Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
File:                     8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa (raw, json)
Hash identifier:          Se1FAc/mw1oXL7NEaJ8dnK0qVEdYxqhtrvWchcKK4s4=
Subject key identifier:   26:F8:E0:59:3B:AD:D9:61:6A:9A:B0:66:A2:2B:11:BB:C9:3A:97:E6
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F43285849AD1A10F5DF7BB61C2942AA80
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     401012
IP address blocks:        2602:f956:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:10:f5:df:7b:b6:1c:29:42:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=24af5ef0-f318-4ae4-943d-dad3d8736d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:0e:b8:38:60:92:45:31:f0:b5:41:4f:d4:
                    a3:8f:37:05:e1:26:7b:bd:5b:90:9b:aa:9d:9f:a6:
                    d9:52:02:f1:1f:cb:af:e6:6c:e2:06:dc:f1:6f:ce:
                    b9:c8:81:9b:eb:55:d9:46:93:f0:51:82:e6:90:c5:
                    0b:4f:44:3e:6c:bb:ce:87:fe:1b:84:58:87:37:76:
                    96:09:e8:1a:3c:02:ad:40:28:64:73:f5:58:27:bd:
                    9d:61:af:e1:86:91:e2:e6:c3:94:31:74:99:d5:0c:
                    90:cf:01:77:58:9b:65:1e:8f:33:7e:0e:09:57:89:
                    94:e7:57:f7:e1:9e:44:f6:73:18:46:cd:9d:24:e7:
                    9e:aa:5c:a1:d3:93:da:35:6e:96:16:e4:bb:f2:18:
                    51:ea:3b:5d:23:75:4d:1c:a4:4c:80:20:84:9a:8a:
                    79:b3:9c:81:85:2b:d0:25:52:6c:ee:99:d3:ca:89:
                    dd:50:2b:35:d1:09:28:81:5e:36:0e:a7:f6:07:08:
                    37:3b:e8:f2:b5:f1:84:fa:02:8f:4b:8e:f7:ba:15:
                    93:2c:2d:54:f5:77:94:8b:b9:76:72:48:24:30:df:
                    e5:b4:cb:6e:e8:50:aa:f4:a1:f2:af:17:3c:02:b5:
                    2d:6a:c9:25:ca:99:77:2c:ef:30:d4:99:c9:0a:54:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F8:E0:59:3B:AD:D9:61:6A:9A:B0:66:A2:2B:11:BB:C9:3A:97:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:d2:aa:0e:b9:39:97:a5:5a:fc:14:d5:21:38:4a:9e:f0:
         08:17:a2:a6:62:08:a6:58:86:27:4c:7c:42:a2:eb:77:f3:0a:
         33:3b:71:5e:b6:74:10:d9:20:f7:33:60:27:38:0c:52:73:94:
         2b:96:3d:91:ea:7a:f4:ad:cd:3c:fd:5a:05:7b:ea:ac:c0:e3:
         38:29:d2:fd:c9:0c:f2:81:06:4e:ea:fb:14:2e:72:6b:2d:15:
         bf:14:11:ca:39:eb:ff:61:95:a1:83:bd:52:fc:8a:af:94:e8:
         f0:82:59:d2:d2:1c:11:6b:7f:d7:90:6e:4d:d5:48:7a:bb:07:
         77:f4:da:bd:93:6e:c5:3d:61:74:84:9b:e9:b1:7e:eb:43:1f:
         8f:29:76:c0:f7:f1:db:17:d9:6e:75:a1:07:d6:8a:f5:68:60:
         1d:c3:af:ab:13:ea:32:19:5a:a8:b8:42:65:a1:d4:4c:58:e7:
         f3:6a:1f:8b:ba:1a:a0:4d:9f:54:9b:30:de:72:67:e1:9f:12:
         55:a0:83:2b:4c:67:32:6c:0b:71:f2:b6:dd:ca:f6:f6:f8:eb:
         70:51:8a:63:1d:14:64:51:02:13:5e:91:d3:34:bd:f3:4a:76:
         6d:ef:3b:9f:f5:e2:cb:6a:d6:ab:2d:a7:ac:ce:8b:3f:af:73:
         3e:d0:1b:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmtGhD133u2HClCqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0
MjYzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk
MjRhZjVlZjAtZjMxOC00YWU0LTk0M2QtZGFkM2Q4NzM2ZDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19MOuDhgkkUx8LVBT9SjjzcF4SZ7vVuQm6qd
n6bZUgLxH8uv5mziBtzxb865yIGb61XZRpPwUYLmkMULT0Q+bLvOh/4bhFiHN3aW
CegaPAKtQChkc/VYJ72dYa/hhpHi5sOUMXSZ1QyQzwF3WJtlHo8zfg4JV4mU51f3
4Z5E9nMYRs2dJOeeqlyh05PaNW6WFuS78hhR6jtdI3VNHKRMgCCEmop5s5yBhSvQ
JVJs7pnTyondUCs10QkogV42Dqf2Bwg3O+jytfGE+gKPS473uhWTLC1U9XeUi7l2
ckgkMN/ltMtu6FCq9KHyrxc8ArUtasklypl3LO8w1JnJClQZDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCb44Fk7rdlhapqwZqIrEbvJOpfmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj
MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvOGVlYjFlYTItN2Q2Ny0z
MGM4LWJhOWYtYjk1OTE1NDZhMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm
OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2
NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1
NGY4NjQyNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5VgBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGJ+0qoOuTmXpVr8FNUhOEqe8AgXoqZiCKZYhidMfEKi63fzCjM7
cV62dBDZIPczYCc4DFJzlCuWPZHqevStzTz9WgV76qzA4zgp0v3JDPKBBk7q+xQu
cmstFb8UEco56/9hlaGDvVL8iq+U6PCCWdLSHBFrf9eQbk3VSHq7B3f02r2TbsU9
YXSEm+mxfutDH48pdsD38dsX2W51oQfWivVoYB3Dr6sT6jIZWqi4QmWh1ExY5/Nq
H4u6GqBNn1SbMN5yZ+GfElWggytMZzJsC3Hytt3K9vb463BRimMdFGRRAhNekdM0
vfNKdm3vO5/14stq1qstp6zOiz+vcz7QG5I=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:28 2025 by rpki-client