Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/55293eba-48ab-3e62-b2d3-6563f352a4e1.roa
File:                     55293eba-48ab-3e62-b2d3-6563f352a4e1.roa (raw, json)
Hash identifier:          3qPHKzFg6T5XOT1ZKEwWhQV2873DyqOMxL42wfGseh0=
Subject key identifier:   2E:C3:4E:65:3F:D9:A7:BA:EC:23:C9:48:E8:2E:D0:01:8E:B0:45:97
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584A0C0561953978B7E894657C80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/55293eba-48ab-3e62-b2d3-6563f352a4e1.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33059
IP address blocks:        2605:8300::/48 maxlen: 48
                          2605:8300:1::/48 maxlen: 48
                          2605:8300:3::/48 maxlen: 48
                          2605:8300:4::/48 maxlen: 48
                          2605:8300:5::/48 maxlen: 48
                          2605:8300:6::/48 maxlen: 48
                          2605:8300:7::/48 maxlen: 48
                          2605:8300:9::/48 maxlen: 48
                          2605:8300:a::/48 maxlen: 48
                          2605:8300:b::/48 maxlen: 48
                          2605:8300:c::/48 maxlen: 48
                          2605:8300:d::/48 maxlen: 48
                          2605:8300:10::/48 maxlen: 48
                          2605:8300:11::/48 maxlen: 48
                          2605:8300:12::/48 maxlen: 48
                          2605:8300:15::/48 maxlen: 48
                          2605:8300:16::/48 maxlen: 48
                          2605:8300:18::/48 maxlen: 48
                          2605:8300:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:61:95:39:78:b7:e8:94:65:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=68f4e1af-067c-4b74-b293-ed17584c6253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:c6:6e:61:3f:4b:24:1b:32:a2:0e:3b:11:
                    f9:9b:67:fe:08:56:57:d7:00:f8:5a:5f:ef:50:11:
                    60:39:1f:4c:58:e3:ed:f8:ac:e4:35:e9:8b:b8:e2:
                    53:23:e1:9b:62:62:3d:09:75:9c:bb:d9:9e:5b:b7:
                    e5:6c:b5:fa:6d:6d:42:07:e6:72:3a:a7:df:76:16:
                    36:39:1e:34:c2:6d:6e:ee:3c:45:18:9e:89:14:54:
                    d6:34:55:e3:e5:0c:3e:5b:d5:c7:f0:5c:58:30:bd:
                    75:0e:b4:75:95:73:a7:79:e2:89:fd:22:28:c6:f3:
                    77:fe:84:d1:a7:3a:12:ec:4b:be:b0:07:66:80:43:
                    3f:79:5a:c7:a8:3d:0a:cf:40:c9:de:69:5d:d5:d5:
                    74:ee:e1:3f:fc:f0:80:f5:81:be:af:e3:df:cb:61:
                    ac:01:68:a0:50:0a:01:55:1b:fc:5a:3c:7e:a7:6a:
                    8f:d5:0f:ad:e8:d2:03:00:ee:79:38:53:e2:d1:a1:
                    1f:bb:d0:59:87:d6:82:50:7e:d3:b7:20:8a:f8:5e:
                    c1:02:5d:01:e9:9f:c1:a5:f7:c7:c0:8e:c4:7d:9a:
                    7b:cf:db:1d:e3:44:ae:31:d5:90:84:ad:6a:8e:22:
                    4f:fe:b0:e9:28:37:47:da:b5:65:15:c4:4d:dc:52:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C3:4E:65:3F:D9:A7:BA:EC:23:C9:48:E8:2E:D0:01:8E:B0:45:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/55293eba-48ab-3e62-b2d3-6563f352a4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300::/47
                  2605:8300:3::-2605:8300:7:ffff:ffff:ffff:ffff:ffff
                  2605:8300:9::-2605:8300:d:ffff:ffff:ffff:ffff:ffff
                  2605:8300:10::-2605:8300:12:ffff:ffff:ffff:ffff:ffff
                  2605:8300:15::-2605:8300:16:ffff:ffff:ffff:ffff:ffff
                  2605:8300:18::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:da:2f:30:f2:96:c2:96:f8:45:4f:da:50:26:05:55:3f:8e:
         3f:e5:b1:88:bd:a2:85:62:7d:b0:af:0e:fd:16:8a:16:ba:33:
         9f:0b:75:dc:be:e9:b4:e4:15:03:bc:46:02:b6:7b:ec:1d:47:
         86:0d:af:a6:97:5c:0c:3f:da:48:78:0e:df:0f:bf:4e:e8:8f:
         35:2b:81:7e:6c:bd:39:24:b9:ba:25:72:31:7d:fa:39:06:53:
         5c:89:12:4b:3b:39:d0:ed:4f:49:ad:86:1a:9a:01:b7:63:f5:
         ee:53:08:ad:d8:76:aa:5b:42:2d:36:7f:ee:7d:1c:04:14:3b:
         b4:a8:67:e7:18:24:c3:8a:4d:73:28:d9:7b:06:e1:fb:12:ec:
         d6:6e:d6:65:a0:88:ca:b7:22:92:1b:7d:7e:bb:64:da:2a:4a:
         5d:03:93:ee:a7:34:29:0a:7a:de:8d:6f:1d:9e:71:fa:6b:df:
         5c:99:43:2b:79:6b:be:34:70:ea:89:ec:7e:05:ad:ea:b4:d3:
         2f:ee:f4:9d:b1:fb:0a:70:87:ab:26:bd:2a:d0:9e:52:ff:3f:
         08:bf:eb:c1:a4:87:89:91:73:f9:4c:f4:15:2b:01:7f:2b:ee:
         48:c0:57:90:ef:9e:fe:9f:27:11:b9:e6:f6:53:f3:10:10:7d:
         29:4c:84:2e
-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgIUAQ0Mn0MoWEoMBWGVOXi36JRlfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NjhmNGUxYWYtMDY3Yy00Yjc0LWIyOTMtZWQxNzU4NGM2MjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLjGbmE/SyQbMqIOOxH5m2f+CFZX1wD4Wl/v
UBFgOR9MWOPt+KzkNemLuOJTI+GbYmI9CXWcu9meW7flbLX6bW1CB+ZyOqffdhY2
OR40wm1u7jxFGJ6JFFTWNFXj5Qw+W9XH8FxYML11DrR1lXOneeKJ/SIoxvN3/oTR
pzoS7Eu+sAdmgEM/eVrHqD0Kz0DJ3mld1dV07uE//PCA9YG+r+Pfy2GsAWigUAoB
VRv8Wjx+p2qP1Q+t6NIDAO55OFPi0aEfu9BZh9aCUH7TtyCK+F7BAl0B6Z/BpffH
wI7EfZp7z9sd40SuMdWQhK1qjiJP/rDpKDdH2rVlFcRN3FJCJwIDAQABo4IDsTCC
A60wHQYDVR0OBBYEFC7DTmU/2ae67CPJSOgu0AGOsEWXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNTUyOTNlYmEtNDhhYi0z
ZTYyLWIyZDMtNjU2M2YzNTJhNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAAjBiAwcBJgWDAAAA
MBIDBwAmBYMAAAMDBwMmBYMAAAAwEgMHACYFgwAACQMHASYFgwAADDASAwcEJgWD
AAAQAwcAJgWDAAASMBIDBwAmBYMAABUDBwAmBYMAABYDBwEmBYMAABgwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAlNovMPKWwpb4RU/aUCYFVT+OP+WxiL2ihWJ9sK8O/RaKFroznwt13L7ptOQV
A7xGArZ77B1Hhg2vppdcDD/aSHgO3w+/TuiPNSuBfmy9OSS5uiVyMX36OQZTXIkS
Szs50O1PSa2GGpoBt2P17lMIrdh2qltCLTZ/7n0cBBQ7tKhn5xgkw4pNcyjZewbh
+xLs1m7WZaCIyrcikht9frtk2ipKXQOT7qc0KQp63o1vHZ5x+mvfXJlDK3lrvjRw
6onsfgWt6rTTL+70nbH7CnCHqya9KtCeUv8/CL/rwaSHiZFz+Uz0FSsBfyvuSMBX
kO+e/p8nEbnm9lPzEBB9KUyELg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 16:32:16 2025 by rpki-client