Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ed56583d-d446-3e2a-bfd2-8922516e0941.roa
File:                     ed56583d-d446-3e2a-bfd2-8922516e0941.roa (raw, json)
Hash identifier:          pZIJiXE2G7BqcNO3EmlisSW6zSdyfaf+XMxNCCssDGA=
Subject key identifier:   68:9B:93:76:8F:DE:DC:68:39:EE:80:C9:E7:4D:33:F3:32:21:2D:B1
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F43285849E7BA83B057A09B9F57CDA880
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ed56583d-d446-3e2a-bfd2-8922516e0941.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     150184
IP address blocks:        2602:f9f6:400::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:83:b0:57:a0:9b:9f:57:cd:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=fc06c875-ca32-4009-a457-9ae0b7aeca34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:33:08:9f:3a:51:8e:36:2a:2b:6d:0f:70:
                    d6:d6:b4:6f:b6:5a:61:f3:52:46:35:e6:78:33:29:
                    1b:4f:af:28:aa:2d:b8:8f:0c:9c:94:4a:82:1a:a8:
                    b1:b2:5f:d1:a2:7c:9b:4e:b2:13:d2:65:88:18:6c:
                    28:f9:e1:ab:29:7c:79:1a:8a:0a:47:64:68:2d:2e:
                    5f:66:ac:13:f9:bf:16:a5:01:bf:a2:e3:20:6a:4e:
                    43:a9:70:df:00:3c:03:ae:7e:fd:08:e2:5e:e1:83:
                    7d:b5:3a:e3:5c:bf:35:15:cf:bc:68:2c:a9:5f:9c:
                    65:2f:4b:66:cd:0a:39:77:b6:05:9f:6b:f8:95:86:
                    1a:e4:ac:6d:9d:d6:61:67:4b:25:f2:5f:a9:48:d5:
                    11:21:d4:bd:0c:78:87:f5:20:08:b9:fc:2a:cf:1c:
                    ce:b0:f3:a8:06:6b:f9:ee:e6:71:9a:44:e7:1a:18:
                    5f:37:98:55:c5:e8:7c:bd:97:4c:63:77:44:d4:5c:
                    98:fb:e4:c8:6d:06:06:b2:1d:cc:e7:5b:aa:3e:ba:
                    5e:a4:d2:ce:04:86:48:4b:88:5f:5d:25:5f:bb:36:
                    25:5a:2e:09:3d:8c:c8:55:99:bc:8f:ef:ec:d5:73:
                    94:57:b3:b2:75:73:76:11:8f:b8:10:7c:77:74:2a:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9B:93:76:8F:DE:DC:68:39:EE:80:C9:E7:4D:33:F3:32:21:2D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ed56583d-d446-3e2a-bfd2-8922516e0941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5b:c3:9b:da:56:43:e6:49:b2:86:24:ca:98:b1:22:53:2d:
         04:cb:b9:af:71:dd:1d:e2:10:36:60:ad:3c:89:1b:18:10:94:
         8e:01:b7:85:d5:98:1c:58:fe:12:c3:5d:dc:47:e8:0d:5e:17:
         b5:ca:6b:de:0d:d3:22:66:ce:61:be:7d:6f:96:f7:ec:76:53:
         74:36:29:26:8d:ff:7c:a0:bd:79:5d:fe:4c:15:83:b0:ad:fc:
         03:16:1d:a4:2e:c7:d1:45:e3:a9:fb:65:58:60:82:f0:45:3c:
         c9:ad:75:7e:0f:8d:42:c1:9c:bb:23:be:57:30:b3:f0:25:de:
         e5:24:61:96:c0:ff:5c:63:20:97:13:85:27:15:87:84:d4:d4:
         a3:58:8f:f1:31:e0:0f:2c:ca:75:69:6e:5e:86:a9:06:48:9d:
         52:08:c6:d6:31:4b:28:1d:3b:59:27:7f:27:bf:f1:e6:c5:99:
         19:5c:83:70:e4:a8:96:5a:fe:19:53:80:de:eb:94:c6:e8:02:
         97:76:2d:20:6f:7c:c6:0a:d4:5f:45:06:77:70:67:f5:c0:b1:
         06:73:39:bd:0e:82:72:3b:95:4d:fb:27:37:39:e6:7a:f9:fb:
         09:46:b0:58:17:6e:5c:3a:c9:2d:e8:2e:3d:fd:a1:25:34:a8:
         4e:52:05:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnnuoOwV6Cbn1fNqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
ZmMwNmM4NzUtY2EzMi00MDA5LWE0NTctOWFlMGI3YWVjYTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWczCJ86UY42KittD3DW1rRvtlph81JGNeZ4
MykbT68oqi24jwyclEqCGqixsl/RonybTrIT0mWIGGwo+eGrKXx5GooKR2RoLS5f
ZqwT+b8WpQG/ouMgak5DqXDfADwDrn79COJe4YN9tTrjXL81Fc+8aCypX5xlL0tm
zQo5d7YFn2v4lYYa5KxtndZhZ0sl8l+pSNURIdS9DHiH9SAIufwqzxzOsPOoBmv5
7uZxmkTnGhhfN5hVxeh8vZdMY3dE1FyY++TIbQYGsh3M51uqPrpepNLOBIZIS4hf
XSVfuzYlWi4JPYzIVZm8j+/s1XOUV7OydXN2EY+4EHx3dCoLhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGibk3aP3txoOe6AyedNM/MyIS2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvZWQ1NjU4M2QtZDQ0Ni0z
ZTJhLWJmZDItODkyMjUxNmUwOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL59gQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJbw5vaVkPmSbKGJMqYsSJTLQTLua9x3R3iEDZgrTyJGxgQlI4B
t4XVmBxY/hLDXdxH6A1eF7XKa94N0yJmzmG+fW+W9+x2U3Q2KSaN/3ygvXld/kwV
g7Ct/AMWHaQux9FF46n7ZVhggvBFPMmtdX4PjULBnLsjvlcws/Al3uUkYZbA/1xj
IJcThScVh4TU1KNYj/Ex4A8synVpbl6GqQZInVIIxtYxSygdO1knfye/8ebFmRlc
g3DkqJZa/hlTgN7rlMboApd2LSBvfMYK1F9FBndwZ/XAsQZzOb0OgnI7lU37Jzc5
5nr5+wlGsFgXblw6yS3oLj39oSU0qE5SBXE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:14:14 2025 by rpki-client