Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa
File:                     8f5ea83f-dd82-349a-b701-754f1bf41217.roa (raw, json)
Hash identifier:          /1ESt7u7F4zo5FLEpeAMoIY6MaBET7zN6hUBz9E9MmE=
Subject key identifier:   79:F0:88:61:53:7F:3B:5D:15:51:76:A8:EF:A6:48:78:93:0E:B3:4F
Certificate issuer:       /CN=6ad8d02c-4049-4deb-a840-4229a7010c02
Certificate serial:       010D0C9F432858495ABEE6CABF61E630EEDE0680
Authority key identifier: 74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     395544
IP address blocks:        2602:fb14::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e6:ca:bf:61:e6:30:ee:de:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad8d02c-4049-4deb-a840-4229a7010c02
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=8e17a1c0-a5c4-4a68-a7e6-6ea9a08259db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:b3:1e:cd:3d:34:72:aa:37:e1:1d:16:f4:
                    dd:1c:c3:11:e9:07:b0:9d:12:54:3b:87:59:75:66:
                    87:ec:0a:02:a7:ea:3a:6a:25:6b:bf:31:50:62:f7:
                    2a:ac:6b:5f:71:49:c9:e1:38:de:57:bb:00:11:18:
                    27:ee:66:70:ce:c8:da:d9:dd:99:c0:ca:8e:12:84:
                    ce:8a:79:36:20:aa:4f:43:d7:31:2a:10:ab:c9:78:
                    64:5f:7f:17:ec:e4:ed:72:63:2b:7f:78:88:9a:86:
                    0b:be:02:09:a2:4f:1c:ea:1b:1f:bd:4d:6b:f1:f4:
                    47:f9:e2:bc:26:d1:dd:42:93:58:b7:71:93:b6:43:
                    c2:cc:f0:fb:f0:0d:71:ff:6d:bd:ed:ae:39:a5:4b:
                    02:44:f0:b1:de:e5:60:51:23:ea:5d:20:21:44:ca:
                    d6:e1:c5:cd:04:f2:56:72:69:f1:31:70:db:87:db:
                    02:67:53:7f:af:9b:d4:51:84:ba:50:13:51:ec:b0:
                    36:3a:72:3d:70:55:07:d6:23:74:cf:69:4c:5b:75:
                    38:28:e0:f7:d7:93:30:c7:9c:ff:44:15:ff:44:5b:
                    70:b2:70:cf:e0:be:c3:1c:79:82:5e:2f:b0:46:da:
                    06:9c:a5:04:9a:61:fa:5d:16:7b:fc:a0:6c:8d:9a:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F0:88:61:53:7F:3B:5D:15:51:76:A8:EF:A6:48:78:93:0E:B3:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl

            X509v3 Authority Key Identifier:
                keyid:74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb14::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5f:8b:4c:2b:e6:c6:6f:d0:1f:1c:8d:83:3c:b3:a4:54:57:
         52:8c:46:fa:b5:86:28:31:70:50:e6:ec:a8:3b:d2:72:50:50:
         78:f9:53:fc:7b:35:79:2b:a7:cf:f8:fc:7c:31:39:28:05:c6:
         cf:75:1b:90:81:06:74:82:2d:f5:bb:c6:c5:41:94:10:e1:02:
         f0:5d:2a:23:b3:4a:65:b6:d7:93:ba:ef:4a:b7:75:30:13:17:
         30:f3:1f:34:7e:b1:8f:69:c1:9f:cb:7c:44:a2:09:e8:5d:5f:
         2a:31:40:37:ad:a9:24:15:95:37:00:9b:10:db:4d:8d:a4:68:
         cc:ba:a7:74:78:74:d3:53:db:33:b0:45:a6:57:e2:a6:ef:30:
         94:13:11:ef:f1:e7:2f:da:93:48:f8:f0:57:20:a0:f4:ad:b5:
         f9:e3:ec:23:bb:1b:06:50:c5:98:32:83:f8:af:6c:7e:21:51:
         c0:20:af:4f:03:44:5d:0b:9d:41:7d:d1:6b:a3:07:8c:e1:93:
         49:be:0d:cd:0e:7d:23:b4:44:de:e0:bb:8a:58:7c:a7:35:bc:
         41:37:83:1c:18:3b:84:77:e1:0a:aa:e8:eb:e2:d5:31:aa:61:
         df:bb:d8:7f:cd:52:84:97:82:dd:de:ae:7a:04:e0:3d:f9:98:
         2e:27:f4:12
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElavubKv2HmMO7eBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmFkOGQwMmMtNDA0OS00ZGViLWE4NDAtNDIyOWE3MDEw
YzAyMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
OGUxN2ExYzAtYTVjNC00YTY4LWE3ZTYtNmVhOWEwODI1OWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxezHs09NHKqN+EdFvTdHMMR6QewnRJUO4dZ
dWaH7AoCp+o6aiVrvzFQYvcqrGtfcUnJ4TjeV7sAERgn7mZwzsja2d2ZwMqOEoTO
ink2IKpPQ9cxKhCryXhkX38X7OTtcmMrf3iImoYLvgIJok8c6hsfvU1r8fRH+eK8
JtHdQpNYt3GTtkPCzPD78A1x/2297a45pUsCRPCx3uVgUSPqXSAhRMrW4cXNBPJW
cmnxMXDbh9sCZ1N/r5vUUYS6UBNR7LA2OnI9cFUH1iN0z2lMW3U4KOD315Mwx5z/
RBX/RFtwsnDP4L7DHHmCXi+wRtoGnKUEmmH6XRZ7/KBsjZp5oQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHnwiGFTfztdFVF2qO+mSHiTDrNPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YWQ4
ZDAyYy00MDQ5LTRkZWItYTg0MC00MjI5YTcwMTBjMDIvOGY1ZWE4M2YtZGQ4Mi0z
NDlhLWI3MDEtNzU0ZjFiZjQxMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmFkOGQwMmMtNDA0OS00ZGViLWE4
NDAtNDIyOWE3MDEwYzAyLzZhZDhkMDJjLTQwNDktNGRlYi1hODQwLTQyMjlhNzAx
MGMwMi5jcmwwHwYDVR0jBBgwFoAUdPoztfg16lsIdhAEmWG4Z2htUdMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YWQ4ZDAyYy00MDQ5LTRkZWItYTg0MC00MjI5
YTcwMTBjMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7FAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZl+LTCvmxm/QHxyNgzyzpFRXUoxG+rWGKDFwUObsqDvSclBQePlT
/Hs1eSunz/j8fDE5KAXGz3UbkIEGdIIt9bvGxUGUEOEC8F0qI7NKZbbXk7rvSrd1
MBMXMPMfNH6xj2nBn8t8RKIJ6F1fKjFAN62pJBWVNwCbENtNjaRozLqndHh001Pb
M7BFplfipu8wlBMR7/HnL9qTSPjwVyCg9K21+ePsI7sbBlDFmDKD+K9sfiFRwCCv
TwNEXQudQX3Ra6MHjOGTSb4NzQ59I7RE3uC7ilh8pzW8QTeDHBg7hHfhCqro6+LV
Maph37vYf81ShJeC3d6uegTgPfmYLif0Eg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:37:11 2025 by rpki-client