Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa
File:                     1db987fa-f8dc-31cb-95b1-3953903e18b5.roa (raw, json)
Hash identifier:          aOa60bk++sDBmLpnX2PCV96GzpNyG8o/m4gmIFZyB0U=
Subject key identifier:   DE:49:64:4C:92:D4:AD:0D:58:0F:B0:AF:B4:C6:47:8E:4A:3A:66:F9
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F43285849DC8FD15B703F7D89A91DB680
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     399883
IP address blocks:        2602:fc06:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:d1:5b:70:3f:7d:89:a9:1d:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=c621c1b2-f3bd-4311-b078-97a909f61b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:69:e9:3e:c1:e8:3a:be:3b:0d:69:11:0c:
                    f8:8c:a2:9e:4e:d7:1f:de:49:52:27:3a:5e:df:78:
                    04:40:35:41:8f:df:3f:93:76:3e:d0:a7:1f:82:5b:
                    27:bb:7c:39:1a:3d:62:04:a8:4b:5f:0f:29:ae:b0:
                    a5:ed:60:24:14:73:f5:72:22:6f:0f:40:0f:b6:c4:
                    b0:86:d0:5a:a9:7d:f8:4e:db:99:cc:eb:2d:b6:81:
                    cd:96:42:49:c7:9a:14:91:e8:1a:f6:d5:8b:5c:47:
                    e4:b5:f7:ed:47:bb:31:f9:37:10:c4:1e:c1:a0:c8:
                    a5:3e:13:ed:de:6b:22:ff:0d:34:7b:85:ee:d8:d5:
                    60:92:8c:b1:5c:0a:0b:9a:5d:d1:56:ff:da:5d:2b:
                    f5:1b:ac:28:fa:c5:77:a0:eb:95:ba:67:4b:8f:5f:
                    1e:e1:8f:d1:15:45:ed:3a:f9:82:07:73:d9:5f:aa:
                    c1:4f:84:8a:dd:af:de:98:01:39:ea:b1:db:69:97:
                    cb:46:f8:79:ad:99:7d:8e:0f:a1:ee:e3:4f:42:37:
                    22:a0:db:97:67:18:56:d6:93:f4:36:e1:03:2f:8e:
                    76:e8:5c:64:8a:5c:24:f2:3c:61:f8:d6:5a:43:ac:
                    ab:a8:3c:ba:a7:2d:bf:cc:d8:19:04:5f:db:1c:01:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:64:4C:92:D4:AD:0D:58:0F:B0:AF:B4:C6:47:8E:4A:3A:66:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:56:92:e3:1a:8a:0b:44:32:86:fa:b0:98:bb:25:b0:32:b5:
         a2:dd:44:bb:1c:fe:45:1e:84:2e:97:75:5c:c3:15:51:f5:22:
         1d:75:ed:0e:66:54:21:26:cc:f2:7d:eb:c3:19:c6:b1:59:7e:
         d2:b8:c8:4a:76:f9:27:82:d4:8a:69:2b:07:f7:c7:a8:8e:8c:
         3b:b4:b9:30:f4:48:57:ac:a6:6b:c4:fd:38:45:07:49:53:1e:
         ae:af:6e:d0:02:3b:63:43:ce:5c:ab:24:ee:44:c5:93:cc:3b:
         d2:c2:ac:df:96:3f:5a:bf:54:fc:ec:f2:4c:9e:d9:40:05:d1:
         a6:e4:7f:72:61:ef:fc:f3:24:78:e2:df:97:a2:56:c1:2b:62:
         6b:37:39:d6:18:74:c6:45:94:8d:e2:8b:2f:c6:f1:bc:99:59:
         a0:0b:e7:ec:0c:ae:c9:7e:ae:f4:d8:3e:3a:54:69:9a:b2:af:
         3c:c8:08:b5:fe:f2:32:2d:a6:3f:02:6f:e1:f4:59:21:9e:1a:
         45:35:62:3a:c4:83:cd:26:2b:98:18:0b:a3:e9:16:7d:b2:0b:
         f6:3d:39:b0:74:be:42:98:1e:89:f7:09:ce:5d:75:e7:19:3b:
         4c:50:a5:e2:27:67:ad:cc:0b:c5:af:cc:52:9b:df:2c:df:1a:
         0c:41:b1:a8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj9FbcD99iakdtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwOGUwZGUtYWI1ZS00ODgzLThmMDktN2Q5NTcwZjIw
MTg2MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
YzYyMWMxYjItZjNiZC00MzExLWIwNzgtOTdhOTA5ZjYxYjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUBp6T7B6Dq+Ow1pEQz4jKKeTtcf3klSJzpe
33gEQDVBj98/k3Y+0Kcfglsnu3w5Gj1iBKhLXw8prrCl7WAkFHP1ciJvD0APtsSw
htBaqX34TtuZzOsttoHNlkJJx5oUkega9tWLXEfktfftR7sx+TcQxB7BoMilPhPt
3msi/w00e4Xu2NVgkoyxXAoLml3RVv/aXSv1G6wo+sV3oOuVumdLj18e4Y/RFUXt
OvmCB3PZX6rBT4SK3a/emAE56rHbaZfLRvh5rZl9jg+h7uNPQjcioNuXZxhW1pP0
NuEDL4526Fxkilwk8jxh+NZaQ6yrqDy6py2/zNgZBF/bHAG4VQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN5JZEyS1K0NWA+wr7TGR45KOmb5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4
ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1NzBmMjAxODYvMWRiOTg3ZmEtZjhkYy0z
MWNiLTk1YjEtMzk1MzkwM2UxOGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmUwOGUwZGUtYWI1ZS00ODgzLThm
MDktN2Q5NTcwZjIwMTg2LzZlMDhlMGRlLWFiNWUtNDg4My04ZjA5LTdkOTU3MGYy
MDE4Ni5jcmwwHwYDVR0jBBgwFoAU62igpaUyYfOMs5A+D0fqSS+zhlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1
NzBmMjAxODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8BgAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABdWkuMaigtEMob6sJi7JbAytaLdRLsc/kUehC6XdVzDFVH1Ih11
7Q5mVCEmzPJ968MZxrFZftK4yEp2+SeC1IppKwf3x6iOjDu0uTD0SFespmvE/ThF
B0lTHq6vbtACO2NDzlyrJO5ExZPMO9LCrN+WP1q/VPzs8kye2UAF0abkf3Jh7/zz
JHji35eiVsErYms3OdYYdMZFlI3iiy/G8byZWaAL5+wMrsl+rvTYPjpUaZqyrzzI
CLX+8jItpj8Cb+H0WSGeGkU1YjrEg80mK5gYC6PpFn2yC/Y9ObB0vkKYHon3Cc5d
decZO0xQpeInZ63MC8WvzFKb3yzfGgxBsag=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:46 2025 by rpki-client