Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/f63fc3ab-cc51-39d7-97a0-c077bc808f1c.roa
File:                     f63fc3ab-cc51-39d7-97a0-c077bc808f1c.roa (raw, json)
Hash identifier:          1tIPLWlX33kpdv3ZcqYIA1kaZ6q2dEqwouErJbXLLbc=
Subject key identifier:   4C:3F:5A:7B:9B:41:EF:BA:D9:02:14:2F:35:42:47:C2:54:5E:54:04
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584A1F902482C2CC8CAC0F230600
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/f63fc3ab-cc51-39d7-97a0-c077bc808f1c.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        2620:1f7:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:24:82:c2:cc:8c:ac:0f:23:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=e3a3d2fb-9a2b-4834-baa4-00da4a3496d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:71:be:b6:90:af:4a:6e:5d:87:a7:f0:db:
                    26:fd:b7:41:0b:a5:9b:38:be:31:ba:0b:ef:0e:2c:
                    9c:e9:1a:2c:81:fd:d7:12:00:c2:68:44:df:0f:27:
                    e0:a5:1b:a8:61:de:52:0c:7c:3b:7c:86:06:80:b9:
                    a2:ff:09:5d:5b:1f:51:b3:28:06:47:d6:f2:87:bb:
                    19:81:2f:dd:48:ff:89:16:50:f3:b9:75:4a:1a:3a:
                    af:34:d0:25:14:48:94:41:89:04:cc:4c:81:0e:64:
                    12:a9:da:f1:de:2c:4b:fe:24:85:c5:73:fb:03:5e:
                    cf:ab:db:ce:7d:d8:70:d6:21:ab:06:77:cc:1d:22:
                    26:31:68:95:ca:6e:b1:73:bc:be:38:f2:a1:4d:76:
                    3d:cb:18:09:3e:1b:91:d5:48:2f:39:ef:4f:46:08:
                    23:89:7a:fe:8e:9e:99:c1:1f:c7:ca:47:fa:71:81:
                    c8:10:c2:bd:8f:60:84:6e:03:73:d3:57:53:a1:36:
                    2a:60:a1:0c:e7:c8:71:0d:58:b6:01:71:46:14:13:
                    77:c5:08:1b:32:8d:70:03:62:66:4f:bc:96:64:71:
                    5e:36:fa:72:d4:fc:10:d6:65:f2:86:55:e1:ff:37:
                    32:74:42:71:25:2d:f4:ae:d6:2e:7e:d8:48:88:ab:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3F:5A:7B:9B:41:EF:BA:D9:02:14:2F:35:42:47:C2:54:5E:54:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/f63fc3ab-cc51-39d7-97a0-c077bc808f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4a:6c:65:7c:fa:d0:55:aa:53:a4:2f:6c:d0:b1:ef:d5:f1:
         9d:4f:41:01:01:ce:1c:0f:24:98:d7:90:8b:4b:0c:62:7f:c7:
         1e:ee:94:e6:4f:20:af:30:fa:87:4f:dc:d7:bc:17:42:72:57:
         6b:74:10:29:bb:ba:40:ab:aa:3f:45:2c:d1:79:9e:32:dd:e4:
         a3:73:44:a9:71:d7:6c:5a:bb:69:b6:66:99:50:6e:f6:fa:9d:
         23:36:d9:68:06:c3:fc:51:dd:b2:c5:fc:ee:01:61:e3:b7:de:
         ab:5f:c2:b2:cf:b5:20:94:f2:5b:f1:b8:0b:b1:df:ca:00:3d:
         d6:86:35:b3:e6:d7:72:31:0b:d2:50:50:6d:63:25:d8:f4:1a:
         6d:27:61:ce:46:49:12:9d:4f:29:14:50:a2:9a:55:c0:32:f0:
         81:7e:00:3f:2c:c9:7e:48:e2:8e:f8:09:07:77:60:ab:a1:d0:
         81:68:44:c7:28:98:02:10:29:08:b7:00:3f:19:56:41:d8:a5:
         ed:96:e2:a0:be:2f:87:13:8f:0b:4d:f0:20:23:76:e6:88:e0:
         cd:27:7c:2a:a2:c5:58:6c:b7:d1:e3:c7:5b:bf:ae:1e:e6:cf:
         c5:58:f4:81:2c:cd:28:2f:dc:23:a0:35:33:e8:6f:2f:6c:4d:
         51:a0:47:67
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEofkCSCwsyMrA8jBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
ZTNhM2QyZmItOWEyYi00ODM0LWJhYTQtMDBkYTRhMzQ5NmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDJxvraQr0puXYen8Nsm/bdBC6WbOL4xugvv
Diyc6Rosgf3XEgDCaETfDyfgpRuoYd5SDHw7fIYGgLmi/wldWx9RsygGR9byh7sZ
gS/dSP+JFlDzuXVKGjqvNNAlFEiUQYkEzEyBDmQSqdrx3ixL/iSFxXP7A17Pq9vO
fdhw1iGrBnfMHSImMWiVym6xc7y+OPKhTXY9yxgJPhuR1UgvOe9PRggjiXr+jp6Z
wR/Hykf6cYHIEMK9j2CEbgNz01dToTYqYKEM58hxDVi2AXFGFBN3xQgbMo1wA2Jm
T7yWZHFeNvpy1PwQ1mXyhlXh/zcydEJxJS30rtYufthIiKuQTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEw/WnubQe+62QIULzVCR8JUXlQEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvZjYzZmMzYWItY2M1MS0z
OWQ3LTk3YTAtYzA3N2JjODA4ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHNKbGV8+tBVqlOkL2zQse/V8Z1PQQEBzhwPJJjXkItLDGJ/xx7u
lOZPIK8w+odP3Ne8F0JyV2t0ECm7ukCrqj9FLNF5njLd5KNzRKlx12xau2m2ZplQ
bvb6nSM22WgGw/xR3bLF/O4BYeO33qtfwrLPtSCU8lvxuAux38oAPdaGNbPm13Ix
C9JQUG1jJdj0Gm0nYc5GSRKdTykUUKKaVcAy8IF+AD8syX5I4o74CQd3YKuh0IFo
RMcomAIQKQi3AD8ZVkHYpe2W4qC+L4cTjwtN8CAjduaI4M0nfCqixVhst9Hjx1u/
rh7mz8VY9IEszSgv3COgNTPoby9sTVGgR2c=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:26:11 2025 by rpki-client