Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa
File:                     4694d567-b90d-3acf-9655-996af58f9619.roa (raw, json)
Hash identifier:          uYGgOAGFKog7uP8QXrl6GhU7g2E5d4kpm/SZij75c14=
Subject key identifier:   EC:9A:16:33:06:69:78:14:6B:14:F7:38:16:71:27:B7:7F:2D:01:BB
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F432858495EEEDB4B3081DD70EEC95480
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     399214
IP address blocks:        2602:fb0a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:db:4b:30:81:dd:70:ee:c9:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=a23889f5-8817-4578-b594-148ec146e0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:7b:a9:05:f1:29:bd:4f:89:70:3c:d3:da:
                    1a:4a:62:53:66:ee:62:8f:20:c0:ae:16:c0:41:3d:
                    20:b7:a0:28:87:e3:fc:72:4b:dd:5d:b6:cf:a6:bf:
                    83:2c:4e:2f:90:e7:c2:d2:37:5e:bf:99:23:09:2e:
                    0e:d3:c9:b3:fd:07:eb:60:2d:6b:b5:0c:22:51:2a:
                    83:ce:cd:98:bc:3e:7d:b0:e6:30:ef:88:cb:c8:0c:
                    1c:d0:ac:2e:c5:98:ef:e6:09:da:2f:84:3f:12:39:
                    0e:37:28:ba:01:75:cb:75:55:f8:9a:cf:f3:7b:38:
                    6f:70:bf:b1:0d:64:77:84:3b:c1:a5:58:a4:d3:e9:
                    09:6e:24:b3:69:aa:d6:43:d7:10:89:e1:c4:24:d0:
                    20:16:3d:e9:d4:ac:ab:dc:b6:18:9e:c7:a5:86:b2:
                    d0:51:be:f2:4b:c1:3c:8a:12:7c:0e:14:ff:0c:f6:
                    76:10:b2:61:88:10:27:34:fb:f7:0a:00:43:1f:3e:
                    72:28:a6:1e:1f:06:17:a8:43:c8:6f:5d:c2:26:f2:
                    fd:ca:ad:f0:6f:de:78:5e:13:b9:df:82:f6:9f:fc:
                    89:05:be:1c:7d:00:46:a2:f8:73:90:b3:10:f3:48:
                    a0:10:2a:15:de:59:73:e3:01:f1:21:5a:1b:28:6d:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9A:16:33:06:69:78:14:6B:14:F7:38:16:71:27:B7:7F:2D:01:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/4694d567-b90d-3acf-9655-996af58f9619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:bf:e5:e8:a8:93:99:06:54:84:96:73:19:b6:71:a2:2a:
         87:f0:6e:80:ac:5f:b4:4b:6d:bd:ac:62:51:ce:33:9d:81:30:
         41:62:53:0a:17:39:d0:88:a0:e7:46:e7:42:56:98:e9:55:76:
         9f:b5:77:42:d2:ce:ea:96:f0:49:1f:8c:42:05:fc:7e:af:76:
         56:fc:7e:40:10:c0:8e:57:47:52:70:a8:d0:4c:ab:d3:f7:b0:
         c0:06:b4:96:27:a4:f0:e2:cd:36:c5:ff:4b:ed:83:ea:37:a3:
         c7:65:6f:f3:09:ce:de:26:51:27:5f:5a:86:81:3b:b4:d4:83:
         16:aa:49:93:6e:12:a5:96:7e:43:89:47:1f:a6:79:0b:51:ef:
         4a:ee:a7:ec:21:0c:96:fa:e0:d8:e2:49:e0:69:39:64:4a:99:
         97:39:16:2b:a1:ef:d6:f3:91:aa:43:05:07:5a:0c:c3:97:e1:
         32:81:7f:cd:79:69:7e:29:de:a9:b3:e5:f9:b5:ba:0c:ea:dd:
         cb:59:b4:f1:8a:64:9d:f3:b5:29:e0:84:a1:32:b9:72:78:6e:
         ef:15:f0:99:8d:a6:d9:a2:98:a7:a2:86:45:f0:c6:90:92:b2:
         59:e8:fa:6c:72:78:1a:55:e6:e3:db:44:77:72:29:69:de:52:
         0f:74:24:6e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEle7ttLMIHdcO7JVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk
ZmQxMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
YTIzODg5ZjUtODgxNy00NTc4LWI1OTQtMTQ4ZWMxNDZlMGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5d7qQXxKb1PiXA809oaSmJTZu5ijyDArhbA
QT0gt6Aoh+P8ckvdXbbPpr+DLE4vkOfC0jdev5kjCS4O08mz/QfrYC1rtQwiUSqD
zs2YvD59sOYw74jLyAwc0KwuxZjv5gnaL4Q/EjkONyi6AXXLdVX4ms/zezhvcL+x
DWR3hDvBpVik0+kJbiSzaarWQ9cQieHEJNAgFj3p1Kyr3LYYnselhrLQUb7yS8E8
ihJ8DhT/DPZ2ELJhiBAnNPv3CgBDHz5yKKYeHwYXqEPIb13CJvL9yq3wb954XhO5
34L2n/yJBb4cfQBGovhzkLMQ80igECoV3llz4wHxIVobKG0siQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOyaFjMGaXgUaxT3OBZxJ7d/LQG7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl
N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvNDY5NGQ1NjctYjkwZC0z
YWNmLTk2NTUtOTk2YWY1OGY5NjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4
OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy
ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh
ODlmMmRmZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7CgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaG+/5eiok5kGVISWcxm2caIqh/BugKxftEttvaxiUc4znYEwQWJT
Chc50Iig50bnQlaY6VV2n7V3QtLO6pbwSR+MQgX8fq92Vvx+QBDAjldHUnCo0Eyr
0/ewwAa0liek8OLNNsX/S+2D6jejx2Vv8wnO3iZRJ19ahoE7tNSDFqpJk24SpZZ+
Q4lHH6Z5C1HvSu6n7CEMlvrg2OJJ4Gk5ZEqZlzkWK6Hv1vORqkMFB1oMw5fhMoF/
zXlpfineqbPl+bW6DOrdy1m08YpknfO1KeCEoTK5cnhu7xXwmY2m2aKYp6KGRfDG
kJKyWej6bHJ4GlXm49tEd3Ipad5SD3Qkbg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 16:30:32 2025 by rpki-client