Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa
File:                     5311ad24-87c1-3f2b-99ca-8a69266c0972.roa (raw, json)
Hash identifier:          90QlQQO6oSQW27n9++QS55nsDAa1XINf4CQeyU++ZSo=
Subject key identifier:   53:2A:8A:88:15:7B:0B:49:60:F4:81:CB:5A:4D:3B:D0:6A:60:1C:DF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A909E8858E69A92AFD240
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        2606:4700:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:90:9e:88:58:e6:9a:92:af:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=ade5951a-722f-4bb8-bd51-c0dee6712c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:b9:17:c2:04:22:34:ca:9f:8c:b3:b7:ab:
                    59:03:2d:b4:8c:d0:3f:c8:ad:45:dd:2e:a7:22:b3:
                    87:54:16:84:62:e5:48:62:84:b2:ba:5b:a2:2a:48:
                    34:7c:f2:17:36:47:44:b6:58:68:c8:db:44:bf:f1:
                    ae:75:91:86:32:d3:45:6f:82:df:a3:5d:7e:90:2f:
                    e1:84:7f:43:4d:52:84:bc:f4:cb:25:d9:dd:5e:1d:
                    c4:5b:0a:94:8b:92:e2:f5:19:4d:1e:8d:03:db:8e:
                    4c:16:2d:c8:49:f7:c5:31:fc:d2:a6:7e:69:67:4e:
                    34:58:5c:25:9d:0a:b9:a2:af:e4:b9:d0:d3:a6:24:
                    e0:05:05:66:91:bb:97:d3:a5:10:48:52:61:eb:df:
                    70:21:74:7b:59:9b:44:94:a3:c3:2f:b8:e3:3c:1e:
                    06:1a:a8:d1:12:b5:25:b9:39:59:b8:d9:01:af:66:
                    33:03:c2:29:5e:0b:f8:d0:ef:fb:5e:36:14:2c:59:
                    5c:b8:ba:b0:b8:87:32:e7:1a:db:7e:99:37:47:d7:
                    a4:e2:3d:77:51:b4:58:ab:18:ba:86:0d:8d:6e:a7:
                    d2:6b:69:53:74:7b:d5:3c:38:44:0d:28:a0:6a:91:
                    ac:95:fa:50:8d:88:9b:ae:cf:fa:d3:3b:76:48:b9:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:8A:88:15:7B:0B:49:60:F4:81:CB:5A:4D:3B:D0:6A:60:1C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:65:ee:51:f1:ee:ca:5c:ff:64:b6:c6:56:0c:68:7c:92:69:
         71:7e:52:af:22:bb:4e:60:d5:b9:2c:41:f9:60:83:ee:88:6a:
         ba:34:b2:03:54:ba:77:d4:6e:8f:60:1c:d6:57:b6:91:f7:cf:
         7f:6e:ea:51:03:0f:d7:72:8f:af:ae:99:30:2f:f9:66:4e:78:
         ce:a3:7e:34:05:22:41:3c:76:29:20:1e:7b:54:0c:bc:cb:f6:
         35:b1:15:89:47:a8:5a:45:f9:22:6d:b2:df:15:48:ce:7a:d8:
         d2:ed:ea:ad:e6:02:5a:4d:a1:93:df:fa:24:2f:c6:7c:c0:c1:
         dd:7f:ed:97:83:66:52:55:0c:a5:94:e0:6d:f0:20:ca:e2:43:
         25:90:63:1f:b8:6e:53:b8:93:1e:af:3e:17:e7:aa:84:b3:f3:
         e3:11:be:ce:54:9a:c5:75:4b:03:fe:74:27:6d:db:5d:c5:2d:
         5c:88:84:c2:e7:ce:8a:44:31:03:21:7b:d3:d5:b5:44:89:55:
         68:5a:84:00:fd:9b:de:fb:b8:2f:e4:b8:e0:a3:c6:21:37:e7:
         97:6e:08:3a:67:dc:37:b5:7a:fa:cc:5c:2d:28:8d:bc:03:cb:
         df:a0:58:62:a8:b5:69:b5:0d:88:4e:37:77:05:84:3e:0d:06:
         12:ef:c4:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnwGpCeiFjmmpKv0kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk
YWRlNTk1MWEtNzIyZi00YmI4LWJkNTEtYzBkZWU2NzEyYzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7e5F8IEIjTKn4yzt6tZAy20jNA/yK1F3S6n
IrOHVBaEYuVIYoSyuluiKkg0fPIXNkdEtlhoyNtEv/GudZGGMtNFb4Lfo11+kC/h
hH9DTVKEvPTLJdndXh3EWwqUi5Li9RlNHo0D245MFi3ISffFMfzSpn5pZ040WFwl
nQq5oq/kudDTpiTgBQVmkbuX06UQSFJh699wIXR7WZtElKPDL7jjPB4GGqjRErUl
uTlZuNkBr2YzA8IpXgv40O/7XjYULFlcuLqwuIcy5xrbfpk3R9ek4j13UbRYqxi6
hg2NbqfSa2lTdHvVPDhEDSigapGslfpQjYibrs/60zt2SLnhpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFMqiogVewtJYPSBy1pNO9BqYBzfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTMxMWFkMjQtODdjMS0z
ZjJiLTk5Y2EtOGE2OTI2NmMwOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKNl7lHx7spc/2S2xlYMaHySaXF+Uq8iu05g1bksQflgg+6Iaro0
sgNUunfUbo9gHNZXtpH3z39u6lEDD9dyj6+umTAv+WZOeM6jfjQFIkE8dikgHntU
DLzL9jWxFYlHqFpF+SJtst8VSM562NLt6q3mAlpNoZPf+iQvxnzAwd1/7ZeDZlJV
DKWU4G3wIMriQyWQYx+4blO4kx6vPhfnqoSz8+MRvs5UmsV1SwP+dCdt213FLVyI
hMLnzopEMQMhe9PVtUSJVWhahAD9m977uC/kuOCjxiE355duCDpn3De1evrMXC0o
jbwDy9+gWGKotWm1DYhON3cFhD4NBhLvxP0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:06:08 2025 by rpki-client