Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa
File:                     fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa (raw, json)
Hash identifier:          rmBHq4f2RGgWgRWR+A8vP4EkQV+AZmmO2TEVFqXCgpA=
Subject key identifier:   82:6D:F1:84:BE:0E:12:DB:B5:BF:20:74:27:94:74:BE:33:78:68:B5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498B99D4BD90182A2FF6343400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     24319
IP address blocks:        2600:140b:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d4:bd:90:18:2a:2f:f6:34:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=e8133730-bae2-45c0-bb4a-dc4e9c8bd148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:98:9b:82:c5:ac:9a:e6:c2:51:fc:94:9d:
                    28:0a:3c:28:f5:10:af:d4:1f:61:1e:11:8e:13:a0:
                    06:24:bc:f6:c5:22:5f:39:2f:b4:3e:8b:f6:81:ef:
                    8b:84:1d:de:ac:bf:1a:eb:eb:18:6b:fe:22:ed:0a:
                    99:a3:af:e3:14:2a:8b:42:60:8a:fb:32:53:c8:21:
                    77:82:df:2b:ad:d6:21:e0:c0:43:80:de:71:7d:cd:
                    99:16:b6:7d:ea:38:12:23:8b:6e:12:a0:1e:01:54:
                    ad:9f:5d:db:19:8c:c8:ba:6e:e2:96:ec:57:91:9d:
                    ab:63:bd:f6:06:64:7a:93:64:1d:4b:10:f9:f6:4c:
                    83:d3:b7:00:83:af:4c:0a:ae:d0:2c:a4:15:9a:f4:
                    d0:9c:4a:e4:12:a1:66:c0:5b:30:73:aa:3d:3d:66:
                    cf:15:e7:7d:12:a6:30:65:c7:a9:25:27:a1:d9:64:
                    d8:13:d3:ac:76:41:22:f3:a8:24:65:fd:43:b0:68:
                    66:ad:65:2c:01:a9:a3:a7:e7:51:8b:cd:8d:53:5a:
                    9e:11:82:65:f3:66:06:06:ea:29:82:e0:51:0a:d5:
                    22:88:14:fa:03:16:08:4b:dd:ba:5c:9b:e7:ba:b1:
                    b3:24:5c:25:2a:bc:20:ed:50:61:bb:cf:92:1f:be:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6D:F1:84:BE:0E:12:DB:B5:BF:20:74:27:94:74:BE:33:78:68:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb8b3774-fe5a-33d0-9fd5-09cfd47884c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:6800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ae:14:2a:e4:24:04:2c:93:c0:68:d4:d4:24:56:91:26:21:
         62:bd:41:38:35:65:f6:73:4a:45:00:67:92:0c:77:7d:c1:6d:
         aa:15:3e:ad:bc:a9:e9:99:ca:b8:e9:02:1c:80:eb:a1:08:63:
         c8:ce:45:2d:b6:e0:c1:65:b4:99:9d:ac:0a:08:88:e8:3d:b8:
         69:98:59:f9:4d:23:c5:bb:40:cc:55:94:74:8b:f6:df:78:cc:
         7f:5e:fb:ec:59:c2:ba:d0:f2:d4:17:da:a5:7d:d7:b8:05:2f:
         93:b9:ba:fb:a0:8f:76:2f:ba:07:1f:4b:5b:8c:fe:a5:5f:fa:
         6f:ae:83:28:1e:84:0c:41:63:02:ae:7d:80:0d:1d:e9:10:0e:
         20:fe:f7:67:6d:1a:b1:61:33:97:d2:78:12:b1:7a:d6:d4:8b:
         5d:60:0b:f3:e5:50:48:12:6a:a5:25:2e:78:bb:48:1f:d0:f2:
         34:f6:23:56:1e:69:65:a7:a2:84:1a:bc:fc:99:75:85:4c:88:
         66:60:55:d4:a6:d7:15:33:64:d4:5b:f0:0a:93:ee:14:1d:1e:
         d6:eb:a7:9b:ec:ed:ea:c3:ca:31:cc:0c:c8:c1:af:a4:79:58:
         ed:4c:53:1c:61:b3:1a:44:31:c0:77:aa:00:f9:26:e5:65:d0:
         93:09:5f:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmLmdS9kBgqL/Y0NAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk
ZTgxMzM3MzAtYmFlMi00NWMwLWJiNGEtZGM0ZTljOGJkMTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQGYm4LFrJrmwlH8lJ0oCjwo9RCv1B9hHhGO
E6AGJLz2xSJfOS+0Pov2ge+LhB3erL8a6+sYa/4i7QqZo6/jFCqLQmCK+zJTyCF3
gt8rrdYh4MBDgN5xfc2ZFrZ96jgSI4tuEqAeAVStn13bGYzIum7iluxXkZ2rY732
BmR6k2QdSxD59kyD07cAg69MCq7QLKQVmvTQnErkEqFmwFswc6o9PWbPFed9EqYw
ZcepJSeh2WTYE9OsdkEi86gkZf1DsGhmrWUsAamjp+dRi82NU1qeEYJl82YGBuop
guBRCtUiiBT6AxYIS926XJvnurGzJFwlKrwg7VBhu8+SH76QiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIJt8YS+DhLbtb8gdCeUdL4zeGi1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmI4YjM3NzQtZmU1YS0z
M2QwLTlmZDUtMDljZmQ0Nzg4NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC2gA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG6uFCrkJAQsk8Bo1NQkVpEmIWK9QTg1ZfZzSkUAZ5IMd33BbaoV
Pq28qemZyrjpAhyA66EIY8jORS224MFltJmdrAoIiOg9uGmYWflNI8W7QMxVlHSL
9t94zH9e++xZwrrQ8tQX2qV917gFL5O5uvugj3YvugcfS1uM/qVf+m+ugygehAxB
YwKufYANHekQDiD+92dtGrFhM5fSeBKxetbUi11gC/PlUEgSaqUlLni7SB/Q8jT2
I1YeaWWnooQavPyZdYVMiGZgVdSm1xUzZNRb8AqT7hQdHtbrp5vs7erDyjHMDMjB
r6R5WO1MUxxhsxpEMcB3qgD5JuVl0JMJX7E=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:06:39 2025 by rpki-client