Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa
File:                     56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa (raw, json)
Hash identifier:          Fu59NaUIsfdG0M0YGvSSWDyrldbKCcjYRcvM1296y/Q=
Subject key identifier:   89:FC:D9:B3:AD:4A:01:EF:9F:E1:8C:E9:FC:E8:BB:D6:BD:8B:58:09
Certificate issuer:       /CN=df17821c-c81a-4f1b-baba-e8419dc81508
Certificate serial:       010D0C9F4328584A0D6A7E160E88A97FF957D840
Authority key identifier: EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     23307
IP address blocks:        2620:8b:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:7e:16:0e:88:a9:7f:f9:57:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df17821c-c81a-4f1b-baba-e8419dc81508
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=aae2ed7f-b963-473c-86fc-d034a443add9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:41:fb:07:94:37:8a:ab:a4:f8:d6:c0:58:
                    26:60:a8:24:b7:c7:65:22:58:a2:29:c0:c5:69:3e:
                    3f:45:52:b7:9a:31:3f:4b:64:c3:87:ee:15:80:e0:
                    25:63:e3:8e:2d:09:fe:df:a5:ff:c3:d8:1b:00:d6:
                    57:fd:a1:50:e7:ad:7d:15:c4:79:50:7b:ff:c7:0e:
                    6e:49:55:2b:e7:81:04:85:26:c1:64:18:e5:be:68:
                    9b:73:29:6a:08:f5:db:f1:45:0c:2e:0f:93:e0:95:
                    25:58:bb:9e:f0:42:ca:7b:45:06:c4:55:0e:cb:e7:
                    0f:a9:03:21:8c:49:c3:0d:de:e0:b2:86:da:78:4a:
                    23:d2:48:88:47:88:71:c6:a7:d1:1f:6e:02:fe:d5:
                    98:76:df:4a:04:56:fa:fa:19:1c:8e:4f:6f:22:52:
                    1f:6d:98:54:8e:14:87:9c:11:29:8d:20:d4:c4:13:
                    73:42:5c:a7:41:56:2e:5d:d5:c4:7d:65:26:8e:2b:
                    76:46:69:57:22:04:d4:d2:8a:df:e1:bc:d3:c5:83:
                    2d:03:9b:a6:b7:75:a6:97:b5:4d:b4:d7:65:0f:64:
                    7b:58:0f:1a:ab:dd:07:a9:67:06:68:3b:79:5c:c7:
                    a9:78:1d:b9:2d:14:cd:ea:f9:c0:ce:3b:46:eb:9d:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FC:D9:B3:AD:4A:01:EF:9F:E1:8C:E9:FC:E8:BB:D6:BD:8B:58:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8b:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:c9:ef:4c:cd:b4:54:42:08:87:8b:54:a1:8d:c3:30:55:
         64:35:88:01:38:bb:aa:11:75:b9:af:27:4e:2e:8b:2a:42:ad:
         3b:64:29:1a:e2:0e:df:ab:a7:8d:5f:aa:07:af:c4:a5:e8:91:
         29:0e:16:de:49:a6:24:dc:ac:19:e3:ad:10:5f:9f:0c:8e:9b:
         af:82:8b:65:36:a1:de:59:a3:c7:4d:a1:d5:18:44:7e:bb:a5:
         c7:78:91:1e:d6:c3:31:db:76:ab:71:74:28:06:ab:d7:91:b7:
         0c:13:8f:53:c6:d2:50:47:ef:33:c6:8b:b6:96:42:fa:74:21:
         d4:4e:44:2c:11:b2:c0:2d:18:42:94:fe:9f:06:c0:86:6a:43:
         0e:22:a8:74:56:33:c6:7b:ce:ab:cc:5a:31:f0:96:0b:74:2d:
         cf:ac:cc:e8:0f:b4:6a:a3:68:15:f9:fe:2c:32:4c:0a:2a:5b:
         b8:b4:03:bf:f1:b2:95:f0:f1:c9:77:fd:2f:c2:f9:9d:3c:4e:
         6d:ab:6f:20:09:bd:be:69:cc:ad:0c:8b:fe:f7:9f:ae:b3:a1:
         cc:b7:1d:03:fc:fd:0f:b1:41:79:03:a8:ca:12:d2:a3:0c:df:
         c4:72:e8:86:1d:13:1c:da:b8:e1:65:4e:b7:33:97:4e:da:31:
         0c:4c:09:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoNan4WDoipf/lX2EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYxNzgyMWMtYzgxYS00ZjFiLWJhYmEtZTg0MTlkYzgx
NTA4MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk
YWFlMmVkN2YtYjk2My00NzNjLTg2ZmMtZDAzNGE0NDNhZGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ5B+weUN4qrpPjWwFgmYKgkt8dlIliiKcDF
aT4/RVK3mjE/S2TDh+4VgOAlY+OOLQn+36X/w9gbANZX/aFQ5619FcR5UHv/xw5u
SVUr54EEhSbBZBjlvmibcylqCPXb8UUMLg+T4JUlWLue8ELKe0UGxFUOy+cPqQMh
jEnDDd7gsobaeEoj0kiIR4hxxqfRH24C/tWYdt9KBFb6+hkcjk9vIlIfbZhUjhSH
nBEpjSDUxBNzQlynQVYuXdXEfWUmjit2RmlXIgTU0orf4bzTxYMtA5umt3Wml7VN
tNdlD2R7WA8aq90HqWcGaDt5XMepeB25LRTN6vnAzjtG650fhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIn82bOtSgHvn+GM6fzou9a9i1gJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjE3
ODIxYy1jODFhLTRmMWItYmFiYS1lODQxOWRjODE1MDgvNTZiOGQ5MWEtNGY3MC0z
OWFkLWFkM2QtZjNhMjAxODlmYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGYxNzgyMWMtYzgxYS00ZjFiLWJh
YmEtZTg0MTlkYzgxNTA4L2RmMTc4MjFjLWM4MWEtNGYxYi1iYWJhLWU4NDE5ZGM4
MTUwOC5jcmwwHwYDVR0jBBgwFoAU6qshJWbLBNm6o+ZieFUrt5rlFXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjE3ODIxYy1jODFhLTRmMWItYmFiYS1lODQx
OWRjODE1MDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAi4AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADvCye9MzbRUQgiHi1ShjcMwVWQ1iAE4u6oRdbmvJ04uiypCrTtk
KRriDt+rp41fqgevxKXokSkOFt5JpiTcrBnjrRBfnwyOm6+Ci2U2od5Zo8dNodUY
RH67pcd4kR7WwzHbdqtxdCgGq9eRtwwTj1PG0lBH7zPGi7aWQvp0IdRORCwRssAt
GEKU/p8GwIZqQw4iqHRWM8Z7zqvMWjHwlgt0Lc+szOgPtGqjaBX5/iwyTAoqW7i0
A7/xspXw8cl3/S/C+Z08Tm2rbyAJvb5pzK0Mi/73n66zocy3HQP8/Q+xQXkDqMoS
0qMM38Ry6IYdExzauOFlTrczl07aMQxMCTc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:31 2025 by rpki-client