Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a73f2e2-a081-3664-81da-812c8bb480f6.roa
File:                     4a73f2e2-a081-3664-81da-812c8bb480f6.roa (raw, json)
Hash identifier:          jmw9T/4ZT+btJ/KzkhEHCWUoijU438hIFVfig6591dc=
Subject key identifier:   48:B9:96:6A:46:AA:C6:8A:3F:B4:A0:F3:67:05:02:21:D1:44:96:02
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC2001315F9592A3C98100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a73f2e2-a081-3664-81da-812c8bb480f6.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        2606:4700:4037::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:20:01:31:5f:95:92:a3:c9:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=306ff233-95fd-4626-acc7-dfcdefc9a2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:d4:93:80:41:eb:93:f5:20:48:62:78:59:
                    55:50:48:2a:71:3d:f2:36:07:c6:c1:b0:e1:be:2b:
                    81:b0:13:25:9b:61:58:8c:ed:9b:3c:f5:a4:45:c1:
                    6a:0a:5b:c9:05:54:ee:f9:cc:f9:5b:06:85:7f:52:
                    d2:64:b0:77:97:15:ad:77:ce:84:ec:33:ef:da:29:
                    90:96:d5:27:a8:ef:06:9a:3c:3f:3f:7c:c6:f7:ab:
                    32:f8:9a:26:05:f9:6d:e8:01:79:31:51:16:28:5e:
                    c5:66:6d:22:cf:b1:13:65:73:fa:2e:c0:5a:03:cd:
                    fe:ba:3d:a6:cd:b9:a5:c6:f2:9d:68:9c:29:59:12:
                    45:fa:d0:a8:0d:da:fb:d1:e0:d0:aa:ac:e4:eb:c7:
                    18:a7:5a:9b:58:92:fb:62:17:10:4e:f4:b0:78:01:
                    ac:ae:c9:31:9d:23:88:79:f1:7a:8b:df:1c:25:fd:
                    64:05:34:2c:a6:3a:5f:00:0c:3f:91:e4:1b:f3:60:
                    ca:ba:ed:aa:ac:80:36:bf:9a:fa:4c:d5:7d:ac:31:
                    29:23:42:45:c0:65:6a:3f:39:e6:9d:a0:65:c8:d8:
                    41:8a:c2:22:54:3a:56:77:17:ec:f1:63:00:6d:a8:
                    1a:91:b2:68:8d:68:d7:fa:fa:b6:ef:7c:fb:12:35:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:96:6A:46:AA:C6:8A:3F:B4:A0:F3:67:05:02:21:D1:44:96:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a73f2e2-a081-3664-81da-812c8bb480f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:92:3f:63:8f:db:3f:dc:07:d1:a3:00:f4:3a:3c:dd:ee:
         3a:3b:fa:79:d8:8a:32:ed:2d:ad:1b:4f:c9:24:19:5c:83:6f:
         0c:0c:94:93:e5:91:03:66:6d:ff:93:3b:b5:a0:c0:c4:14:42:
         59:0e:d8:1f:f4:a1:d3:9d:2b:d1:37:36:33:62:01:06:20:bd:
         9c:af:d4:ef:57:0b:4a:e4:8c:87:e4:6c:a1:e8:e1:5e:b4:e0:
         b3:04:1a:05:87:c4:01:ce:06:91:a9:07:e8:9a:05:9c:1a:e8:
         ef:1b:75:4e:e4:bf:77:c3:1d:3b:f3:e2:22:61:a9:e9:70:b1:
         0e:f5:19:77:48:73:77:b8:54:1b:40:fb:2e:15:83:cb:d5:97:
         c8:ee:24:48:88:4f:ff:55:30:94:aa:c6:11:cf:50:68:fd:8b:
         7f:8a:99:8b:24:0c:02:81:89:c0:d3:98:54:f8:1a:c1:5e:e6:
         6a:dd:12:c8:8c:66:a8:eb:5e:2d:1b:3e:79:d2:c4:6d:7b:1c:
         b3:7a:b4:10:72:e7:e7:70:20:c8:68:88:12:ca:e2:ba:73:20:
         76:bd:da:e7:78:34:72:f6:3b:0a:34:d8:df:be:7e:cd:65:fb:
         6c:b8:c0:65:d6:a9:5c:0b:b1:4b:ec:06:60:ed:9e:77:17:2c:
         79:a6:dd:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3CABMV+VkqPJgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MzA2ZmYyMzMtOTVmZC00NjI2LWFjYzctZGZjZGVmYzlhMmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGDUk4BB65P1IEhieFlVUEgqcT3yNgfGwbDh
viuBsBMlm2FYjO2bPPWkRcFqClvJBVTu+cz5WwaFf1LSZLB3lxWtd86E7DPv2imQ
ltUnqO8Gmjw/P3zG96sy+JomBflt6AF5MVEWKF7FZm0iz7ETZXP6LsBaA83+uj2m
zbmlxvKdaJwpWRJF+tCoDdr70eDQqqzk68cYp1qbWJL7YhcQTvSweAGsrskxnSOI
efF6i98cJf1kBTQspjpfAAw/keQb82DKuu2qrIA2v5r6TNV9rDEpI0JFwGVqPznm
naBlyNhBisIiVDpWdxfs8WMAbagakbJojWjX+vq273z7EjUzOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEi5lmpGqsaKP7Sg82cFAiHRRJYCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGE3M2YyZTItYTA4MS0z
NjY0LTgxZGEtODEyYzhiYjQ4MGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEA3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF+pkj9jj9s/3AfRowD0Ojzd7jo7+nnYijLtLa0bT8kkGVyDbwwM
lJPlkQNmbf+TO7WgwMQUQlkO2B/0odOdK9E3NjNiAQYgvZyv1O9XC0rkjIfkbKHo
4V604LMEGgWHxAHOBpGpB+iaBZwa6O8bdU7kv3fDHTvz4iJhqelwsQ71GXdIc3e4
VBtA+y4Vg8vVl8juJEiIT/9VMJSqxhHPUGj9i3+KmYskDAKBicDTmFT4GsFe5mrd
EsiMZqjrXi0bPnnSxG17HLN6tBBy5+dwIMhoiBLK4rpzIHa92ud4NHL2Owo02N++
fs1l+2y4wGXWqVwLsUvsBmDtnncXLHmm3es=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:31 2025 by rpki-client