Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
File:                     c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa (raw, json)
Hash identifier:          fLVDaHzmbErwR1QsD5kakHGW2ClG2JS2rEkKH89okCU=
Subject key identifier:   C6:1A:2A:AB:D8:B6:C8:E5:36:72:CD:85:3E:F5:B8:E7:43:68:E2:6E
Certificate issuer:       /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
Certificate serial:       010D0C9F4328584988CF2940DB6FBFD1827BF240
Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     54665
IP address blocks:        2604:4a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:29:40:db:6f:bf:d1:82:7b:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=9eacd462-da1a-4c66-986a-0db78f18615a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:48:4c:23:59:fe:d2:8d:7b:20:bc:11:b9:c4:
                    95:39:d1:a8:7c:ce:38:07:0e:f5:cf:9b:c4:aa:79:
                    f0:a1:28:e6:0f:a8:3c:4a:b8:fa:77:f7:04:a1:86:
                    0b:45:59:a7:d8:79:59:b7:f0:b9:4f:a0:ad:a0:30:
                    c8:7f:17:db:53:f3:06:65:e9:00:da:4f:d9:4f:e9:
                    a8:94:13:a5:3b:34:6d:9f:e2:72:84:86:d7:21:d3:
                    1c:cd:87:9b:3a:d1:1a:a0:3f:08:f0:3b:29:f6:fa:
                    45:86:2e:0a:2e:8d:32:80:00:f1:cc:55:9c:3b:c6:
                    31:11:9e:46:81:34:23:58:39:b4:2a:d1:40:2f:d5:
                    a9:c2:87:1a:1a:6c:8a:39:0e:8c:cf:3b:7b:60:7d:
                    85:d5:4d:3d:22:80:f0:ed:12:53:b2:19:52:30:68:
                    11:5d:e9:1a:8a:33:11:94:a0:59:c1:59:a5:88:45:
                    74:76:ec:fd:5e:7f:80:fb:ca:ed:a0:5c:21:b2:ea:
                    bc:fe:0a:89:64:24:1a:9b:63:62:4e:18:29:6f:0a:
                    ca:3d:c2:df:4b:db:f5:92:cc:51:3f:f4:73:13:29:
                    bd:ac:f6:df:9d:09:5f:57:1f:32:a4:f2:2c:0f:d0:
                    e3:34:a7:e1:bd:7e:e3:f5:13:f6:7a:df:cc:4c:5f:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:2A:AB:D8:B6:C8:E5:36:72:CD:85:3E:F5:B8:E7:43:68:E2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl

            X509v3 Authority Key Identifier:
                keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:d0:93:d5:33:43:ac:db:7a:fb:0a:a3:14:31:1e:67:9b:
         86:45:23:4f:ad:ad:45:94:95:e4:79:22:d5:1b:b4:bb:08:41:
         28:c5:8f:2e:fc:a5:f9:b5:28:fb:7d:80:4b:80:a2:1b:68:9c:
         07:ca:5e:9f:b0:ab:cc:79:fe:fe:d2:a7:91:a0:54:35:a9:a2:
         d6:39:0b:ad:4f:7d:08:ba:2c:c5:8a:3b:9b:4f:bb:c8:03:2d:
         f2:5d:f1:e9:78:fc:8c:cd:26:e1:ae:c2:6b:56:ab:86:43:76:
         0a:c6:27:bf:1b:49:a9:22:2a:f6:37:34:a4:03:43:3d:1f:19:
         6f:bf:be:df:17:28:3c:1e:12:61:1b:ac:74:9c:8e:da:37:4e:
         fb:cf:37:0c:d2:0c:85:6a:96:d9:0b:7f:71:1d:d5:a3:1a:47:
         80:b4:d2:33:bd:41:b9:2a:be:40:6f:42:ad:54:46:8d:c7:ad:
         dc:32:1d:c2:98:ff:d9:70:21:92:26:9f:97:b2:cb:92:ad:8a:
         f7:b7:3b:e0:15:d6:90:5a:70:56:5b:ab:57:2a:f9:9a:96:0b:
         74:76:05:68:cc:5a:de:c6:ea:68:5d:b6:d4:b9:1c:a2:ff:a2:
         d6:e4:a5:99:a6:f0:6b:74:52:41:c8:8c:0e:80:45:17:93:5d:
         56:ad:eb:f4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmIzylA22+/0YJ78kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDM1YzU3NzktMGUwYi00Y2E1LTkyMTMtNmVkZGRhZDli
YzU1MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
OWVhY2Q0NjItZGExYS00YzY2LTk4NmEtMGRiNzhmMTg2MTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikhMI1n+0o17ILwRucSVOdGofM44Bw71z5vE
qnnwoSjmD6g8Srj6d/cEoYYLRVmn2HlZt/C5T6CtoDDIfxfbU/MGZekA2k/ZT+mo
lBOlOzRtn+JyhIbXIdMczYebOtEaoD8I8Dsp9vpFhi4KLo0ygADxzFWcO8YxEZ5G
gTQjWDm0KtFAL9WpwocaGmyKOQ6Mzzt7YH2F1U09IoDw7RJTshlSMGgRXekaijMR
lKBZwVmliEV0duz9Xn+A+8rtoFwhsuq8/gqJZCQam2NiThgpbwrKPcLfS9v1ksxR
P/RzEym9rPbfnQlfVx8ypPIsD9DjNKfhvX7j9RP2et/MTF+QOQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMYaKqvYtsjlNnLNhT71uOdDaOJuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MzVj
NTc3OS0wZTBiLTRjYTUtOTIxMy02ZWRkZGFkOWJjNTUvYzZmYmFkZTItZDBlYy0z
OWFhLTg3OGItMDZkOTZmZGNkNmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDM1YzU3NzktMGUwYi00Y2E1LTky
MTMtNmVkZGRhZDliYzU1LzQzNWM1Nzc5LTBlMGItNGNhNS05MjEzLTZlZGRkYWQ5
YmM1NS5jcmwwHwYDVR0jBBgwFoAU26ZuQp5FEmEMtvQhWDW9hgEVBgAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MzVjNTc3OS0wZTBiLTRjYTUtOTIxMy02ZWRk
ZGFkOWJjNTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRKgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBft9CT1TNDrNt6+wqjFDEeZ5uGRSNPra1FlJXkeSLVG7S7CEEoxY8u
/KX5tSj7fYBLgKIbaJwHyl6fsKvMef7+0qeRoFQ1qaLWOQutT30IuizFijubT7vI
Ay3yXfHpePyMzSbhrsJrVquGQ3YKxie/G0mpIir2NzSkA0M9Hxlvv77fFyg8HhJh
G6x0nI7aN077zzcM0gyFapbZC39xHdWjGkeAtNIzvUG5Kr5Ab0KtVEaNx63cMh3C
mP/ZcCGSJp+XssuSrYr3tzvgFdaQWnBWW6tXKvmalgt0dgVozFrexupoXbbUuRyi
/6LW5KWZpvBrdFJByIwOgEUXk11Wrev0
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:41:40 2025 by rpki-client