Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa
File:                     553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa (raw, json)
Hash identifier:          0wxTpPL+IA39542iDFDQKEhQveZ+7MwSeMHcGRx9Tow=
Subject key identifier:   2F:37:26:02:0F:54:23:19:77:23:3A:6D:C3:E2:DD:73:3D:AE:69:F9
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584A9E961BC224D4FB8FB0D39C00
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     39618
IP address blocks:        2602:fd92:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1b:c2:24:d4:fb:8f:b0:d3:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=df13b8d3-66a4-45c9-80ab-f793cbc123b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:96:a6:41:61:cd:0f:b1:4e:7f:f5:df:e3:
                    e7:f9:5c:6f:59:1f:16:bd:6a:04:92:45:27:9f:c2:
                    38:85:96:9c:87:07:03:7f:65:22:eb:b6:3e:6e:77:
                    9f:e1:e1:5f:f0:43:29:e2:72:4a:9f:21:44:66:a6:
                    cd:70:22:63:60:38:36:ca:1b:48:35:21:c4:a6:de:
                    59:72:43:52:bc:d8:8a:0e:b2:3a:45:71:a3:1b:9e:
                    ef:1b:85:17:b5:f8:61:f9:96:2d:89:d9:0a:bf:75:
                    35:bc:94:f5:eb:6d:34:1c:5b:7c:0c:1e:cb:a3:1a:
                    22:4b:52:07:d0:9c:23:2e:cb:2a:1a:ba:f5:a8:00:
                    2f:ac:de:53:ad:3e:1f:38:03:b7:96:1a:26:06:64:
                    6f:0e:ea:d9:fb:67:aa:7e:0f:ef:98:42:e7:1b:ca:
                    73:a4:8c:50:c8:27:1d:50:18:d9:d8:19:2b:c8:3b:
                    8f:ea:a6:e1:11:c1:88:24:1a:96:05:35:0e:a9:39:
                    79:01:29:df:8b:f8:64:02:f5:c9:62:3d:b5:f1:3b:
                    7f:73:05:62:29:a9:da:2c:9d:6c:66:a1:7d:68:ef:
                    19:c0:86:0c:64:ea:a2:d7:6f:d9:5d:0e:cb:ea:b2:
                    e6:2f:bc:00:f5:b9:a2:37:6f:9d:f1:e5:ae:5d:50:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:26:02:0F:54:23:19:77:23:3A:6D:C3:E2:DD:73:3D:AE:69:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:d8:22:73:a9:cd:2e:c1:d9:67:03:a3:b8:88:da:d5:8c:
         b4:ad:78:fe:54:3c:9d:5a:8f:c4:34:d5:33:ba:2f:0f:be:05:
         6d:86:c3:ed:0b:c7:8e:ab:68:8a:04:f6:15:c0:4f:9f:a9:f4:
         9c:40:d5:ef:54:74:24:8c:5e:7a:06:e1:4f:9d:f1:7a:2f:6c:
         2f:32:d0:38:45:6e:a2:ce:52:6d:af:0f:87:d4:0a:60:2d:b4:
         9a:e5:9b:3d:a8:70:6b:05:61:4c:57:30:18:94:38:0e:5a:36:
         c1:bb:94:49:a7:07:1c:07:be:fa:d8:9d:85:6c:e3:37:00:66:
         33:75:1d:38:86:50:59:e6:31:ca:d9:47:4b:77:d1:6c:e0:6f:
         40:8c:81:30:5b:b4:38:17:1b:aa:c7:b5:88:df:3f:8c:31:1f:
         98:5c:4b:be:ed:f0:c6:1c:f4:dc:d2:b4:4b:28:f4:0e:11:7e:
         1a:c9:c1:90:c0:22:e8:fa:eb:24:32:90:13:0d:73:3e:09:5a:
         4e:e1:79:9c:5f:51:9b:b5:7f:a0:5c:21:b6:bf:7a:0e:11:dd:
         54:a0:3e:12:59:5f:1f:90:27:49:b3:22:4c:09:4b:93:fe:42:
         fc:31:d3:00:5c:79:bb:09:a8:9a:90:38:42:b4:7c:59:3b:9e:
         1c:59:c7:0f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqelhvCJNT7j7DTnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
ZGYxM2I4ZDMtNjZhNC00NWM5LTgwYWItZjc5M2NiYzEyM2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZOWpkFhzQ+xTn/13+Pn+VxvWR8WvWoEkkUn
n8I4hZachwcDf2Ui67Y+bnef4eFf8EMp4nJKnyFEZqbNcCJjYDg2yhtINSHEpt5Z
ckNSvNiKDrI6RXGjG57vG4UXtfhh+ZYtidkKv3U1vJT16200HFt8DB7LoxoiS1IH
0JwjLssqGrr1qAAvrN5TrT4fOAO3lhomBmRvDurZ+2eqfg/vmELnG8pzpIxQyCcd
UBjZ2BkryDuP6qbhEcGIJBqWBTUOqTl5ASnfi/hkAvXJYj218Tt/cwViKanaLJ1s
ZqF9aO8ZwIYMZOqi12/ZXQ7L6rLmL7wA9bmiN2+d8eWuXVC87QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFC83JgIPVCMZdyM6bcPi3XM9rmn5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvNTUzZTM5ZmMtN2YwZC0z
N2YyLWIwYWItNGI5YzU2MWFhMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9kgQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAM1/YInOpzS7B2WcDo7iI2tWMtK14/lQ8nVqPxDTVM7ovD74FbYbD
7QvHjqtoigT2FcBPn6n0nEDV71R0JIxeegbhT53xei9sLzLQOEVuos5Sba8Ph9QK
YC20muWbPahwawVhTFcwGJQ4Dlo2wbuUSacHHAe++tidhWzjNwBmM3UdOIZQWeYx
ytlHS3fRbOBvQIyBMFu0OBcbqse1iN8/jDEfmFxLvu3wxhz03NK0Syj0DhF+GsnB
kMAi6PrrJDKQEw1zPglaTuF5nF9Rm7V/oFwhtr96DhHdVKA+EllfH5AnSbMiTAlL
k/5C/DHTAFx5uwmompA4QrR8WTueHFnHDw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:04 2025 by rpki-client