Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/2a892bdf-d4f1-374b-babb-2bc3e234e3f1.roa
File:                     2a892bdf-d4f1-374b-babb-2bc3e234e3f1.roa (raw, json)
Hash identifier:          PG3BzYHAzkmTOsKVF6wgAtUpFAac76rz+xGRpqEJts4=
Subject key identifier:   D0:61:D5:4C:74:E5:74:E4:0B:3E:49:81:C2:C3:18:88:AA:BB:C5:58
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F43285849E4EFB81ED02B610FBAFFDB80
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/2a892bdf-d4f1-374b-babb-2bc3e234e3f1.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     393780
IP address blocks:        2602:ff26::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b8:1e:d0:2b:61:0f:ba:ff:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=16c368e6-808c-4519-a238-58366359d508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:04:89:a4:34:dc:47:50:74:fb:f7:9e:e1:
                    88:40:19:ce:d2:2f:0f:d4:73:bb:16:c7:6e:06:7d:
                    eb:d9:7b:b6:50:49:fc:40:0c:56:c2:84:eb:a9:0a:
                    1a:ea:65:8c:a8:8d:73:d7:fc:8c:46:4a:89:8d:22:
                    38:9e:40:0a:6f:d0:b7:13:09:1e:f3:e4:25:a0:29:
                    a9:46:53:f0:5f:14:74:55:59:66:e0:30:c1:e6:79:
                    66:60:8a:28:e6:b1:90:a4:19:b8:86:4e:18:67:d5:
                    e0:86:fa:5c:e0:c9:19:9a:d7:be:da:db:4d:f1:c4:
                    3c:7d:97:59:07:4a:d7:87:71:6a:1d:73:7e:26:00:
                    d1:f8:db:fd:55:b2:6e:f6:fe:1e:f7:c8:c4:92:41:
                    d3:c7:47:a6:61:ef:cb:01:5c:46:e3:4c:75:52:15:
                    5e:29:22:6e:f4:ae:75:76:e3:45:fe:7c:b0:d7:1f:
                    08:53:f1:8b:85:e4:9c:4e:90:4b:af:eb:3d:ca:a0:
                    0a:5b:a3:9e:b9:f3:7a:0d:6e:65:5c:21:ea:04:42:
                    33:4e:d4:d9:a6:48:8c:8e:ff:ab:f7:7c:2a:32:c4:
                    ec:5f:bc:45:5f:a4:a9:7c:e0:9c:45:fd:e1:6a:5f:
                    1e:6f:09:b0:57:af:d7:de:7a:59:04:ae:ed:ac:d8:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:61:D5:4C:74:E5:74:E4:0B:3E:49:81:C2:C3:18:88:AA:BB:C5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/2a892bdf-d4f1-374b-babb-2bc3e234e3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff26::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:e2:98:c5:9e:43:38:e8:a2:fe:2c:83:16:a9:5d:ba:3f:
         8b:2e:08:d9:66:77:0e:48:d4:f7:2e:e0:4a:6a:ea:ac:97:83:
         11:fa:9f:8b:59:71:28:46:fc:ab:a2:8d:09:9c:c8:63:3c:3b:
         7c:66:ca:15:b6:43:ea:02:42:07:83:5e:81:b5:7b:df:ce:24:
         6a:c8:f7:7c:7e:cb:e2:de:11:1a:b9:da:8c:b4:ef:66:89:d0:
         32:e6:1a:51:2f:a0:53:0e:8b:db:fa:b5:5f:57:d1:e6:a4:4c:
         1f:3b:09:da:4a:6a:1e:e4:d8:3b:fd:61:9e:40:20:fd:9e:a9:
         9a:c9:4c:bf:18:44:c0:10:c3:75:df:0a:4d:e6:12:5f:7d:0d:
         67:6f:5f:4e:7a:88:7d:75:4b:d8:f7:f9:4e:90:f7:3f:e8:a4:
         bd:e8:44:34:f4:c3:99:79:5b:b1:01:44:db:63:1f:25:b3:95:
         36:91:4b:23:51:6d:c0:47:5e:24:d2:1f:9c:55:ce:bf:60:24:
         be:6e:74:ab:69:83:01:c4:0e:77:eb:83:c4:39:06:14:bb:de:
         f7:9b:85:25:e4:a1:9c:57:8c:aa:0a:60:1f:53:24:e5:a8:88:
         9f:fc:cd:77:70:45:e2:13:5b:15:a2:1a:ae:4e:5d:32:db:34:
         eb:63:0f:c7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnk77ge0CthD7r/24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMxYjc1MGMtYjQ4Zi00YTU3LWJmMjYtMThlMGJjNmE0
NTZlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
MTZjMzY4ZTYtODA4Yy00NTE5LWEyMzgtNTgzNjYzNTlkNTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLoEiaQ03EdQdPv3nuGIQBnO0i8P1HO7Fsdu
Bn3r2Xu2UEn8QAxWwoTrqQoa6mWMqI1z1/yMRkqJjSI4nkAKb9C3Ewke8+QloCmp
RlPwXxR0VVlm4DDB5nlmYIoo5rGQpBm4hk4YZ9Xghvpc4MkZmte+2ttN8cQ8fZdZ
B0rXh3FqHXN+JgDR+Nv9VbJu9v4e98jEkkHTx0emYe/LAVxG40x1UhVeKSJu9K51
duNF/nyw1x8IU/GLheScTpBLr+s9yqAKW6OeufN6DW5lXCHqBEIzTtTZpkiMjv+r
93wqMsTsX7xFX6SpfOCcRf3hal8ebwmwV6/X3npZBK7trNj/VQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNBh1Ux05XTkCz5JgcLDGIiqu8VYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83MzFi
NzUwYy1iNDhmLTRhNTctYmYyNi0xOGUwYmM2YTQ1NmUvMmE4OTJiZGYtZDRmMS0z
NzRiLWJhYmItMmJjM2UyMzRlM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzMxYjc1MGMtYjQ4Zi00YTU3LWJm
MjYtMThlMGJjNmE0NTZlLzczMWI3NTBjLWI0OGYtNGE1Ny1iZjI2LTE4ZTBiYzZh
NDU2ZS5jcmwwHwYDVR0jBBgwFoAUE+QeciQkWtWazwcMzkInvIBsy1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83MzFiNzUwYy1iNDhmLTRhNTctYmYyNi0xOGUw
YmM2YTQ1NmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL/JgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAT1fimMWeQzjoov4sgxapXbo/iy4I2WZ3DkjU9y7gSmrqrJeDEfqf
i1lxKEb8q6KNCZzIYzw7fGbKFbZD6gJCB4NegbV7384kasj3fH7L4t4RGrnajLTv
ZonQMuYaUS+gUw6L2/q1X1fR5qRMHzsJ2kpqHuTYO/1hnkAg/Z6pmslMvxhEwBDD
dd8KTeYSX30NZ29fTnqIfXVL2Pf5TpD3P+ikvehENPTDmXlbsQFE22MfJbOVNpFL
I1FtwEdeJNIfnFXOv2Akvm50q2mDAcQOd+uDxDkGFLve95uFJeShnFeMqgpgH1Mk
5aiIn/zNd3BF4hNbFaIark5dMts062MPxw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:52:54 2025 by rpki-client