Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e8a663d-7931-3423-bf56-b1d511487fd0.roa
File:                     4e8a663d-7931-3423-bf56-b1d511487fd0.roa (raw, json)
Hash identifier:          IeRwHnDMPsFh3oTo8TKaVgLRKQ1pgKO/Xc/lmCocogY=
Subject key identifier:   90:DA:A7:3D:BA:2D:FE:93:03:F2:DD:5C:58:22:0D:D3:6C:20:83:48
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6BDBFCFB6AF20F6040A40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e8a663d-7931-3423-bf56-b1d511487fd0.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        2606:4700:4404::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:bd:bf:cf:b6:af:20:f6:04:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=2cd184f7-9447-4916-99eb-6ee6684f9732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:70:fb:00:50:7d:a9:61:ae:d0:67:32:58:
                    72:d4:f8:39:52:82:27:d1:0e:68:16:f0:20:b6:6f:
                    bb:60:7b:86:e4:ed:5b:80:61:d9:8f:43:de:14:77:
                    d5:fe:69:5f:72:02:2b:47:17:c6:12:23:f1:a0:96:
                    d4:c9:56:cd:49:46:26:ca:b3:19:45:4a:70:79:75:
                    1d:51:5c:20:fd:57:e3:b4:7b:ee:3d:ce:db:19:84:
                    d4:a4:9f:6c:8c:2d:45:11:13:cd:12:d9:a7:3b:b1:
                    6d:bf:e3:8f:8c:0d:c8:e1:70:5a:1f:93:89:06:22:
                    58:69:7d:4a:e4:96:1e:15:ac:65:f2:6c:e3:bf:d7:
                    6b:3a:23:da:ef:0d:81:4c:a9:af:7c:a7:86:8d:a3:
                    b6:9f:c9:90:5c:ac:37:35:40:b4:4d:88:92:9c:9a:
                    ca:93:d2:59:a0:91:50:29:56:28:87:40:f2:bc:48:
                    5a:a6:a0:c6:96:15:4b:e2:b6:f4:ed:b0:83:da:67:
                    b7:29:cb:76:33:19:d1:73:8d:61:6c:66:30:89:93:
                    51:ef:ef:20:0e:79:86:98:a4:51:2c:01:7c:4c:07:
                    d3:bd:66:33:96:44:96:ff:1b:00:b4:dd:b8:1f:a2:
                    a3:2d:e6:3f:11:b3:16:9b:13:b3:5d:f3:6b:f0:83:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DA:A7:3D:BA:2D:FE:93:03:F2:DD:5C:58:22:0D:D3:6C:20:83:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e8a663d-7931-3423-bf56-b1d511487fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4404::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:18:88:83:fe:d8:70:6b:77:94:51:64:7e:e9:9b:6b:3d:
         0a:26:1e:b1:68:0b:41:a3:6a:a6:1a:24:60:35:f6:5c:db:73:
         77:c4:3b:f7:6f:e4:9a:2c:5a:25:00:34:41:c5:46:e0:00:1b:
         50:71:11:af:88:19:6f:33:6c:a7:dc:42:d5:1a:c6:80:e7:3f:
         32:01:55:25:b8:7a:c5:94:7f:80:49:2c:23:77:7e:97:3f:e8:
         6f:ea:4f:58:65:b7:19:f1:39:b0:af:99:70:d0:7d:9a:e5:ea:
         f8:5e:c1:fe:aa:17:ed:f8:99:a9:df:72:6b:c3:9d:5b:f4:e5:
         90:da:0f:e6:c1:b0:d3:9c:fb:cf:26:47:03:bd:e1:97:2a:0d:
         a5:e4:e1:6f:b0:87:71:03:54:e1:62:14:cc:fe:ef:93:82:53:
         18:50:ae:74:dd:2b:bc:c4:82:9e:b1:6a:40:8f:93:ee:c1:5f:
         68:ad:8d:a1:b3:00:88:ee:c6:3a:b1:b9:c8:32:63:ec:c0:c1:
         97:33:b1:eb:0f:19:9c:39:07:58:52:af:72:4c:9f:29:28:24:
         a3:e4:b2:a9:4c:77:3d:0b:2f:91:45:82:d7:1d:19:dc:bf:60:
         3f:7c:70:38:f0:6c:1e:b8:3c:04:27:47:7c:83:66:c9:c0:a7:
         79:45:f7:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkFtr2/z7avIPYECkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
MmNkMTg0ZjctOTQ0Ny00OTE2LTk5ZWItNmVlNjY4NGY5NzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjxw+wBQfalhrtBnMlhy1Pg5UoIn0Q5oFvAg
tm+7YHuG5O1bgGHZj0PeFHfV/mlfcgIrRxfGEiPxoJbUyVbNSUYmyrMZRUpweXUd
UVwg/VfjtHvuPc7bGYTUpJ9sjC1FERPNEtmnO7Ftv+OPjA3I4XBaH5OJBiJYaX1K
5JYeFaxl8mzjv9drOiPa7w2BTKmvfKeGjaO2n8mQXKw3NUC0TYiSnJrKk9JZoJFQ
KVYoh0DyvEhapqDGlhVL4rb07bCD2me3Kct2MxnRc41hbGYwiZNR7+8gDnmGmKRR
LAF8TAfTvWYzlkSW/xsAtN24H6KjLeY/EbMWmxOzXfNr8IOS9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJDapz26Lf6TA/LdXFgiDdNsIINIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGU4YTY2M2QtNzkzMS0z
NDIzLWJmNTYtYjFkNTExNDg3ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEQE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHDGGIiD/thwa3eUUWR+6ZtrPQomHrFoC0GjaqYaJGA19lzbc3fE
O/dv5JosWiUANEHFRuAAG1BxEa+IGW8zbKfcQtUaxoDnPzIBVSW4esWUf4BJLCN3
fpc/6G/qT1hltxnxObCvmXDQfZrl6vhewf6qF+34manfcmvDnVv05ZDaD+bBsNOc
+88mRwO94ZcqDaXk4W+wh3EDVOFiFMz+75OCUxhQrnTdK7zEgp6xakCPk+7BX2it
jaGzAIjuxjqxucgyY+zAwZczsesPGZw5B1hSr3JMnykoJKPksqlMdz0LL5FFgtcd
Gdy/YD98cDjwbB64PAQnR3yDZsnAp3lF94c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:17:59 2025 by rpki-client