Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1317c0da-14db-3904-85d8-e2714d8c8b6d.roa
File:                     1317c0da-14db-3904-85d8-e2714d8c8b6d.roa (raw, json)
Hash identifier:          /mLDvsXYcVqwRk5gfbQF6WS49bCKcqROVKtLH3iSWFQ=
Subject key identifier:   D7:67:DB:74:1B:23:73:DF:3E:FD:4A:E6:AA:71:68:38:BD:20:A7:A9
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584A29556C1B795A98D7F108DA00
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1317c0da-14db-3904-85d8-e2714d8c8b6d.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     174
IP address blocks:        2602:fd92:600::/40 maxlen: 48
                          2602:fd92:b00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:6c:1b:79:5a:98:d7:f1:08:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=1371aa2f-c1d9-43c8-9fa1-c7cd58c10a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:3b:ce:d6:fb:87:37:6d:97:7c:88:fc:a6:
                    1f:c9:fb:96:cd:0f:bc:89:1d:16:8a:f9:c3:c3:ec:
                    36:33:87:fc:18:39:17:eb:9a:d4:b3:cd:de:27:e7:
                    24:82:5c:4c:43:93:6c:0c:71:c0:c7:2e:df:a5:0f:
                    37:59:1f:29:d0:e8:8b:f8:6b:a3:61:8b:56:5c:b7:
                    27:4b:95:8b:44:c4:b6:f4:23:db:a8:f4:ee:27:66:
                    75:4e:bd:73:44:ee:a8:14:59:f2:44:e8:6e:c7:70:
                    f7:ea:a9:74:50:54:40:8e:8b:5b:2b:80:c7:9b:0d:
                    fc:32:56:9c:0c:d9:a5:e4:86:15:be:3f:30:b0:dc:
                    db:79:8f:1c:ec:8f:ec:93:67:56:d0:e9:89:56:3c:
                    ed:d8:a6:9c:87:fe:43:04:41:98:da:01:36:43:b9:
                    77:66:0d:39:59:e6:8d:af:70:80:91:78:93:9f:55:
                    c3:0f:71:f8:f8:61:11:e1:52:bc:09:53:3f:ad:d2:
                    05:fd:74:22:3d:f2:93:34:ab:1a:dd:af:f9:8a:6c:
                    34:d3:fa:16:cc:46:49:5f:ea:01:37:fb:13:c7:fb:
                    ff:f6:25:21:3a:21:75:80:4b:ba:d6:0e:80:f6:bf:
                    8d:af:5b:bb:09:6c:5d:3a:49:1f:db:b4:3a:fa:85:
                    3c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:DB:74:1B:23:73:DF:3E:FD:4A:E6:AA:71:68:38:BD:20:A7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1317c0da-14db-3904-85d8-e2714d8c8b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:600::/40
                  2602:fd92:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:72:11:fb:dd:4d:fc:48:a9:6c:54:9b:70:48:fe:5f:95:
         d2:c0:1b:78:1b:72:82:40:43:93:e0:f2:42:af:6c:cb:98:07:
         6e:ab:53:e8:e2:f9:ed:9f:16:90:cb:2f:43:c8:f6:1f:b7:65:
         f3:51:3f:a4:43:ba:4b:77:9d:17:e2:f1:1a:23:0e:16:3c:72:
         36:35:78:3c:e7:7f:64:cf:db:a7:c5:3d:bf:98:9e:97:74:49:
         7b:f0:cc:88:2d:95:34:b2:94:4b:9b:ec:76:50:de:0f:a5:af:
         e9:fc:f8:03:a1:8e:b1:62:3a:90:7f:99:98:f2:54:91:be:f3:
         ef:21:29:bd:d1:02:bb:7e:52:c0:1d:12:55:18:70:73:71:ae:
         9f:01:a5:e3:4c:a0:8c:71:2c:3c:41:b2:74:80:34:77:5d:09:
         9d:6a:79:74:61:f3:f3:e0:d0:83:3d:19:29:62:9e:49:d2:46:
         a7:87:8a:f7:9a:55:4e:15:2b:7b:a3:fa:5a:9b:22:77:8f:85:
         f4:dc:a5:bd:d8:09:2d:59:ab:e0:db:f6:47:de:15:32:17:00:
         f2:6c:ba:b3:b2:01:aa:40:e1:42:34:54:45:7e:8e:28:64:06:
         e9:00:65:3d:25:52:92:46:df:49:b6:8c:8b:fd:b6:44:eb:81:
         65:d4:5d:94
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWEopVWwbeVqY1/EI2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
MTM3MWFhMmYtYzFkOS00M2M4LTlmYTEtYzdjZDU4YzEwYTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7A7ztb7hzdtl3yI/KYfyfuWzQ+8iR0WivnD
w+w2M4f8GDkX65rUs83eJ+ckglxMQ5NsDHHAxy7fpQ83WR8p0OiL+GujYYtWXLcn
S5WLRMS29CPbqPTuJ2Z1Tr1zRO6oFFnyROhux3D36ql0UFRAjotbK4DHmw38Mlac
DNml5IYVvj8wsNzbeY8c7I/sk2dW0OmJVjzt2Kach/5DBEGY2gE2Q7l3Zg05WeaN
r3CAkXiTn1XDD3H4+GER4VK8CVM/rdIF/XQiPfKTNKsa3a/5imw00/oWzEZJX+oB
N/sTx/v/9iUhOiF1gEu61g6A9r+Nr1u7CWxdOkkf27Q6+oU86wIDAQABo4IDXzCC
A1swHQYDVR0OBBYEFNdn23QbI3PfPv1K5qpxaDi9IKepMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvMTMxN2MwZGEtMTRkYi0z
OTA0LTg1ZDgtZTI3MTRkOGM4YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAJgL9kgYD
BgAmAv2SCzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQCbpHIR+91N/EipbFSbcEj+X5XSwBt4G3KCQEOT4PJC
r2zLmAduq1Po4vntnxaQyy9DyPYft2XzUT+kQ7pLd50X4vEaIw4WPHI2NXg8539k
z9unxT2/mJ6XdEl78MyILZU0spRLm+x2UN4Ppa/p/PgDoY6xYjqQf5mY8lSRvvPv
ISm90QK7flLAHRJVGHBzca6fAaXjTKCMcSw8QbJ0gDR3XQmdanl0YfPz4NCDPRkp
Yp5J0kanh4r3mlVOFSt7o/pamyJ3j4X03KW92AktWavg2/ZH3hUyFwDybLqzsgGq
QOFCNFRFfo4oZAbpAGU9JVKSRt9JtoyL/bZE64Fl1F2U
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:41:02 2025 by rpki-client