Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e80a8281-996e-3968-b606-e1f5575ca221.roa
File:                     e80a8281-996e-3968-b606-e1f5575ca221.roa (raw, json)
Hash identifier:          joFfsbDRL3I4/qK6G3J8WpmjPlaoW5M/XX4PldrnUpc=
Subject key identifier:   E4:1C:CC:35:E5:84:0D:1F:9C:3B:CC:00:01:3F:5A:C4:45:12:53:88
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14656C72E8CC340B81CE0C80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e80a8281-996e-3968-b606-e1f5575ca221.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:20ac::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6c:72:e8:cc:34:0b:81:ce:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=0a2664a0-42bd-4305-abc0-e722ae33175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:19:25:6a:95:f1:db:0c:b6:23:0c:1a:86:
                    ec:59:18:90:da:63:95:a7:18:4a:51:a5:36:4b:a4:
                    fb:f5:5e:78:b4:dd:5f:22:6f:ef:98:ed:1d:77:78:
                    dd:ac:90:4c:c5:87:42:ef:3b:42:48:25:f1:bf:7c:
                    54:fa:82:05:02:31:3d:43:12:85:7a:82:f4:13:6f:
                    9b:6d:a8:95:b8:d7:1d:4e:01:ee:c9:9f:99:8d:11:
                    7f:0c:6b:1c:d5:cf:22:37:7f:0a:30:1d:b8:fe:4e:
                    28:b1:6a:3a:74:4f:bd:7c:0b:f8:67:d0:b5:7a:ef:
                    54:06:69:39:51:e8:28:50:81:7e:5f:fa:a7:9b:e7:
                    8c:00:91:4e:54:64:cf:50:46:67:4b:5c:a8:a0:d4:
                    03:1c:94:84:e7:f4:f7:81:a9:ce:07:77:62:e6:a4:
                    a0:17:dd:64:c8:4c:de:ea:9f:80:7e:a1:df:5c:2e:
                    92:28:67:6a:af:59:a9:e5:6f:70:87:0d:3a:44:8e:
                    2d:81:01:c6:b9:08:61:a1:79:60:4e:bb:54:96:db:
                    47:9b:f3:f9:20:c9:93:1b:e4:ee:b0:49:72:7e:22:
                    b6:e0:b7:7c:2f:19:37:20:97:2e:8c:9b:c4:81:50:
                    8f:e5:78:b9:0f:30:88:d2:b4:04:48:36:73:e4:1b:
                    12:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1C:CC:35:E5:84:0D:1F:9C:3B:CC:00:01:3F:5A:C4:45:12:53:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/e80a8281-996e-3968-b606-e1f5575ca221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:34:6a:08:19:cc:95:49:35:e6:de:ca:bc:ed:2c:e2:0b:50:
         29:06:60:41:44:f0:7d:de:7a:4d:02:02:29:d0:b1:cb:ea:94:
         1e:23:e8:2a:0f:5f:c9:c8:04:c6:02:6b:f0:60:da:38:68:72:
         9e:d0:5d:23:48:3f:7a:aa:75:9a:d8:20:96:d6:bb:06:75:f2:
         4e:74:21:c1:1f:71:87:a7:53:e1:8c:ec:57:59:5b:d6:35:4c:
         c4:ff:62:f3:12:f8:d3:88:f1:63:c9:d4:c4:fb:27:cb:a8:e9:
         5d:0f:25:0e:23:c6:d1:8d:2a:64:60:5e:ab:48:d6:f3:e7:11:
         c5:1f:02:31:3b:ca:7f:f7:21:66:76:1e:29:0c:7e:cc:f1:c6:
         58:7a:74:5f:61:98:bf:cc:78:44:89:55:6b:6e:d5:9d:37:c9:
         8b:af:6a:5a:4b:1b:20:10:4a:b6:15:c9:57:43:23:01:65:c3:
         0f:78:17:96:70:33:7c:f2:0a:63:32:27:46:6f:b8:d9:d9:77:
         68:e6:69:7f:5a:5c:be:a2:80:0a:ed:d8:0c:cd:e5:9b:cd:29:
         ed:e0:91:7c:36:a1:c0:b8:a6:b7:5d:5c:4f:f0:fb:41:e2:cc:
         ed:d3:9e:fe:82:1b:ed:04:e8:34:c3:ae:bb:1f:7d:d7:72:3e:
         f3:82:78:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZWxy6Mw0C4HODIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
MGEyNjY0YTAtNDJiZC00MzA1LWFiYzAtZTcyMmFlMzMxNzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjcZJWqV8dsMtiMMGobsWRiQ2mOVpxhKUaU2
S6T79V54tN1fIm/vmO0dd3jdrJBMxYdC7ztCSCXxv3xU+oIFAjE9QxKFeoL0E2+b
baiVuNcdTgHuyZ+ZjRF/DGsc1c8iN38KMB24/k4osWo6dE+9fAv4Z9C1eu9UBmk5
UegoUIF+X/qnm+eMAJFOVGTPUEZnS1yooNQDHJSE5/T3ganOB3di5qSgF91kyEze
6p+AfqHfXC6SKGdqr1mp5W9whw06RI4tgQHGuQhhoXlgTrtUlttHm/P5IMmTG+Tu
sElyfiK24Ld8Lxk3IJcujJvEgVCP5Xi5DzCI0rQESDZz5BsSjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOQczDXlhA0fnDvMAAE/WsRFElOIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZTgwYTgyODEtOTk2ZS0z
OTY4LWI2MDYtZTFmNTU3NWNhMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCCs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB40aggZzJVJNebeyrztLOILUCkGYEFE8H3eek0CAinQscvqlB4j
6CoPX8nIBMYCa/Bg2jhocp7QXSNIP3qqdZrYIJbWuwZ18k50IcEfcYenU+GM7FdZ
W9Y1TMT/YvMS+NOI8WPJ1MT7J8uo6V0PJQ4jxtGNKmRgXqtI1vPnEcUfAjE7yn/3
IWZ2HikMfszxxlh6dF9hmL/MeESJVWtu1Z03yYuvalpLGyAQSrYVyVdDIwFlww94
F5ZwM3zyCmMyJ0ZvuNnZd2jmaX9aXL6igArt2AzN5ZvNKe3gkXw2ocC4prddXE/w
+0HizO3Tnv6CG+0E6DTDrrsffddyPvOCeAk=
-----END CERTIFICATE-----
Generated at Thu Jun 12 07:59:36 2025 by rpki-client