Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44eb3df2-9508-36bc-826f-589de4aeefb4.roa
File:                     44eb3df2-9508-36bc-826f-589de4aeefb4.roa (raw, json)
Hash identifier:          JcteGGtJ6WFYB4xHfMoSjMJ4cx4Mbg8+qMe7TAnjziE=
Subject key identifier:   69:7B:7B:1A:1B:48:CB:18:B7:16:ED:2A:2F:46:6B:74:79:B8:67:BD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F715469263615392ECDE8E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44eb3df2-9508-36bc-826f-589de4aeefb4.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        2606:4700:4025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:46:92:63:61:53:92:ec:de:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=60be456b-baa8-42f6-9fa8-e8eeeefc7613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:10:21:ca:c7:31:4a:2e:6f:c2:6d:56:8e:08:
                    87:e5:21:81:2d:84:fd:2d:bc:9d:c3:fb:e7:8b:c0:
                    57:1d:20:cc:10:c1:69:9c:d0:fe:92:6d:db:f5:a1:
                    c5:c8:f8:0b:19:98:34:7d:d0:b5:a4:23:77:7a:07:
                    11:d0:e8:4e:24:90:6b:a4:80:75:05:c9:b0:f1:d6:
                    14:21:92:47:2b:0f:1c:ba:d3:8a:b2:76:64:6a:8a:
                    0d:df:95:f8:f8:9b:11:92:24:c8:b4:bd:d0:ff:c9:
                    ed:65:78:c5:54:14:eb:92:fe:94:dd:9b:6a:5a:83:
                    f8:21:9e:96:16:ed:5d:00:04:81:ba:7e:e6:77:8b:
                    8e:60:e0:bf:1a:f9:4e:1a:65:fb:37:b9:ae:4e:31:
                    78:d0:ef:c7:ff:81:08:81:38:f7:2b:a0:9f:9f:d9:
                    5c:ae:e5:04:c4:6a:39:f7:8c:ad:ef:65:81:f4:8f:
                    fc:05:87:24:43:92:e3:e1:89:b1:ef:ec:f8:d2:d9:
                    7c:e0:a1:fd:3e:d7:ec:a1:db:e6:be:9a:78:6e:85:
                    ba:2f:24:3d:2e:92:a3:40:01:d2:47:9f:74:bb:91:
                    67:a9:f3:7a:7e:b9:04:ff:b3:7f:99:dd:7c:af:5d:
                    fe:29:9f:a4:1e:5c:7b:55:4b:3e:0c:ef:59:57:9e:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7B:7B:1A:1B:48:CB:18:B7:16:ED:2A:2F:46:6B:74:79:B8:67:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44eb3df2-9508-36bc-826f-589de4aeefb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:91:9f:8e:d5:86:8f:4d:a8:a1:db:7c:c6:6a:47:31:7a:c4:
         5e:5f:47:63:99:fa:ab:18:2a:40:e0:05:36:45:69:eb:75:b4:
         95:d7:c9:f9:20:e1:7a:ad:37:c1:01:51:7d:6a:2f:c3:d5:ae:
         aa:48:3a:2e:b3:cb:0f:ce:f7:8f:d1:89:7c:23:5a:6c:95:3e:
         2a:9e:b9:3d:45:c9:e6:38:9a:6d:85:1e:e4:e8:28:83:b6:49:
         68:97:e1:d9:72:aa:85:8a:3c:3d:73:ce:82:8b:2b:df:33:ed:
         10:a2:47:e0:a3:22:a0:fc:fb:00:6a:d9:3a:35:94:21:f3:e1:
         b9:92:49:80:25:1e:db:7c:a2:bf:46:3d:60:8f:50:ea:2a:f1:
         87:7a:a2:a5:da:a5:5f:23:f2:b2:8d:97:80:8f:ff:c3:e7:9b:
         7c:77:85:c2:ba:ba:f0:fb:e4:7e:7c:5e:78:5a:34:04:37:30:
         33:4f:ab:95:68:4d:ce:67:e7:63:06:fe:9b:33:57:1e:c7:58:
         11:7e:b7:ed:cd:7d:f5:23:fe:4b:7f:95:59:4e:5b:82:68:db:
         fa:ec:0d:51:3f:41:83:39:7e:f2:b2:c3:c1:72:c1:22:7a:62:
         40:62:d8:26:77:24:28:81:45:6a:4d:2d:5e:54:4d:c7:f6:cc:
         74:89:53:70
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn3FUaSY2FTkuzejoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
NjBiZTQ1NmItYmFhOC00MmY2LTlmYTgtZThlZWVlZmM3NjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxAhyscxSi5vwm1WjgiH5SGBLYT9Lbydw/vn
i8BXHSDMEMFpnND+km3b9aHFyPgLGZg0fdC1pCN3egcR0OhOJJBrpIB1Bcmw8dYU
IZJHKw8cutOKsnZkaooN35X4+JsRkiTItL3Q/8ntZXjFVBTrkv6U3ZtqWoP4IZ6W
Fu1dAASBun7md4uOYOC/GvlOGmX7N7muTjF40O/H/4EIgTj3K6Cfn9lcruUExGo5
94yt72WB9I/8BYckQ5Lj4Ymx7+z40tl84KH9Ptfsodvmvpp4boW6LyQ9LpKjQAHS
R590u5FnqfN6frkE/7N/md18r13+KZ+kHlx7VUs+DO9ZV55nQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGl7exobSMsYtxbtKi9Ga3R5uGe9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDRlYjNkZjItOTUwOC0z
NmJjLTgyNmYtNTg5ZGU0YWVlZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEAl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEaRn47Vho9NqKHbfMZqRzF6xF5fR2OZ+qsYKkDgBTZFaet1tJXX
yfkg4XqtN8EBUX1qL8PVrqpIOi6zyw/O94/RiXwjWmyVPiqeuT1FyeY4mm2FHuTo
KIO2SWiX4dlyqoWKPD1zzoKLK98z7RCiR+CjIqD8+wBq2To1lCHz4bmSSYAlHtt8
or9GPWCPUOoq8Yd6oqXapV8j8rKNl4CP/8Pnm3x3hcK6uvD75H58XnhaNAQ3MDNP
q5VoTc5n52MG/pszVx7HWBF+t+3NffUj/kt/lVlOW4Jo2/rsDVE/QYM5fvKyw8Fy
wSJ6YkBi2CZ3JCiBRWpNLV5UTcf2zHSJU3A=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:04:26 2025 by rpki-client