Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/e1db9759-0873-318a-b0f5-98ff73f1f44a.roa
File:                     e1db9759-0873-318a-b0f5-98ff73f1f44a.roa (raw, json)
Hash identifier:          0zQOj89yqga69SO8UiBNCfC6DNS13RO3hcNFjlFZ6PE=
Subject key identifier:   33:89:27:1B:B3:E7:46:D9:90:77:13:A1:AC:BD:A1:BF:6C:5D:71:6B
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584AA85BB12D09D14EDDDA4161E0
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/e1db9759-0873-318a-b0f5-98ff73f1f44a.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     203283
IP address blocks:        2602:2db:118::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b1:2d:09:d1:4e:dd:da:41:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=3f48ee4e-3f8f-4f0b-8057-a32ca2b9f204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:28:88:81:77:53:62:48:f4:c7:eb:6b:ea:
                    2b:48:ae:9a:12:cc:2c:34:bc:36:cc:17:01:55:25:
                    16:33:96:f7:3d:60:fa:c7:ed:b1:3b:10:f7:5e:18:
                    55:fc:05:2f:30:0e:45:d9:9d:86:4c:78:06:a9:41:
                    c2:2c:03:d5:66:22:3e:fc:1c:6b:97:27:a8:d2:56:
                    38:c5:a7:74:fc:42:58:f7:e0:d8:fd:19:90:73:53:
                    02:76:63:0e:86:84:05:02:16:f6:66:20:df:6b:c7:
                    c4:3b:db:2d:9e:56:aa:91:70:d3:8b:fe:93:ad:a8:
                    85:c2:38:72:cd:4f:bb:16:6e:5f:d0:9d:99:ef:81:
                    c3:40:d2:82:5b:73:74:59:f9:a9:e3:bf:65:c1:b7:
                    ae:e5:ed:58:44:05:09:93:21:86:01:38:bb:95:76:
                    2c:c7:ab:5e:aa:40:84:8e:5c:2f:6c:52:20:62:15:
                    e1:d2:73:6a:45:6f:d0:11:0c:9f:5a:ca:d1:71:e5:
                    59:be:27:10:18:26:06:62:25:76:86:08:32:62:78:
                    fe:85:50:27:09:af:d7:d3:9e:30:23:54:78:c7:47:
                    3d:e2:b4:49:ef:89:40:36:36:d9:82:9c:20:29:4a:
                    cb:ce:6a:cf:c1:22:94:a1:2d:f6:79:cc:e6:da:cf:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:89:27:1B:B3:E7:46:D9:90:77:13:A1:AC:BD:A1:BF:6C:5D:71:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/e1db9759-0873-318a-b0f5-98ff73f1f44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:118::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d8:61:f1:5d:67:8b:dc:76:34:99:94:fd:e9:f0:ed:8a:6b:
         6c:ea:dd:a4:99:1e:6b:8f:c5:a3:b7:fe:c3:52:fd:fd:9e:14:
         c6:72:c9:a4:87:aa:ba:c9:7a:29:07:64:5a:f8:25:be:ee:e2:
         5a:8c:c3:a6:0c:7e:d7:be:e1:9a:e5:1b:24:86:33:00:d5:7f:
         ab:95:39:66:e6:eb:b7:e3:27:13:09:3c:1d:24:2c:fb:73:13:
         d3:dd:f3:a2:7b:42:72:5f:53:93:58:52:7a:89:bb:66:f9:c6:
         1d:93:45:9f:05:95:2a:4c:55:90:30:07:fc:d5:38:42:20:6c:
         23:5b:4f:ec:76:11:fb:95:63:a1:dd:6e:8c:24:7e:b4:94:27:
         d5:f5:47:93:cc:32:5d:dc:46:ab:f5:09:44:5c:87:0c:a8:5c:
         8e:61:81:c8:37:e9:49:58:5a:d9:21:ec:92:0f:a6:19:04:39:
         83:10:51:dc:b7:43:12:ba:1a:db:85:1a:e9:1f:e9:98:56:da:
         f2:05:97:48:a3:ef:38:c8:c0:fe:08:86:5b:9c:50:96:6b:ad:
         9f:34:12:2b:cc:b1:84:c8:4c:20:7b:ba:93:47:68:97:82:7a:
         1a:c8:95:66:3f:68:f5:0b:b7:b6:ea:67:f3:bd:a2:d5:db:42:
         48:c0:db:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqoW7EtCdFO3dpBYeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MwZWIyZGUtZTVlOC00MTA4LTg3MGUtOGNiYmZmMzk4
ODVkMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
M2Y0OGVlNGUtM2Y4Zi00ZjBiLTgwNTctYTMyY2EyYjlmMjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmycoiIF3U2JI9Mfra+orSK6aEswsNLw2zBcB
VSUWM5b3PWD6x+2xOxD3XhhV/AUvMA5F2Z2GTHgGqUHCLAPVZiI+/Bxrlyeo0lY4
xad0/EJY9+DY/RmQc1MCdmMOhoQFAhb2ZiDfa8fEO9stnlaqkXDTi/6TraiFwjhy
zU+7Fm5f0J2Z74HDQNKCW3N0Wfmp479lwbeu5e1YRAUJkyGGATi7lXYsx6teqkCE
jlwvbFIgYhXh0nNqRW/QEQyfWsrRceVZvicQGCYGYiV2hggyYnj+hVAnCa/X054w
I1R4x0c94rRJ74lANjbZgpwgKUrLzmrPwSKUoS32eczm2s8LSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDOJJxuz50bZkHcToay9ob9sXXFrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYzBl
YjJkZS1lNWU4LTQxMDgtODcwZS04Y2JiZmYzOTg4NWQvZTFkYjk3NTktMDg3My0z
MThhLWIwZjUtOThmZjczZjFmNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2MwZWIyZGUtZTVlOC00MTA4LTg3
MGUtOGNiYmZmMzk4ODVkL2NjMGViMmRlLWU1ZTgtNDEwOC04NzBlLThjYmJmZjM5
ODg1ZC5jcmwwHwYDVR0jBBgwFoAUbCgRS8LjSpyBl9ozSHser0539MkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jYzBlYjJkZS1lNWU4LTQxMDgtODcwZS04Y2Ji
ZmYzOTg4NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIC2wEY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABnYYfFdZ4vcdjSZlP3p8O2Ka2zq3aSZHmuPxaO3/sNS/f2eFMZy
yaSHqrrJeikHZFr4Jb7u4lqMw6YMfte+4ZrlGySGMwDVf6uVOWbm67fjJxMJPB0k
LPtzE9Pd86J7QnJfU5NYUnqJu2b5xh2TRZ8FlSpMVZAwB/zVOEIgbCNbT+x2EfuV
Y6HdbowkfrSUJ9X1R5PMMl3cRqv1CURchwyoXI5hgcg36UlYWtkh7JIPphkEOYMQ
Udy3QxK6GtuFGukf6ZhW2vIFl0ij7zjIwP4IhlucUJZrrZ80EivMsYTITCB7upNH
aJeCehrIlWY/aPULt7bqZ/O9otXbQkjA26M=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:25 2025 by rpki-client