Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa
File:                     df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa (raw, json)
Hash identifier:          q6BvmdAjKvJMy8Ciebsl7q5z4TJluDUG3SkeI58yT40=
Subject key identifier:   31:F7:EB:AD:DA:67:75:E6:45:4D:CC:E8:3E:9D:FB:31:9D:F9:4C:1A
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285849E7BA71DF11809A58601D8E20
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     26211
IP address blocks:        2620:100:9000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:71:df:11:80:9a:58:60:1d:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=0334f261-d50e-40ee-96c3-c36cc3041f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ce:b9:bb:5d:a8:e3:1a:4f:11:a7:ef:29:cf:
                    26:9f:47:62:cd:5c:e4:d7:0e:03:51:77:9c:74:20:
                    31:fe:16:ab:94:30:1f:8a:1c:17:d8:57:88:e5:9d:
                    49:2b:9f:c7:90:62:49:05:31:de:88:15:91:e9:3c:
                    a7:bc:cb:22:00:6b:7f:41:b2:25:5f:69:75:2f:e1:
                    fe:c4:30:50:91:6c:58:c1:5e:00:af:b9:dc:9f:65:
                    c6:9d:6d:65:86:80:ca:a9:64:5d:a5:28:ea:89:d1:
                    ae:ee:2e:af:fa:50:d0:ca:ad:7a:01:c1:58:5c:45:
                    31:92:99:a7:ff:20:6d:46:a4:58:a5:bb:6c:08:7b:
                    4a:37:4a:dd:fd:0a:77:60:bb:94:09:1b:09:00:41:
                    28:49:3b:f5:dd:97:d9:75:69:be:91:77:04:7c:79:
                    0d:62:75:9d:0c:1e:23:7e:df:4e:5e:02:4c:84:ca:
                    f3:ba:ad:a8:32:6d:8a:4b:7b:0f:34:a1:62:78:12:
                    26:fc:54:26:3e:30:e0:f7:a7:5f:95:fc:bd:47:79:
                    fb:c7:f0:64:47:72:b8:c7:66:30:23:1c:50:76:86:
                    bc:5c:fc:b4:17:77:ec:eb:45:b8:92:b0:20:60:cb:
                    b9:2a:5c:70:59:f4:89:f5:79:df:84:14:5d:03:d4:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F7:EB:AD:DA:67:75:E6:45:4D:CC:E8:3E:9D:FB:31:9D:F9:4C:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:100:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:dc:77:91:f6:bb:18:7a:76:8c:de:d4:fe:fe:b0:97:da:fb:
         ad:4d:8f:e2:f7:aa:94:a2:47:e7:7c:ed:cd:cd:2b:cc:bf:59:
         8a:c7:7c:af:df:f8:e9:50:ab:c4:91:46:a7:a1:8c:11:ef:98:
         b1:0c:cc:93:0d:17:02:64:2f:00:5c:b4:87:11:a4:b7:a3:d7:
         89:a6:3d:c0:39:02:27:25:c6:ed:95:6a:ef:b5:88:03:0b:e7:
         9c:6a:2a:50:db:6e:44:a2:46:88:14:37:b0:a6:ac:9d:bf:ac:
         2e:c2:01:4c:f8:cb:79:2d:ec:19:83:ee:5b:3a:23:50:28:bc:
         6b:d3:19:d0:fd:01:2f:3b:04:5e:b7:e8:30:b4:a2:d4:51:14:
         17:68:4d:61:27:ab:22:ba:4a:eb:f8:03:f3:67:1d:0e:8d:78:
         11:a3:ad:d5:51:2d:15:46:36:33:a9:c2:c1:0b:4a:db:63:59:
         36:cb:c9:15:b0:85:d5:57:cd:92:6b:b5:5d:ea:da:f2:93:c7:
         9a:bc:d5:b9:59:2d:20:7f:3b:dc:79:e9:2d:52:e6:ea:2d:8f:
         04:39:6c:05:e2:89:cd:c6:31:1e:45:13:63:1a:05:47:f4:61:
         10:5b:bc:81:21:1a:46:b4:b6:62:6d:ec:c1:df:9d:36:03:d9:
         a3:53:49:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnnunHfEYCaWGAdjiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
MDMzNGYyNjEtZDUwZS00MGVlLTk2YzMtYzM2Y2MzMDQxZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc65u12o4xpPEafvKc8mn0dizVzk1w4DUXec
dCAx/harlDAfihwX2FeI5Z1JK5/HkGJJBTHeiBWR6TynvMsiAGt/QbIlX2l1L+H+
xDBQkWxYwV4Ar7ncn2XGnW1lhoDKqWRdpSjqidGu7i6v+lDQyq16AcFYXEUxkpmn
/yBtRqRYpbtsCHtKN0rd/Qp3YLuUCRsJAEEoSTv13ZfZdWm+kXcEfHkNYnWdDB4j
ft9OXgJMhMrzuq2oMm2KS3sPNKFieBIm/FQmPjDg96dflfy9R3n7x/BkR3K4x2Yw
IxxQdoa8XPy0F3fs60W4krAgYMu5KlxwWfSJ9XnfhBRdA9QRlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDH3663aZ3XmRU3M6D6d+zGd+UwaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZGYzY2IxYWUtYjI3ZC0z
MGY5LWE5ZGMtODVkM2I1YjlmNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABAJAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALfcd5H2uxh6doze1P7+sJfa+61Nj+L3qpSiR+d87c3NK8y/WYrH
fK/f+OlQq8SRRqehjBHvmLEMzJMNFwJkLwBctIcRpLej14mmPcA5Aiclxu2Vau+1
iAML55xqKlDbbkSiRogUN7CmrJ2/rC7CAUz4y3kt7BmD7ls6I1AovGvTGdD9AS87
BF636DC0otRRFBdoTWEnqyK6Suv4A/NnHQ6NeBGjrdVRLRVGNjOpwsELSttjWTbL
yRWwhdVXzZJrtV3q2vKTx5q81blZLSB/O9x56S1S5uotjwQ5bAXiic3GMR5FE2Ma
BUf0YRBbvIEhGka0tmJt7MHfnTYD2aNTSd8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:21:56 2025 by rpki-client