Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/f0141d0f-2c85-3993-9653-e2714da05395.roa
File:                     f0141d0f-2c85-3993-9653-e2714da05395.roa (raw, json)
Hash identifier:          ECVO7bVRyyFlCU5GqWLkk3BA1jn3vqWmOy3o+UPJtlU=
Subject key identifier:   4B:23:BE:54:B6:DC:DC:B2:36:87:86:5E:08:2C:B2:3D:19:D7:89:C9
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F4328584A120C569B8EA2EEA15AF9F880
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/f0141d0f-2c85-3993-9653-e2714da05395.roa
Signing time:             Tue 03 Jun 2025 16:50:10 +0000
ROA not before:           Tue 03 Jun 2025 16:50:10 +0000
ROA not after:            Mon 01 Sep 2025 16:50:10 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:0c:56:9b:8e:a2:ee:a1:5a:f9:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: Jun  3 16:50:10 2025 GMT
            Not After : Sep  1 16:50:10 2025 GMT
        Subject: CN=4f7ab927-c9f3-4d66-98ba-1ac2f193565c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:ec:1b:d1:ba:46:a7:c3:43:26:e3:3b:cd:
                    0a:e1:4c:01:fa:dc:ee:f6:a2:d8:50:a8:30:28:ae:
                    d8:25:52:14:3c:b2:5c:86:20:e8:2d:9f:54:ff:f1:
                    f4:61:d8:a6:12:23:ed:ac:c0:73:3f:0e:c4:ca:27:
                    fd:72:2a:10:0d:2c:85:f1:b1:42:44:42:69:0b:29:
                    ed:9b:e2:4a:ca:ce:1b:ee:57:78:79:a1:45:3e:39:
                    63:c7:37:be:1e:7f:f8:b8:02:eb:23:eb:4d:87:b8:
                    82:34:2e:6c:7b:51:2c:df:a9:ba:6e:71:61:bb:08:
                    9c:76:91:4f:32:c0:eb:ae:db:ef:5e:7b:7b:95:d5:
                    1a:f1:ee:da:c7:12:37:0d:da:ad:e9:f9:5e:ea:4c:
                    d2:12:66:a3:2b:2b:c5:e9:09:5e:71:e9:0e:49:d7:
                    e6:da:12:98:3a:7a:9b:5e:e0:76:91:f6:15:98:a6:
                    ad:1c:68:14:22:8e:7e:be:f8:33:e2:de:df:08:8d:
                    0f:d7:68:78:9d:77:94:a9:85:7b:0c:74:21:da:78:
                    ba:da:5d:09:04:12:f8:b1:ba:1a:5a:62:01:a0:6e:
                    95:68:30:bb:fe:a7:57:05:af:cd:37:84:dd:5e:5b:
                    49:e0:5e:10:18:e0:e7:01:0e:48:f8:20:19:cd:d8:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:23:BE:54:B6:DC:DC:B2:36:87:86:5E:08:2C:B2:3D:19:D7:89:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/f0141d0f-2c85-3993-9653-e2714da05395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:48:7c:06:19:26:0e:bf:4d:2a:4b:f4:46:fa:be:92:77:0d:
         aa:9d:0f:f8:9c:51:1f:15:d4:a4:1a:e3:b7:9b:85:9e:d0:ce:
         20:1c:68:0e:36:0a:84:06:c3:00:f4:3e:3e:da:4a:03:57:3c:
         1b:da:56:7b:49:c6:22:2d:64:71:da:8f:41:83:77:91:c9:f7:
         48:b7:67:cf:bf:3b:c5:3e:4c:9c:56:17:88:e3:d5:a3:45:6e:
         33:53:01:f2:00:0e:e4:a6:c1:75:9d:bb:4b:be:16:5b:75:c0:
         30:c0:88:13:f6:2c:c7:25:c0:60:58:b2:a3:9f:c5:96:78:c1:
         17:19:57:5f:e7:0f:4d:44:12:78:14:fb:db:59:98:73:eb:52:
         c0:1b:d0:1d:15:68:64:a6:7c:0e:eb:68:49:06:9f:6d:3f:c2:
         a6:ca:f0:ea:f1:08:58:ca:e2:ef:ee:4e:b5:28:ba:53:4e:15:
         49:1e:5f:93:91:19:6c:52:40:13:92:81:b4:f5:e3:63:5b:6f:
         e7:01:82:78:85:3c:e6:66:f0:fc:0b:c0:01:3a:3f:89:48:20:
         ef:53:a0:e4:e0:60:b9:71:87:94:e8:73:24:b3:3e:10:94:d4:
         6f:d1:8e:c3:27:6d:2b:40:2f:fb:a3:a9:a1:1d:93:b7:1b:c2:
         6a:ca:a6:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoSDFabjqLuoVr5+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0MzIxYTgtMzkzZC00ZjdmLWFkZDktZGRkYzA3YTEz
MjBkMB4XDTI1MDYwMzE2NTAxMFoXDTI1MDkwMTE2NTAxMFowLzEtMCsGA1UEAxMk
NGY3YWI5MjctYzlmMy00ZDY2LTk4YmEtMWFjMmYxOTM1NjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyLsG9G6RqfDQybjO80K4UwB+tzu9qLYUKgw
KK7YJVIUPLJchiDoLZ9U//H0YdimEiPtrMBzPw7Eyif9cioQDSyF8bFCREJpCynt
m+JKys4b7ld4eaFFPjljxze+Hn/4uALrI+tNh7iCNC5se1Es36m6bnFhuwicdpFP
MsDrrtvvXnt7ldUa8e7axxI3Ddqt6fle6kzSEmajKyvF6QlecekOSdfm2hKYOnqb
XuB2kfYVmKatHGgUIo5+vvgz4t7fCI0P12h4nXeUqYV7DHQh2ni62l0JBBL4sboa
WmIBoG6VaDC7/qdXBa/NN4TdXltJ4F4QGODnAQ5I+CAZzdgYJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEsjvlS23NyyNoeGXggssj0Z14nJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQz
MjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRjMDdhMTMyMGQvZjAxNDFkMGYtMmM4NS0z
OTkzLTk2NTMtZTI3MTRkYTA1Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDA0MzIxYTgtMzkzZC00ZjdmLWFk
ZDktZGRkYzA3YTEzMjBkLzAwNDMyMWE4LTM5M2QtNGY3Zi1hZGQ5LWRkZGMwN2Ex
MzIwZC5jcmwwHwYDVR0jBBgwFoAU/tjhWyPOsJsuhIeb/2cWXdrV/fUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQzMjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRj
MDdhMTMyMGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ1IfAYZJg6/TSpL9Eb6vpJ3DaqdD/icUR8V1KQa47ebhZ7QziAc
aA42CoQGwwD0Pj7aSgNXPBvaVntJxiItZHHaj0GDd5HJ90i3Z8+/O8U+TJxWF4jj
1aNFbjNTAfIADuSmwXWdu0u+Flt1wDDAiBP2LMclwGBYsqOfxZZ4wRcZV1/nD01E
EngU+9tZmHPrUsAb0B0VaGSmfA7raEkGn20/wqbK8OrxCFjK4u/uTrUoulNOFUke
X5ORGWxSQBOSgbT142Nbb+cBgniFPOZm8PwLwAE6P4lIIO9ToOTgYLlxh5TocySz
PhCU1G/RjsMnbStAL/ujqaEdk7cbwmrKpps=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:16 2025 by rpki-client