Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e2b353e3-7ad3-397c-a612-410d003fee53.roa
File:                     e2b353e3-7ad3-397c-a612-410d003fee53.roa (raw, json)
Hash identifier:          fA6/A8WEVwY/XIE+9fHgJ8m5e3cUO1siFbH2pvFxmTw=
Subject key identifier:   9A:36:94:E3:5F:0B:B3:A2:9D:5B:68:7F:D6:58:27:01:01:E5:B0:6C
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F43285849F87A897D694C9612DC8451F6
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e2b353e3-7ad3-397c-a612-410d003fee53.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     400544
IP address blocks:        2607:76c0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:89:7d:69:4c:96:12:dc:84:51:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=fc864f1b-0a84-405c-aabd-b8abd7d19b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:3e:4c:2c:02:1d:f5:99:34:77:ab:11:79:
                    0d:2b:08:41:13:a9:df:2b:27:2d:f7:de:5b:9a:3f:
                    70:fc:1b:44:15:fd:cc:78:ec:3d:06:c2:56:74:39:
                    81:27:2b:e8:68:d1:7e:9d:34:24:65:cc:ea:90:90:
                    9e:2b:27:8d:08:25:ad:dd:d8:4a:47:07:e2:8c:7a:
                    bc:72:29:86:b9:c7:e8:68:76:2e:1e:49:53:a5:df:
                    bc:32:03:91:75:86:ae:ff:f5:92:9d:21:93:2a:f8:
                    7d:02:bf:e0:60:42:c4:88:4b:a3:66:94:2a:67:78:
                    13:fc:b0:c0:8e:3f:f8:47:63:56:4c:39:ba:25:d8:
                    ec:aa:cd:f8:ed:95:87:dd:38:48:d7:75:df:4f:62:
                    a4:11:eb:b8:b2:a5:67:c6:26:b7:a8:b4:c3:42:39:
                    7d:1c:9a:47:b1:ef:e0:3b:68:88:04:cf:ea:b4:bb:
                    34:fa:65:15:2c:f2:22:54:1d:82:d6:ca:e4:c0:fe:
                    ad:bd:c0:f0:c9:0c:af:75:9a:7b:67:59:a6:58:18:
                    0b:98:e0:c0:12:68:48:bb:18:eb:8f:5c:7b:13:82:
                    6f:9c:f7:30:3f:89:84:d3:f3:be:64:51:2a:0b:6b:
                    4c:0b:6e:66:c3:b8:51:b8:0a:52:6f:f4:d8:a4:5f:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:94:E3:5F:0B:B3:A2:9D:5B:68:7F:D6:58:27:01:01:E5:B0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e2b353e3-7ad3-397c-a612-410d003fee53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:65:87:8e:02:5a:1f:df:0b:87:a9:6b:e4:fb:2d:de:e7:
         5d:6d:9c:f9:14:fd:75:21:08:8f:32:27:bc:49:ce:25:5c:b6:
         78:a7:1a:46:20:b3:1b:10:31:62:bb:04:97:e1:26:a9:9c:23:
         05:a7:c2:93:85:14:fd:83:85:f0:e4:2c:51:16:c9:c0:1d:ff:
         b9:cf:74:82:e0:2b:c4:95:76:ee:13:65:d2:6b:44:c7:6b:ca:
         27:fe:9c:bf:f1:11:87:64:51:c7:83:d4:b8:db:2f:1d:8c:6f:
         bd:a2:fb:a1:34:8f:05:4a:7f:10:5f:d9:f6:9d:38:c1:82:34:
         6b:83:3d:f7:7b:d7:95:02:d2:29:1c:23:79:f8:6c:f4:19:82:
         4d:58:dd:fd:6b:51:2c:05:ca:8b:37:2e:bc:39:dc:6a:0c:fa:
         e8:67:72:2b:91:0b:7d:a8:27:85:b0:e7:23:26:3b:e0:25:b0:
         3c:38:fd:ac:d8:9a:d7:c6:4c:fa:d4:13:8b:ce:d1:88:79:60:
         04:c5:90:b7:f2:40:64:e0:e6:2f:33:c4:3d:1a:7f:d7:3b:e7:
         6d:a7:6f:b0:31:4a:62:13:f2:ca:e7:eb:0b:3e:cb:18:f8:00:
         ed:7e:93:83:93:7c:aa:10:67:dd:de:6d:00:70:14:66:14:f9:
         03:6d:1f:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn4eol9aUyWEtyEUfYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5
YzgyMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
ZmM4NjRmMWItMGE4NC00MDVjLWFhYmQtYjhhYmQ3ZDE5Yjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HE+TCwCHfWZNHerEXkNKwhBE6nfKyct995b
mj9w/BtEFf3MeOw9BsJWdDmBJyvoaNF+nTQkZczqkJCeKyeNCCWt3dhKRwfijHq8
cimGucfoaHYuHklTpd+8MgORdYau//WSnSGTKvh9Ar/gYELEiEujZpQqZ3gT/LDA
jj/4R2NWTDm6Jdjsqs347ZWH3ThI13XfT2KkEeu4sqVnxia3qLTDQjl9HJpHse/g
O2iIBM/qtLs0+mUVLPIiVB2C1srkwP6tvcDwyQyvdZp7Z1mmWBgLmODAEmhIuxjr
j1x7E4JvnPcwP4mE0/O+ZFEqC2tMC25mw7hRuApSb/TYpF/IwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJo2lONfC7OinVtof9ZYJwEB5bBsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFi
YWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvZTJiMzUzZTMtN2FkMy0z
OTdjLWE2MTItNDEwZDAwM2ZlZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgxYmFjZDgtZjdkOS00N2Q3LWFh
MjQtNTM5MTA0OWY5YzgyL2Y4MWJhY2Q4LWY3ZDktNDdkNy1hYTI0LTUzOTEwNDlm
OWM4Mi5jcmwwHwYDVR0jBBgwFoAU7P3I67I287uW2sRk65LZqan3Ez0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01Mzkx
MDQ5ZjljODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgd2wAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEgbZYeOAlof3wuHqWvk+y3e511tnPkU/XUhCI8yJ7xJziVctnin
GkYgsxsQMWK7BJfhJqmcIwWnwpOFFP2DhfDkLFEWycAd/7nPdILgK8SVdu4TZdJr
RMdryif+nL/xEYdkUceD1LjbLx2Mb72i+6E0jwVKfxBf2fadOMGCNGuDPfd715UC
0ikcI3n4bPQZgk1Y3f1rUSwFyos3Lrw53GoM+uhnciuRC32oJ4Ww5yMmO+AlsDw4
/azYmtfGTPrUE4vO0Yh5YATFkLfyQGTg5i8zxD0af9c7522nb7AxSmIT8srn6ws+
yxj4AO1+k4OTfKoQZ93ebQBwFGYU+QNtH6I=
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:21:44 2025 by rpki-client