Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/551ee6c7-d739-3462-912c-6527e0e5a7d5.roa
File:                     551ee6c7-d739-3462-912c-6527e0e5a7d5.roa (raw, json)
Hash identifier:          Xgd6Olw9DEehvWEGvJEgUHRYOLdmP9F3ed1IQgHSsGQ=
Subject key identifier:   52:17:45:9B:36:94:59:FA:3E:E1:5A:E2:7E:FC:00:9C:97:54:A9:A8
Certificate issuer:       /CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
Certificate serial:       010D0C9F4328584A1E2AAA0321026EF09270A9E0
Authority key identifier: 55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/551ee6c7-d739-3462-912c-6527e0e5a7d5.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     197767
IP address blocks:        2602:fa3f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:aa:03:21:02:6e:f0:92:70:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=576c97a7-f690-444f-9ce9-a76bc9063007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:5e:bc:0d:0c:12:25:a9:05:2b:d6:32:6c:
                    d2:62:31:c2:56:75:eb:cf:1c:b0:32:71:1e:1b:08:
                    fe:51:1e:09:dd:ea:5c:6c:3e:ff:31:19:8c:03:1a:
                    ec:7b:a1:2f:68:79:40:b1:7d:3b:52:29:74:92:26:
                    66:0e:fb:ec:a3:8b:22:fa:7c:69:79:e9:4c:f7:70:
                    92:e3:38:64:97:e7:1c:99:c5:a5:4d:46:5d:5e:57:
                    84:3a:17:11:9e:9f:31:a4:20:f8:2c:90:7e:a1:bb:
                    34:78:f4:ea:5f:5d:83:67:a6:7b:d7:6f:4c:85:30:
                    f2:ca:0d:9a:12:92:f7:85:11:f6:ba:30:33:f5:cd:
                    8e:de:de:af:6a:c6:94:cd:e4:a9:eb:1e:71:75:4d:
                    c0:58:c8:31:2a:5c:eb:cb:fd:c9:cc:3f:03:b7:c8:
                    2f:7d:bc:13:dd:f1:b3:5a:65:fa:9f:7c:08:62:9a:
                    ea:87:b5:4b:d9:6f:7b:1b:e7:f6:b9:23:7d:e3:69:
                    e3:74:29:97:c7:58:60:83:8e:7d:60:71:84:ef:0f:
                    96:05:1d:c2:f6:fa:bc:f9:93:61:82:29:db:de:05:
                    4e:06:9a:9a:fb:87:1f:57:20:f5:fe:5f:fc:2a:96:
                    97:2c:7b:fc:16:0f:38:b9:0d:ff:f5:a3:82:70:65:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:17:45:9B:36:94:59:FA:3E:E1:5A:E2:7E:FC:00:9C:97:54:A9:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/551ee6c7-d739-3462-912c-6527e0e5a7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.crl

            X509v3 Authority Key Identifier:
                keyid:55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:db:55:99:d5:2c:4d:cf:3e:af:06:c1:20:a8:27:14:a1:15:
         e6:b8:48:32:ca:b3:b0:23:fe:2d:92:87:a1:2a:db:ec:a9:ad:
         b7:c6:6e:a6:42:4f:b6:cc:0d:db:8d:b1:4d:b9:04:31:a1:bf:
         b7:ed:48:45:41:c6:50:4e:d9:6a:64:f6:25:fc:f3:b6:0a:11:
         47:2e:95:fe:a3:e6:36:3b:13:9d:de:67:a0:45:a6:85:83:73:
         90:1c:70:c1:11:8b:0e:ba:ef:f4:12:0f:d5:9b:c9:5e:d9:e6:
         ab:d9:a8:9a:13:75:a9:52:48:a4:02:4a:7a:29:1c:6b:80:32:
         2e:4b:f8:4e:58:f1:df:c5:b5:57:9a:af:5e:9e:13:4c:12:3c:
         24:95:8c:27:3a:51:61:14:ff:36:50:26:50:27:72:db:68:9a:
         c3:f7:92:a5:34:7e:ad:5b:6f:84:9b:b8:19:7d:f5:78:75:f4:
         0a:83:cc:86:a0:a7:b5:ce:c1:15:4f:e0:78:41:b9:0b:33:c6:
         2e:6b:fc:6c:b5:5f:8d:4a:16:11:99:e6:13:5d:cc:d8:3f:24:
         a3:93:99:4f:80:8d:0f:f1:2d:ac:cf:7b:d3:22:bc:dc:6b:77:
         f4:c2:dd:0d:6c:34:3e:7b:aa:6e:a6:be:5e:1b:cb:df:29:0f:
         b1:f2:5d:54
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoeKqoDIQJu8JJwqeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQxNGQzNWUtZDE2Zi00YWQ1LTgyYzQtNWRjZDNiNTY5
ZGUyMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
NTc2Yzk3YTctZjY5MC00NDRmLTljZTktYTc2YmM5MDYzMDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC9evA0MEiWpBSvWMmzSYjHCVnXrzxywMnEe
Gwj+UR4J3epcbD7/MRmMAxrse6EvaHlAsX07Uil0kiZmDvvso4si+nxpeelM93CS
4zhkl+ccmcWlTUZdXleEOhcRnp8xpCD4LJB+obs0ePTqX12DZ6Z7129MhTDyyg2a
EpL3hRH2ujAz9c2O3t6vasaUzeSp6x5xdU3AWMgxKlzry/3JzD8Dt8gvfbwT3fGz
WmX6n3wIYprqh7VL2W97G+f2uSN942njdCmXx1hgg459YHGE7w+WBR3C9vq8+ZNh
ginb3gVOBpqa+4cfVyD1/l/8KpaXLHv8Fg84uQ3/9aOCcGUjvQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFIXRZs2lFn6PuFa4n78AJyXVKmoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDE0
ZDM1ZS1kMTZmLTRhZDUtODJjNC01ZGNkM2I1NjlkZTIvNTUxZWU2YzctZDczOS0z
NDYyLTkxMmMtNjUyN2UwZTVhN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQxNGQzNWUtZDE2Zi00YWQ1LTgy
YzQtNWRjZDNiNTY5ZGUyL2VkMTRkMzVlLWQxNmYtNGFkNS04MmM0LTVkY2QzYjU2
OWRlMi5jcmwwHwYDVR0jBBgwFoAUVUJEpu/yAVlhk2mSDCdRrrXSZzAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lZDE0ZDM1ZS1kMTZmLTRhZDUtODJjNC01ZGNk
M2I1NjlkZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6PwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAC9tVmdUsTc8+rwbBIKgnFKEV5rhIMsqzsCP+LZKHoSrb7Kmtt8Zu
pkJPtswN242xTbkEMaG/t+1IRUHGUE7ZamT2JfzztgoRRy6V/qPmNjsTnd5noEWm
hYNzkBxwwRGLDrrv9BIP1ZvJXtnmq9momhN1qVJIpAJKeikca4AyLkv4Tljx38W1
V5qvXp4TTBI8JJWMJzpRYRT/NlAmUCdy22iaw/eSpTR+rVtvhJu4GX31eHX0CoPM
hqCntc7BFU/geEG5CzPGLmv8bLVfjUoWEZnmE13M2D8ko5OZT4CND/EtrM970yK8
3Gt39MLdDWw0Pnuqbqa+XhvL3ykPsfJdVA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:31:38 2025 by rpki-client