU1aa
HwGpeKMEnafovO+Cq07O6VJDhjMQcxBZjzLr9Rj7UvK1TyawWGg0xbgnsr9TsARp
m+H8a41ILoTp9vZU/cElObCuCzVin8qmOzrbvkmuxjPgmf/o8bVDl2nyf8v4CoqO
T7Uo9p+9YGLhGiK+YkRps92aFb3nvo6pmekt2i6xWibf05qBWrxFeo+geqw7MlVG
R1PRg38AaluLumlrr65wIdddlJiepYu/aA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:45:23 2025 by rpki-client