Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa
File:                     d30fb522-ec5b-3e28-be2d-99ef91f51011.roa (raw, json)
Hash identifier:          0P4AaLBoUTWMkVkshCiUCKWWr8S3RZ4axW4cDDnssIw=
Subject key identifier:   68:FF:1F:5B:0C:C1:AE:B4:C6:95:0F:10:2B:A2:14:36:DD:1C:FB:02
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328584A0D6A90355A721A57371E7180
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     398493
IP address blocks:        2602:fd37:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:90:35:5a:72:1a:57:37:1e:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=80a28bc2-ae30-4bfe-a1a8-309933329503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:46:c5:11:00:97:a5:1f:79:fd:09:6e:12:ed:
                    32:3c:6f:5a:ea:51:c1:55:73:d9:3c:b3:60:01:90:
                    70:b0:86:60:cc:fd:eb:d9:22:fe:e7:92:c8:aa:7e:
                    55:c6:34:eb:f7:04:0f:e9:ca:67:e9:12:06:df:11:
                    28:98:d4:f5:8f:44:f9:e5:50:d5:4a:26:30:7e:d0:
                    50:53:54:90:8e:4a:b2:1a:92:4a:cf:61:4f:6f:e2:
                    e3:00:a1:17:c6:f5:92:d7:82:57:c9:df:57:b8:18:
                    2c:79:0a:24:52:14:83:98:f0:08:31:6d:2c:c5:54:
                    39:57:00:65:65:85:ae:47:f6:c8:a7:f0:03:e4:7e:
                    37:6c:e2:dc:70:a9:50:37:77:43:40:6a:89:e5:a5:
                    b9:5c:0d:93:eb:eb:db:e3:53:7c:bc:87:3c:81:83:
                    59:a5:7f:44:35:c9:ed:3a:46:85:80:04:25:c9:d2:
                    80:63:08:b4:09:a8:a6:87:d0:2a:ba:c2:3f:27:2c:
                    ea:53:38:97:7a:b1:3d:9b:ce:00:19:56:af:1b:dc:
                    62:37:fe:31:d6:e9:56:e3:4e:91:ef:a3:a7:3d:6a:
                    80:53:a6:66:38:c5:ef:72:48:3e:7e:60:e3:1e:89:
                    9d:34:ef:46:84:71:4f:cf:4a:19:1f:7e:de:24:ca:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FF:1F:5B:0C:C1:AE:B4:C6:95:0F:10:2B:A2:14:36:DD:1C:FB:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2a:8f:85:24:5c:99:95:01:37:d9:d0:57:f0:5e:eb:05:26:
         6f:31:85:cc:02:23:f0:e6:98:6e:a7:fd:b7:7f:b2:ac:a2:c5:
         51:b1:60:8c:1c:f1:df:3b:16:8d:ae:ea:50:90:79:c5:2f:5f:
         92:00:88:9a:20:d6:af:64:96:76:86:f2:01:ef:e0:87:e0:20:
         79:5e:6d:25:71:ac:21:62:c8:e2:d0:5d:b1:85:4d:10:f5:19:
         b5:e3:18:67:96:fb:8c:f3:d2:c5:32:e4:17:5f:18:de:d9:31:
         8e:1d:c0:ca:ca:d0:01:b8:5e:06:b2:7e:e9:51:1d:20:15:9e:
         24:da:0b:41:5d:e9:5b:8b:53:48:55:6e:a1:e6:d0:84:6e:5c:
         a5:f1:56:de:c3:b9:21:18:0d:0b:72:67:1d:82:f9:01:33:07:
         19:cf:24:b6:28:4c:74:92:5e:b6:1d:02:51:91:25:93:51:f3:
         3e:56:6c:af:53:1b:bd:7f:4d:d1:57:47:a7:b6:2f:43:f0:ae:
         48:4b:43:30:7e:5d:91:ca:da:ee:c2:8d:56:72:9f:7c:d8:b9:
         c8:77:6d:7a:6d:87:0f:aa:a7:93:68:d3:1f:0f:81:b5:c8:ad:
         1f:34:9d:2e:c0:d9:6a:1c:b3:ff:c5:0a:ef:5b:64:ca:69:a6:
         8e:61:44:b3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoNapA1WnIaVzcecYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVkZWM1NzYtODdkMC00ZWM2LTllMTMtMzk0MjMwOTk2
ZTUzMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk
ODBhMjhiYzItYWUzMC00YmZlLWExYTgtMzA5OTMzMzI5NTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikbFEQCXpR95/QluEu0yPG9a6lHBVXPZPLNg
AZBwsIZgzP3r2SL+55LIqn5VxjTr9wQP6cpn6RIG3xEomNT1j0T55VDVSiYwftBQ
U1SQjkqyGpJKz2FPb+LjAKEXxvWS14JXyd9XuBgseQokUhSDmPAIMW0sxVQ5VwBl
ZYWuR/bIp/AD5H43bOLccKlQN3dDQGqJ5aW5XA2T6+vb41N8vIc8gYNZpX9ENcnt
OkaFgAQlydKAYwi0Caimh9AqusI/JyzqUziXerE9m84AGVavG9xiN/4x1ulW406R
76OnPWqAU6ZmOMXvckg+fmDjHomdNO9GhHFPz0oZH37eJMqjmQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGj/H1sMwa60xpUPECuiFDbdHPsCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZWRl
YzU3Ni04N2QwLTRlYzYtOWUxMy0zOTQyMzA5OTZlNTMvZDMwZmI1MjItZWM1Yi0z
ZTI4LWJlMmQtOTllZjkxZjUxMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGVkZWM1NzYtODdkMC00ZWM2LTll
MTMtMzk0MjMwOTk2ZTUzLzBlZGVjNTc2LTg3ZDAtNGVjNi05ZTEzLTM5NDIzMDk5
NmU1My5jcmwwHwYDVR0jBBgwFoAUVVR18A9v9kbDTjKoTV/FyuaYCIcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZWRlYzU3Ni04N2QwLTRlYzYtOWUxMy0zOTQy
MzA5OTZlNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9NwIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASyqPhSRcmZUBN9nQV/Be6wUmbzGFzAIj8OaYbqf9t3+yrKLFUbFg
jBzx3zsWja7qUJB5xS9fkgCImiDWr2SWdobyAe/gh+AgeV5tJXGsIWLI4tBdsYVN
EPUZteMYZ5b7jPPSxTLkF18Y3tkxjh3AysrQAbheBrJ+6VEdIBWeJNoLQV3pW4tT
SFVuoebQhG5cpfFW3sO5IRgNC3JnHYL5ATMHGc8ktihMdJJeth0CUZElk1HzPlZs
r1MbvX9N0VdHp7YvQ/CuSEtDMH5dkcra7sKNVnKffNi5yHdtem2HD6qnk2jTHw+B
tcitHzSdLsDZahyz/8UK71tkymmmjmFEsw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:56:18 2025 by rpki-client