Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa
File:                     289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa (raw, json)
Hash identifier:          HMEdWVs07CEeG4IHjcopsCUXakWR3kN+33+MYLf598E=
Subject key identifier:   D9:83:0A:37:65:A1:7F:E1:DB:20:29:24:26:56:93:36:70:14:46:CC
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584A116461E18B8DFE38E84498E5
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa
Signing time:             Tue 03 Jun 2025 11:11:46 +0000
ROA not before:           Tue 03 Jun 2025 11:11:46 +0000
ROA not after:            Mon 01 Sep 2025 11:11:46 +0000
asID:                     20148
IP address blocks:        2001:5c8:f7fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:64:61:e1:8b:8d:fe:38:e8:44:98:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Jun  3 11:11:46 2025 GMT
            Not After : Sep  1 11:11:46 2025 GMT
        Subject: CN=3ddc3792-14cb-4578-b851-9799400c58d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ec:f5:e0:27:4f:37:42:0e:90:c7:b0:cd:ad:
                    7c:6d:20:d2:d9:67:40:13:44:d1:ee:85:20:c7:83:
                    c4:b2:0d:d0:47:93:b2:0a:f1:c1:15:15:c9:da:4e:
                    5b:62:60:6d:a8:95:db:ea:eb:e7:d1:bf:6e:ad:45:
                    6b:5c:9a:b3:81:3d:91:1f:1c:43:90:1f:e5:e0:08:
                    52:13:03:0c:c8:dd:54:43:e6:41:57:29:b0:d4:0d:
                    38:ca:b1:ac:32:99:fa:83:dc:a0:ef:c2:10:8f:17:
                    0d:cd:96:3e:b2:fa:aa:f5:30:60:79:38:8f:ab:ca:
                    27:ad:af:75:c3:7d:b2:99:fb:61:0d:e0:a1:e8:0f:
                    8f:27:f5:4e:4e:c5:37:f6:97:c0:b3:ef:37:23:31:
                    3c:a0:78:ee:56:f6:2b:95:a1:1a:1c:bb:0b:13:a5:
                    ba:20:38:9e:db:66:cf:13:ff:5f:71:d2:5c:25:cd:
                    3e:8b:b8:e7:2b:0d:cb:69:92:36:00:bb:42:0a:d0:
                    b7:4f:89:70:99:e2:78:c0:d6:f0:4a:bc:19:50:cf:
                    74:87:b6:3e:bb:22:d0:3d:f0:25:70:9d:88:a4:31:
                    bc:7f:f2:2c:9a:aa:73:ab:a9:08:59:f3:ab:62:01:
                    1a:13:d0:d0:70:32:c9:7f:b9:f0:f4:61:87:33:b9:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:83:0A:37:65:A1:7F:E1:DB:20:29:24:26:56:93:36:70:14:46:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5c8:f7fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2e:7f:6f:34:43:29:fe:98:68:5f:13:ee:1e:18:04:94:5b:
         74:f3:52:21:c1:20:58:20:f6:99:c9:e8:a7:38:a3:72:a5:3b:
         b5:cc:c5:e1:12:56:9c:8c:f0:e2:b1:ef:84:64:95:c2:1c:81:
         b3:9c:f2:d0:3d:f8:61:58:da:d6:7c:de:59:59:c2:c3:da:17:
         5b:8f:11:c0:8f:43:5c:c8:dc:18:f0:b6:44:44:a2:d2:a6:c4:
         a3:c4:6a:55:7b:5d:5b:13:b4:d0:7e:c5:38:67:ad:87:99:0d:
         61:55:a2:cb:33:75:ca:48:26:ad:68:c9:a6:cb:a7:7f:5a:5e:
         c8:46:83:3e:67:45:65:19:24:3c:26:13:91:52:6a:c8:38:71:
         5a:bb:ca:97:d5:40:a1:48:c1:1f:07:f8:35:a7:f0:0a:d0:be:
         fd:ff:e0:00:a9:98:75:03:db:7f:6a:81:df:29:39:16:03:c4:
         7d:c3:60:5b:5e:c9:8b:65:dd:e8:a8:6b:97:cd:7f:f9:6f:18:
         12:74:8d:bf:31:04:16:09:5e:3c:92:95:ed:54:70:50:78:7b:
         b1:6b:e0:6b:6c:52:64:7c:36:ba:32:75:b9:2a:00:d1:3c:c9:
         d0:bb:87:28:5d:4e:de:f8:21:cc:b1:dc:20:15:7f:3f:77:df:
         95:aa:34:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRZGHhi43+OOhEmOUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNj
MjljMB4XDTI1MDYwMzExMTE0NloXDTI1MDkwMTExMTE0NlowLzEtMCsGA1UEAxMk
M2RkYzM3OTItMTRjYi00NTc4LWI4NTEtOTc5OTQwMGM1OGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+z14CdPN0IOkMewza18bSDS2WdAE0TR7oUg
x4PEsg3QR5OyCvHBFRXJ2k5bYmBtqJXb6uvn0b9urUVrXJqzgT2RHxxDkB/l4AhS
EwMMyN1UQ+ZBVymw1A04yrGsMpn6g9yg78IQjxcNzZY+svqq9TBgeTiPq8onra91
w32ymfthDeCh6A+PJ/VOTsU39pfAs+83IzE8oHjuVvYrlaEaHLsLE6W6IDie22bP
E/9fcdJcJc0+i7jnKw3LaZI2ALtCCtC3T4lwmeJ4wNbwSrwZUM90h7Y+uyLQPfAl
cJ2IpDG8f/Ismqpzq6kIWfOrYgEaE9DQcDLJf7nw9GGHM7lSkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNmDCjdloX/h2yApJCZWkzZwFEbMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFi
ZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvMjg5ZjFjMDktOTBkNy0z
YmI1LTg1OTMtNGM2MjkyYTlkNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmIxYmZiOWQtM2NlNS00ZmEwLTg3
YTItNzM1M2VlOGNjMjljLzZiMWJmYjlkLTNjZTUtNGZhMC04N2EyLTczNTNlZThj
YzI5Yy5jcmwwHwYDVR0jBBgwFoAUiZ7PjIFhGc30CeRkoLh5rVZXgTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUz
ZWU4Y2MyOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFyPf+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB0uf280Qyn+mGhfE+4eGASUW3TzUiHBIFgg9pnJ6Kc4o3KlO7XM
xeESVpyM8OKx74RklcIcgbOc8tA9+GFY2tZ83llZwsPaF1uPEcCPQ1zI3BjwtkRE
otKmxKPEalV7XVsTtNB+xThnrYeZDWFVosszdcpIJq1oyabLp39aXshGgz5nRWUZ
JDwmE5FSasg4cVq7ypfVQKFIwR8H+DWn8ArQvv3/4ACpmHUD239qgd8pORYDxH3D
YFteyYtl3eioa5fNf/lvGBJ0jb8xBBYJXjySle1UcFB4e7Fr4GtsUmR8Nroydbkq
ANE8ydC7hyhdTt74Icyx3CAVfz9335WqNLw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:43:56 2025 by rpki-client