Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa
File:                     748d8a92-4d18-3952-bf42-80d4622f7222.roa (raw, json)
Hash identifier:          fJHk+wzFpxxNeqymLbCCxlCDBfhEIFsHE2EUQhT6Uxs=
Subject key identifier:   47:AC:16:66:11:6E:86:17:33:09:29:E2:80:AF:CA:70:1C:27:C7:7E
Certificate issuer:       /CN=61a98034-fe16-431f-9842-402073e93fa8
Certificate serial:       010D0C9F4328584A1B5FF8E7B3A8C2E554F24D38
Authority key identifier: 2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     62628
IP address blocks:        2602:80c:4000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f8:e7:b3:a8:c2:e5:54:f2:4d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a98034-fe16-431f-9842-402073e93fa8
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=a7de8e1f-1c7b-4ff1-ae04-9fcead9caa48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:5a:0d:3c:b9:21:d2:1b:8d:82:e8:25:a6:
                    7f:45:40:2c:9b:58:9e:4f:3c:2c:5d:f4:51:6c:09:
                    de:14:41:ae:40:a5:2e:d8:49:95:66:fb:e3:11:5a:
                    60:03:88:cb:fd:14:fe:2d:f7:19:97:b0:5e:d7:2d:
                    bc:0c:95:16:2b:23:8c:fa:e3:e4:1d:89:5a:b4:48:
                    70:27:e7:3b:84:c5:15:f9:49:dd:da:d4:da:82:bf:
                    6b:5f:88:6b:e2:91:24:cd:ae:ea:3d:32:1e:6a:fe:
                    d7:dd:cf:cc:e7:c9:9d:c9:8b:6e:c1:e3:45:dd:b5:
                    99:99:16:60:e8:fb:26:a7:b0:8d:94:67:2a:77:42:
                    e1:06:9c:40:81:66:05:ec:a1:af:c1:7f:7f:ff:7d:
                    d3:b5:44:f6:ed:69:da:96:41:79:58:ec:ed:f7:de:
                    b1:10:13:77:8d:1f:6c:1c:46:5b:1a:4a:9e:82:e5:
                    57:5d:cc:fc:69:b4:c6:0f:c6:cc:53:10:a3:e8:10:
                    ab:15:b7:1f:73:25:54:47:04:3d:85:93:5a:22:dd:
                    1e:25:81:bf:ae:91:40:1b:f3:ff:0a:e0:eb:30:c2:
                    0f:d9:2a:a0:c3:e1:ee:03:24:4b:27:bb:a5:c0:22:
                    77:f5:63:8e:4b:aa:85:c3:a6:ac:85:ba:7b:51:b8:
                    45:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:16:66:11:6E:86:17:33:09:29:E2:80:AF:CA:70:1C:27:C7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/748d8a92-4d18-3952-bf42-80d4622f7222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b6:b3:de:34:c9:23:d0:ea:0a:82:56:8c:62:f8:57:3f:71:
         f0:93:4f:d7:7c:3f:65:ba:4b:b3:37:8b:ac:75:e3:96:b7:77:
         e3:35:94:c2:d2:ad:38:ca:fb:15:d7:f2:14:45:93:f2:b6:ef:
         77:a6:5a:6c:ad:8f:65:f6:73:a1:b0:a9:4e:41:ad:4b:da:e5:
         d6:01:07:24:ec:50:e6:b1:46:77:2f:4f:41:a1:11:ae:cd:59:
         4e:eb:9c:97:94:39:08:76:8b:5f:7d:ac:dc:bc:4d:1d:af:e7:
         61:67:6c:70:32:af:44:f1:8e:6f:9e:f5:1d:df:4d:da:bf:41:
         68:b3:c6:9a:10:ef:e2:3b:69:8f:9f:5b:d9:7f:25:f2:bc:d1:
         af:c3:f2:82:09:ee:c6:bf:fc:3e:a4:5a:c3:17:43:26:17:d0:
         f6:65:94:9c:3a:06:14:0c:28:8f:37:e4:6b:c4:69:8b:73:28:
         66:bd:3f:6c:f1:92:be:95:9b:b0:cd:f6:17:5c:f7:c3:bd:8b:
         8b:07:bc:7c:1c:6f:05:5d:76:f7:4d:97:12:e2:51:62:27:17:
         c3:1b:cb:2c:ca:17:cf:c1:35:59:40:a8:4c:ea:d4:9d:38:35:
         64:72:87:a0:51:36:f2:ff:ff:88:73:31:f5:f9:f5:98:dd:c1:
         47:bd:11:ff
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEobX/jns6jC5VTyTTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFhOTgwMzQtZmUxNi00MzFmLTk4NDItNDAyMDczZTkz
ZmE4MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk
YTdkZThlMWYtMWM3Yi00ZmYxLWFlMDQtOWZjZWFkOWNhYTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHVaDTy5IdIbjYLoJaZ/RUAsm1ieTzwsXfRR
bAneFEGuQKUu2EmVZvvjEVpgA4jL/RT+LfcZl7Be1y28DJUWKyOM+uPkHYlatEhw
J+c7hMUV+Und2tTagr9rX4hr4pEkza7qPTIeav7X3c/M58mdyYtuweNF3bWZmRZg
6Psmp7CNlGcqd0LhBpxAgWYF7KGvwX9//33TtUT27WnalkF5WOzt996xEBN3jR9s
HEZbGkqeguVXXcz8abTGD8bMUxCj6BCrFbcfcyVURwQ9hZNaIt0eJYG/rpFAG/P/
CuDrMMIP2Sqgw+HuAyRLJ7ulwCJ39WOOS6qFw6ashbp7UbhFWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEesFmYRboYXMwkp4oCvynAcJ8d+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWE5
ODAzNC1mZTE2LTQzMWYtOTg0Mi00MDIwNzNlOTNmYTgvNzQ4ZDhhOTItNGQxOC0z
OTUyLWJmNDItODBkNDYyMmY3MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFhOTgwMzQtZmUxNi00MzFmLTk4
NDItNDAyMDczZTkzZmE4LzYxYTk4MDM0LWZlMTYtNDMxZi05ODQyLTQwMjA3M2U5
M2ZhOC5jcmwwHwYDVR0jBBgwFoAULfrMAj5Bkhwa8cX2iS8v+ntlWoYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82MWE5ODAzNC1mZTE2LTQzMWYtOTg0Mi00MDIw
NzNlOTNmYTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIDEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQbaz3jTJI9DqCoJWjGL4Vz9x8JNP13w/ZbpLszeLrHXjlrd34zWU
wtKtOMr7FdfyFEWT8rbvd6ZabK2PZfZzobCpTkGtS9rl1gEHJOxQ5rFGdy9PQaER
rs1ZTuucl5Q5CHaLX32s3LxNHa/nYWdscDKvRPGOb571Hd9N2r9BaLPGmhDv4jtp
j59b2X8l8rzRr8Pyggnuxr/8PqRawxdDJhfQ9mWUnDoGFAwojzfka8Rpi3MoZr0/
bPGSvpWbsM32F1z3w72Liwe8fBxvBV12902XEuJRYicXwxvLLMoXz8E1WUCoTOrU
nTg1ZHKHoFE28v//iHMx9fn1mN3BR70R/w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:15:14 2025 by rpki-client