Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/f51e20cd-1896-307a-93ac-5177a9f90a8c.roa
File:                     f51e20cd-1896-307a-93ac-5177a9f90a8c.roa (raw, json)
Hash identifier:          XHzhlhNZ3gwa2CJPPuMlrp/2Hbc9sWAK8388QiEj9Aw=
Subject key identifier:   2D:E1:04:0E:BC:2B:75:69:2D:64:F4:82:DA:D8:F2:75:C7:85:C6:9C
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F4328584953C412DB4A19190FB77B98E0
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/f51e20cd-1896-307a-93ac-5177a9f90a8c.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     26073
IP address blocks:        2602:fa6d:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:12:db:4a:19:19:0f:b7:7b:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=a1de3ec5-33b3-4219-8a4b-aaba01224b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:1d:d7:85:d9:f3:13:62:bc:b7:c6:37:94:
                    69:b0:da:04:8f:98:c7:f0:4c:07:e0:e1:b3:c4:db:
                    43:d1:85:00:84:a0:0c:de:19:14:89:ab:65:17:88:
                    0e:a3:50:a6:7a:fc:e8:fb:d3:21:33:ab:27:3a:70:
                    16:d2:8e:6d:c3:ef:f6:f5:2b:58:83:69:3a:83:15:
                    5c:d8:21:55:14:d4:1e:b6:a1:64:99:a5:c8:09:08:
                    66:be:2f:42:ff:15:a2:58:3b:e9:c2:97:e9:b3:e5:
                    88:1a:11:16:bd:2d:5b:91:c3:40:f9:75:3f:84:5a:
                    19:e5:00:00:32:c3:8f:c1:d2:cd:36:db:14:ac:33:
                    6c:be:11:00:22:c6:77:db:28:5a:bb:1f:5a:fb:0d:
                    4b:21:a3:f3:67:97:17:92:cb:ab:ea:6b:cd:72:4d:
                    3b:1b:c3:4e:08:40:a2:0e:be:6d:ac:bd:72:4d:f9:
                    ee:4f:82:78:36:96:17:0f:38:97:22:6a:72:10:68:
                    02:ee:a0:65:5c:31:2c:6e:b4:0d:35:c9:02:40:fd:
                    1f:2a:de:38:c4:2a:75:b2:89:65:9f:fe:17:1f:44:
                    70:dc:85:f4:4a:61:74:71:3a:0f:ac:cd:71:30:54:
                    8c:bc:82:49:34:78:52:7d:b6:87:0e:dd:5a:be:4b:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E1:04:0E:BC:2B:75:69:2D:64:F4:82:DA:D8:F2:75:C7:85:C6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/f51e20cd-1896-307a-93ac-5177a9f90a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:15:a7:02:e3:54:93:0c:65:31:47:5d:30:a4:c9:4e:c6:93:
         ab:af:61:12:1c:fc:5b:77:7a:44:8e:e2:ce:5f:f7:d5:98:78:
         3e:15:12:e7:1a:2c:c7:9d:e3:75:52:df:6b:49:21:65:01:3d:
         e3:04:db:93:19:7d:89:96:42:8a:01:1e:b3:c3:5b:29:85:fb:
         d0:e0:d1:30:ad:3b:55:7d:29:e1:2b:61:f4:12:48:73:f1:f7:
         49:09:81:30:56:c3:5b:98:e7:9e:2d:b9:60:3b:58:20:88:fd:
         3d:f2:7b:3d:46:66:ce:ea:43:8f:a9:75:ba:b0:d6:d8:c7:2d:
         93:8a:a7:cb:70:61:eb:65:5f:e5:e7:8b:db:17:03:19:57:34:
         95:4f:2f:d8:b2:d7:56:a9:70:b1:b7:81:e1:c7:6a:2a:24:24:
         a3:f5:35:df:56:bf:35:ab:9f:d6:4f:5b:55:a2:ef:16:ba:f9:
         be:25:f1:ca:8b:13:d2:19:ea:e9:fe:75:a9:af:77:88:19:54:
         2f:7b:f0:45:91:69:52:29:eb:28:a0:27:3c:0b:ce:9a:66:d2:
         7c:fa:0a:46:df:3d:08:3b:84:48:0e:1c:f2:45:88:fa:2a:82:
         86:9f:10:4d:04:ba:59:e1:59:b3:bf:9a:a4:89:bc:a4:e4:73:
         35:84:93:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElTxBLbShkZD7d7mOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRmMDY0ZDAtOTAxNy00MWU3LWJlMjEtYzdiOTg4MzAy
MGQ1MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YTFkZTNlYzUtMzNiMy00MjE5LThhNGItYWFiYTAxMjI0YjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZod14XZ8xNivLfGN5RpsNoEj5jH8EwH4OGz
xNtD0YUAhKAM3hkUiatlF4gOo1Cmevzo+9MhM6snOnAW0o5tw+/29StYg2k6gxVc
2CFVFNQetqFkmaXICQhmvi9C/xWiWDvpwpfps+WIGhEWvS1bkcNA+XU/hFoZ5QAA
MsOPwdLNNtsUrDNsvhEAIsZ32yhaux9a+w1LIaPzZ5cXksur6mvNck07G8NOCECi
Dr5trL1yTfnuT4J4NpYXDziXImpyEGgC7qBlXDEsbrQNNckCQP0fKt44xCp1soll
n/4XH0Rw3IX0SmF0cToPrM1xMFSMvIJJNHhSfbaHDt1avkvKNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC3hBA68K3VpLWT0gtrY8nXHhcacMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNGYw
NjRkMC05MDE3LTQxZTctYmUyMS1jN2I5ODgzMDIwZDUvZjUxZTIwY2QtMTg5Ni0z
MDdhLTkzYWMtNTE3N2E5ZjkwYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTRmMDY0ZDAtOTAxNy00MWU3LWJl
MjEtYzdiOTg4MzAyMGQ1L2U0ZjA2NGQwLTkwMTctNDFlNy1iZTIxLWM3Yjk4ODMw
MjBkNS5jcmwwHwYDVR0jBBgwFoAUamr2dIMc2n3zkrcHGqG+D3BjgpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNGYwNjRkMC05MDE3LTQxZTctYmUyMS1jN2I5
ODgzMDIwZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6bQAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEAVpwLjVJMMZTFHXTCkyU7Gk6uvYRIc/Ft3ekSO4s5f99WYeD4V
EucaLMed43VS32tJIWUBPeME25MZfYmWQooBHrPDWymF+9Dg0TCtO1V9KeErYfQS
SHPx90kJgTBWw1uY554tuWA7WCCI/T3yez1GZs7qQ4+pdbqw1tjHLZOKp8twYetl
X+Xni9sXAxlXNJVPL9iy11apcLG3geHHaiokJKP1Nd9WvzWrn9ZPW1Wi7xa6+b4l
8cqLE9IZ6un+damvd4gZVC978EWRaVIp6yigJzwLzppm0nz6CkbfPQg7hEgOHPJF
iPoqgoafEE0EulnhWbO/mqSJvKTkczWEkxI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:55:38 2025 by rpki-client