Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c634a812-60d4-3c22-8b68-53b6b588e7d6.roa
File:                     c634a812-60d4-3c22-8b68-53b6b588e7d6.roa (raw, json)
Hash identifier:          xi9JpqpsoKGM0pTads4iie2bJHD0uLM2SQ+hZ2sSVwg=
Subject key identifier:   FE:7D:B6:BF:13:AD:CB:B6:6F:4B:33:8F:99:06:6D:09:A3:61:73:11
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858499829C0A6D8921E66F3D532A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c634a812-60d4-3c22-8b68-53b6b588e7d6.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     13335
IP address blocks:        2606:4700:402a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:c0:a6:d8:92:1e:66:f3:d5:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=63d8fc24-6222-4364-b2e1-0da8fc51385b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:72:e1:b8:e0:fe:f5:55:5f:17:28:be:d9:
                    a8:3a:4b:3f:32:ff:52:02:80:38:0a:5e:a3:58:c9:
                    bc:18:72:14:10:af:be:26:e3:59:35:a6:5a:1d:6c:
                    49:c4:05:ed:ad:d8:42:07:47:71:35:49:f2:b2:8d:
                    e5:2b:89:20:9e:c1:da:36:22:7c:c9:5b:53:bb:71:
                    d1:0c:e8:43:bd:dc:76:9a:28:a8:58:97:89:54:9a:
                    8e:ce:cb:0d:7b:c5:ec:d9:6d:44:6d:1d:a7:2f:96:
                    50:f3:af:3a:2d:57:43:a5:39:e8:b3:fc:e5:f6:21:
                    ff:fd:20:ef:b0:51:31:ce:4c:0a:d4:d2:cf:b9:cc:
                    db:07:89:da:9d:35:96:96:7d:4c:dc:93:e0:56:8c:
                    00:0b:15:34:ae:b2:37:cd:4f:4a:29:14:ea:26:71:
                    2c:a0:5c:df:a3:c1:34:6a:22:23:5e:1d:41:da:68:
                    90:ba:9e:13:02:86:57:18:17:28:56:e7:59:a3:0c:
                    0c:39:38:82:f4:c8:80:3e:71:7d:76:ba:eb:29:24:
                    db:bc:59:f6:38:d4:c3:4c:ec:83:aa:55:13:a4:21:
                    f4:70:99:4e:22:04:6c:d8:d6:4e:fa:4f:6d:fa:11:
                    49:b5:8d:c3:3a:80:f9:01:62:57:e1:0a:3e:a6:7a:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7D:B6:BF:13:AD:CB:B6:6F:4B:33:8F:99:06:6D:09:A3:61:73:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c634a812-60d4-3c22-8b68-53b6b588e7d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:402a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a0:55:27:dc:ad:10:8c:72:74:f7:c1:3e:00:bc:4e:27:bc:
         5a:bb:57:0e:5f:cb:d1:12:51:15:d9:bd:dd:d1:96:69:21:38:
         74:4b:bb:18:22:d4:91:82:fd:96:c3:7b:93:de:65:74:69:c7:
         c5:fc:9b:5a:b9:41:4f:c5:05:c4:2f:96:90:6c:ac:e9:83:59:
         a5:b1:49:6b:ed:ad:ef:59:d0:74:bb:66:58:2b:ad:65:db:d6:
         74:68:c7:c6:9e:9b:26:64:cd:55:d8:15:09:32:70:1c:27:a9:
         a4:df:82:81:cc:bb:ec:6b:03:73:6e:a6:93:5e:51:ab:27:02:
         4a:b3:07:d0:a2:68:1c:2e:67:a9:a6:81:c0:8f:c7:8f:0a:78:
         56:b4:44:2d:16:c7:f6:c4:1e:5c:ba:92:29:a6:9e:f5:9c:85:
         e4:0a:f7:5a:69:4f:9e:34:f3:55:78:1a:38:6c:e0:47:b7:65:
         ed:0e:4d:06:1b:8d:7d:59:b8:0c:26:1d:36:c2:e4:a6:05:76:
         43:e4:37:b5:b9:42:a5:9f:07:b7:6b:d3:8d:40:0d:a5:28:f0:
         df:51:5f:8d:15:a0:e8:3f:99:1d:92:49:f2:01:b2:27:e0:6f:
         95:ae:1a:15:09:92:4a:97:61:c8:3b:80:03:cb:c3:2d:53:78:
         a4:fb:26:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmYKcCm2JIeZvPVMqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
NjNkOGZjMjQtNjIyMi00MzY0LWIyZTEtMGRhOGZjNTEzODViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQNy4bjg/vVVXxcovtmoOks/Mv9SAoA4Cl6j
WMm8GHIUEK++JuNZNaZaHWxJxAXtrdhCB0dxNUnyso3lK4kgnsHaNiJ8yVtTu3HR
DOhDvdx2miioWJeJVJqOzssNe8Xs2W1EbR2nL5ZQ8686LVdDpTnos/zl9iH//SDv
sFExzkwK1NLPuczbB4nanTWWln1M3JPgVowACxU0rrI3zU9KKRTqJnEsoFzfo8E0
aiIjXh1B2miQup4TAoZXGBcoVudZowwMOTiC9MiAPnF9drrrKSTbvFn2ONTDTOyD
qlUTpCH0cJlOIgRs2NZO+k9t+hFJtY3DOoD5AWJX4Qo+pnpYCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP59tr8Trcu2b0szj5kGbQmjYXMRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzYzNGE4MTItNjBkNC0z
YzIyLThiNjgtNTNiNmI1ODhlN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEAq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJOgVSfcrRCMcnT3wT4AvE4nvFq7Vw5fy9ESURXZvd3RlmkhOHRL
uxgi1JGC/ZbDe5PeZXRpx8X8m1q5QU/FBcQvlpBsrOmDWaWxSWvtre9Z0HS7Zlgr
rWXb1nRox8aemyZkzVXYFQkycBwnqaTfgoHMu+xrA3NuppNeUasnAkqzB9CiaBwu
Z6mmgcCPx48KeFa0RC0Wx/bEHly6kimmnvWcheQK91ppT54081V4Gjhs4Ee3Ze0O
TQYbjX1ZuAwmHTbC5KYFdkPkN7W5QqWfB7dr041ADaUo8N9RX40VoOg/mR2SSfIB
sifgb5WuGhUJkkqXYcg7gAPLwy1TeKT7Jig=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:49 2025 by rpki-client