Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa
File:                     a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa (raw, json)
Hash identifier:          AJ+66xQZaKxHuEe4Lu5ovPhA7Qeo9ZkRYC1IgUi2OHM=
Subject key identifier:   45:11:7F:6C:A4:CF:D2:92:22:B0:EC:B5:79:11:41:DA:6E:4E:FF:51
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C01A971109900D450A2400
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        2606:a800::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:1a:97:11:09:90:0d:45:0a:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=04e03fe9-0570-4884-81b1-24ce0d5d38c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:9f:f0:79:2f:18:61:ef:9f:eb:a5:7a:18:
                    2f:96:d7:f0:27:e2:65:24:78:8b:78:e8:92:1f:10:
                    88:43:e8:ef:49:2b:95:9c:47:23:89:dd:65:c4:23:
                    de:21:f1:2c:b2:16:51:59:5c:25:62:06:93:df:62:
                    52:e8:c2:fc:d2:be:5f:40:52:28:31:4a:27:74:51:
                    13:53:75:af:c2:19:0f:49:79:8f:f9:48:fa:f1:5a:
                    5a:9b:99:6a:d1:ba:b3:37:8b:28:36:c1:fe:c8:b8:
                    36:9c:3b:bd:24:8e:6b:f7:b0:1a:3f:bd:8a:26:0a:
                    92:37:ca:bf:53:1b:50:b4:ee:24:c0:ab:4a:ef:15:
                    0d:9d:05:66:a7:f9:e3:94:b6:f4:96:c9:01:ba:f4:
                    87:85:d2:1f:58:2d:9c:c7:80:b3:eb:d0:45:fe:42:
                    bb:e4:45:21:f3:85:84:fe:17:c2:f4:7c:74:87:ec:
                    dc:70:b3:6b:17:eb:1f:21:69:2d:9b:1f:77:82:4f:
                    0e:70:31:cd:ce:db:4f:96:91:bf:cd:50:6b:cb:dc:
                    48:53:6b:b8:b1:8e:27:4c:53:3c:7a:6c:3b:0e:b5:
                    4c:df:d9:82:e3:d3:39:cf:9f:38:b8:d7:74:14:e4:
                    b6:78:67:72:29:52:3d:80:d3:0d:a7:32:dd:66:12:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:11:7F:6C:A4:CF:D2:92:22:B0:EC:B5:79:11:41:DA:6E:4E:FF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a800::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:0f:a5:e6:51:fb:67:7d:8a:c5:2b:7a:c6:a0:55:27:ab:
         6f:69:69:70:ae:53:d8:f0:c6:1d:59:46:3a:3a:32:1e:5c:42:
         72:83:6c:bf:87:4e:d0:bc:b1:de:86:92:6e:76:21:a0:cd:59:
         b2:52:16:94:39:04:4f:c1:33:af:c3:aa:3b:b9:22:e7:85:88:
         b6:bd:52:5e:43:79:4a:2c:e1:21:65:fc:cd:10:b2:ed:e6:77:
         07:0f:76:03:ba:47:97:98:c3:c7:58:24:6d:c2:95:8d:ab:41:
         02:84:3d:0d:14:a6:26:53:06:d7:eb:af:dc:34:84:65:f5:37:
         25:38:d1:3b:88:c5:36:95:01:9e:a4:cf:9f:9c:44:f9:b7:3f:
         fc:23:99:64:e4:81:3d:e8:74:6f:f0:a5:c7:0b:72:bd:fd:d6:
         66:34:dd:96:42:e8:dd:ad:f4:1e:2a:04:9c:17:28:b6:25:1f:
         df:b0:f9:1d:f5:cf:03:9e:65:0e:c5:9b:48:d2:78:6f:a6:82:
         d2:25:40:7d:82:13:d2:c7:5c:5e:12:30:3a:8e:df:7b:b7:16:
         8f:8d:db:eb:26:3f:33:93:84:c8:a8:51:a9:e2:24:aa:4e:1c:
         c4:23:3c:77:8c:54:68:5d:6c:63:88:90:80:f3:ab:83:78:de:
         15:f6:7a:ca
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEojwBqXEQmQDUUKJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
MDRlMDNmZTktMDU3MC00ODg0LTgxYjEtMjRjZTBkNWQzOGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr+f8HkvGGHvn+ulehgvltfwJ+JlJHiLeOiS
HxCIQ+jvSSuVnEcjid1lxCPeIfEsshZRWVwlYgaT32JS6ML80r5fQFIoMUondFET
U3WvwhkPSXmP+Uj68Vpam5lq0bqzN4soNsH+yLg2nDu9JI5r97AaP72KJgqSN8q/
UxtQtO4kwKtK7xUNnQVmp/njlLb0lskBuvSHhdIfWC2cx4Cz69BF/kK75EUh84WE
/hfC9Hx0h+zccLNrF+sfIWktmx93gk8OcDHNzttPlpG/zVBry9xIU2u4sY4nTFM8
emw7DrVM39mC49M5z584uNd0FOS2eGdyKVI9gNMNpzLdZhKmdwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEURf2ykz9KSIrDstXkRQdpuTv9RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYTI0MzBhNjItMmRkOC0z
NWExLWE2Y2YtMGM1YTBjZDUyOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgaoAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAY84PpeZR+2d9isUresagVSerb2lpcK5T2PDGHVlGOjoyHlxCcoNs
v4dO0Lyx3oaSbnYhoM1ZslIWlDkET8Ezr8OqO7ki54WItr1SXkN5SizhIWX8zRCy
7eZ3Bw92A7pHl5jDx1gkbcKVjatBAoQ9DRSmJlMG1+uv3DSEZfU3JTjRO4jFNpUB
nqTPn5xE+bc//COZZOSBPeh0b/Clxwtyvf3WZjTdlkLo3a30HioEnBcotiUf37D5
HfXPA55lDsWbSNJ4b6aC0iVAfYIT0sdcXhIwOo7fe7cWj43b6yY/M5OEyKhRqeIk
qk4cxCM8d4xUaF1sY4iQgPOrg3jeFfZ6yg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:26 2025 by rpki-client