Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa
File:                     3c215373-ba4c-387d-b2fe-0739ac64f909.roa (raw, json)
Hash identifier:          PRj78OsTqIVvyPqZ/OwlDPBy1PuL+ebGtghbljraL3g=
Subject key identifier:   F4:36:84:84:39:AD:54:E8:2B:00:FC:18:0D:EF:4F:04:94:27:5C:DB
Certificate issuer:       /CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
Certificate serial:       010D0C9F4328584A23C0168499669466001359A0
Authority key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     53823
IP address blocks:        2606:48c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:16:84:99:66:94:66:00:13:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=a7dbdba7-7aea-4fc4-808b-9e687309bcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:3b:dd:2b:e9:12:9e:7f:53:e0:b9:e3:43:
                    77:20:2c:45:91:17:df:5b:d8:21:e4:17:c2:75:8c:
                    e2:74:d3:17:ee:2e:ee:e8:13:a6:6e:8b:5d:a3:d2:
                    1f:48:4e:ae:3d:71:72:cf:b5:bf:3b:99:9f:d5:a0:
                    19:8e:70:f8:85:9c:50:55:0f:10:a0:d1:bc:21:b6:
                    e8:ee:fb:9d:7b:ba:21:0b:86:eb:94:72:22:5b:17:
                    2c:cb:02:7d:e3:ba:38:94:b8:2a:1d:57:fd:19:eb:
                    58:3b:45:77:1e:71:0b:29:f7:a8:d5:db:22:79:0a:
                    84:14:4f:a0:d0:8e:d7:24:91:9d:dd:67:f5:29:25:
                    9e:4e:90:8d:84:33:84:29:cf:f2:88:e1:0c:31:2e:
                    4a:80:60:39:00:9d:05:4f:e2:fc:7d:b0:64:9a:67:
                    1e:a4:49:58:ed:6e:12:b0:81:d2:ff:c7:a3:96:01:
                    56:a2:b4:c4:ee:01:cc:a4:5d:00:cc:4e:c8:8a:2b:
                    41:5e:1a:c1:0e:28:89:e5:28:e7:6c:6e:bd:c4:77:
                    6d:e1:d5:b9:84:eb:57:6d:3b:fd:76:3a:2d:25:3f:
                    c6:d7:f9:51:37:71:f1:d1:4b:ad:4b:a7:fa:9c:f7:
                    38:73:f0:fa:95:4c:50:79:b1:56:88:f9:58:bf:14:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:36:84:84:39:AD:54:E8:2B:00:FC:18:0D:EF:4F:04:94:27:5C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl

            X509v3 Authority Key Identifier:
                keyid:7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:48c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:75:21:65:ab:e3:f3:d3:f0:2a:a4:09:c5:0a:c0:09:98:
         04:ab:4c:11:98:e8:ba:20:a1:21:42:6e:50:ba:82:2a:d3:9a:
         35:70:fc:e7:3d:f5:f7:54:5e:7d:20:a0:45:1d:7e:40:09:3d:
         2e:25:3d:c7:ac:88:ac:07:ae:be:31:3c:53:4c:e1:ab:94:66:
         a1:e8:c5:00:16:ad:d3:bd:77:88:0f:4e:ae:36:b4:a3:aa:82:
         70:9e:8d:22:c7:8a:76:09:5d:15:e3:e2:5f:b4:73:6d:24:be:
         5b:d8:89:a0:07:fc:6f:e7:1d:dd:91:f2:c0:5d:e2:91:89:69:
         01:40:dc:c5:ee:57:bd:fe:43:d3:74:91:60:db:f3:41:16:09:
         54:dc:a3:d9:73:a3:b9:f6:fa:98:a4:6c:b4:62:8a:97:02:b3:
         14:cc:e5:32:3e:62:d9:80:82:2a:fe:79:bf:8e:bf:82:c0:42:
         3f:67:1e:11:10:d3:b0:16:af:4a:04:0e:69:4c:a5:19:b1:9c:
         ba:3d:b7:c7:2f:86:0e:ec:91:d5:56:f7:7c:de:f2:ab:95:83:
         3a:13:4e:45:d2:6c:4c:f7:0d:bb:c2:27:f3:02:2b:fd:84:26:
         d7:02:1a:33:e7:dd:d2:2f:2b:61:2f:b9:0b:e1:09:26:40:7f:
         e5:bc:0e:3c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEojwBaEmWaUZgATWaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ2ZTVkZGItMDNmZi00MTM5LThhNTEtYjkxOGJjODRm
NzMyMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
YTdkYmRiYTctN2FlYS00ZmM0LTgwOGItOWU2ODczMDliY2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyw73SvpEp5/U+C540N3ICxFkRffW9gh5BfC
dYzidNMX7i7u6BOmbotdo9IfSE6uPXFyz7W/O5mf1aAZjnD4hZxQVQ8QoNG8Ibbo
7vude7ohC4brlHIiWxcsywJ947o4lLgqHVf9GetYO0V3HnELKfeo1dsieQqEFE+g
0I7XJJGd3Wf1KSWeTpCNhDOEKc/yiOEMMS5KgGA5AJ0FT+L8fbBkmmcepElY7W4S
sIHS/8ejlgFWorTE7gHMpF0AzE7IiitBXhrBDiiJ5SjnbG69xHdt4dW5hOtXbTv9
djotJT/G1/lRN3Hx0UutS6f6nPc4c/D6lUxQebFWiPlYvxS9nQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPQ2hIQ5rVToKwD8GA3vTwSUJ1zbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZl
NWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4YmM4NGY3MzIvM2MyMTUzNzMtYmE0Yy0z
ODdkLWIyZmUtMDczOWFjNjRmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ2ZTVkZGItMDNmZi00MTM5LThh
NTEtYjkxOGJjODRmNzMyL2FkNmU1ZGRiLTAzZmYtNDEzOS04YTUxLWI5MThiYzg0
ZjczMi5jcmwwHwYDVR0jBBgwFoAUf2yER0mnPE5Vc59aRhckKPgrd6gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZlNWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4
YmM4NGY3MzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZIwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAAOnUhZavj89PwKqQJxQrACZgEq0wRmOi6IKEhQm5QuoIq05o1cPzn
PfX3VF59IKBFHX5ACT0uJT3HrIisB66+MTxTTOGrlGah6MUAFq3TvXeID06uNrSj
qoJwno0ix4p2CV0V4+JftHNtJL5b2ImgB/xv5x3dkfLAXeKRiWkBQNzF7le9/kPT
dJFg2/NBFglU3KPZc6O59vqYpGy0YoqXArMUzOUyPmLZgIIq/nm/jr+CwEI/Zx4R
ENOwFq9KBA5pTKUZsZy6PbfHL4YO7JHVVvd83vKrlYM6E05F0mxM9w27wifzAiv9
hCbXAhoz593SLythL7kL4QkmQH/lvA48
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:11:18 2025 by rpki-client