Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/e34f9023-2c55-3614-b736-437bdc83b362.roa
File:                     e34f9023-2c55-3614-b736-437bdc83b362.roa (raw, json)
Hash identifier:          aQbAv9V5faUlafG7MwPxaHtIG7bpDDPeuGBiMIMTPwo=
Subject key identifier:   CB:F5:1B:71:25:43:DA:E3:23:98:EC:B1:50:6B:CB:A1:5C:EF:5E:86
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F43285849EBB32A40C98415AC87EB3A00
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/e34f9023-2c55-3614-b736-437bdc83b362.roa
Signing time:             Tue 20 May 2025 23:09:47 +0000
ROA not before:           Tue 20 May 2025 23:09:47 +0000
ROA not after:            Mon 18 Aug 2025 23:09:47 +0000
asID:                     207740
IP address blocks:        2602:f75c:f80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:b3:2a:40:c9:84:15:ac:87:eb:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: May 20 23:09:47 2025 GMT
            Not After : Aug 18 23:09:47 2025 GMT
        Subject: CN=c595ac21-c9d8-45bd-9bd2-ec4e5cd17028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:44:41:ef:be:fa:e0:68:8c:39:e7:49:2b:
                    6e:45:f6:c0:1b:36:50:f1:a5:29:ed:75:c0:c6:db:
                    aa:ee:d1:51:f7:81:3b:87:a3:a3:77:73:c8:31:02:
                    0c:c1:17:39:fb:2d:e6:81:a1:2d:e9:40:9c:6c:c0:
                    30:ee:1b:63:56:01:9d:d5:10:af:39:a7:ed:52:3c:
                    19:1d:dd:72:83:cc:09:be:a7:1d:2c:8e:35:14:a0:
                    a0:84:96:2c:9f:8e:4d:ba:7a:01:14:b9:69:80:8f:
                    6a:98:f7:b6:e3:e2:c3:59:05:de:01:31:23:7a:1f:
                    93:46:aa:a1:de:a2:00:77:96:fb:63:4d:23:6d:de:
                    90:86:71:87:18:5a:5d:5f:b9:1c:29:7f:50:6d:9b:
                    0b:d7:7b:f1:21:22:cc:af:98:b0:63:17:0a:aa:7c:
                    96:a4:ce:fc:91:42:f1:8e:1f:0c:3c:c0:4a:29:ae:
                    48:b1:47:53:84:4b:a4:df:dc:26:0f:63:80:a0:2c:
                    62:40:db:b6:af:3e:aa:81:16:4c:be:e2:3f:13:f8:
                    d6:e7:8a:44:c8:bd:52:e8:54:b1:09:e9:de:73:42:
                    c4:e4:8a:4c:a8:7c:bc:66:e9:de:05:cc:68:0a:9f:
                    8f:a2:d0:51:39:36:0d:59:56:9d:5d:20:65:b8:1b:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:1B:71:25:43:DA:E3:23:98:EC:B1:50:6B:CB:A1:5C:EF:5E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/e34f9023-2c55-3614-b736-437bdc83b362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f75c:f80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:7b:9a:2b:16:26:8a:26:46:99:2e:f0:62:c2:15:40:bc:
         19:1c:8a:8a:98:b7:3b:39:2f:7b:d9:7c:3f:22:2b:13:a6:40:
         c0:2a:c4:68:75:52:56:5c:de:4e:5d:0b:8a:65:dd:30:aa:54:
         88:19:3e:bb:88:8e:4e:b4:af:19:99:a2:6a:d9:eb:fb:bb:41:
         16:6e:4e:e1:26:c7:91:b7:4b:f6:9d:0f:12:37:54:57:58:81:
         4d:c8:67:a4:f1:e2:3f:f2:86:81:d2:5e:97:03:7c:15:34:28:
         7c:85:07:1a:12:a4:7d:f4:43:06:22:be:d2:7c:9e:d1:a9:a4:
         32:3f:45:87:97:d2:60:57:88:40:82:49:3f:a6:8f:a6:a3:24:
         22:87:30:04:2a:89:a9:5e:8b:a5:cd:9c:5c:d2:8e:ea:1d:63:
         2a:70:12:0e:24:77:a2:36:3d:cc:64:fa:02:78:5a:76:64:4e:
         4d:54:9b:e2:35:46:68:29:18:e8:63:c6:65:f1:dd:e8:c9:1a:
         ec:65:38:08:a7:69:2a:85:ec:be:b0:01:90:f4:98:76:19:ed:
         d0:3d:5b:4c:2d:fe:3f:b3:08:4e:86:f9:3b:c1:1f:23:55:6c:
         a5:ac:de:83:cf:e1:0f:0e:cf:53:3d:82:cb:28:7b:a9:22:73:
         b5:a2:56:fa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnrsypAyYQVrIfrOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzUyMTBiMWYtNDhmMi00MGVlLTliMTItY2RkYmFlMjBl
MTJhMB4XDTI1MDUyMDIzMDk0N1oXDTI1MDgxODIzMDk0N1owLzEtMCsGA1UEAxMk
YzU5NWFjMjEtYzlkOC00NWJkLTliZDItZWM0ZTVjZDE3MDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5ZEQe+++uBojDnnSStuRfbAGzZQ8aUp7XXA
xtuq7tFR94E7h6Ojd3PIMQIMwRc5+y3mgaEt6UCcbMAw7htjVgGd1RCvOaftUjwZ
Hd1yg8wJvqcdLI41FKCghJYsn45NunoBFLlpgI9qmPe24+LDWQXeATEjeh+TRqqh
3qIAd5b7Y00jbd6QhnGHGFpdX7kcKX9QbZsL13vxISLMr5iwYxcKqnyWpM78kULx
jh8MPMBKKa5IsUdThEuk39wmD2OAoCxiQNu2rz6qgRZMvuI/E/jW54pEyL1S6FSx
Cenec0LE5IpMqHy8ZuneBcxoCp+PotBROTYNWVadXSBluBv0FQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMv1G3ElQ9rjI5jssVBry6Fc716GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NTIx
MGIxZi00OGYyLTQwZWUtOWIxMi1jZGRiYWUyMGUxMmEvZTM0ZjkwMjMtMmM1NS0z
NjE0LWI3MzYtNDM3YmRjODNiMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzUyMTBiMWYtNDhmMi00MGVlLTli
MTItY2RkYmFlMjBlMTJhLzc1MjEwYjFmLTQ4ZjItNDBlZS05YjEyLWNkZGJhZTIw
ZTEyYS5jcmwwHwYDVR0jBBgwFoAUxnqbNxG5kFsCtGVECy+knYcrdFUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NTIxMGIxZi00OGYyLTQwZWUtOWIxMi1jZGRi
YWUyMGUxMmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3XA+A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE/Se5orFiaKJkaZLvBiwhVAvBkcioqYtzs5L3vZfD8iKxOmQMAq
xGh1UlZc3k5dC4pl3TCqVIgZPruIjk60rxmZomrZ6/u7QRZuTuEmx5G3S/adDxI3
VFdYgU3IZ6Tx4j/yhoHSXpcDfBU0KHyFBxoSpH30QwYivtJ8ntGppDI/RYeX0mBX
iECCST+mj6ajJCKHMAQqialei6XNnFzSjuodYypwEg4kd6I2Pcxk+gJ4WnZkTk1U
m+I1RmgpGOhjxmXx3ejJGuxlOAinaSqF7L6wAZD0mHYZ7dA9W0wt/j+zCE6G+TvB
HyNVbKWs3oPP4Q8Oz1M9gssoe6kic7WiVvo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:14 2025 by rpki-client