Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2633fa67-59c6-3531-87db-af8c6dd876ce.roa
File:                     2633fa67-59c6-3531-87db-af8c6dd876ce.roa (raw, json)
Hash identifier:          UVjyCkBDG55+PUzh4BaXkHm2V/FXeMaDGWsZnr7uxDA=
Subject key identifier:   B5:0B:71:34:16:5D:C8:E8:94:D6:FA:76:F8:46:E0:8C:4E:2B:EA:78
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497F09A8A5B1FC491DCD8224C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2633fa67-59c6-3531-87db-af8c6dd876ce.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     20940
IP address blocks:        2600:140b:1a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a8:a5:b1:fc:49:1d:cd:82:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=baca228f-c7fe-4209-a243-0b1879329a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:2b:24:83:fa:36:92:1c:66:d9:81:80:d2:
                    8b:61:c7:e2:18:59:49:5c:e3:db:2c:c6:a8:26:4b:
                    61:1c:54:e6:75:64:7f:ad:6d:bc:fb:51:44:55:c6:
                    27:49:0a:56:c0:9c:aa:e7:68:ba:49:b9:e6:05:ea:
                    ff:5a:2a:eb:aa:22:37:10:27:46:d8:2d:bd:b8:99:
                    45:a7:78:5c:48:d3:a0:ae:2a:6e:7b:11:80:86:f2:
                    6e:47:72:72:0a:0f:79:47:e5:4f:61:4e:03:24:e5:
                    ac:5d:89:9c:7c:fc:2b:c0:43:d5:b3:ed:77:d1:e8:
                    5c:8a:92:72:7b:b3:cc:9c:bb:71:27:e5:b7:06:07:
                    1b:be:34:b1:3d:24:c4:57:53:52:85:9a:e5:fe:cc:
                    a4:3c:52:cd:9b:c4:16:5b:13:b9:4d:2d:7f:43:3a:
                    9a:02:eb:82:41:d2:39:1b:28:75:dc:90:37:0c:6d:
                    6f:ac:7e:81:c0:aa:f2:4e:1c:d4:a6:ce:c8:3a:77:
                    06:dc:2a:a9:d8:70:60:71:c2:63:13:b2:5d:f1:52:
                    0a:a0:92:6e:e9:be:9e:fe:93:9b:de:0d:27:d8:08:
                    26:9a:f9:ba:44:5c:0b:0c:d0:a1:3b:c2:36:ae:7c:
                    4e:83:09:99:c4:44:e8:49:60:cf:dd:e1:75:47:40:
                    d6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0B:71:34:16:5D:C8:E8:94:D6:FA:76:F8:46:E0:8C:4E:2B:EA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2633fa67-59c6-3531-87db-af8c6dd876ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:1a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:bc:05:92:d2:c1:57:84:75:97:8e:55:f2:aa:c7:36:bd:d9:
         28:a5:a0:0f:05:82:ca:69:74:41:8b:cf:d7:52:49:1a:b2:b7:
         4d:35:51:56:aa:83:03:6a:98:c1:c6:dc:ba:a2:70:7e:a2:97:
         ba:87:9c:c6:61:74:d7:48:04:51:c2:78:bc:66:43:06:f3:d1:
         7f:c8:be:52:36:26:14:ef:da:fe:9c:b5:b7:b1:df:15:43:87:
         6a:e2:40:cf:18:52:2f:b2:7e:0b:c2:52:b0:5f:a5:10:6a:cd:
         54:22:18:16:a2:47:35:3b:39:60:22:c4:2f:cf:87:08:9c:10:
         8c:8b:2b:e1:9e:5b:19:4a:ca:9e:93:c9:d7:0c:f5:02:3d:c8:
         76:62:3f:c2:e3:90:4a:ff:29:d0:df:59:a4:5e:b1:a2:2f:a9:
         43:13:08:48:8b:48:ed:98:c4:7a:7f:cc:4c:78:02:fb:56:22:
         04:ba:0d:a4:6e:ec:e6:ca:71:e1:01:34:6d:dc:0f:61:9d:92:
         76:1a:43:83:4e:e2:36:82:cc:e9:76:3d:82:b3:ab:bf:37:61:
         90:2e:fa:39:8e:1e:a4:bd:08:45:e7:85:e8:65:2a:44:3c:ee:
         47:f7:a2:84:9d:99:9f:31:7e:c3:85:42:42:3e:56:b7:3f:26:
         a3:cb:41:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl/CailsfxJHc2CJMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk
YmFjYTIyOGYtYzdmZS00MjA5LWEyNDMtMGIxODc5MzI5YTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo18rJIP6NpIcZtmBgNKLYcfiGFlJXOPbLMao
JkthHFTmdWR/rW28+1FEVcYnSQpWwJyq52i6SbnmBer/WirrqiI3ECdG2C29uJlF
p3hcSNOgripuexGAhvJuR3JyCg95R+VPYU4DJOWsXYmcfPwrwEPVs+130ehcipJy
e7PMnLtxJ+W3BgcbvjSxPSTEV1NShZrl/sykPFLNm8QWWxO5TS1/QzqaAuuCQdI5
Gyh13JA3DG1vrH6BwKryThzUps7IOncG3Cqp2HBgccJjE7Jd8VIKoJJu6b6e/pOb
3g0n2Agmmvm6RFwLDNChO8I2rnxOgwmZxEToSWDP3eF1R0DWAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLULcTQWXcjolNb6dvhG4IxOK+p4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjYzM2ZhNjctNTljNi0z
NTMxLTg3ZGItYWY4YzZkZDg3NmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCxoA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAi8BZLSwVeEdZeOVfKqxza92SiloA8FgsppdEGLz9dSSRqyt001
UVaqgwNqmMHG3LqicH6il7qHnMZhdNdIBFHCeLxmQwbz0X/IvlI2JhTv2v6ctbex
3xVDh2riQM8YUi+yfgvCUrBfpRBqzVQiGBaiRzU7OWAixC/PhwicEIyLK+GeWxlK
yp6TydcM9QI9yHZiP8LjkEr/KdDfWaResaIvqUMTCEiLSO2YxHp/zEx4AvtWIgS6
DaRu7ObKceEBNG3cD2GdknYaQ4NO4jaCzOl2PYKzq783YZAu+jmOHqS9CEXnhehl
KkQ87kf3ooSdmZ8xfsOFQkI+Vrc/JqPLQRE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:56:59 2025 by rpki-client