Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/0a2c25d8-fa5f-3112-bb2c-2c9add630ca6.roa
File:                     0a2c25d8-fa5f-3112-bb2c-2c9add630ca6.roa (raw, json)
Hash identifier:          STyq/XwKbKlonny0xj7ux4oI37CA2NmE0T6eZcxje8U=
Subject key identifier:   22:54:E1:8E:65:C7:1C:17:C3:5B:21:C2:71:E8:06:F0:3C:DC:C5:4C
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285848A830A54C5CF74675D5296680
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/0a2c25d8-fa5f-3112-bb2c-2c9add630ca6.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     32133
IP address blocks:        2606:8e80:3800::/37 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a5:4c:5c:f7:46:75:d5:29:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=056f6750-5385-42dc-857b-48f2f9a1cc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:8f:1b:f5:49:8d:6c:99:eb:b5:f1:97:0e:
                    6d:87:5c:6a:2e:15:9b:da:b3:0e:89:4b:05:96:d4:
                    b4:6f:3a:a7:f2:6e:69:e6:ff:a1:43:d7:c2:33:ce:
                    8e:ff:86:71:10:fe:10:89:35:23:12:d9:12:5d:91:
                    18:d6:a6:ee:aa:81:f3:99:5f:c5:a3:fd:04:8c:ed:
                    9c:d8:34:3f:0e:85:ba:40:e6:51:03:c6:26:03:41:
                    b0:ab:ff:b3:5c:59:c5:1b:2b:ea:9d:9e:7c:ce:58:
                    46:4c:ed:c0:36:ab:1c:47:41:9b:5e:9e:8e:33:e1:
                    5f:84:4e:64:7b:ea:cb:21:66:fa:d4:61:f8:89:3c:
                    c7:fd:07:95:97:5c:67:43:22:ec:90:95:67:f0:5a:
                    e7:ca:48:01:0c:c8:39:94:17:09:e4:97:1b:56:71:
                    41:84:3e:fa:74:21:89:eb:a9:fd:13:61:9f:07:13:
                    d5:71:05:2e:09:2b:08:35:13:5d:f9:68:fb:23:ac:
                    69:26:9d:5d:d8:67:bf:f8:af:3f:e9:14:a2:d4:7e:
                    19:a0:aa:e1:c0:ad:5a:ed:80:94:93:89:b4:9d:9c:
                    ad:d3:ef:87:b3:9e:27:0a:2e:fb:d4:5e:4d:03:39:
                    f8:2a:3c:a7:91:c6:48:08:e3:7a:9b:14:f8:76:4d:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:54:E1:8E:65:C7:1C:17:C3:5B:21:C2:71:E8:06:F0:3C:DC:C5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/0a2c25d8-fa5f-3112-bb2c-2c9add630ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:3800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:91:67:1a:31:62:f6:2d:f9:38:be:8c:07:7b:5d:5f:20:63:
         98:71:69:7c:f7:3c:80:68:7c:31:b9:42:2a:42:e4:b1:20:1d:
         04:4e:a9:58:f6:f5:2f:52:42:52:c9:1d:df:08:4a:02:c4:34:
         9e:7e:08:63:69:76:cf:44:cd:f2:5d:ee:00:c3:5f:b6:36:ac:
         56:98:19:65:cc:28:6d:a7:ec:86:f9:5c:58:89:71:34:10:93:
         25:81:00:be:87:6e:f9:df:27:ea:17:c5:b3:93:41:3c:c3:91:
         7e:26:68:25:68:c7:37:1c:96:8c:2e:a7:ed:45:e5:d3:0d:53:
         45:28:33:0e:df:88:22:24:64:66:87:41:b2:ed:87:cc:f5:96:
         42:e7:bb:c5:b3:63:4b:9c:5e:9e:a1:9e:71:08:12:3c:ea:1a:
         9d:60:02:38:a4:73:41:f5:f6:57:c9:1a:7f:98:8b:fb:39:4e:
         08:f3:85:01:24:45:94:c4:33:85:54:b9:71:ca:23:cf:43:e3:
         9c:13:7a:ab:9b:39:70:91:bc:06:ca:a3:53:e2:6c:cf:73:32:
         ff:5b:36:ea:70:d3:a7:39:85:90:1a:a1:62:fc:f3:94:27:02:
         b1:1b:64:d2:89:11:64:7a:c8:56:dd:c6:cd:f6:55:dd:c9:7c:
         b0:8c:88:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEioMKVMXPdGddUpZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
MDU2ZjY3NTAtNTM4NS00MmRjLTg1N2ItNDhmMmY5YTFjYzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbuPG/VJjWyZ67Xxlw5th1xqLhWb2rMOiUsF
ltS0bzqn8m5p5v+hQ9fCM86O/4ZxEP4QiTUjEtkSXZEY1qbuqoHzmV/Fo/0EjO2c
2DQ/DoW6QOZRA8YmA0Gwq/+zXFnFGyvqnZ58zlhGTO3ANqscR0GbXp6OM+FfhE5k
e+rLIWb61GH4iTzH/QeVl1xnQyLskJVn8FrnykgBDMg5lBcJ5JcbVnFBhD76dCGJ
66n9E2GfBxPVcQUuCSsINRNd+Wj7I6xpJp1d2Ge/+K8/6RSi1H4ZoKrhwK1a7YCU
k4m0nZyt0++Hs54nCi771F5NAzn4KjynkcZICON6mxT4dk1NlQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCJU4Y5lxxwXw1shwnHoBvA83MVMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvMGEyYzI1ZDgtZmE1Zi0z
MTEyLWJiMmMtMmM5YWRkNjMwY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgaOgDgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAj5FnGjFi9i35OL6MB3tdXyBjmHFpfPc8gGh8MblCKkLksSAdBE6p
WPb1L1JCUskd3whKAsQ0nn4IY2l2z0TN8l3uAMNftjasVpgZZcwobafshvlcWIlx
NBCTJYEAvodu+d8n6hfFs5NBPMORfiZoJWjHNxyWjC6n7UXl0w1TRSgzDt+IIiRk
ZodBsu2HzPWWQue7xbNjS5xenqGecQgSPOoanWACOKRzQfX2V8kaf5iL+zlOCPOF
ASRFlMQzhVS5ccojz0PjnBN6q5s5cJG8BsqjU+Jsz3My/1s26nDTpzmFkBqhYvzz
lCcCsRtk0okRZHrIVt3GzfZV3cl8sIyIqw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:41 2025 by rpki-client