Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
File:                     fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa (raw, json)
Hash identifier:          jXS0zZqGNbpJEvVyrG55k/wGZvnb1pTFT20RDsk3VtM=
Subject key identifier:   18:C1:AE:3A:4A:1C:F4:4A:E3:95:8F:8D:EF:50:97:B6:F7:93:6C:13
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F4328584A8410F7F3B25CB7B0C0B1EC00
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     198983
IP address blocks:        2602:fa59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f7:f3:b2:5c:b7:b0:c0:b1:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b3d3490c-5be0-4055-a3cf-808504bea128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:26:65:8a:22:b0:a4:b3:1c:bf:5b:d3:f2:
                    d2:64:a2:34:f0:fc:fa:f3:96:f6:fd:f5:1c:40:a4:
                    cd:a8:95:0e:ef:d1:0d:f4:70:92:0d:81:62:19:b4:
                    40:a4:6a:c0:04:b2:7e:19:63:9f:ac:0e:36:a6:95:
                    60:77:e7:95:3b:35:d3:89:89:e3:2d:69:a4:d5:65:
                    57:73:a9:7d:9d:f7:82:56:12:84:5f:79:dd:39:0f:
                    06:af:2b:8a:08:1e:2e:0c:c5:a2:ac:92:36:2c:7e:
                    da:26:9b:68:1d:6d:54:45:27:07:1d:88:cb:7e:e2:
                    c9:e2:2c:f7:40:ac:fc:0b:6a:1b:65:02:0e:83:0d:
                    68:37:56:cc:1e:b4:9c:2f:2b:dc:25:00:32:5e:b1:
                    31:34:fc:0f:0f:0e:1f:5e:10:c4:c4:6e:06:c9:ca:
                    53:50:5f:42:59:da:d7:dc:34:05:cd:1f:0f:e7:d9:
                    d2:f5:00:38:22:62:69:44:ac:b9:18:18:6d:2f:0b:
                    c4:23:72:18:fc:a8:07:d0:91:0b:af:2c:7e:93:cf:
                    7e:f3:5f:a5:34:14:42:5c:ee:2f:97:14:dc:b6:25:
                    03:14:7c:e4:68:1b:4f:48:21:2b:7c:85:93:31:f4:
                    dd:f2:77:bf:63:37:2c:ae:5a:7c:ba:a5:d1:76:80:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:AE:3A:4A:1C:F4:4A:E3:95:8F:8D:EF:50:97:B6:F7:93:6C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:f2:95:bf:1a:90:7a:04:04:e0:7b:ce:04:5e:a4:9a:c5:
         4d:dd:d1:9f:ab:b2:aa:95:f1:d6:1e:3b:5f:80:e2:3a:63:79:
         12:c6:49:a1:cc:bc:88:cc:2d:ba:da:00:b9:02:31:7a:ac:12:
         5d:c0:8d:a8:06:33:f9:5d:a8:d8:d0:3b:05:7a:66:df:69:f9:
         57:0c:d4:d7:d3:fb:f3:89:c7:6c:2e:fb:94:1e:f4:52:52:27:
         fc:f1:77:0c:d3:07:62:2c:18:4d:32:01:0a:c2:00:2a:6b:91:
         6a:08:93:86:c7:ce:72:07:21:75:70:36:c4:eb:44:0b:76:3e:
         a9:bb:e9:ea:22:12:71:51:eb:85:ec:d3:a4:eb:77:05:2c:e9:
         11:ec:69:df:17:ba:d5:e7:05:85:fe:9f:43:f6:14:93:b0:e8:
         8d:8f:d8:8c:96:70:17:5f:43:0d:a5:ba:b5:33:61:b4:d0:52:
         52:d3:dc:d3:af:91:c3:91:a1:18:38:0f:c7:7e:22:fb:d2:7f:
         80:6d:a0:d5:71:8a:57:af:7d:95:00:82:94:cc:b2:d7:ac:7e:
         4f:39:eb:f5:2a:2d:1f:3b:af:ca:70:4f:81:36:01:16:6f:1b:
         5f:e5:6c:56:31:2b:c0:b4:5e:2d:71:be:1d:c0:bf:92:13:08:
         b8:e8:34:bc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEEPfzsly3sMCx7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZlMTRhNzQtODMzOS00ZmExLTg4NWEtMmVkMzc5NDcz
OTlhMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YjNkMzQ5MGMtNWJlMC00MDU1LWEzY2YtODA4NTA0YmVhMTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosMmZYoisKSzHL9b0/LSZKI08Pz685b2/fUc
QKTNqJUO79EN9HCSDYFiGbRApGrABLJ+GWOfrA42ppVgd+eVOzXTiYnjLWmk1WVX
c6l9nfeCVhKEX3ndOQ8GryuKCB4uDMWirJI2LH7aJptoHW1URScHHYjLfuLJ4iz3
QKz8C2obZQIOgw1oN1bMHrScLyvcJQAyXrExNPwPDw4fXhDExG4GycpTUF9CWdrX
3DQFzR8P59nS9QA4ImJpRKy5GBhtLwvEI3IY/KgH0JELryx+k89+81+lNBRCXO4v
lxTctiUDFHzkaBtPSCErfIWTMfTd8ne/Yzcsrlp8uqXRdoAa9wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBjBrjpKHPRK45WPje9Ql7b3k2wTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZmUx
NGE3NC04MzM5LTRmYTEtODg1YS0yZWQzNzk0NzM5OWEvZmVkNmQ5M2YtOWU2NC0z
YjA1LTkyZGUtM2JkMmJiZTVjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWZlMTRhNzQtODMzOS00ZmExLTg4
NWEtMmVkMzc5NDczOTlhL2VmZTE0YTc0LTgzMzktNGZhMS04ODVhLTJlZDM3OTQ3
Mzk5YS5jcmwwHwYDVR0jBBgwFoAUxJedZ9C2K++jq54cejCwbRqIXeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lZmUxNGE3NC04MzM5LTRmYTEtODg1YS0yZWQz
Nzk0NzM5OWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6WQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfzrylb8akHoEBOB7zgRepJrFTd3Rn6uyqpXx1h47X4DiOmN5EsZJ
ocy8iMwtutoAuQIxeqwSXcCNqAYz+V2o2NA7BXpm32n5VwzU19P784nHbC77lB70
UlIn/PF3DNMHYiwYTTIBCsIAKmuRagiThsfOcgchdXA2xOtEC3Y+qbvp6iIScVHr
hezTpOt3BSzpEexp3xe61ecFhf6fQ/YUk7DojY/YjJZwF19DDaW6tTNhtNBSUtPc
06+Rw5GhGDgPx34i+9J/gG2g1XGKV699lQCClMyy16x+Tznr9SotHzuvynBPgTYB
Fm8bX+VsVjErwLReLXG+HcC/khMIuOg0vA==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:22:56 2025 by rpki-client