Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa
File:                     c090b3b8-860c-3590-89f4-cdcee08adef5.roa (raw, json)
Hash identifier:          GPE0KuloScWj412xU3cKYLxJZvc/DM/yZtWkiLQLtnw=
Subject key identifier:   0C:61:0A:43:3D:10:47:43:A1:D9:10:6D:86:43:E3:22:9E:05:78:48
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285849FE1006120035B1A8D5E60380
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16839
IP address blocks:        2606:3600:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:10:06:12:00:35:b1:a8:d5:e6:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=b9bd045f-9f36-42f6-a003-0aa46b2d64cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:e7:b0:b7:91:d6:43:2d:34:c6:5c:49:5d:
                    f0:35:b7:d5:dd:d9:32:d5:f5:9d:01:4a:29:ee:11:
                    ca:bd:8a:23:a5:0d:cd:b5:7c:76:f5:02:94:71:24:
                    7d:6a:4b:ad:11:60:40:72:c2:72:4d:3e:cb:3e:17:
                    58:94:7b:78:2d:42:e9:cf:f0:26:de:4c:0a:27:be:
                    e2:13:0a:b3:1a:13:4c:c2:cf:59:46:eb:f0:26:67:
                    41:f2:bc:2b:bb:e0:1c:86:20:1c:2d:c9:6a:a5:7b:
                    e7:9e:8f:4f:18:45:4a:5a:66:9c:2c:b5:40:c6:76:
                    9a:d3:96:8f:cd:3a:ba:09:71:90:db:69:d1:9e:fe:
                    ac:28:71:ea:d1:5d:42:59:16:d0:7d:d5:35:2f:62:
                    2a:21:d8:54:5b:d7:c7:28:1f:ba:05:07:bb:70:9e:
                    b8:c2:38:98:a7:b6:73:cb:42:77:ae:8a:59:0c:b8:
                    8c:cf:03:be:54:14:81:00:34:17:20:11:32:22:53:
                    4a:fa:26:a5:98:41:65:72:c7:22:24:c6:cd:c2:85:
                    30:1c:b7:3e:d0:78:50:71:7c:a4:62:b4:b9:db:88:
                    f5:51:8c:c7:50:70:69:93:d5:40:2d:ad:f9:9b:01:
                    bb:7f:90:19:29:b0:7a:d3:21:1d:83:58:3e:19:c3:
                    5d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:61:0A:43:3D:10:47:43:A1:D9:10:6D:86:43:E3:22:9E:05:78:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:57:02:60:20:6e:c1:51:a9:46:b7:70:95:46:09:9f:61:
         41:2c:7e:bd:9b:84:75:48:d9:7a:f9:9e:54:7f:1e:c4:7a:e4:
         68:f8:5f:7b:09:dc:43:0e:d3:c6:c4:c0:f1:2c:1f:ab:c7:55:
         93:4a:af:e2:61:d6:47:ed:d1:12:a3:12:31:bf:46:3b:c6:7d:
         cb:27:2a:1c:ae:10:e4:45:c2:8d:ad:19:f1:11:24:c4:5a:29:
         ff:e9:d4:7a:53:ab:8c:37:39:cd:81:0b:09:4c:8b:33:04:ea:
         c8:38:d5:dc:3f:07:01:a1:d6:f5:97:7a:63:aa:60:32:f0:03:
         d3:c5:ee:df:d8:b5:95:cd:60:61:68:d5:3f:f9:ca:77:21:c6:
         57:dd:c4:d4:37:72:24:04:c8:2e:71:7f:e3:a6:22:5a:14:da:
         df:ba:b3:95:93:9c:9d:cd:d3:d2:ab:df:02:77:c5:a4:5a:90:
         78:4e:8d:7b:44:27:aa:81:48:96:33:62:ed:ad:8d:88:79:41:
         8a:e9:c9:e1:db:ed:38:88:66:e1:d1:df:e5:06:50:bd:72:87:
         51:c4:03:19:6c:06:2f:7f:b8:19:2c:98:48:8b:82:17:a3:4f:
         8a:4a:af:31:63:eb:48:ba:12:8b:32:34:41:b6:a5:e4:3a:f0:
         dd:39:1d:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+EAYSADWxqNXmA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
YjliZDA0NWYtOWYzNi00MmY2LWEwMDMtMGFhNDZiMmQ2NGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/3nsLeR1kMtNMZcSV3wNbfV3dky1fWdAUop
7hHKvYojpQ3NtXx29QKUcSR9akutEWBAcsJyTT7LPhdYlHt4LULpz/Am3kwKJ77i
EwqzGhNMws9ZRuvwJmdB8rwru+AchiAcLclqpXvnno9PGEVKWmacLLVAxnaa05aP
zTq6CXGQ22nRnv6sKHHq0V1CWRbQfdU1L2IqIdhUW9fHKB+6BQe7cJ64wjiYp7Zz
y0J3ropZDLiMzwO+VBSBADQXIBEyIlNK+ialmEFlcsciJMbNwoUwHLc+0HhQcXyk
YrS524j1UYzHUHBpk9VALa35mwG7f5AZKbB60yEdg1g+GcNdZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAxhCkM9EEdDodkQbYZD4yKeBXhIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzA5MGIzYjgtODYwYy0z
NTkwLTg5ZjQtY2RjZWUwOGFkZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACocVwJgIG7BUalGt3CVRgmfYUEsfr2bhHVI2Xr5nlR/HsR65Gj4
X3sJ3EMO08bEwPEsH6vHVZNKr+Jh1kft0RKjEjG/RjvGfcsnKhyuEORFwo2tGfER
JMRaKf/p1HpTq4w3Oc2BCwlMizME6sg41dw/BwGh1vWXemOqYDLwA9PF7t/YtZXN
YGFo1T/5ynchxlfdxNQ3ciQEyC5xf+OmIloU2t+6s5WTnJ3N09Kr3wJ3xaRakHhO
jXtEJ6qBSJYzYu2tjYh5QYrpyeHb7TiIZuHR3+UGUL1yh1HEAxlsBi9/uBksmEiL
ghejT4pKrzFj60i6EosyNEG2peQ68N05Hfg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:53 2025 by rpki-client