Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa
File:                     b8f411d6-7dc7-3807-96c9-27e04f865d91.roa (raw, json)
Hash identifier:          gYwNuomGJN8557GKp8CHUiZBsBnQqsx8PbLbTzE563w=
Subject key identifier:   C5:52:44:7B:ED:4B:63:CE:FA:88:5F:C3:7D:77:99:50:46:4E:58:A9
Certificate issuer:       /CN=ea962f40-5514-411b-b23b-2a5e787628d5
Certificate serial:       010D0C9F4328584902EC2DE2D2B1FD668E0D7A00
Authority key identifier: 95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     401336
IP address blocks:        2602:f81b::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:2d:e2:d2:b1:fd:66:8e:0d:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea962f40-5514-411b-b23b-2a5e787628d5
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=8f6087c6-3071-4c49-a81d-a5778f3b56f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:f2:b9:29:f9:fa:ad:87:91:21:26:cb:59:
                    41:a3:58:c6:68:8e:65:75:07:60:eb:5b:51:9a:f6:
                    ec:fc:b0:a5:81:02:6d:b0:ad:75:7c:16:03:f4:43:
                    81:48:fc:c3:84:61:42:42:99:71:28:c0:56:5f:6b:
                    f0:9b:52:03:ab:c5:a5:ba:4d:fc:1e:6d:62:bd:13:
                    18:ef:96:61:98:4b:ab:9e:97:05:c1:c2:a5:c1:dd:
                    fd:b1:1d:9a:f2:88:b2:22:eb:86:5a:8c:fe:4c:ea:
                    36:41:c4:60:b9:5b:dd:c5:a7:2d:59:1d:03:58:10:
                    f5:a0:06:c6:fe:c4:df:0c:d4:cf:38:00:27:a7:3a:
                    0b:1e:f0:b9:67:88:73:ac:7d:f1:cb:32:f2:1b:91:
                    bd:78:56:13:b0:1b:db:30:16:09:fc:5f:f1:42:67:
                    38:58:5e:1e:30:c8:cc:47:32:c2:7c:e7:16:ee:fc:
                    20:bf:3a:4c:11:a5:95:a3:8d:f7:63:ba:9c:69:3f:
                    26:02:51:4a:7d:77:6f:1f:03:cf:d2:56:c4:bf:45:
                    13:de:cb:38:c8:47:3b:f3:d7:a8:9c:64:30:73:1f:
                    8e:06:e3:1a:6e:14:e3:0c:8a:39:05:37:88:a4:fd:
                    55:2b:9d:fa:56:95:06:ca:94:69:c1:7c:39:70:3a:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:44:7B:ED:4B:63:CE:FA:88:5F:C3:7D:77:99:50:46:4E:58:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/b8f411d6-7dc7-3807-96c9-27e04f865d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl

            X509v3 Authority Key Identifier:
                keyid:95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f81b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d8:7e:c7:ec:4c:76:21:02:98:ae:68:1a:b1:31:07:ea:57:
         1c:2e:36:fd:d7:3e:58:13:68:09:58:0a:eb:63:ff:76:0d:c5:
         be:42:42:6e:b2:48:e5:a9:89:5a:73:4e:98:d8:1b:e5:10:eb:
         e0:ae:da:91:b4:c3:6a:36:95:24:e3:ec:1c:9c:b8:26:87:16:
         ea:0c:7e:8c:4b:a7:75:2d:ac:d1:98:af:b1:64:80:7d:d6:e8:
         c8:d1:64:b9:f2:26:c9:05:b5:5d:37:28:3d:69:0a:82:7a:5e:
         71:b8:41:2c:cc:c4:a6:e8:ac:a6:46:11:52:d5:c8:71:b0:76:
         e9:49:4e:f9:49:3c:4d:82:e3:13:2a:e8:21:dc:f5:e6:85:a1:
         d0:a2:63:7e:ce:07:6c:3f:98:52:8d:7b:2d:5f:86:cf:f2:6e:
         c4:8f:21:99:95:37:ca:36:a4:01:2d:6f:ca:36:f6:49:c5:d1:
         8d:a5:0b:20:2c:6f:27:6b:85:bb:7f:41:e9:b0:37:d2:fe:d7:
         25:a1:39:ca:df:2a:4b:e3:32:6c:b0:67:5b:ba:29:51:31:43:
         b8:55:f2:24:4d:27:3e:72:53:27:86:58:49:85:4e:cd:fa:aa:
         6e:83:ec:34:13:6a:a2:75:3b:51:ca:96:b0:62:fb:ff:f7:0c:
         1c:f5:59:8d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkC7C3i0rH9Zo4NegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE5NjJmNDAtNTUxNC00MTFiLWIyM2ItMmE1ZTc4NzYy
OGQ1MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
OGY2MDg3YzYtMzA3MS00YzQ5LWE4MWQtYTU3NzhmM2I1NmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvHyuSn5+q2HkSEmy1lBo1jGaI5ldQdg61tR
mvbs/LClgQJtsK11fBYD9EOBSPzDhGFCQplxKMBWX2vwm1IDq8Wluk38Hm1ivRMY
75ZhmEurnpcFwcKlwd39sR2a8oiyIuuGWoz+TOo2QcRguVvdxactWR0DWBD1oAbG
/sTfDNTPOAAnpzoLHvC5Z4hzrH3xyzLyG5G9eFYTsBvbMBYJ/F/xQmc4WF4eMMjM
RzLCfOcW7vwgvzpMEaWVo433Y7qcaT8mAlFKfXdvHwPP0lbEv0UT3ss4yEc789eo
nGQwcx+OBuMabhTjDIo5BTeIpP1VK536VpUGypRpwXw5cDqz7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMVSRHvtS2PO+ohfw313mVBGTlipMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk2
MmY0MC01NTE0LTQxMWItYjIzYi0yYTVlNzg3NjI4ZDUvYjhmNDExZDYtN2RjNy0z
ODA3LTk2YzktMjdlMDRmODY1ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWE5NjJmNDAtNTUxNC00MTFiLWIy
M2ItMmE1ZTc4NzYyOGQ1L2VhOTYyZjQwLTU1MTQtNDExYi1iMjNiLTJhNWU3ODc2
MjhkNS5jcmwwHwYDVR0jBBgwFoAUlewonBG6R3Dlqv0OrkBPqn3B8iEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk2MmY0MC01NTE0LTQxMWItYjIzYi0yYTVl
Nzg3NjI4ZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4GwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAh9h+x+xMdiECmK5oGrExB+pXHC42/dc+WBNoCVgK62P/dg3FvkJC
brJI5amJWnNOmNgb5RDr4K7akbTDajaVJOPsHJy4JocW6gx+jEundS2s0ZivsWSA
fdboyNFkufImyQW1XTcoPWkKgnpecbhBLMzEpuispkYRUtXIcbB26UlO+Uk8TYLj
EyroIdz15oWh0KJjfs4HbD+YUo17LV+Gz/JuxI8hmZU3yjakAS1vyjb2ScXRjaUL
ICxvJ2uFu39B6bA30v7XJaE5yt8qS+MybLBnW7opUTFDuFXyJE0nPnJTJ4ZYSYVO
zfqqboPsNBNqonU7UcqWsGL7//cMHPVZjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:15 2025 by rpki-client