Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/31248d0a-d319-3cba-927d-bd309e4d067b.roa
File:                     31248d0a-d319-3cba-927d-bd309e4d067b.roa (raw, json)
Hash identifier:          LOFJGTK1Mgyqjt4br9LdbqjtQVETNR5DQL1IFpp/JDY=
Subject key identifier:   DC:B4:2E:11:6C:8C:23:3C:EE:8D:8A:3D:07:DA:10:53:A4:23:3E:C6
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F4328584A74B5DA3E62A1117069177080
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/31248d0a-d319-3cba-927d-bd309e4d067b.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     56328
IP address blocks:        2602:fcff:10::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:da:3e:62:a1:11:70:69:17:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=bf4191bb-3b41-4c0e-b6c0-0d5406043f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:83:b2:a3:65:ce:f7:28:0a:29:86:56:0d:30:
                    3e:84:3a:ea:af:ef:cb:b7:8c:1e:64:fa:c8:1c:25:
                    c0:03:77:a3:7e:b2:64:51:ef:8b:7f:4f:b3:b7:8c:
                    9d:cc:7b:86:67:f0:06:1e:66:ee:12:85:c6:4c:30:
                    10:81:7d:18:02:b4:34:9a:d0:ff:30:29:14:c0:72:
                    d9:db:7d:70:19:99:9a:57:a0:59:f2:0c:8a:dc:a1:
                    f4:d0:8f:6d:01:a9:25:06:41:59:41:54:11:77:8c:
                    29:99:b8:0c:75:27:78:99:ec:c1:0b:c3:4e:78:6c:
                    c5:57:d6:98:b9:21:72:d2:dc:80:17:4e:85:ea:4d:
                    05:6c:99:fe:db:f2:ee:04:b9:60:c2:2f:fd:eb:4b:
                    89:65:e3:12:7f:ff:fb:aa:fd:1e:23:db:84:ac:3a:
                    8c:32:01:d2:32:1a:ab:d9:d0:54:d2:42:4c:e9:e1:
                    7a:63:e1:54:7f:ff:c4:6a:d9:3c:8c:70:1a:46:f7:
                    f7:82:86:d0:3d:6c:1a:97:46:6c:27:22:37:61:00:
                    aa:61:47:b6:ec:6b:b3:bd:70:82:a7:62:f4:ae:fc:
                    5d:0b:05:0e:4e:3c:8e:ca:30:82:d8:35:29:96:30:
                    cd:d3:70:11:32:3a:00:8a:5b:db:02:ba:d4:db:9c:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:2E:11:6C:8C:23:3C:EE:8D:8A:3D:07:DA:10:53:A4:23:3E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/31248d0a-d319-3cba-927d-bd309e4d067b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcff:10::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:37:be:ea:8b:68:ef:e8:c6:7a:fa:1d:cf:3d:2f:99:1c:
         3a:45:63:01:3f:f3:54:86:e2:8c:6f:07:b2:e6:10:63:8c:5d:
         01:a2:76:cd:56:fd:fa:34:4f:0c:9f:1d:b9:fd:bb:4f:83:d2:
         d0:aa:cd:fe:5a:99:7e:f1:c1:97:f9:f7:bb:94:f5:43:c1:d8:
         7b:4e:78:ab:d6:ed:16:56:ea:07:2d:9a:b6:be:4d:80:3c:e2:
         41:b7:52:7e:9f:c6:45:cf:e2:27:1b:98:93:23:5b:a5:5f:77:
         dc:08:c8:38:43:df:b3:9a:75:6e:cb:58:b3:1b:f2:b2:cb:79:
         c2:4f:d6:b2:84:cf:1a:f7:56:03:df:e8:94:ec:b1:8d:3f:c4:
         4d:b3:41:af:88:bf:99:bb:2b:09:5b:ff:4d:de:ac:98:c9:25:
         1b:bf:24:9b:f0:93:7b:63:ca:8e:6d:b0:10:33:b5:68:81:a0:
         b8:0e:54:73:c5:dc:d4:cd:cb:b2:10:ba:cd:f0:73:f5:03:28:
         e5:0c:49:e8:3c:e2:78:ec:a8:6a:ae:a7:c9:4e:2e:71:2b:f4:
         46:88:a9:34:75:c5:c8:b9:00:81:bf:ea:26:c9:fb:b8:e0:d3:
         7a:56:30:b2:4f:9a:7e:82:b0:81:46:b4:da:a3:e7:cb:83:0d:
         6f:18:30:88
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp0tdo+YqERcGkXcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5
ZmUwMB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
YmY0MTkxYmItM2I0MS00YzBlLWI2YzAtMGQ1NDA2MDQzZjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoOyo2XO9ygKKYZWDTA+hDrqr+/Lt4weZPrI
HCXAA3ejfrJkUe+Lf0+zt4ydzHuGZ/AGHmbuEoXGTDAQgX0YArQ0mtD/MCkUwHLZ
231wGZmaV6BZ8gyK3KH00I9tAaklBkFZQVQRd4wpmbgMdSd4mezBC8NOeGzFV9aY
uSFy0tyAF06F6k0FbJn+2/LuBLlgwi/960uJZeMSf//7qv0eI9uErDqMMgHSMhqr
2dBU0kJM6eF6Y+FUf//Eatk8jHAaRvf3gobQPWwal0ZsJyI3YQCqYUe27GuzvXCC
p2L0rvxdCwUOTjyOyjCC2DUpljDN03ARMjoAilvbArrU25yBJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNy0LhFsjCM87o2KPQfaEFOkIz7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1
NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvMzEyNDhkMGEtZDMxOS0z
Y2JhLTkyN2QtYmQzMDllNGQwNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz
YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1
OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh
ZmMwNTlmZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL8/wAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHS3N77qi2jv6MZ6+h3PPS+ZHDpFYwE/81SG4oxvB7LmEGOMXQGi
ds1W/fo0TwyfHbn9u0+D0tCqzf5amX7xwZf597uU9UPB2HtOeKvW7RZW6gctmra+
TYA84kG3Un6fxkXP4icbmJMjW6Vfd9wIyDhD37OadW7LWLMb8rLLecJP1rKEzxr3
VgPf6JTssY0/xE2zQa+Iv5m7Kwlb/03erJjJJRu/JJvwk3tjyo5tsBAztWiBoLgO
VHPF3NTNy7IQus3wc/UDKOUMSeg84njsqGqup8lOLnEr9EaIqTR1xci5AIG/6ibJ
+7jg03pWMLJPmn6CsIFGtNqj58uDDW8YMIg=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:55:05 2025 by rpki-client