Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bdf40ea5-bc80-30cd-8512-a48042bc0fcb.roa
File:                     bdf40ea5-bc80-30cd-8512-a48042bc0fcb.roa (raw, json)
Hash identifier:          dtJp1WkwFi36SEgSwPMyS80g6xfhUOZovjBeHJQEJEI=
Subject key identifier:   69:01:66:AC:4C:53:83:C2:68:37:82:2A:A5:9B:1D:CA:82:D0:6F:30
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14657B9A34A00E3774521600
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bdf40ea5-bc80-30cd-8512-a48042bc0fcb.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:20bb::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7b:9a:34:a0:0e:37:74:52:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=cc7b9b74-4b7a-4224-983d-dff9af82b3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:5e:95:ee:e4:4a:c2:df:cb:ad:96:f7:be:
                    35:95:73:7f:96:ed:76:41:ce:2f:b4:b5:f6:50:78:
                    f8:c7:33:4d:18:e4:d6:23:20:df:a4:ba:33:aa:b9:
                    5f:68:10:0d:bd:b2:21:27:de:32:0e:c8:d6:e3:c0:
                    84:11:47:51:85:1a:1f:01:06:51:ef:d8:1f:50:69:
                    c6:2b:0a:2d:1f:41:cc:3d:5e:c2:47:5b:13:90:e5:
                    3f:85:be:ee:ef:0a:1a:97:55:81:ff:94:41:23:e6:
                    17:70:6b:c8:3b:5f:e2:33:b7:1c:ed:a3:bb:ca:72:
                    74:08:04:9c:23:48:b9:7e:b8:59:fc:f5:86:1a:7c:
                    e1:ee:27:66:70:ed:b5:ab:bb:bc:24:ee:eb:4d:d0:
                    d7:e6:c9:34:45:b3:64:85:2e:ef:f5:4b:b3:04:9a:
                    5d:03:24:a4:77:95:c9:3e:bf:0a:4a:55:4d:51:a3:
                    08:26:37:3e:b8:fb:2f:04:99:b3:1f:ba:f8:de:32:
                    ba:4e:df:9d:be:2a:3d:53:0e:a9:c7:d4:48:51:d6:
                    4a:3b:cf:1e:b0:a6:c5:03:60:cf:a6:4e:85:32:fa:
                    15:e5:2e:97:96:93:6e:9d:52:41:41:c4:fa:e1:b4:
                    36:9e:02:29:92:ac:e7:ec:03:a4:f8:17:6a:9d:05:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:01:66:AC:4C:53:83:C2:68:37:82:2A:A5:9B:1D:CA:82:D0:6F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bdf40ea5-bc80-30cd-8512-a48042bc0fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:ff:2d:5b:d2:5c:db:d0:3b:f9:ae:c2:47:a4:60:b2:c9:
         36:f2:2a:52:77:85:59:72:ba:6a:a8:8c:d4:12:f0:b4:d4:8a:
         79:42:ca:16:58:38:8b:a5:4a:a3:d7:c1:7b:33:d8:17:fe:be:
         d7:dc:ac:f9:5c:75:dd:aa:3b:a4:f4:dc:66:f1:80:73:4a:42:
         cf:30:13:d9:c6:3f:a0:71:47:23:4b:56:aa:94:bc:ac:b2:92:
         b2:28:dc:8c:6f:d0:2f:38:b8:3a:59:2a:b1:59:57:35:57:95:
         37:a8:6a:01:cd:37:63:40:68:8f:62:7a:41:c1:87:ab:a1:15:
         8a:95:9d:14:e0:ab:62:3d:6b:af:c7:78:20:29:6c:5c:3e:52:
         9a:66:82:e2:52:2d:1f:d5:34:d3:a5:f5:e3:bd:51:fd:53:06:
         98:7d:c8:03:a2:1f:82:69:43:58:cd:9d:58:11:b1:1c:ee:02:
         58:e4:bf:ad:3c:51:6f:56:04:20:a0:7b:00:75:cd:7d:2e:3e:
         f3:bc:98:88:9f:01:95:45:2c:30:6e:be:61:ee:ea:65:a2:39:
         e7:7a:c4:a4:45:d3:e0:47:a1:ab:5d:ef:30:61:42:cd:dc:b3:
         1a:78:d0:77:d2:d8:87:20:b8:ea:35:7f:5c:b2:ad:01:c3:c5:
         2c:35:b4:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZXuaNKAON3RSFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
Y2M3YjliNzQtNGI3YS00MjI0LTk4M2QtZGZmOWFmODJiM2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/dele7kSsLfy62W9741lXN/lu12Qc4vtLX2
UHj4xzNNGOTWIyDfpLozqrlfaBANvbIhJ94yDsjW48CEEUdRhRofAQZR79gfUGnG
KwotH0HMPV7CR1sTkOU/hb7u7woal1WB/5RBI+YXcGvIO1/iM7cc7aO7ynJ0CASc
I0i5frhZ/PWGGnzh7idmcO21q7u8JO7rTdDX5sk0RbNkhS7v9UuzBJpdAySkd5XJ
Pr8KSlVNUaMIJjc+uPsvBJmzH7r43jK6Tt+dvio9Uw6px9RIUdZKO88esKbFA2DP
pk6FMvoV5S6XlpNunVJBQcT64bQ2ngIpkqzn7AOk+BdqnQWlBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGkBZqxMU4PCaDeCKqWbHcqC0G8wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvYmRmNDBlYTUtYmM4MC0z
MGNkLTg1MTItYTQ4MDQyYmMwZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCC7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAjP/y1b0lzb0Dv5rsJHpGCyyTbyKlJ3hVlyumqojNQS8LTUinlC
yhZYOIulSqPXwXsz2Bf+vtfcrPlcdd2qO6T03GbxgHNKQs8wE9nGP6BxRyNLVqqU
vKyykrIo3Ixv0C84uDpZKrFZVzVXlTeoagHNN2NAaI9iekHBh6uhFYqVnRTgq2I9
a6/HeCApbFw+UppmguJSLR/VNNOl9eO9Uf1TBph9yAOiH4JpQ1jNnVgRsRzuAljk
v608UW9WBCCgewB1zX0uPvO8mIifAZVFLDBuvmHu6mWiOed6xKRF0+BHoatd7zBh
Qs3csxp40HfS2IcguOo1f1yyrQHDxSw1tCc=
-----END CERTIFICATE-----
Generated at Thu Jun 12 07:58:25 2025 by rpki-client