Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/0532606e-590f-3fef-9479-884109416a32.roa
File:                     0532606e-590f-3fef-9479-884109416a32.roa (raw, json)
Hash identifier:          HUf16kgK0+tp/d4SDNopLzYkz/EeMH9//DXL7x4mhLs=
Subject key identifier:   7E:68:52:B2:2A:69:FC:AC:D9:C0:F2:84:67:80:33:4C:71:A6:5B:2F
Certificate issuer:       /CN=58e96099-0986-4573-bb6b-873a9bcb3747
Certificate serial:       010D0C9F4328584A023FC35A1115BB57A91E2A90
Authority key identifier: 83:AF:FD:B7:5F:FF:A7:35:A8:70:0C:3E:D8:0A:5E:BF:42:7D:7B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/0532606e-590f-3fef-9479-884109416a32.roa
Signing time:             Thu 29 May 2025 01:00:50 +0000
ROA not before:           Thu 29 May 2025 01:00:50 +0000
ROA not after:            Wed 27 Aug 2025 01:00:50 +0000
asID:                     32160
IP address blocks:        2607:f4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:02:3f:c3:5a:11:15:bb:57:a9:1e:2a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e96099-0986-4573-bb6b-873a9bcb3747
        Validity
            Not Before: May 29 01:00:50 2025 GMT
            Not After : Aug 27 01:00:50 2025 GMT
        Subject: CN=80cf550c-36cd-4a87-bcbd-a08269330acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:29:42:57:d5:cd:01:8d:fe:6f:64:2c:70:
                    15:d2:84:5e:24:1a:c0:f5:69:4a:ec:5b:40:55:b3:
                    9e:53:36:99:19:17:32:4a:c4:d1:42:bc:31:45:3b:
                    c0:08:3d:d3:66:f9:11:67:4f:d9:02:27:b4:2b:21:
                    b0:4e:4e:1a:32:2d:a9:32:92:51:81:e3:60:9d:ed:
                    6f:5b:ef:bd:45:f1:25:e1:64:3c:de:18:59:ac:7c:
                    21:80:7a:62:dc:7a:9a:7d:89:86:c0:7a:43:f0:26:
                    64:db:d4:3a:c5:50:3c:29:6e:31:12:dc:a9:fd:18:
                    1f:d2:98:90:da:9f:e9:9b:65:41:a7:ea:ae:bb:0b:
                    88:ff:b3:66:99:8b:62:31:f3:0a:44:7a:96:29:78:
                    39:e0:4c:77:4b:e9:1f:37:63:99:d5:38:a0:2d:09:
                    8f:31:be:5d:01:95:71:c2:ea:ca:2c:e8:3d:ce:b9:
                    b0:88:ac:f5:49:06:56:8a:38:64:97:15:86:e4:6e:
                    da:9c:af:10:df:f3:50:da:d1:09:95:99:54:a6:83:
                    3e:5f:8f:29:81:6c:65:d5:e3:90:50:d5:49:19:62:
                    e6:f4:e0:40:90:ed:f1:b2:d1:d2:8e:f0:c0:3b:f0:
                    66:a3:8d:97:c9:9a:9a:f1:40:3a:fc:e7:80:a2:c3:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:68:52:B2:2A:69:FC:AC:D9:C0:F2:84:67:80:33:4C:71:A6:5B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/0532606e-590f-3fef-9479-884109416a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.crl

            X509v3 Authority Key Identifier:
                keyid:83:AF:FD:B7:5F:FF:A7:35:A8:70:0C:3E:D8:0A:5E:BF:42:7D:7B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:62:7d:d4:42:df:e6:32:43:e2:81:8f:0b:4a:56:07:14:4c:
         16:e6:f7:72:50:81:09:b7:0d:93:72:46:41:50:4f:2b:9e:d3:
         87:a7:b4:32:87:6f:19:e1:4e:8b:3a:0d:e7:a5:f9:27:84:2f:
         81:ff:15:12:cf:dd:08:01:f6:05:39:c7:91:82:2c:6f:f7:0a:
         e1:60:cc:9c:24:ed:4d:91:d1:53:df:70:8b:21:53:c0:03:1c:
         f8:62:75:8f:61:1d:d4:c1:2a:eb:36:00:a8:92:b0:d5:b8:9b:
         c3:96:12:47:de:98:d5:7c:aa:70:8b:07:51:09:13:70:79:a7:
         a2:f1:bf:33:9b:7a:00:20:db:a6:19:5b:50:ef:81:e1:d6:de:
         4d:6f:3b:c7:28:9e:a4:16:f5:16:3d:29:7a:64:98:0e:de:69:
         82:e5:07:64:0d:18:df:0b:87:eb:d6:08:48:94:7e:e2:44:04:
         23:32:39:5b:90:07:48:99:fe:38:33:00:ad:87:ac:b7:c7:31:
         05:cf:1f:16:e8:ca:88:52:a0:fb:6d:7e:e1:05:27:2a:87:fd:
         8f:b8:37:c9:54:c8:36:33:78:62:55:53:3a:6c:2f:cb:cd:42:
         33:72:6a:96:6f:da:7c:71:b4:28:02:c1:b7:2c:84:4b:76:b8:
         d1:d5:69:2a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoCP8NaERW7V6keKpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThlOTYwOTktMDk4Ni00NTczLWJiNmItODczYTliY2Iz
NzQ3MB4XDTI1MDUyOTAxMDA1MFoXDTI1MDgyNzAxMDA1MFowLzEtMCsGA1UEAxMk
ODBjZjU1MGMtMzZjZC00YTg3LWJjYmQtYTA4MjY5MzMwYWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWEpQlfVzQGN/m9kLHAV0oReJBrA9WlK7FtA
VbOeUzaZGRcySsTRQrwxRTvACD3TZvkRZ0/ZAie0KyGwTk4aMi2pMpJRgeNgne1v
W++9RfEl4WQ83hhZrHwhgHpi3HqafYmGwHpD8CZk29Q6xVA8KW4xEtyp/Rgf0piQ
2p/pm2VBp+quuwuI/7NmmYtiMfMKRHqWKXg54Ex3S+kfN2OZ1TigLQmPMb5dAZVx
wurKLOg9zrmwiKz1SQZWijhklxWG5G7anK8Q3/NQ2tEJlZlUpoM+X48pgWxl1eOQ
UNVJGWLm9OBAkO3xstHSjvDAO/Bmo42XyZqa8UA6/OeAosOOaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFH5oUrIqafys2cDyhGeAM0xxplsvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81OGU5
NjA5OS0wOTg2LTQ1NzMtYmI2Yi04NzNhOWJjYjM3NDcvMDUzMjYwNmUtNTkwZi0z
ZmVmLTk0NzktODg0MTA5NDE2YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNThlOTYwOTktMDk4Ni00NTczLWJi
NmItODczYTliY2IzNzQ3LzU4ZTk2MDk5LTA5ODYtNDU3My1iYjZiLTg3M2E5YmNi
Mzc0Ny5jcmwwHwYDVR0jBBgwFoAUg6/9t1//pzWocAw+2Apev0J9e6QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81OGU5NjA5OS0wOTg2LTQ1NzMtYmI2Yi04NzNh
OWJjYjM3NDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBNYn3UQt/mMkPigY8LSlYHFEwW5vdyUIEJtw2TckZBUE8rntOHp7Qy
h28Z4U6LOg3npfknhC+B/xUSz90IAfYFOceRgixv9wrhYMycJO1NkdFT33CLIVPA
Axz4YnWPYR3UwSrrNgCokrDVuJvDlhJH3pjVfKpwiwdRCRNweaei8b8zm3oAINum
GVtQ74Hh1t5NbzvHKJ6kFvUWPSl6ZJgO3mmC5QdkDRjfC4fr1ghIlH7iRAQjMjlb
kAdImf44MwCth6y3xzEFzx8W6MqIUqD7bX7hBScqh/2PuDfJVMg2M3hiVVM6bC/L
zUIzcmqWb9p8cbQoAsG3LIRLdrjR1Wkq
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:55:00 2025 by rpki-client