Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/bc9785e1-fa6f-3ce8-b132-658db1c6e4f9.roa
File:                     bc9785e1-fa6f-3ce8-b132-658db1c6e4f9.roa (raw, json)
Hash identifier:          nNWdF9Mb1yla5vFNUy7NMOqUHXZ9O3W3+Qalr9V3NBc=
Subject key identifier:   62:26:69:FD:D2:2C:C0:AA:09:E1:98:67:39:64:BF:AF:80:71:07:46
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584A70E53A1A8547713BC4D581E0
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/bc9785e1-fa6f-3ce8-b132-658db1c6e4f9.roa
Signing time:             Mon 07 Jul 2025 16:13:10 +0000
ROA not before:           Mon 07 Jul 2025 16:13:10 +0000
ROA not after:            Sun 05 Oct 2025 16:13:10 +0000
asID:                     62513
IP address blocks:        2602:fd50:8001::/48 maxlen: 48
                          2602:fd50:8100::/40 maxlen: 40
                          2602:fd50:a000::/36 maxlen: 36
                          2602:fd50:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:e5:3a:1a:85:47:71:3b:c4:d5:81:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Jul  7 16:13:10 2025 GMT
            Not After : Oct  5 16:13:10 2025 GMT
        Subject: CN=1985d405-0805-4c30-8f4b-553b79d25a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:9a:67:5e:98:e4:fa:60:c5:3f:37:26:a1:
                    b4:a7:9f:4b:19:3d:e4:0e:82:7e:d7:dd:0a:ce:10:
                    e3:f4:e7:b5:03:3f:55:47:13:72:d1:90:e0:97:5d:
                    3c:19:9d:d7:d3:15:a1:cf:eb:e5:62:db:22:47:5e:
                    e9:4c:4c:2f:18:e6:1c:94:bb:83:2f:c2:25:08:0d:
                    50:3c:b7:f4:84:bb:98:f3:44:5b:ff:0a:31:ea:72:
                    5a:27:ee:b5:15:43:bd:5d:9e:1a:ba:b8:e5:c4:2c:
                    41:35:cb:67:54:f0:75:84:81:13:75:44:44:1e:60:
                    19:b0:7d:32:60:b0:2d:e5:af:88:16:d3:27:3b:fc:
                    24:3c:71:64:d7:a1:f8:16:50:dc:f2:f0:4b:d3:9e:
                    0d:23:f6:b0:e6:31:a6:ec:8f:55:f3:3f:84:ee:69:
                    f9:e2:f7:b1:e3:db:d6:02:ec:ed:15:f2:5a:76:c2:
                    a4:df:f1:42:d4:3e:a6:d8:a6:2c:67:5a:52:5b:1c:
                    d9:38:9d:3f:c6:41:7f:1c:67:dc:aa:39:48:2a:15:
                    b7:9c:f0:7f:44:92:f3:0a:2d:06:ed:82:d8:74:3b:
                    c0:db:6f:87:23:4e:65:45:81:2d:e3:f3:7b:78:de:
                    dd:23:16:eb:ed:f1:10:05:b8:ac:83:63:f9:97:0a:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:26:69:FD:D2:2C:C0:AA:09:E1:98:67:39:64:BF:AF:80:71:07:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/bc9785e1-fa6f-3ce8-b132-658db1c6e4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:8001::/48
                  2602:fd50:8100::/40
                  2602:fd50:a000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:60:0a:b0:6e:6d:6d:2e:a0:91:d7:07:75:7f:0f:af:42:
         f1:87:34:7d:93:65:48:b4:de:90:a1:81:2f:40:c7:a1:01:58:
         3f:12:a6:2e:a7:1a:82:41:c6:26:bb:4b:2c:6b:15:13:d6:be:
         ec:0c:f6:9a:9f:4a:50:8f:03:ad:2f:3c:5f:4b:e6:0c:ca:8a:
         88:bf:98:13:40:c1:80:c2:64:ab:41:86:29:80:c5:56:7c:4a:
         67:e5:68:0c:b4:ea:e4:86:90:f0:15:89:8b:74:11:53:7a:d4:
         33:9b:6b:bf:f1:28:04:97:a0:fd:4f:03:59:e1:92:1c:81:d1:
         60:87:68:47:7d:f4:bf:27:e3:fd:cb:44:fa:05:5f:37:e7:bc:
         7a:95:c9:92:b3:2c:97:d8:f8:a7:6d:19:39:cf:af:ea:bc:f5:
         c7:75:63:d8:54:24:84:2f:c5:2a:12:22:5e:58:42:72:62:13:
         b2:d5:36:1c:fd:a0:30:59:1c:af:f5:25:4c:d1:c9:a9:7b:09:
         21:77:73:9e:72:0c:06:f2:b7:f7:6a:23:2f:5a:f9:b4:80:89:
         20:9c:c0:af:87:a3:ea:3c:b2:e0:4b:55:d7:33:5e:10:16:b5:
         d7:c1:1d:04:63:01:db:79:f9:94:27:78:93:d3:2c:79:9e:a1:
         4d:1a:90:ad
-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgIUAQ0Mn0MoWEpw5ToahUdxO8TVgeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTI1MDcwNzE2MTMxMFoXDTI1MTAwNTE2MTMxMFowLzEtMCsGA1UEAxMk
MTk4NWQ0MDUtMDgwNS00YzMwLThmNGItNTUzYjc5ZDI1YTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKWaZ16Y5PpgxT83JqG0p59LGT3kDoJ+190K
zhDj9Oe1Az9VRxNy0ZDgl108GZ3X0xWhz+vlYtsiR17pTEwvGOYclLuDL8IlCA1Q
PLf0hLuY80Rb/wox6nJaJ+61FUO9XZ4aurjlxCxBNctnVPB1hIETdUREHmAZsH0y
YLAt5a+IFtMnO/wkPHFk16H4FlDc8vBL054NI/aw5jGm7I9V8z+E7mn54vex49vW
AuztFfJadsKk3/FC1D6m2KYsZ1pSWxzZOJ0/xkF/HGfcqjlIKhW3nPB/RJLzCi0G
7YLYdDvA22+HI05lRYEt4/N7eN7dIxbr7fEQBbisg2P5lwq5vwIDAQABo4IDaDCC
A2QwHQYDVR0OBBYEFGImaf3SLMCqCeGYZzlkv6+AcQdGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvYmM5Nzg1ZTEtZmE2Zi0z
Y2U4LWIxMzItNjU4ZGIxYzZlNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcAJgL9UIAB
AwYAJgL9UIEDBgUmAv1QoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANn2AKsG5tbS6gkdcHdX8Pr0LxhzR9
k2VItN6QoYEvQMehAVg/EqYupxqCQcYmu0ssaxUT1r7sDPaan0pQjwOtLzxfS+YM
yoqIv5gTQMGAwmSrQYYpgMVWfEpn5WgMtOrkhpDwFYmLdBFTetQzm2u/8SgEl6D9
TwNZ4ZIcgdFgh2hHffS/J+P9y0T6BV8357x6lcmSsyyX2PinbRk5z6/qvPXHdWPY
VCSEL8UqEiJeWEJyYhOy1TYc/aAwWRyv9SVM0cmpewkhd3OecgwG8rf3aiMvWvm0
gIkgnMCvh6PqPLLgS1XXM14QFrXXwR0EYwHbefmUJ3iT0yx5nqFNGpCt
-----END CERTIFICATE-----
Generated at Fri Jul 11 05:19:32 2025 by rpki-client