Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa
File:                     68e8e840-a656-3ad6-aea8-71835d66921c.roa (raw, json)
Hash identifier:          ZhALq9lVHfE3KHZb7/A0b38VdXtILel8nZcylKg/BZQ=
Subject key identifier:   BE:D5:A9:66:11:E5:18:7E:57:4F:32:A2:8A:D8:8F:90:5C:C9:4B:D5
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584A066FEBCD5E5021E2ABA4D5C0
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa
Signing time:             Fri 30 May 2025 13:01:03 +0000
ROA not before:           Fri 30 May 2025 13:01:03 +0000
ROA not after:            Thu 28 Aug 2025 13:01:03 +0000
asID:                     36832
IP address blocks:        2602:f9bd:f01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:06:6f:eb:cd:5e:50:21:e2:ab:a4:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: May 30 13:01:03 2025 GMT
            Not After : Aug 28 13:01:03 2025 GMT
        Subject: CN=e0f0e006-0a6e-4372-9c8c-1497f2a0dd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:b8:bb:f0:a4:aa:30:9f:32:a6:f0:aa:5a:
                    ff:f7:8d:23:9a:52:9f:69:82:eb:d7:f5:e1:e5:59:
                    37:66:ad:8d:6e:d6:66:f2:54:ec:3c:61:02:1e:f9:
                    25:7f:c4:cf:a1:c6:02:0b:34:cb:64:b9:0f:a8:a9:
                    8b:19:a5:a9:a3:ec:9e:7a:00:3b:bb:65:47:11:ae:
                    aa:b5:63:ee:fb:a4:c9:ac:24:81:d1:8d:c6:cc:1e:
                    4a:a2:fa:d7:ea:4f:ba:05:9f:22:5d:dc:dc:0f:7c:
                    15:c9:2e:fa:c5:01:37:98:4a:13:28:6d:c4:13:46:
                    a7:cc:aa:a7:04:da:d6:7e:bf:d1:73:df:ee:bd:36:
                    e6:a8:88:20:7e:b3:c5:37:1f:8e:ba:a1:89:6e:b2:
                    ec:19:a8:cb:20:84:d7:f1:9e:a1:a5:4f:9c:10:7f:
                    dd:61:8a:3b:e0:9f:f4:54:b9:b5:2f:55:43:c6:1c:
                    01:b1:de:92:79:9a:16:fb:a8:52:2f:2f:b8:c4:ee:
                    29:89:a0:5a:c0:20:16:33:82:5c:06:c0:3a:f7:aa:
                    b2:80:0b:c4:d5:f2:95:6b:72:2c:1d:26:ca:d9:f4:
                    89:92:6a:18:63:6f:27:89:77:1f:39:78:62:59:81:
                    a2:60:fa:bd:ac:b3:f1:6b:18:11:a1:a0:c5:c3:78:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D5:A9:66:11:E5:18:7E:57:4F:32:A2:8A:D8:8F:90:5C:C9:4B:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9bd:f01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:69:17:9e:d3:0d:b6:ca:11:da:5d:31:92:55:93:0f:68:
         4f:ae:73:60:b2:be:d3:60:30:8c:67:fb:72:b1:b2:d1:7c:98:
         bb:52:4f:6d:1e:8b:ae:31:9e:f9:9d:c3:ad:86:89:80:6f:5a:
         50:01:d1:a2:2e:4a:42:3a:57:06:e5:7a:40:64:60:57:95:b3:
         3a:8f:b0:1b:f3:ab:ad:09:98:1e:81:b9:d9:21:14:c9:db:b4:
         bf:79:0f:bf:ac:2a:73:51:94:7b:a0:98:6d:03:23:53:f1:bb:
         a0:a9:18:3a:a9:68:e7:7b:04:bd:62:d7:d0:61:d4:e5:96:4e:
         fe:21:2d:71:c2:6c:03:96:b2:ef:fd:71:3c:4b:a9:79:89:3a:
         5a:14:b6:78:15:71:3c:b3:76:5d:f1:a8:a7:ee:69:14:ef:69:
         b9:3f:ee:60:9b:4c:e6:2b:5d:e6:9d:76:69:21:e3:0d:64:46:
         5f:f3:81:b7:0b:25:af:45:4a:4d:85:22:03:b3:22:b4:63:a7:
         04:d9:36:60:4d:8f:40:60:00:4a:b5:bc:f1:56:fa:cd:a4:01:
         3c:a9:45:b2:87:ea:2c:f6:d7:e4:0b:81:d5:1f:a4:72:08:fb:
         f3:25:be:7a:31:9d:8e:6d:bf:cb:d8:a8:41:92:15:ac:62:f0:
         59:9c:ab:cb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoGb+vNXlAh4quk1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0
M2FlMB4XDTI1MDUzMDEzMDEwM1oXDTI1MDgyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZTBmMGUwMDYtMGE2ZS00MzcyLTljOGMtMTQ5N2YyYTBkZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfO4u/CkqjCfMqbwqlr/940jmlKfaYLr1/Xh
5Vk3Zq2NbtZm8lTsPGECHvklf8TPocYCCzTLZLkPqKmLGaWpo+yeegA7u2VHEa6q
tWPu+6TJrCSB0Y3GzB5KovrX6k+6BZ8iXdzcD3wVyS76xQE3mEoTKG3EE0anzKqn
BNrWfr/Rc9/uvTbmqIggfrPFNx+OuqGJbrLsGajLIITX8Z6hpU+cEH/dYYo74J/0
VLm1L1VDxhwBsd6SeZoW+6hSLy+4xO4piaBawCAWM4JcBsA696qygAvE1fKVa3Is
HSbK2fSJkmoYY28niXcfOXhiWYGiYPq9rLPxaxgRoaDFw3gd6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL7VqWYR5Rh+V08yoorYj5BcyUvVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2
ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvNjhlOGU4NDAtYTY1Ni0z
YWQ2LWFlYTgtNzE4MzVkNjY5MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi
ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh
NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3
YmY1YTQzYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5vQ8B
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF7/aRee0w22yhHaXTGSVZMPaE+uc2CyvtNgMIxn+3KxstF8mLtS
T20ei64xnvmdw62GiYBvWlAB0aIuSkI6VwblekBkYFeVszqPsBvzq60JmB6Budkh
FMnbtL95D7+sKnNRlHugmG0DI1Pxu6CpGDqpaOd7BL1i19Bh1OWWTv4hLXHCbAOW
su/9cTxLqXmJOloUtngVcTyzdl3xqKfuaRTvabk/7mCbTOYrXeaddmkh4w1kRl/z
gbcLJa9FSk2FIgOzIrRjpwTZNmBNj0BgAEq1vPFW+s2kATypRbKH6iz21+QLgdUf
pHII+/MlvnoxnY5tv8vYqEGSFaxi8Fmcq8s=
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:28 2025 by rpki-client