Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/bed2fa3a-3a1b-399f-b528-fbcdc1703b6b.roa
File:                     bed2fa3a-3a1b-399f-b528-fbcdc1703b6b.roa (raw, json)
Hash identifier:          WJ62ugUfxAl35+KXn2QZCIDs917Twn5iD68j0BD3Vc4=
Subject key identifier:   5E:56:03:1E:84:6C:51:28:AD:69:FF:D6:07:A8:43:D1:5D:27:AE:6D
Certificate issuer:       /CN=2fd7ea67-f633-4dbd-8774-6209ce64a048
Certificate serial:       010D0C9F4328584A90A0BFC2B90A35C6343AE880
Authority key identifier: 1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/bed2fa3a-3a1b-399f-b528-fbcdc1703b6b.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2602:29e:a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bf:c2:b9:0a:35:c6:34:3a:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd7ea67-f633-4dbd-8774-6209ce64a048
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=e9af75e9-0be8-487b-b5cc-187d2e04536f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:10:b4:aa:6c:5c:64:5b:8d:82:d3:d1:4e:
                    81:e4:ef:4a:e9:bc:d3:c8:2c:01:54:6b:15:02:77:
                    24:f3:a3:76:74:a0:d6:b5:be:5f:ba:44:3a:8e:a1:
                    70:45:9a:23:4e:be:bf:80:48:20:9f:b5:c0:6d:70:
                    b8:15:3b:26:19:f7:94:66:a4:b5:97:a2:64:42:a4:
                    e8:57:2d:24:36:8f:fc:ca:67:22:ae:73:e4:e6:ae:
                    1c:6e:e6:94:98:20:19:de:68:f7:60:28:28:fb:4c:
                    3f:d4:49:2a:99:3b:d2:a3:79:97:cc:da:4e:bc:32:
                    b6:18:fe:1a:bc:58:69:b2:6b:18:69:11:12:80:5a:
                    24:11:64:47:b3:71:e5:9b:72:e7:7c:5c:33:e8:54:
                    01:59:e7:b0:41:4d:50:7c:57:69:67:d0:54:33:97:
                    a1:ca:41:8b:6b:d5:b2:4a:9c:c1:f1:0a:d8:1b:b7:
                    1a:c7:e2:1e:4c:3b:4d:e3:f7:a3:bb:54:e5:17:cb:
                    dc:d5:57:6a:3f:d5:89:e0:e5:1e:fe:16:2b:c4:54:
                    2c:1f:03:bf:2e:82:f4:28:40:54:18:4d:a6:13:ec:
                    0c:ee:ea:24:44:74:5a:dc:a1:b0:4d:f5:53:2e:cf:
                    64:d4:81:92:e7:fb:fb:6f:f8:51:f6:3d:d1:f8:e8:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:56:03:1E:84:6C:51:28:AD:69:FF:D6:07:A8:43:D1:5D:27:AE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/bed2fa3a-3a1b-399f-b528-fbcdc1703b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl

            X509v3 Authority Key Identifier:
                keyid:1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29e:a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:fb:14:5c:f9:d4:26:2e:6b:cc:02:d8:00:de:8d:af:8f:f0:
         b1:7a:78:69:b0:67:6f:15:b0:bc:b2:15:d8:58:21:1a:51:d3:
         ca:42:d1:8e:3d:ae:16:b8:f0:f4:eb:07:ad:32:a9:6e:63:b4:
         f7:96:1e:17:ca:b0:f6:dc:cc:b3:69:31:01:81:51:18:83:a9:
         66:86:3d:fd:a7:9e:0d:ed:27:80:f3:77:73:d4:f9:56:96:25:
         77:00:28:82:c8:38:11:35:89:5a:52:02:17:8e:dd:7a:69:44:
         e2:b8:73:36:a5:5b:ae:19:7f:9e:d7:85:7b:48:8d:b9:16:2a:
         19:47:ef:d2:f5:7c:0f:4b:cf:75:4f:b9:c2:bf:04:41:30:26:
         e7:1c:f3:ac:c6:c6:7d:19:fa:ef:61:cd:f0:7d:72:f2:a3:c0:
         57:c0:ba:9e:94:cf:a1:88:3d:ca:3a:7e:05:f7:b4:a6:64:ec:
         38:05:35:ce:dd:53:60:1e:5e:a1:f0:63:83:48:5b:80:9b:9a:
         05:2e:f9:c3:31:3d:18:30:79:67:fa:31:52:c4:f3:8b:f0:49:
         cd:42:41:94:45:6a:2e:30:9d:f9:50:2e:69:b9:fd:c4:a4:b9:
         b4:60:b0:e2:6d:aa:c8:be:32:14:76:09:91:6c:51:bf:36:52:
         9b:ec:61:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoL/CuQo1xjQ66IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkN2VhNjctZjYzMy00ZGJkLTg3NzQtNjIwOWNlNjRh
MDQ4MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZTlhZjc1ZTktMGJlOC00ODdiLWI1Y2MtMTg3ZDJlMDQ1MzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHkQtKpsXGRbjYLT0U6B5O9K6bzTyCwBVGsV
Anck86N2dKDWtb5fukQ6jqFwRZojTr6/gEggn7XAbXC4FTsmGfeUZqS1l6JkQqTo
Vy0kNo/8ymcirnPk5q4cbuaUmCAZ3mj3YCgo+0w/1EkqmTvSo3mXzNpOvDK2GP4a
vFhpsmsYaRESgFokEWRHs3Hlm3LnfFwz6FQBWeewQU1QfFdpZ9BUM5ehykGLa9Wy
SpzB8QrYG7cax+IeTDtN4/eju1TlF8vc1VdqP9WJ4OUe/hYrxFQsHwO/LoL0KEBU
GE2mE+wM7uokRHRa3KGwTfVTLs9k1IGS5/v7b/hR9j3R+OgLuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF5WAx6EbFEorWn/1geoQ9FdJ65tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZmQ3
ZWE2Ny1mNjMzLTRkYmQtODc3NC02MjA5Y2U2NGEwNDgvYmVkMmZhM2EtM2ExYi0z
OTlmLWI1MjgtZmJjZGMxNzAzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmZkN2VhNjctZjYzMy00ZGJkLTg3
NzQtNjIwOWNlNjRhMDQ4LzJmZDdlYTY3LWY2MzMtNGRiZC04Nzc0LTYyMDljZTY0
YTA0OC5jcmwwHwYDVR0jBBgwFoAUHHTmn0SjtAR9pFecI6imwJ/gH+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yZmQ3ZWE2Ny1mNjMzLTRkYmQtODc3NC02MjA5
Y2U2NGEwNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICngCh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH/7FFz51CYua8wC2ADeja+P8LF6eGmwZ28VsLyyFdhYIRpR08pC
0Y49rha48PTrB60yqW5jtPeWHhfKsPbczLNpMQGBURiDqWaGPf2nng3tJ4Dzd3PU
+VaWJXcAKILIOBE1iVpSAheO3XppROK4czalW64Zf57XhXtIjbkWKhlH79L1fA9L
z3VPucK/BEEwJucc86zGxn0Z+u9hzfB9cvKjwFfAup6Uz6GIPco6fgX3tKZk7DgF
Nc7dU2AeXqHwY4NIW4CbmgUu+cMxPRgweWf6MVLE84vwSc1CQZRFai4wnflQLmm5
/cSkubRgsOJtqsi+MhR2CZFsUb82UpvsYd4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:53 2025 by rpki-client