Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/65bb119c-68c4-3b86-a5b3-a712e6b21492.roa
File:                     65bb119c-68c4-3b86-a5b3-a712e6b21492.roa (raw, json)
Hash identifier:          BNgOtnCTTi1s172T82WouTwb8BxZbs8K5hgGCDClZOg=
Subject key identifier:   B2:A0:55:EF:A8:6D:13:2E:FD:90:6B:7F:F3:FB:4E:9B:14:89:C3:71
Certificate issuer:       /CN=756004e4-ddca-45b3-bf76-89761c8369fd
Certificate serial:       010D0C9F43285849E7BA5DF52D697983AD55EF80
Authority key identifier: 89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/65bb119c-68c4-3b86-a5b3-a712e6b21492.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     401052
IP address blocks:        2602:fa0b::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:5d:f5:2d:69:79:83:ad:55:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756004e4-ddca-45b3-bf76-89761c8369fd
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=80c09d0d-e239-447a-a807-6abdfd7ab839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:a1:c5:a7:3e:17:be:56:cb:10:8e:a8:4e:
                    3a:6d:b6:2e:3e:ed:6f:c0:99:8e:e4:2a:ed:d5:fb:
                    92:93:c2:db:f5:12:7c:b5:f8:23:5b:c7:99:cf:84:
                    de:30:74:b4:28:61:80:be:7d:e0:c8:76:68:4c:32:
                    9c:31:4f:65:06:cc:81:bb:0a:bc:89:a4:a1:64:74:
                    65:0d:57:c9:dd:12:6d:5e:2c:dd:18:81:72:e0:bf:
                    6b:e8:a7:67:d7:fa:0f:88:73:32:c9:5a:aa:3b:cb:
                    c7:1f:e5:6d:49:40:41:02:7a:0a:d3:fc:f9:aa:6d:
                    6c:12:ee:1d:e9:a7:fa:62:3f:e8:05:ab:86:e4:7c:
                    df:ad:dd:60:39:45:05:e2:02:15:61:3d:27:2a:33:
                    22:7b:00:5c:76:aa:70:9d:33:68:f1:58:af:09:bc:
                    ea:f8:7a:a8:cd:fb:9c:75:c4:98:4a:28:6c:79:26:
                    3b:2b:14:03:c4:56:33:be:98:84:3a:7e:3c:05:d3:
                    06:be:91:aa:ac:79:99:99:b4:d2:8c:2d:45:dc:fd:
                    cf:04:46:a5:a5:ba:8a:a2:fc:37:11:65:b6:33:75:
                    16:97:76:c0:29:31:4e:fc:c7:e4:fd:dc:55:f6:0a:
                    16:6e:ba:cd:5f:51:1b:cb:86:b1:68:aa:8a:47:94:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A0:55:EF:A8:6D:13:2E:FD:90:6B:7F:F3:FB:4E:9B:14:89:C3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/65bb119c-68c4-3b86-a5b3-a712e6b21492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl

            X509v3 Authority Key Identifier:
                keyid:89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa0b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:30:48:5b:dd:76:77:91:11:e1:bc:c8:8c:b9:6c:1b:80:
         4c:13:e8:d2:ba:cf:4b:8b:a6:e5:8a:79:21:2b:55:98:7e:cd:
         94:c2:1e:d2:a8:7c:bc:66:34:39:54:cd:22:18:d5:5b:89:1a:
         1e:9a:81:8e:b8:c0:90:4a:5f:bf:1c:19:6c:4e:75:a5:49:60:
         f1:83:c0:1d:19:f7:0c:21:d5:26:42:ba:e8:71:bd:ca:b1:d3:
         17:16:71:6a:34:93:5b:f7:72:1c:7d:f9:63:c0:13:25:64:52:
         b3:72:a6:53:0d:12:08:c3:2f:71:54:40:73:63:4e:76:cf:61:
         03:ca:1d:20:c7:95:9e:84:44:06:37:ed:2b:73:52:e8:97:b5:
         92:5c:4d:58:93:22:fc:83:f7:2d:1b:12:17:a3:51:eb:75:79:
         87:28:f9:58:52:06:31:99:f6:40:95:45:a0:c9:35:23:5d:2e:
         5a:5a:82:8a:ab:bb:54:18:ca:e3:4d:71:79:fc:c5:7b:a7:fa:
         88:b6:b4:d5:76:43:cf:46:96:8c:d7:60:4b:61:a6:e7:7e:a2:
         9b:11:01:1a:d4:0a:db:56:57:e2:b0:70:81:60:52:e5:d2:e3:
         ea:a4:09:63:56:d7:98:29:95:8a:8f:92:83:45:d7:e1:b7:94:
         07:52:28:02
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnnul31LWl5g61V74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzU2MDA0ZTQtZGRjYS00NWIzLWJmNzYtODk3NjFjODM2
OWZkMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
ODBjMDlkMGQtZTIzOS00NDdhLWE4MDctNmFiZGZkN2FiODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOShxac+F75WyxCOqE46bbYuPu1vwJmO5Crt
1fuSk8Lb9RJ8tfgjW8eZz4TeMHS0KGGAvn3gyHZoTDKcMU9lBsyBuwq8iaShZHRl
DVfJ3RJtXizdGIFy4L9r6Kdn1/oPiHMyyVqqO8vHH+VtSUBBAnoK0/z5qm1sEu4d
6af6Yj/oBauG5Hzfrd1gOUUF4gIVYT0nKjMiewBcdqpwnTNo8VivCbzq+Hqozfuc
dcSYSihseSY7KxQDxFYzvpiEOn48BdMGvpGqrHmZmbTSjC1F3P3PBEalpbqKovw3
EWW2M3UWl3bAKTFO/Mfk/dxV9goWbrrNX1Eby4axaKqKR5Q5pQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLKgVe+obRMu/ZBrf/P7TpsUicNxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NTYw
MDRlNC1kZGNhLTQ1YjMtYmY3Ni04OTc2MWM4MzY5ZmQvNjViYjExOWMtNjhjNC0z
Yjg2LWE1YjMtYTcxMmU2YjIxNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzU2MDA0ZTQtZGRjYS00NWIzLWJm
NzYtODk3NjFjODM2OWZkLzc1NjAwNGU0LWRkY2EtNDViMy1iZjc2LTg5NzYxYzgz
NjlmZC5jcmwwHwYDVR0jBBgwFoAUiTibcRBjsvRcO2v+P9cJm9M+rykwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NTYwMDRlNC1kZGNhLTQ1YjMtYmY3Ni04OTc2
MWM4MzY5ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6CwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAA/gwSFvddneREeG8yIy5bBuATBPo0rrPS4um5Yp5IStVmH7NlMIe
0qh8vGY0OVTNIhjVW4kaHpqBjrjAkEpfvxwZbE51pUlg8YPAHRn3DCHVJkK66HG9
yrHTFxZxajSTW/dyHH35Y8ATJWRSs3KmUw0SCMMvcVRAc2NOds9hA8odIMeVnoRE
BjftK3NS6Je1klxNWJMi/IP3LRsSF6NR63V5hyj5WFIGMZn2QJVFoMk1I10uWlqC
iqu7VBjK401xefzFe6f6iLa01XZDz0aWjNdgS2Gm536imxEBGtQK21ZX4rBwgWBS
5dLj6qQJY1bXmCmVio+Sg0XX4beUB1IoAg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:13:20 2025 by rpki-client