Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/b6079224-6622-3dab-ad0f-c26db57a4f16.roa
File:                     b6079224-6622-3dab-ad0f-c26db57a4f16.roa (raw, json)
Hash identifier:          3avwoldalay1PwvXM8lOxFLt1sfkxldiD+56fiJgt7Y=
Subject key identifier:   40:92:00:8C:A6:77:46:95:32:19:35:44:CA:8F:84:65:AD:86:67:A1
Certificate issuer:       /CN=8287264c-f3cf-454c-9df1-abcefc82b2d7
Certificate serial:       010D0C9F432858492CAE81D42AB6A15B03C65B40
Authority key identifier: B1:13:EB:07:00:BA:CE:97:A0:91:B8:3F:0D:34:51:DB:B4:3A:4C:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/b6079224-6622-3dab-ad0f-c26db57a4f16.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     40244
IP address blocks:        2606:ed00:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/8287264c-f3cf-454c-9df1-abcefc82b2d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/8287264c-f3cf-454c-9df1-abcefc82b2d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:81:d4:2a:b6:a1:5b:03:c6:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8287264c-f3cf-454c-9df1-abcefc82b2d7
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6348e9ba-3ace-4a68-b2e2-c21fa5858ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:c6:d0:1b:93:62:cb:eb:03:2f:6c:fd:7a:
                    10:c8:15:93:7b:49:23:ce:88:0f:2a:e5:73:a5:ef:
                    ab:23:f4:a6:4d:22:54:a1:1b:5f:a4:84:22:69:8e:
                    c3:1b:52:17:c9:0a:45:c6:d2:d2:0c:80:48:df:85:
                    74:6d:0b:b8:fd:20:df:1f:93:31:6f:84:9c:7c:8e:
                    22:75:2c:c6:d0:c4:49:80:41:88:96:97:56:df:81:
                    bb:bd:22:59:f8:4c:4c:d8:58:fe:75:0c:d8:44:fd:
                    ed:f9:6f:0b:f1:4c:f7:da:5e:e9:e7:46:c1:f3:af:
                    35:17:38:e0:5d:b9:a5:ee:5e:47:d3:41:2c:ef:e4:
                    df:2e:51:00:6e:8e:85:35:9d:68:d7:b5:e7:cb:48:
                    2c:47:fa:3b:87:e7:32:73:07:b1:08:ec:7d:7e:9f:
                    99:be:e5:a1:9a:16:2f:ab:6f:50:d4:28:fd:6d:8d:
                    8e:fc:9e:e4:4d:5c:1b:50:cb:27:61:0c:10:ff:70:
                    9d:c4:da:7e:e7:ac:74:c2:bd:56:b4:a5:35:03:7e:
                    5a:e1:a7:4b:87:93:de:54:f0:8d:a5:de:e5:5c:72:
                    ba:20:54:22:4d:55:29:fe:6e:ee:a9:df:2c:e6:ac:
                    f4:0c:81:5c:44:ed:19:15:56:dd:c7:0e:cb:a3:c5:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:92:00:8C:A6:77:46:95:32:19:35:44:CA:8F:84:65:AD:86:67:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/b6079224-6622-3dab-ad0f-c26db57a4f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7/8287264c-f3cf-454c-9df1-abcefc82b2d7.crl

            X509v3 Authority Key Identifier:
                keyid:B1:13:EB:07:00:BA:CE:97:A0:91:B8:3F:0D:34:51:DB:B4:3A:4C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8287264c-f3cf-454c-9df1-abcefc82b2d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ed00:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a5:78:47:b2:fc:64:dc:79:ca:09:9e:d8:86:62:3d:a9:db:
         a7:4c:f8:54:70:de:bc:8b:dd:40:9a:52:ca:be:25:1e:1b:b4:
         76:1c:6a:0f:fa:fb:9c:fe:52:e9:3e:b8:84:2b:16:68:9a:91:
         10:8b:d3:14:0f:78:82:2d:0f:6e:d5:73:e4:5c:43:3f:cb:50:
         e9:98:d5:8c:c8:67:88:c9:fb:ca:50:1a:e9:cb:1b:e1:66:08:
         71:09:c6:2d:44:06:98:6e:4d:ab:11:15:8d:fc:c2:25:3e:bb:
         8c:53:c6:54:c0:c5:97:89:6b:81:f9:8c:c4:b9:92:95:24:be:
         61:54:e4:cb:45:81:3f:eb:48:e4:57:9d:40:b7:d0:f4:df:12:
         8b:d8:a2:e3:d6:ee:03:2d:30:1c:19:1d:dd:8d:df:c5:a3:f1:
         82:24:4e:d3:d1:72:8c:89:22:d0:05:9c:44:80:02:8f:47:1f:
         0e:45:a9:01:5d:5d:46:13:0f:04:b8:8b:f3:c4:78:66:a4:05:
         be:bf:05:a3:bf:a3:ca:ff:91:61:5a:2c:9c:fa:76:16:7a:e2:
         84:ec:4b:89:45:c3:2a:6a:7c:42:b7:51:20:20:da:79:f8:ae:
         b0:4d:b4:15:2e:a4:ab:77:75:5e:32:16:84:af:65:2a:ad:18:
         ef:fa:6b:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEksroHUKrahWwPGW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI4NzI2NGMtZjNjZi00NTRjLTlkZjEtYWJjZWZjODJi
MmQ3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NjM0OGU5YmEtM2FjZS00YTY4LWIyZTItYzIxZmE1ODU4Y2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCPG0BuTYsvrAy9s/XoQyBWTe0kjzogPKuVz
pe+rI/SmTSJUoRtfpIQiaY7DG1IXyQpFxtLSDIBI34V0bQu4/SDfH5Mxb4ScfI4i
dSzG0MRJgEGIlpdW34G7vSJZ+ExM2Fj+dQzYRP3t+W8L8Uz32l7p50bB8681Fzjg
Xbml7l5H00Es7+TfLlEAbo6FNZ1o17Xny0gsR/o7h+cycwexCOx9fp+ZvuWhmhYv
q29Q1Cj9bY2O/J7kTVwbUMsnYQwQ/3CdxNp+56x0wr1WtKU1A35a4adLh5PeVPCN
pd7lXHK6IFQiTVUp/m7uqd8s5qz0DIFcRO0ZFVbdxw7Lo8VyLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFECSAIymd0aVMhk1RMqPhGWthmehMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Mjg3
MjY0Yy1mM2NmLTQ1NGMtOWRmMS1hYmNlZmM4MmIyZDcvYjYwNzkyMjQtNjYyMi0z
ZGFiLWFkMGYtYzI2ZGI1N2E0ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODI4NzI2NGMtZjNjZi00NTRjLTlk
ZjEtYWJjZWZjODJiMmQ3LzgyODcyNjRjLWYzY2YtNDU0Yy05ZGYxLWFiY2VmYzgy
YjJkNy5jcmwwHwYDVR0jBBgwFoAUsRPrBwC6zpegkbg/DTRR27Q6TMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84Mjg3MjY0Yy1mM2NmLTQ1NGMtOWRmMS1hYmNl
ZmM4MmIyZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbtAAAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA2leEey/GTcecoJntiGYj2p26dM+FRw3ryL3UCaUsq+JR4btHYc
ag/6+5z+Uuk+uIQrFmiakRCL0xQPeIItD27Vc+RcQz/LUOmY1YzIZ4jJ+8pQGunL
G+FmCHEJxi1EBphuTasRFY38wiU+u4xTxlTAxZeJa4H5jMS5kpUkvmFU5MtFgT/r
SORXnUC30PTfEovYouPW7gMtMBwZHd2N38Wj8YIkTtPRcoyJItAFnESAAo9HHw5F
qQFdXUYTDwS4i/PEeGakBb6/BaO/o8r/kWFaLJz6dhZ64oTsS4lFwypqfEK3USAg
2nn4rrBNtBUupKt3dV4yFoSvZSqtGO/6a0Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:44 2025 by rpki-client