Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/039dc1a8-c529-3974-acba-95b02cdfd42d.roa
File:                     039dc1a8-c529-3974-acba-95b02cdfd42d.roa (raw, json)
Hash identifier:          qf0i9+3G51cXIfh1SzqU25yB8DrghvblBOPZk4u6tww=
Subject key identifier:   F6:1C:41:50:58:65:81:36:82:E8:C3:D5:AE:37:35:9D:28:A2:34:78
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584996C4B2891B52E5323C1C7080
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/039dc1a8-c529-3974-acba-95b02cdfd42d.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     399870
IP address blocks:        2602:f7a5:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b2:89:1b:52:e5:32:3c:1c:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=92ad838c-0d8e-4798-a2db-a0157cc54603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:99:20:bb:d3:ea:d0:47:f7:a5:cb:9f:ca:
                    f5:1e:0d:10:09:73:d3:d5:d4:e6:e5:3b:af:70:a4:
                    f7:fb:27:f0:81:27:bf:9b:83:78:94:94:40:85:f1:
                    c7:0e:63:ff:9a:cd:80:b5:e6:42:f4:db:1b:20:f6:
                    21:35:64:db:61:e2:4b:52:08:b9:46:f1:58:e1:ee:
                    7c:ad:32:f1:bc:7f:43:aa:d3:9e:ae:ce:a4:1b:23:
                    56:3f:9e:3e:2b:15:a8:16:8d:a2:59:5b:31:c1:1e:
                    a5:56:f9:eb:a1:d3:1e:7b:c1:ad:65:2f:9f:20:2d:
                    22:5b:1a:2a:4b:cc:41:ba:31:d3:56:bf:a7:02:8d:
                    e4:f2:3d:ef:c5:d2:57:fa:7d:fe:0a:d4:50:a2:75:
                    32:d4:53:43:4a:ed:a3:51:74:81:3b:07:d1:44:6c:
                    5e:2c:45:88:41:6e:c1:48:e2:98:7a:d2:4a:98:76:
                    98:dd:6f:96:2b:80:52:cf:b5:c4:51:4c:bc:80:8e:
                    06:36:3e:ab:be:58:93:df:89:b7:ac:80:e8:d9:d5:
                    64:08:ed:36:0d:6b:14:2d:24:36:4f:11:95:dc:23:
                    af:4f:71:78:2f:e8:99:65:ec:79:98:f1:ee:38:02:
                    a0:55:f3:24:45:34:63:07:7f:cd:91:74:09:87:29:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1C:41:50:58:65:81:36:82:E8:C3:D5:AE:37:35:9D:28:A2:34:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/039dc1a8-c529-3974-acba-95b02cdfd42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a5:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:1a:ac:1d:aa:19:c8:90:b4:58:33:2c:2a:bf:7e:21:0c:
         1c:44:27:07:ed:bf:60:7e:ba:fe:ef:d6:70:f7:76:37:25:9b:
         57:3c:58:2d:14:e0:47:76:c0:e6:b9:93:0c:cb:de:0c:46:69:
         ed:d8:62:41:b5:99:0e:56:41:fa:3c:01:7a:6a:0e:8f:59:b6:
         26:ec:fb:a6:ac:53:f4:7b:d8:8c:f5:11:79:46:78:e5:74:66:
         6d:52:98:1e:d6:3f:28:8b:ab:54:50:3a:eb:48:fb:54:fb:08:
         ab:74:24:44:d0:8a:35:8d:01:7d:fa:b7:fc:18:5a:10:d1:ae:
         51:31:70:cb:58:17:b5:8a:27:78:65:e9:97:9d:a7:b7:43:7c:
         95:6b:d0:a0:89:68:9e:67:76:13:b0:bc:ec:16:94:9a:7b:8e:
         2d:05:1a:56:31:41:94:ab:18:21:10:ce:0b:b1:5d:db:11:ee:
         f7:e1:28:82:0c:a5:82:8d:3a:51:01:d6:2a:84:96:ed:0b:83:
         01:00:e9:1e:b0:7c:d2:8b:d6:20:dd:44:19:83:b9:7a:24:b9:
         6c:cd:98:d9:7e:13:19:9d:da:67:84:aa:40:d0:50:26:65:79:
         cc:58:f4:33:f6:72:2f:d3:c4:37:82:18:e9:c6:97:4f:9c:a8:
         79:d1:12:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmWxLKJG1LlMjwccIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIyZmRiMjctZTRmZS00ZDgxLTliZjQtZTEzYjFkYWY3
ZjUxMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
OTJhZDgzOGMtMGQ4ZS00Nzk4LWEyZGItYTAxNTdjYzU0NjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHaZILvT6tBH96XLn8r1Hg0QCXPT1dTm5Tuv
cKT3+yfwgSe/m4N4lJRAhfHHDmP/ms2AteZC9NsbIPYhNWTbYeJLUgi5RvFY4e58
rTLxvH9DqtOers6kGyNWP54+KxWoFo2iWVsxwR6lVvnrodMee8GtZS+fIC0iWxoq
S8xBujHTVr+nAo3k8j3vxdJX+n3+CtRQonUy1FNDSu2jUXSBOwfRRGxeLEWIQW7B
SOKYetJKmHaY3W+WK4BSz7XEUUy8gI4GNj6rvliT34m3rIDo2dVkCO02DWsULSQ2
TxGV3COvT3F4L+iZZex5mPHuOAKgVfMkRTRjB3/NkXQJhyn+fQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPYcQVBYZYE2gujD1a43NZ0oojR4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJm
ZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRhZjdmNTEvMDM5ZGMxYTgtYzUyOS0z
OTc0LWFjYmEtOTViMDJjZGZkNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIyZmRiMjctZTRmZS00ZDgxLTli
ZjQtZTEzYjFkYWY3ZjUxL2EyMmZkYjI3LWU0ZmUtNGQ4MS05YmY0LWUxM2IxZGFm
N2Y1MS5jcmwwHwYDVR0jBBgwFoAUt1cVv4naXOAxdOzv9stZsvi4OkAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNi
MWRhZjdmNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3pQIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbW4arB2qGciQtFgzLCq/fiEMHEQnB+2/YH66/u/WcPd2NyWbVzxY
LRTgR3bA5rmTDMveDEZp7dhiQbWZDlZB+jwBemoOj1m2Juz7pqxT9HvYjPUReUZ4
5XRmbVKYHtY/KIurVFA660j7VPsIq3QkRNCKNY0Bffq3/BhaENGuUTFwy1gXtYon
eGXpl52nt0N8lWvQoIlonmd2E7C87BaUmnuOLQUaVjFBlKsYIRDOC7Fd2xHu9+Eo
ggylgo06UQHWKoSW7QuDAQDpHrB80ovWIN1EGYO5eiS5bM2Y2X4TGZ3aZ4SqQNBQ
JmV5zFj0M/ZyL9PEN4IY6caXT5yoedESEQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:45:43 2025 by rpki-client