Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/962f3be7-20a4-380c-ad09-d5a54b973443.roa
File:                     962f3be7-20a4-380c-ad09-d5a54b973443.roa (raw, json)
Hash identifier:          w2PYsJaRMBS+jJZc8xSoP94qHeFhJZxnvGUPbKeQWDg=
Subject key identifier:   D9:D4:06:90:4F:1D:C7:7C:5B:45:0E:F8:39:F1:0C:57:D2:F2:C2:8A
Certificate issuer:       /CN=ad78b405-a495-404a-a809-d632ddd6e3d6
Certificate serial:       010D0C9F4328584A0D6A962080105B8BEDD78150
Authority key identifier: 41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/962f3be7-20a4-380c-ad09-d5a54b973443.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     8987
IP address blocks:        2620:1f9:40::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:96:20:80:10:5b:8b:ed:d7:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad78b405-a495-404a-a809-d632ddd6e3d6
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=3f87d217-97ac-4e58-b846-b0348bb891fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:b7:de:b5:36:71:fa:27:e6:a6:6e:e3:77:
                    fb:d0:29:ea:9f:c4:75:32:af:b1:80:6d:44:97:ea:
                    ae:03:3c:8d:5b:c0:4a:ce:d8:01:58:89:14:8b:24:
                    3b:6b:ba:aa:ba:1d:91:b1:3c:c5:cf:d4:83:40:b3:
                    07:bf:a2:bc:78:0e:b8:17:9e:92:70:55:4c:9a:5e:
                    87:48:c3:d6:13:51:68:fc:49:d3:08:b7:4f:41:9e:
                    0d:4a:ac:46:83:f3:b5:8b:89:5d:43:62:7e:0c:cd:
                    57:00:32:bc:cf:81:a9:4f:b6:e5:15:72:42:cd:35:
                    55:22:e2:a3:e4:40:7e:25:a1:af:92:7d:2a:a4:36:
                    83:24:e7:1b:81:eb:91:11:7a:63:80:96:f6:ed:89:
                    0d:c2:4a:a9:c6:5e:d0:43:4d:f5:4b:7f:b8:ae:91:
                    ae:f4:3d:3a:0b:78:0d:8e:bb:8f:71:74:b6:12:df:
                    aa:46:aa:56:9d:94:34:66:73:cd:fb:07:8d:20:83:
                    48:33:5a:52:1c:9a:21:e1:d0:ff:a0:05:1c:53:11:
                    d8:cb:cc:6e:59:1f:cb:f3:d3:48:95:b7:fd:d9:8a:
                    02:2f:48:b4:5f:6b:62:4d:e1:d7:37:41:f5:85:f1:
                    77:56:ab:2c:a4:9b:4c:a6:ec:3f:01:df:75:d0:5a:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D4:06:90:4F:1D:C7:7C:5B:45:0E:F8:39:F1:0C:57:D2:F2:C2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/962f3be7-20a4-380c-ad09-d5a54b973443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl

            X509v3 Authority Key Identifier:
                keyid:41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f9:40::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:54:66:35:e8:c6:73:f9:3d:90:7e:96:81:29:3c:de:1d:b0:
         2b:2a:91:09:8b:1e:cb:71:1a:a3:78:66:c6:93:10:e3:a2:46:
         69:a5:71:c0:9a:58:01:c7:65:05:c6:82:f2:ef:fd:3c:fa:7e:
         ae:c6:7b:e2:df:6a:f4:1b:15:b4:75:0b:f3:22:00:5b:ca:c8:
         db:ef:35:ca:05:a6:71:be:1a:14:54:f0:5d:4f:0a:d7:e5:52:
         fc:05:9a:8e:56:1a:ba:60:49:ea:01:e5:64:25:d2:55:5e:d1:
         db:d1:fa:e3:1c:e7:80:24:0e:25:11:17:42:f4:8a:80:98:6d:
         53:cf:5e:ff:53:56:76:fe:35:34:49:4d:b7:33:53:44:e7:fc:
         1a:46:1b:9e:f7:d8:85:fa:ed:d5:d8:ab:2d:50:c8:5c:4f:68:
         ec:9e:b9:83:50:04:7c:56:0d:7d:92:c7:f4:ea:b3:5a:65:bd:
         bd:c2:a3:39:42:dd:12:6a:08:a4:e1:21:d6:2a:70:00:af:75:
         69:d6:0f:d8:b0:69:c0:4a:c7:0f:2f:d6:a5:85:10:cf:5a:1b:
         98:ad:ec:28:2a:13:73:3a:2a:03:2d:3f:e2:c4:26:9a:9b:f9:
         f3:c0:7e:c3:28:4a:fd:f5:79:95:84:c5:ad:f4:57:ad:bd:ba:
         78:e0:14:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoNapYggBBbi+3XgVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ3OGI0MDUtYTQ5NS00MDRhLWE4MDktZDYzMmRkZDZl
M2Q2MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk
M2Y4N2QyMTctOTdhYy00ZTU4LWI4NDYtYjAzNDhiYjg5MWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EC33rU2cfon5qZu43f70Cnqn8R1Mq+xgG1E
l+quAzyNW8BKztgBWIkUiyQ7a7qquh2RsTzFz9SDQLMHv6K8eA64F56ScFVMml6H
SMPWE1Fo/EnTCLdPQZ4NSqxGg/O1i4ldQ2J+DM1XADK8z4GpT7blFXJCzTVVIuKj
5EB+JaGvkn0qpDaDJOcbgeuREXpjgJb27YkNwkqpxl7QQ031S3+4rpGu9D06C3gN
jruPcXS2Et+qRqpWnZQ0ZnPN+weNIINIM1pSHJoh4dD/oAUcUxHYy8xuWR/L89NI
lbf92YoCL0i0X2tiTeHXN0H1hfF3VqsspJtMpuw/Ad910FqOnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNnUBpBPHcd8W0UO+DnxDFfS8sKKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZDc4
YjQwNS1hNDk1LTQwNGEtYTgwOS1kNjMyZGRkNmUzZDYvOTYyZjNiZTctMjBhNC0z
ODBjLWFkMDktZDVhNTRiOTczNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWQ3OGI0MDUtYTQ5NS00MDRhLWE4
MDktZDYzMmRkZDZlM2Q2L2FkNzhiNDA1LWE0OTUtNDA0YS1hODA5LWQ2MzJkZGQ2
ZTNkNi5jcmwwHwYDVR0jBBgwFoAUQRVc8F3MYFNCzf6HiLQQwurrW6cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZDc4YjQwNS1hNDk1LTQwNGEtYTgwOS1kNjMy
ZGRkNmUzZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJiAB+QBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE1UZjXoxnP5PZB+loEpPN4dsCsqkQmLHstxGqN4ZsaTEOOiRmml
ccCaWAHHZQXGgvLv/Tz6fq7Ge+LfavQbFbR1C/MiAFvKyNvvNcoFpnG+GhRU8F1P
CtflUvwFmo5WGrpgSeoB5WQl0lVe0dvR+uMc54AkDiURF0L0ioCYbVPPXv9TVnb+
NTRJTbczU0Tn/BpGG5732IX67dXYqy1QyFxPaOyeuYNQBHxWDX2Sx/Tqs1plvb3C
ozlC3RJqCKThIdYqcACvdWnWD9iwacBKxw8v1qWFEM9aG5it7CgqE3M6KgMtP+LE
Jpqb+fPAfsMoSv31eZWExa30V629unjgFEk=
-----END CERTIFICATE-----
Generated at Mon Jun 16 00:17:16 2025 by rpki-client