Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6e637ec9-d861-37b6-8069-9d4d4bf1b80b.roa
File:                     6e637ec9-d861-37b6-8069-9d4d4bf1b80b.roa (raw, json)
Hash identifier:          yNwqnWgRT2ty5n5lwX/kntvd2Taow+hWrvQVfElEi/c=
Subject key identifier:   FA:2F:81:C3:53:38:AA:A6:87:26:09:AE:8D:90:6A:A7:20:D7:C7:B1
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F432858498339C40610DBD541BB3C7F00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6e637ec9-d861-37b6-8069-9d4d4bf1b80b.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     19165
IP address blocks:        2604:5500:f800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:c4:06:10:db:d5:41:bb:3c:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=0afa025e-6607-43b4-bd08-90cdad5e03fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:95:17:87:c2:26:01:39:fd:3d:63:b5:e3:
                    15:79:f4:24:75:c0:ff:fa:45:e4:fc:e5:c8:f3:b2:
                    17:3d:03:66:d1:a0:c4:e9:fc:76:ab:fe:59:5a:2b:
                    e9:34:6f:01:0a:30:1f:2a:d6:f9:25:5a:ca:4d:2c:
                    40:81:5a:38:15:d0:31:bf:a9:bc:fe:94:9a:d1:17:
                    f8:ba:38:1d:8b:3c:1a:74:87:a3:89:b7:d9:d8:11:
                    b7:c4:46:70:1b:23:b4:36:1d:5c:31:ff:ec:d7:e3:
                    e7:c5:27:72:eb:58:61:55:dc:2e:49:60:b6:47:ff:
                    2e:fe:9f:f1:41:a0:2b:b5:b7:f3:eb:0a:5a:3d:d2:
                    db:f2:87:05:45:11:e0:a8:fe:d1:46:f4:ba:ef:51:
                    0e:ff:f1:6e:a7:6c:77:0c:ce:22:79:f2:2b:6c:15:
                    2e:62:e2:76:10:cc:bb:bf:e0:e0:0b:90:38:4d:e0:
                    bb:df:cf:b6:7b:2b:7e:8c:86:f7:11:5a:d6:4b:fc:
                    f4:91:88:33:8a:3d:77:79:9b:fe:df:11:c5:59:e4:
                    53:af:a4:9f:9c:4f:7d:0e:78:59:31:90:26:3a:ef:
                    3a:c5:86:02:57:da:ba:38:c7:e6:da:6e:cc:fa:28:
                    a7:2e:3a:1c:fd:9a:46:cb:1a:a8:fa:49:38:4a:ce:
                    95:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:81:C3:53:38:AA:A6:87:26:09:AE:8D:90:6A:A7:20:D7:C7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6e637ec9-d861-37b6-8069-9d4d4bf1b80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:f800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:53:c0:fd:8e:77:23:db:c3:73:d1:d7:e8:b0:b3:ed:13:3e:
         a8:17:44:09:59:6d:2f:39:76:d0:d1:86:79:93:d8:a2:21:2d:
         01:a3:3a:e0:df:9a:76:59:69:20:11:ed:4b:47:4c:5d:fa:6f:
         56:4d:9b:e4:2b:48:c0:a2:76:58:0e:9f:a9:f2:cf:7f:fd:53:
         21:e5:f7:88:63:ff:ad:ae:fe:f0:31:6c:07:ee:a9:07:ee:0a:
         89:ff:fb:88:92:f7:aa:6a:6f:39:6e:99:a9:c3:48:09:fb:1e:
         76:e4:53:2b:dd:0c:01:e0:ba:3f:07:c5:03:5f:02:b6:d2:f7:
         c6:6a:6e:dd:7d:fa:fa:d2:c1:a3:d1:1f:23:b6:55:93:42:90:
         da:1f:0a:e5:67:1f:c8:ab:54:23:29:e9:a9:b4:c6:4b:39:58:
         df:a5:3b:c0:72:79:5a:92:4f:14:0e:7a:f1:dc:74:6c:b5:c0:
         db:58:a1:21:fc:0a:0d:5d:b3:72:ca:14:f1:d3:d8:e6:7e:7d:
         99:b4:11:14:99:37:17:bd:de:81:82:59:68:00:38:eb:eb:1b:
         d0:c3:ca:e1:00:da:7d:60:fd:a8:ac:0d:f1:3b:a6:d4:8b:a6:
         ce:50:6f:52:cf:e3:df:a0:b3:4c:05:3b:0a:9b:8a:26:23:60:
         8b:51:38:f8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmDOcQGENvVQbs8fwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2
NDA0MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
MGFmYTAyNWUtNjYwNy00M2I0LWJkMDgtOTBjZGFkNWUwM2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2faVF4fCJgE5/T1jteMVefQkdcD/+kXk/OXI
87IXPQNm0aDE6fx2q/5ZWivpNG8BCjAfKtb5JVrKTSxAgVo4FdAxv6m8/pSa0Rf4
ujgdizwadIejibfZ2BG3xEZwGyO0Nh1cMf/s1+PnxSdy61hhVdwuSWC2R/8u/p/x
QaArtbfz6wpaPdLb8ocFRRHgqP7RRvS671EO//Fup2x3DM4iefIrbBUuYuJ2EMy7
v+DgC5A4TeC738+2eyt+jIb3EVrWS/z0kYgzij13eZv+3xHFWeRTr6SfnE99DnhZ
MZAmOu86xYYCV9q6OMfm2m7M+iinLjoc/ZpGyxqo+kk4Ss6VLwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPovgcNTOKqmhyYJro2Qaqcg18exMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz
YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNmU2MzdlYzktZDg2MS0z
N2I2LTgwNjktOWQ0ZDRiZjFiODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm
NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl
NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz
ZjY1ZTY0MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgRVAPgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAR1PA/Y53I9vDc9HX6LCz7RM+qBdECVltLzl20NGGeZPYoiEtAaM6
4N+adllpIBHtS0dMXfpvVk2b5CtIwKJ2WA6fqfLPf/1TIeX3iGP/ra7+8DFsB+6p
B+4Kif/7iJL3qmpvOW6ZqcNICfseduRTK90MAeC6PwfFA18CttL3xmpu3X36+tLB
o9EfI7ZVk0KQ2h8K5WcfyKtUIynpqbTGSzlY36U7wHJ5WpJPFA568dx0bLXA21ih
IfwKDV2zcsoU8dPY5n59mbQRFJk3F73egYJZaAA46+sb0MPK4QDafWD9qKwN8Tum
1IumzlBvUs/j36CzTAU7CpuKJiNgi1E4+A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:50 2025 by rpki-client