Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa
File:                     30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa (raw, json)
Hash identifier:          Gv2Iji3hsla4QUJxjMWqzdsp07LqvSbxeajMEypX6jY=
Subject key identifier:   4F:6C:7B:7D:32:33:ED:F0:93:AF:BE:85:EA:8C:2E:3B:61:83:78:3A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285849C4D4CD9401CD82F77203AB80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     8075
IP address blocks:        2602:fd5e:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cd:94:01:cd:82:f7:72:03:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=a14f3cf8-7ad3-48ab-84f0-bc5a2688ddbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:dd:0a:33:fa:99:db:2b:d3:39:db:21:5f:
                    0c:bf:4a:1f:9b:1d:4d:a6:f0:5b:7d:0f:b4:31:b9:
                    ff:22:b8:aa:41:89:07:00:56:79:76:d0:2e:a0:5a:
                    7e:c8:bf:4e:b1:36:aa:55:e8:76:74:2a:bd:b4:21:
                    91:74:22:b9:51:fc:78:c3:f0:43:ff:a4:e1:8c:e8:
                    65:7f:f4:3d:7c:16:e7:a8:f3:cf:5b:83:ed:4d:34:
                    66:a7:b5:fd:c2:51:34:30:7d:da:a4:97:33:08:65:
                    72:9e:4d:70:14:d9:98:0d:f9:f9:ee:2a:5a:63:79:
                    2a:c3:ec:df:ae:cc:b8:ff:ab:54:ee:5e:e2:7f:50:
                    19:c7:ac:d7:bd:20:7b:4c:bd:0f:ef:99:2a:e1:44:
                    8b:50:36:ae:be:c3:3b:30:f5:24:e5:22:5b:54:73:
                    4d:72:43:97:f8:21:2c:23:d4:da:b5:1f:9a:46:38:
                    6c:37:79:4e:0b:64:b7:24:77:8e:35:94:16:81:32:
                    f7:48:48:07:79:e2:c3:cf:90:ce:e3:68:2d:dd:0a:
                    01:92:c7:52:b9:89:6d:98:a6:ac:2b:e6:e7:93:6e:
                    f6:8c:eb:84:3f:f3:db:46:88:72:2b:74:6f:ce:e3:
                    13:b2:55:ac:97:22:45:ce:78:04:98:b0:60:33:9a:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:7B:7D:32:33:ED:F0:93:AF:BE:85:EA:8C:2E:3B:61:83:78:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd5e:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:63:58:ab:ab:7f:bd:2c:bc:e8:ec:7c:33:cc:ae:09:a2:e4:
         ed:20:3d:de:5c:e2:89:6a:da:12:24:7f:e9:ca:49:f6:4a:46:
         c1:96:51:e0:73:e0:10:8b:06:3f:79:89:c4:43:94:f3:13:35:
         86:db:4f:db:1a:4f:ea:43:06:8f:94:d1:49:d5:8f:7d:c2:59:
         28:28:b9:4a:ce:3f:79:2b:4c:1e:9a:e3:24:40:4c:30:8e:99:
         a8:e4:f2:be:e9:a4:29:09:40:2c:21:22:27:5f:4c:f6:d8:05:
         8c:e1:ab:a8:f1:7e:96:eb:61:0e:52:8a:e7:f0:d2:86:de:ad:
         b5:24:14:56:24:83:ce:43:d4:2f:0c:4c:ce:09:57:3b:61:a5:
         d8:8f:b5:e1:74:e9:9f:34:2b:aa:a1:7d:9f:9a:9c:15:53:71:
         e1:55:59:5c:1f:8f:c7:d8:01:ee:b1:a4:18:27:1c:01:90:8a:
         e9:19:8e:b1:1a:be:b5:e1:de:87:9f:a5:0b:62:18:7d:e6:ae:
         a8:34:b7:17:40:92:ac:4d:21:cf:ef:e8:18:a3:e9:0e:d4:ff:
         72:75:31:c5:54:96:35:3b:cf:f7:de:09:55:e8:0d:fc:f2:85:
         3f:64:a7:a7:ee:e9:75:35:09:eb:09:96:83:a0:c4:62:68:d0:
         76:10:02:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnE1M2UAc2C93IDq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
YTE0ZjNjZjgtN2FkMy00OGFiLTg0ZjAtYmM1YTI2ODhkZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZzdCjP6mdsr0znbIV8Mv0ofmx1NpvBbfQ+0
Mbn/IriqQYkHAFZ5dtAuoFp+yL9OsTaqVeh2dCq9tCGRdCK5Ufx4w/BD/6ThjOhl
f/Q9fBbnqPPPW4PtTTRmp7X9wlE0MH3apJczCGVynk1wFNmYDfn57ipaY3kqw+zf
rsy4/6tU7l7if1AZx6zXvSB7TL0P75kq4USLUDauvsM7MPUk5SJbVHNNckOX+CEs
I9TatR+aRjhsN3lOC2S3JHeONZQWgTL3SEgHeeLDz5DO42gt3QoBksdSuYltmKas
K+bnk272jOuEP/PbRohyK3RvzuMTslWslyJFzngEmLBgM5oEawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE9se30yM+3wk6++heqMLjthg3g6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzBiMzU5YmEtYmM5Yy0z
ZDBlLTkwZTYtNzE3NTFiZTlkMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9XgAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG9jWKurf70svOjsfDPMrgmi5O0gPd5c4olq2hIkf+nKSfZKRsGW
UeBz4BCLBj95icRDlPMTNYbbT9saT+pDBo+U0UnVj33CWSgouUrOP3krTB6a4yRA
TDCOmajk8r7ppCkJQCwhIidfTPbYBYzhq6jxfpbrYQ5Siufw0oberbUkFFYkg85D
1C8MTM4JVzthpdiPteF06Z80K6qhfZ+anBVTceFVWVwfj8fYAe6xpBgnHAGQiukZ
jrEavrXh3oefpQtiGH3mrqg0txdAkqxNIc/v6Bij6Q7U/3J1McVUljU7z/feCVXo
DfzyhT9kp6fu6XU1CesJloOgxGJo0HYQAv0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:07:38 2025 by rpki-client