Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa
File:                     602bdbad-4add-3c5e-b46e-9417aedc7e02.roa (raw, json)
Hash identifier:          xFrly4PJtldl5O4pH/5AynfB7WFKHND6RYffMFJFmPQ=
Subject key identifier:   09:B2:8D:7C:B6:EE:52:77:BA:FF:DE:5B:2E:8E:0D:B4:71:D7:2B:62
Certificate issuer:       /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
Certificate serial:       010D0C9F43285848E59BD252EA9035A0E2DEB468
Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     401190
IP address blocks:        2620:14:2000:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d2:52:ea:90:35:a0:e2:de:b4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=520a36dc-106f-4fc9-b834-d69658bea2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:a6:22:e6:83:2d:28:9f:8d:00:6e:87:d9:
                    7c:de:56:85:a6:e2:0f:08:8d:8d:14:f3:a9:03:5e:
                    9e:7e:95:0b:54:b2:6a:75:88:d2:e7:86:85:0c:12:
                    36:5d:43:02:4f:92:df:5f:66:1c:39:0c:2f:cb:f0:
                    b1:77:98:19:a3:0a:b8:ef:58:55:a1:55:e4:ed:96:
                    a0:99:4d:19:e6:d1:86:bf:bd:b5:16:7b:f7:12:4c:
                    e6:da:a4:33:cf:7a:8a:18:ae:c9:1b:0f:14:c0:a7:
                    44:b4:f7:bb:55:94:aa:62:cf:bc:ef:36:b8:78:30:
                    10:9e:e8:c7:57:f4:8d:5e:6a:1b:d5:b7:c5:07:a5:
                    5a:e8:90:29:b0:36:b3:14:96:03:08:87:ef:46:ad:
                    2f:d8:ca:5d:3f:f2:9f:7f:38:67:29:6c:3a:e7:c1:
                    3e:b7:71:fd:03:33:37:bb:12:58:dd:d6:82:91:88:
                    65:6a:ee:39:07:97:a3:b3:1a:37:7a:7d:35:42:eb:
                    08:a0:20:05:47:3e:c6:f5:dd:a9:fa:e2:d9:64:0f:
                    58:63:c2:8e:67:05:28:23:80:ba:11:29:7a:0a:a5:
                    13:45:6d:2c:99:ba:33:da:b3:97:9f:ee:6f:73:fc:
                    f0:f2:7a:75:f4:33:57:c7:03:de:d1:fc:a8:ce:71:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B2:8D:7C:B6:EE:52:77:BA:FF:DE:5B:2E:8E:0D:B4:71:D7:2B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl

            X509v3 Authority Key Identifier:
                keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:14:2000:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:91:62:1b:b8:11:6e:8f:cc:55:40:5d:79:ab:60:c8:06:
         e1:09:97:59:c2:f5:e2:4e:04:79:63:94:dd:c9:ef:d6:be:be:
         31:f7:5c:2f:ea:bc:b4:d4:85:19:52:7f:be:fc:c7:6f:2d:87:
         cf:2c:0d:33:fe:a4:1e:ca:b6:51:e8:49:1a:f9:a3:f3:c9:82:
         4c:2b:3a:70:bd:91:a4:59:92:1a:1f:1c:13:ed:ee:20:1f:5b:
         a3:2a:b9:d9:e3:45:65:f0:80:63:91:a7:d6:5a:bb:d8:ed:50:
         81:a7:20:c9:b5:79:9f:18:7d:b5:17:be:53:84:fd:2c:b3:c7:
         4c:58:21:e2:5f:1d:96:2a:3f:b8:c4:f9:dd:d5:29:7d:61:9d:
         fe:f1:a2:20:09:9e:e2:da:f5:a5:ae:0b:70:3a:cf:8d:31:45:
         ff:f7:e3:11:96:df:f7:5f:89:e8:b7:c9:69:cd:5b:af:5f:07:
         ad:c4:e0:1a:98:d4:d2:d3:dd:c7:6d:33:2c:b9:77:c0:90:c3:
         ef:ff:49:33:24:b6:37:25:bd:27:11:e2:22:fe:6c:40:53:ff:
         93:d4:13:3c:f2:a9:4d:bc:c1:0f:ba:a6:64:df:17:66:07:c4:
         f6:f0:6f:4f:3a:c6:01:37:ab:d9:8d:0f:72:a9:a1:9b:b1:12:
         f6:f7:f9:f1
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEjlm9JS6pA1oOLetGgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTlmNWM3NjctNWIxZi00YTg1LThmMDUtOTgwYjU4NWZh
MmI0MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
NTIwYTM2ZGMtMTA2Zi00ZmM5LWI4MzQtZDY5NjU4YmVhMmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFKmIuaDLSifjQBuh9l83laFpuIPCI2NFPOp
A16efpULVLJqdYjS54aFDBI2XUMCT5LfX2YcOQwvy/Cxd5gZowq471hVoVXk7Zag
mU0Z5tGGv721Fnv3Ekzm2qQzz3qKGK7JGw8UwKdEtPe7VZSqYs+87za4eDAQnujH
V/SNXmob1bfFB6Va6JApsDazFJYDCIfvRq0v2MpdP/KffzhnKWw658E+t3H9AzM3
uxJY3daCkYhlau45B5ejsxo3en01QusIoCAFRz7G9d2p+uLZZA9YY8KOZwUoI4C6
ESl6CqUTRW0smboz2rOXn+5vc/zw8np19DNXxwPe0fyoznESiwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAmyjXy27lJ3uv/eWy6ODbRx1ytiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1
Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBiNTg1ZmEyYjQvNjAyYmRiYWQtNGFkZC0z
YzVlLWI0NmUtOTQxN2FlZGM3ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTlmNWM3NjctNWIxZi00YTg1LThm
MDUtOTgwYjU4NWZhMmI0LzU5ZjVjNzY3LTViMWYtNGE4NS04ZjA1LTk4MGI1ODVm
YTJiNC5jcmwwHwYDVR0jBBgwFoAUXkkwOuJ1kpAgQPi5HRExgP9Kk20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBi
NTg1ZmEyYjQuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJiAAFCAA
AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAbHSRYhu4EW6PzFVAXXmrYMgG4QmXWcL14k4EeWOU3cnv1r6+
MfdcL+q8tNSFGVJ/vvzHby2HzywNM/6kHsq2UehJGvmj88mCTCs6cL2RpFmSGh8c
E+3uIB9boyq52eNFZfCAY5Gn1lq72O1QgacgybV5nxh9tRe+U4T9LLPHTFgh4l8d
lio/uMT53dUpfWGd/vGiIAme4tr1pa4LcDrPjTFF//fjEZbf91+J6LfJac1br18H
rcTgGpjU0tPdx20zLLl3wJDD7/9JMyS2NyW9JxHiIv5sQFP/k9QTPPKpTbzBD7qm
ZN8XZgfE9vBvTzrGATer2Y0Pcqmhm7ES9vf58Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:00 2025 by rpki-client