Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56c9ae37-f356-3c01-a574-e67263d5a561.roa
File:                     56c9ae37-f356-3c01-a574-e67263d5a561.roa (raw, json)
Hash identifier:          MJhTgpOrgzUE3Rc3cw/58tH/3eJr3fBFgTd5DLdhTrA=
Subject key identifier:   81:F4:BD:88:0C:4A:E4:2E:55:2A:26:9B:54:74:5F:35:B8:CF:55:0B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFC9029DD5C0284DC0FF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56c9ae37-f356-3c01-a574-e67263d5a561.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        2606:4700:440c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c9:02:9d:d5:c0:28:4d:c0:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=77dfd0b4-bbdf-4037-9a33-19485e14fa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:70:4f:2e:5b:da:dd:66:46:9f:db:e6:9c:54:
                    03:b5:2d:09:a0:bc:17:4c:46:25:9f:b6:38:df:8b:
                    7a:d3:69:f0:3a:a3:ee:a5:02:48:1f:ba:c7:da:56:
                    1a:cb:b9:39:f3:23:d9:e1:77:8f:4d:86:05:95:d7:
                    f8:ac:72:dc:25:58:79:cb:01:ef:a4:6e:1d:ad:19:
                    8c:15:1e:f1:d9:87:25:b2:c0:d3:c1:ac:b9:8b:56:
                    69:92:64:d2:04:97:c7:72:37:0e:13:a4:4a:80:2f:
                    57:91:c0:99:50:ee:d9:78:0a:11:b0:ee:e7:91:f1:
                    c2:d7:8b:55:ff:13:e5:b3:43:4c:26:39:3b:54:8e:
                    02:ec:e5:01:c9:cb:c0:c9:bd:83:c1:3c:b1:61:09:
                    b9:8e:4f:28:83:ec:45:f5:bf:14:ad:fc:5a:51:af:
                    cd:64:be:3e:09:04:9c:2c:aa:21:6b:cf:94:4c:e2:
                    bc:7d:f9:b6:65:21:9c:86:ce:8f:c2:77:66:60:d7:
                    c0:76:d1:72:7a:1d:e3:52:88:92:5c:3f:fc:cc:84:
                    7c:02:a9:96:82:47:e1:f4:c8:b9:97:25:39:50:86:
                    dd:24:46:df:50:b2:b6:8d:2a:08:bd:5a:57:a3:66:
                    57:f1:6a:cd:d6:e4:13:d8:c2:f5:32:f1:a4:40:c3:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F4:BD:88:0C:4A:E4:2E:55:2A:26:9B:54:74:5F:35:B8:CF:55:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56c9ae37-f356-3c01-a574-e67263d5a561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:440c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7e:27:29:42:3d:62:3b:cf:ee:7f:08:cf:61:42:d3:2b:84:
         cd:ed:f1:e6:50:40:06:dd:d0:8a:8b:e8:b7:76:0c:83:f5:33:
         1a:04:6b:e4:d2:14:ec:a9:dc:0b:19:3f:4d:ab:ad:85:7c:a9:
         8d:4d:14:8a:fb:f5:49:62:d1:49:79:b9:84:75:1f:40:39:e0:
         86:68:7c:fe:dd:1a:34:e2:5d:46:47:ba:f9:ab:df:73:33:2b:
         d4:1c:3c:65:ba:55:c5:24:96:cd:92:db:c9:79:0a:f2:cb:c9:
         b2:1b:4d:e9:83:12:a1:c5:2c:cf:36:6a:be:74:56:4a:dd:67:
         e1:3c:56:d7:84:e0:46:9a:13:a6:5d:3e:e2:8f:ae:25:ce:11:
         74:03:83:26:26:24:fa:de:0f:97:f6:95:eb:c7:ee:e6:d1:96:
         a7:39:4d:d7:07:73:8f:ec:07:0a:da:f4:33:e4:f1:f2:20:eb:
         bc:67:cd:71:79:80:51:a5:94:7f:5c:14:50:1d:8b:26:25:d1:
         aa:ce:ca:1b:19:a8:1f:12:de:12:fd:39:ae:41:61:69:f9:ec:
         a1:f8:cd:db:0a:48:1a:f6:24:50:a5:d6:ed:18:10:15:26:10:
         56:84:b6:c6:64:d9:cf:77:72:f2:62:6d:49:50:fa:f8:12:18:
         28:fa:17:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnk78kCndXAKE3A/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
NzdkZmQwYjQtYmJkZi00MDM3LTlhMzMtMTk0ODVlMTRmYTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3BPLlva3WZGn9vmnFQDtS0JoLwXTEYln7Y4
34t602nwOqPupQJIH7rH2lYay7k58yPZ4XePTYYFldf4rHLcJVh5ywHvpG4drRmM
FR7x2YclssDTway5i1ZpkmTSBJfHcjcOE6RKgC9XkcCZUO7ZeAoRsO7nkfHC14tV
/xPls0NMJjk7VI4C7OUBycvAyb2DwTyxYQm5jk8og+xF9b8UrfxaUa/NZL4+CQSc
LKoha8+UTOK8ffm2ZSGchs6PwndmYNfAdtFyeh3jUoiSXD/8zIR8AqmWgkfh9Mi5
lyU5UIbdJEbfULK2jSoIvVpXo2ZX8WrN1uQT2ML1MvGkQMNq6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIH0vYgMSuQuVSomm1R0XzW4z1ULMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTZjOWFlMzctZjM1Ni0z
YzAxLWE1NzQtZTY3MjYzZDVhNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEQM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJ+JylCPWI7z+5/CM9hQtMrhM3t8eZQQAbd0IqL6Ld2DIP1MxoE
a+TSFOyp3AsZP02rrYV8qY1NFIr79Uli0Ul5uYR1H0A54IZofP7dGjTiXUZHuvmr
33MzK9QcPGW6VcUkls2S28l5CvLLybIbTemDEqHFLM82ar50VkrdZ+E8VteE4Eaa
E6ZdPuKPriXOEXQDgyYmJPreD5f2levH7ubRlqc5TdcHc4/sBwra9DPk8fIg67xn
zXF5gFGllH9cFFAdiyYl0arOyhsZqB8S3hL9Oa5BYWn57KH4zdsKSBr2JFCl1u0Y
EBUmEFaEtsZk2c93cvJibUlQ+vgSGCj6F38=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:14 2025 by rpki-client