Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa
File:                     9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa (raw, json)
Hash identifier:          2Jt9F/PynJVsgCQr1rumY/SFs2h7+ga8Pfn+WrxiFmY=
Subject key identifier:   B3:FE:AC:A0:94:6F:5A:4F:14:AA:22:EA:A5:DE:9E:D0:F7:16:64:1A
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285849FE10061EFD75A7DA45311B80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16839
IP address blocks:        2606:3600:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:10:06:1e:fd:75:a7:da:45:31:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=4bca32a3-d776-4dea-a5bc-5febe120ecfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:2a:08:33:47:41:ee:99:38:a1:c6:69:dd:
                    f4:73:ca:5f:b8:01:eb:2d:2e:9d:f9:a1:cd:07:36:
                    7d:6c:06:12:4c:e5:e0:e8:8b:9e:47:18:ef:01:d6:
                    ba:57:3b:a4:7e:ff:0c:f7:bf:ec:0c:1c:f6:21:ff:
                    09:4a:fc:ad:58:8b:6b:c2:15:a7:fe:36:5a:91:33:
                    d0:9b:48:b8:6f:02:78:d9:1d:18:3e:52:03:a2:b3:
                    73:5c:66:15:50:29:b0:b2:50:12:91:78:b3:8d:e6:
                    16:88:8e:8a:3a:63:49:50:0a:47:4d:f7:c7:26:41:
                    c7:5f:9d:1f:0d:12:9f:24:e3:af:a1:6a:c7:33:e4:
                    bf:65:78:96:14:45:f5:3f:9c:a8:b6:5d:4b:bc:44:
                    a4:61:cf:84:a6:10:40:cd:07:4e:54:81:b4:b3:e1:
                    fe:52:84:b7:43:af:42:83:3a:fa:0e:ee:2c:cf:71:
                    3d:78:b0:9c:21:6c:85:12:13:fc:c1:ae:cc:20:55:
                    8d:6c:cd:b8:68:35:f5:3f:b0:68:9f:d9:fb:a9:c4:
                    ac:5d:39:f9:d2:48:a2:53:f2:85:a8:99:a0:f1:e3:
                    34:34:ab:2f:e5:85:5a:4d:1b:87:e2:2d:47:e5:b6:
                    7e:86:a2:44:36:51:42:c3:02:f9:61:05:43:03:2e:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FE:AC:A0:94:6F:5A:4F:14:AA:22:EA:A5:DE:9E:D0:F7:16:64:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9d0cc600-34d6-3e3e-b10b-27dc2b5d0539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:db:35:48:3f:1f:a1:8e:e9:24:0a:5f:97:af:e8:97:64:72:
         39:2d:19:dc:2e:6b:51:53:6e:66:ed:e1:1e:92:c2:44:c0:f0:
         ff:3a:4e:1f:2d:0d:9a:09:7e:a3:2d:91:5e:2a:cd:2f:4d:91:
         65:0c:36:20:b7:ed:ac:53:7d:70:fa:72:3c:9a:0f:94:61:d8:
         8b:f5:b7:2b:69:cf:c5:3b:db:e6:41:67:8c:72:13:70:1b:f6:
         72:a0:6a:38:f1:a5:4a:08:70:6a:32:57:f3:42:41:d9:77:24:
         c5:ae:3d:e7:51:d4:01:c5:41:3e:91:64:f8:83:2b:a5:92:34:
         3a:b6:5f:e2:5e:f8:c3:b5:b9:e0:5f:c5:ae:aa:b2:43:2f:65:
         08:41:6f:6f:6e:4e:b5:b0:6d:a1:e4:ff:eb:50:a7:8c:13:c2:
         08:25:c0:84:8a:ff:5f:d7:8a:65:56:8a:c3:e9:1a:86:72:ad:
         3a:e1:9b:35:7b:da:ec:2e:f8:5d:58:68:ca:e2:20:f8:58:85:
         88:60:76:a7:13:00:db:27:be:17:35:2b:f2:b9:63:ec:b8:0d:
         27:0b:9f:8c:1d:df:83:ed:04:c7:04:14:a7:c5:81:77:09:9e:
         15:ae:4b:e3:f6:5d:e9:5f:55:7b:63:e1:f8:f3:95:de:b3:9a:
         e6:f8:d9:2a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn+EAYe/XWn2kUxG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
NGJjYTMyYTMtZDc3Ni00ZGVhLWE1YmMtNWZlYmUxMjBlY2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHgqCDNHQe6ZOKHGad30c8pfuAHrLS6d+aHN
BzZ9bAYSTOXg6IueRxjvAda6Vzukfv8M97/sDBz2If8JSvytWItrwhWn/jZakTPQ
m0i4bwJ42R0YPlIDorNzXGYVUCmwslASkXizjeYWiI6KOmNJUApHTffHJkHHX50f
DRKfJOOvoWrHM+S/ZXiWFEX1P5yotl1LvESkYc+EphBAzQdOVIG0s+H+UoS3Q69C
gzr6Du4sz3E9eLCcIWyFEhP8wa7MIFWNbM24aDX1P7Bon9n7qcSsXTn50kiiU/KF
qJmg8eM0NKsv5YVaTRuH4i1H5bZ+hqJENlFCwwL5YQVDAy5ptQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLP+rKCUb1pPFKoi6qXentD3FmQaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOWQwY2M2MDAtMzRkNi0z
ZTNlLWIxMGItMjdkYzJiNWQwNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2ABAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAf9s1SD8foY7pJApfl6/ol2RyOS0Z3C5rUVNuZu3hHpLCRMDw/zpO
Hy0Nmgl+oy2RXirNL02RZQw2ILftrFN9cPpyPJoPlGHYi/W3K2nPxTvb5kFnjHIT
cBv2cqBqOPGlSghwajJX80JB2Xckxa4951HUAcVBPpFk+IMrpZI0OrZf4l74w7W5
4F/FrqqyQy9lCEFvb25OtbBtoeT/61CnjBPCCCXAhIr/X9eKZVaKw+kahnKtOuGb
NXva7C74XVhoyuIg+FiFiGB2pxMA2ye+FzUr8rlj7LgNJwufjB3fg+0ExwQUp8WB
dwmeFa5L4/Zd6V9Ve2Ph+POV3rOa5vjZKg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:39 2025 by rpki-client