Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa
File:                     10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa (raw, json)
Hash identifier:          y7f7hR1bs5+0+SrSHdM1J01ZRgoQM8SvucKANypi/nU=
Subject key identifier:   31:F1:06:46:83:B4:5A:DB:D4:D1:4E:F8:46:3D:58:50:AB:5A:8C:67
Certificate issuer:       /CN=e20283c0-db21-4d92-ac23-4da5857d3bfd
Certificate serial:       010D0C9F4328584A14656CC4C92B543D2079CB80
Authority key identifier: 26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     11260
IP address blocks:        2604:1ec0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6c:c4:c9:2b:54:3d:20:79:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20283c0-db21-4d92-ac23-4da5857d3bfd
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=4be1009b-23c9-4fba-9dcc-8b3b3405a36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:84:56:25:98:c8:e4:26:2e:70:47:78:7c:
                    52:10:9f:26:1e:53:94:a0:5c:98:08:19:9e:14:a4:
                    3f:c4:0f:5b:cd:1c:41:0a:07:bb:f5:9e:5c:29:e6:
                    7a:ab:89:9f:00:bf:9d:37:4d:82:68:d4:0c:01:1e:
                    13:4b:b1:03:c7:fa:de:9c:e8:2c:c1:3a:3e:c6:e8:
                    63:8e:6a:dd:dc:07:a9:cc:f6:7c:c0:db:0a:16:df:
                    52:6e:7e:68:0e:9e:c9:e6:0d:e5:e5:2e:b6:97:4a:
                    ac:8d:ca:ec:04:92:6f:93:0e:98:ba:9a:1f:37:e9:
                    d1:5f:66:70:e9:90:60:97:0b:35:74:a0:07:7a:ef:
                    7e:96:c4:6a:6e:3c:59:42:d8:94:a4:92:2c:bc:ff:
                    58:48:7b:ed:ca:1b:90:a3:7e:2c:1f:28:75:72:bf:
                    19:55:4e:95:2f:52:40:e1:8d:37:78:74:70:7f:3f:
                    61:ee:01:e2:37:08:9c:b7:a0:da:9c:5d:0c:24:63:
                    d1:f7:7b:2a:c0:94:14:84:d0:67:44:b9:a1:35:50:
                    7c:1d:7e:d6:19:0e:12:33:01:63:e7:a0:29:56:2f:
                    f7:85:66:c3:f6:c7:ed:5d:8c:21:68:e3:fa:4b:c0:
                    98:b5:d0:46:fa:93:cf:bf:05:f4:62:e6:3e:9c:f7:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F1:06:46:83:B4:5A:DB:D4:D1:4E:F8:46:3D:58:50:AB:5A:8C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/10dd6a60-aa94-3c67-b9b8-e8693ef21611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.crl

            X509v3 Authority Key Identifier:
                keyid:26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1ec0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:35:3e:37:4c:a2:71:c3:8a:fd:8e:a7:ec:87:6c:7b:ce:ca:
         26:8c:09:76:3a:81:d5:da:6b:60:d1:b6:0a:ed:11:10:d0:d7:
         b1:d9:23:a3:06:4e:9d:45:f4:8c:a7:71:99:ac:90:bf:5b:77:
         b4:3b:5c:91:4a:b6:27:d5:e5:33:b6:b7:32:8a:c2:94:a5:40:
         e3:81:26:24:7c:b2:0b:d9:fb:b1:01:0b:ce:33:fd:ba:7c:5f:
         8a:aa:f1:b8:6e:75:a5:84:f9:d4:ef:65:22:03:65:34:94:72:
         15:0f:85:37:91:57:49:e2:7b:bc:be:c8:aa:8f:c8:62:65:01:
         09:d4:8e:db:9e:b5:fe:f0:38:d3:c6:2d:ea:81:b5:5a:a1:4e:
         2b:ef:21:cf:fc:0e:bf:c6:03:03:e6:54:aa:87:50:77:5a:4a:
         ea:bf:f4:97:ae:c8:a2:1f:3a:12:38:ee:e6:40:cf:d8:b0:4f:
         3c:56:77:94:ab:95:6c:68:09:30:91:41:a6:23:16:b7:7b:23:
         62:6b:55:c9:0a:f3:eb:d5:10:85:71:97:47:b2:fe:f6:51:3d:
         e7:8a:e0:6b:9c:db:d7:ea:48:40:d4:30:44:9b:93:67:da:13:
         40:2c:83:b7:a6:17:1f:90:63:f3:6f:b2:2f:6c:cb:89:54:18:
         ff:4f:44:0a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoUZWzEyStUPSB5y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMjgzYzAtZGIyMS00ZDkyLWFjMjMtNGRhNTg1N2Qz
YmZkMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
NGJlMTAwOWItMjNjOS00ZmJhLTlkY2MtOGIzYjM0MDVhMzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE2EViWYyOQmLnBHeHxSEJ8mHlOUoFyYCBme
FKQ/xA9bzRxBCge79Z5cKeZ6q4mfAL+dN02CaNQMAR4TS7EDx/renOgswTo+xuhj
jmrd3AepzPZ8wNsKFt9Sbn5oDp7J5g3l5S62l0qsjcrsBJJvkw6YupofN+nRX2Zw
6ZBglws1dKAHeu9+lsRqbjxZQtiUpJIsvP9YSHvtyhuQo34sHyh1cr8ZVU6VL1JA
4Y03eHRwfz9h7gHiNwict6DanF0MJGPR93sqwJQUhNBnRLmhNVB8HX7WGQ4SMwFj
56ApVi/3hWbD9sftXYwhaOP6S8CYtdBG+pPPvwX0YuY+nPd0ewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDHxBkaDtFrb1NFO+EY9WFCrWoxnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMjAy
ODNjMC1kYjIxLTRkOTItYWMyMy00ZGE1ODU3ZDNiZmQvMTBkZDZhNjAtYWE5NC0z
YzY3LWI5YjgtZTg2OTNlZjIxNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTIwMjgzYzAtZGIyMS00ZDkyLWFj
MjMtNGRhNTg1N2QzYmZkL2UyMDI4M2MwLWRiMjEtNGQ5Mi1hYzIzLTRkYTU4NTdk
M2JmZC5jcmwwHwYDVR0jBBgwFoAUJtJ74D8KSKohrvxJ62UIMxcDic8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lMjAyODNjMC1kYjIxLTRkOTItYWMyMy00ZGE1
ODU3ZDNiZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgQewAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYjU+N0yiccOK/Y6n7Idse87KJowJdjqB1dprYNG2Cu0RENDXsdkj
owZOnUX0jKdxmayQv1t3tDtckUq2J9XlM7a3MorClKVA44EmJHyyC9n7sQELzjP9
unxfiqrxuG51pYT51O9lIgNlNJRyFQ+FN5FXSeJ7vL7Iqo/IYmUBCdSO2561/vA4
08Yt6oG1WqFOK+8hz/wOv8YDA+ZUqodQd1pK6r/0l67Ioh86Ejju5kDP2LBPPFZ3
lKuVbGgJMJFBpiMWt3sjYmtVyQrz69UQhXGXR7L+9lE954rga5zb1+pIQNQwRJuT
Z9oTQCyDt6YXH5Bj82+yL2zLiVQY/09ECg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:16 2025 by rpki-client