Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ea9ac587-40dc-3bcf-bcb1-e3bba8988d7b.roa
File:                     ea9ac587-40dc-3bcf-bcb1-e3bba8988d7b.roa (raw, json)
Hash identifier:          2QPU4O8NESo0WVwLOv+Ni6IK9tOwjuM+p2nSXmNBw88=
Subject key identifier:   E5:25:6B:AE:3C:7B:88:B7:FA:F5:05:2A:30:E5:4B:18:83:6D:25:F6
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F43285849998F3E587D40E864949F5E80
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ea9ac587-40dc-3bcf-bcb1-e3bba8988d7b.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     44324
IP address blocks:        2602:f92a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:3e:58:7d:40:e8:64:94:9f:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=b5b1efd6-9666-488d-9491-4daefc3fd6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:4b:e4:f7:bd:3c:72:c1:a6:6e:09:a8:f1:
                    cc:16:cf:50:27:34:0c:3b:53:f3:13:d4:f1:22:e5:
                    cf:60:a2:3e:ea:9b:ed:b2:4d:35:f7:09:5b:f3:8f:
                    e8:05:50:38:3a:88:b4:55:11:59:aa:ef:97:3b:4c:
                    26:dd:c1:e1:dc:58:cf:67:52:f8:5d:33:cf:75:dc:
                    38:b3:dc:74:67:cd:66:7d:29:7e:c6:cd:41:61:04:
                    f4:59:a3:57:23:3e:26:da:22:6d:cb:76:8e:49:40:
                    ae:28:b8:8c:e1:d8:9e:21:01:d5:d6:0f:2d:27:4c:
                    91:5c:f3:a8:b7:77:0f:e4:ef:39:06:55:8e:b3:a9:
                    63:d4:0a:ad:fc:cc:be:b6:97:17:3d:60:70:63:61:
                    82:aa:2c:6e:df:3a:da:10:d3:dd:9d:d6:7a:2f:dd:
                    b8:a7:55:e3:16:4f:32:36:d7:12:84:da:fc:cf:89:
                    a4:24:dd:61:fd:e2:d5:7f:46:8b:05:ae:d7:85:93:
                    8c:0b:c4:35:07:8a:8f:f2:6c:83:b7:2f:11:ea:37:
                    4e:79:0e:c3:cf:7e:13:02:dc:30:ab:87:56:5c:aa:
                    fb:80:e1:78:41:17:0e:c2:4c:8e:01:f0:d9:a8:a0:
                    f3:ce:f5:6c:96:85:c4:a9:ab:17:0b:66:d3:c1:9f:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:25:6B:AE:3C:7B:88:B7:FA:F5:05:2A:30:E5:4B:18:83:6D:25:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ea9ac587-40dc-3bcf-bcb1-e3bba8988d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:68:e3:cf:37:fc:38:a1:02:cd:10:c2:44:bf:ea:6e:97:e3:
         d6:95:98:d4:3e:81:e5:59:27:91:e5:ff:f0:0a:44:76:7c:cb:
         bb:bf:8f:87:49:5b:a2:45:d4:fa:cc:79:6b:91:c8:19:6b:33:
         ec:ee:81:e5:90:c5:18:33:64:b4:8f:59:79:18:c1:8c:31:2f:
         4f:3f:57:e5:85:7f:dd:0d:cb:6e:02:a4:6e:00:52:c8:1b:bf:
         86:e6:6d:e5:ac:b4:52:94:55:2b:af:6c:89:99:3e:96:82:df:
         5a:32:e5:ff:ee:ec:76:5a:f6:ff:76:8a:2c:cd:e5:0e:5f:57:
         55:84:f3:0d:94:90:ca:ec:0a:41:da:61:3b:09:33:b2:bc:63:
         5f:18:29:f2:35:b9:cf:5b:c6:1d:52:fa:f3:c1:04:d0:09:93:
         68:44:ab:31:3b:ec:4b:86:33:79:eb:87:e1:06:9a:9e:0a:f8:
         87:2c:c5:d4:6b:12:05:9e:6f:69:5c:7e:88:d7:92:c1:1a:1a:
         6c:8b:96:e2:48:18:61:91:98:a4:25:06:bd:6d:63:fa:57:31:
         a2:69:06:e9:fa:be:d0:b9:59:2e:31:6e:32:a3:66:42:e9:df:
         41:4a:01:08:7a:a5:a6:55:2b:39:9b:54:6d:4e:dd:f7:19:bf:
         ba:5d:e1:3a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmZjz5YfUDoZJSfXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3
MTFkMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk
YjViMWVmZDYtOTY2Ni00ODhkLTk0OTEtNGRhZWZjM2ZkNmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntlL5Pe9PHLBpm4JqPHMFs9QJzQMO1PzE9Tx
IuXPYKI+6pvtsk019wlb84/oBVA4Ooi0VRFZqu+XO0wm3cHh3FjPZ1L4XTPPddw4
s9x0Z81mfSl+xs1BYQT0WaNXIz4m2iJty3aOSUCuKLiM4dieIQHV1g8tJ0yRXPOo
t3cP5O85BlWOs6lj1Aqt/My+tpcXPWBwY2GCqixu3zraENPdndZ6L924p1XjFk8y
NtcShNr8z4mkJN1h/eLVf0aLBa7XhZOMC8Q1B4qP8myDty8R6jdOeQ7Dz34TAtww
q4dWXKr7gOF4QRcOwkyOAfDZqKDzzvVsloXEqasXC2bTwZ93TwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOUla648e4i3+vUFKjDlSxiDbSX2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh
ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvZWE5YWM1ODctNDBkYy0z
YmNmLWJjYjEtZTNiYmE4OTg4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx
MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0
NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm
MmM5NDcxMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5KgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAE2jjzzf8OKECzRDCRL/qbpfj1pWY1D6B5VknkeX/8ApEdnzLu7+P
h0lbokXU+sx5a5HIGWsz7O6B5ZDFGDNktI9ZeRjBjDEvTz9X5YV/3Q3LbgKkbgBS
yBu/huZt5ay0UpRVK69siZk+loLfWjLl/+7sdlr2/3aKLM3lDl9XVYTzDZSQyuwK
QdphOwkzsrxjXxgp8jW5z1vGHVL688EE0AmTaESrMTvsS4YzeeuH4Qaangr4hyzF
1GsSBZ5vaVx+iNeSwRoabIuW4kgYYZGYpCUGvW1j+lcxomkG6fq+0LlZLjFuMqNm
QunfQUoBCHqlplUrOZtUbU7d9xm/ul3hOg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:05 2025 by rpki-client