Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
File:                     1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa (raw, json)
Hash identifier:          hUOHC2RgXmEFUkazLmLChjo4br3Os7OhNELWUeSPrLk=
Subject key identifier:   F7:D9:C2:FF:20:C1:49:83:BD:B2:04:58:44:3E:C2:47:3F:9E:80:AE
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285849BDDA1B10012350C600CAC580
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     20055
IP address blocks:        2600:a800::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:1b:10:01:23:50:c6:00:ca:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=0317464e-d377-47ff-9abc-59cb33ef052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:b5:69:33:97:d7:5e:02:8e:d5:96:c8:af:
                    69:0e:88:f2:ec:8d:40:a0:b8:18:7b:d5:b0:5b:11:
                    83:98:69:ed:73:81:5d:b7:62:94:28:3e:f7:67:5c:
                    2f:07:6a:e1:f8:73:a4:94:ef:be:77:0f:69:5c:6e:
                    95:0e:5a:41:25:07:e2:14:95:f2:d6:11:b5:47:84:
                    e1:ed:a9:81:03:a3:75:dd:28:b5:26:18:6f:69:79:
                    af:c8:e8:b7:5c:32:bc:42:52:69:f3:24:6b:e4:dc:
                    24:54:de:07:66:8d:81:b7:8a:a1:5a:19:75:9c:2d:
                    ad:a5:58:61:52:c8:dc:cf:cc:1d:72:64:50:67:73:
                    dd:db:c7:55:cf:0c:77:16:f3:ac:ef:f4:7c:61:f5:
                    77:a0:f6:27:e7:95:e9:3e:15:c4:8c:c7:ff:74:a2:
                    5a:64:8d:ca:a1:66:9b:8e:9f:f7:70:a0:28:eb:a0:
                    3d:dd:f3:b2:d7:b5:55:18:a2:b8:2b:bf:12:25:cf:
                    6a:3e:77:f8:13:f0:ad:16:53:02:68:20:34:0e:a1:
                    8c:26:2a:dd:8a:df:48:2b:ad:31:47:19:39:31:bc:
                    d4:ea:55:2c:24:16:80:ac:d3:3c:16:41:24:07:e1:
                    1b:b0:e7:21:da:27:95:1f:45:f6:d6:9b:9b:f7:fe:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D9:C2:FF:20:C1:49:83:BD:B2:04:58:44:3E:C2:47:3F:9E:80:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:09:70:86:36:1f:f1:a0:d6:2a:18:b4:69:7a:57:be:61:e9:
         cc:75:da:b3:4b:0d:77:69:7e:54:19:eb:af:2a:76:35:ef:b1:
         75:eb:dd:c4:39:ca:82:11:77:36:e0:ab:35:f1:98:d9:3c:b9:
         8a:e9:f9:20:b4:2e:30:50:f3:18:e6:88:0c:08:23:67:ae:41:
         ff:48:ad:bb:fb:78:1d:3e:da:49:4a:af:8e:60:81:1e:03:2d:
         e6:61:c6:3a:08:f5:11:21:2e:c8:92:00:20:ce:1d:2d:fe:60:
         c1:df:ab:17:c7:a0:55:a0:70:23:f1:14:7c:70:a7:8f:bf:00:
         51:b7:88:f4:5b:89:e9:cb:b6:90:0b:18:7c:61:7f:31:c4:f9:
         d1:eb:d5:42:3d:7c:28:13:c0:2b:0f:41:60:e2:22:ad:11:85:
         c2:16:20:dd:c3:d3:0a:0d:ce:bd:46:58:c0:72:78:1f:7b:52:
         38:0b:f9:93:d5:ec:bc:9f:db:05:42:a0:2a:8b:0c:f4:25:1f:
         1e:50:17:2c:d3:d6:d3:28:fd:1e:42:79:e0:25:9e:99:8a:91:
         f5:b8:10:72:35:85:21:1f:a6:8c:3a:7e:d5:ae:17:d4:f8:16:
         bb:d8:e2:3f:0b:4f:14:df:75:a6:02:8d:46:c6:98:9d:b9:03:
         c2:b2:b2:84
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm92hsQASNQxgDKxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm
Zjg0MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
MDMxNzQ2NGUtZDM3Ny00N2ZmLTlhYmMtNTljYjMzZWYwNTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl821aTOX114CjtWWyK9pDojy7I1AoLgYe9Ww
WxGDmGntc4Fdt2KUKD73Z1wvB2rh+HOklO++dw9pXG6VDlpBJQfiFJXy1hG1R4Th
7amBA6N13Si1JhhvaXmvyOi3XDK8QlJp8yRr5NwkVN4HZo2Bt4qhWhl1nC2tpVhh
Usjcz8wdcmRQZ3Pd28dVzwx3FvOs7/R8YfV3oPYn55XpPhXEjMf/dKJaZI3KoWab
jp/3cKAo66A93fOy17VVGKK4K78SJc9qPnf4E/CtFlMCaCA0DqGMJirdit9IK60x
Rxk5MbzU6lUsJBaArNM8FkEkB+EbsOch2ieVH0X21pub9/4zLQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPfZwv8gwUmDvbIEWEQ+wkc/noCuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz
YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvMWZmYzZlMzYtYjI0Zi0z
ZjA5LWI5MTMtNmEzZGZjOWZhMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5
MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz
ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw
MDVmM2ZmODQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgCoADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAICXCGNh/xoNYqGLRpele+YenMddqzSw13aX5UGeuvKnY177F1693E
OcqCEXc24Ks18ZjZPLmK6fkgtC4wUPMY5ogMCCNnrkH/SK27+3gdPtpJSq+OYIEe
Ay3mYcY6CPURIS7IkgAgzh0t/mDB36sXx6BVoHAj8RR8cKePvwBRt4j0W4npy7aQ
Cxh8YX8xxPnR69VCPXwoE8ArD0Fg4iKtEYXCFiDdw9MKDc69RljAcngfe1I4C/mT
1ey8n9sFQqAqiwz0JR8eUBcs09bTKP0eQnngJZ6ZipH1uBByNYUhH6aMOn7VrhfU
+Ba72OI/C08U33WmAo1GxpiduQPCsrKE
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:56 2025 by rpki-client