Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c096641-8522-34f0-8e6d-deb3d1ce3ad8.roa
File:                     9c096641-8522-34f0-8e6d-deb3d1ce3ad8.roa (raw, json)
Hash identifier:          jVtp9w95p+mEKk/bGOWsWFcm2sb0HdKOd8ZrPG46tA0=
Subject key identifier:   00:FE:96:5E:16:03:BD:C3:4B:C4:BA:1E:C7:C1:67:B1:85:0B:CE:DB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F715328B2ABAA227BA93A020
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c096641-8522-34f0-8e6d-deb3d1ce3ad8.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        2606:4700:3037::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:32:8b:2a:ba:a2:27:ba:93:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=fbc34759-0423-437c-b9b7-01d68f31a047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:55:a0:b8:63:ee:91:1b:2b:3f:2e:85:bf:
                    f8:0e:ee:e9:87:d8:1a:54:0f:e0:a7:0c:dd:45:05:
                    b1:07:8f:7e:f7:99:2a:3d:83:e4:11:13:7a:52:48:
                    7e:79:2a:a4:ed:60:62:fc:66:61:ce:9c:67:78:a6:
                    47:e2:d8:f6:d4:6d:0a:ee:dd:71:11:ed:b5:17:27:
                    40:ae:51:39:04:a5:17:42:34:8c:ad:a2:58:b0:fd:
                    20:af:61:07:9e:f7:d3:2c:23:44:9a:5f:9c:5b:0f:
                    22:8e:87:d4:d5:47:9e:11:42:f5:03:61:6b:60:98:
                    ba:32:8e:e9:ea:a9:dc:84:92:90:a5:a9:e6:4f:b2:
                    99:a4:79:c7:af:8f:10:e9:6f:41:6d:7e:5d:12:88:
                    54:8f:ba:4e:dc:54:9c:53:f7:e4:a4:d6:4c:5a:a4:
                    03:d4:97:b8:86:52:1e:a5:65:cd:34:50:31:5b:00:
                    a9:f0:84:43:39:ea:c1:0f:4b:82:ea:2b:3e:39:0d:
                    2c:75:ad:2b:a6:6e:a2:5c:8f:1c:9c:14:34:d0:2d:
                    84:e0:15:58:f3:e5:8c:ce:dc:14:1c:e1:3a:5f:6c:
                    b0:bf:d9:93:9d:15:f2:5c:6a:cc:70:9a:2f:e6:8f:
                    e5:10:0c:9b:b3:08:d8:37:04:99:7d:cb:c9:4d:ab:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:96:5E:16:03:BD:C3:4B:C4:BA:1E:C7:C1:67:B1:85:0B:CE:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c096641-8522-34f0-8e6d-deb3d1ce3ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:58:9d:5b:86:35:55:18:9f:6d:88:fd:21:5f:2b:18:1b:5c:
         93:d1:6e:78:41:82:75:cd:38:b6:3d:f7:43:54:32:0f:fa:e3:
         93:9e:2c:67:b0:da:3c:d5:0f:60:33:ed:22:c7:4d:1f:ca:8b:
         a2:3c:00:28:d0:e0:ab:95:94:8a:a2:a9:e9:1f:b1:36:04:26:
         e5:8b:b7:bb:7b:7f:de:53:c3:77:97:6e:9b:49:90:11:92:3b:
         7c:e9:19:0f:d2:16:79:6d:ef:85:b0:58:67:4e:b0:72:69:1e:
         3f:cd:5e:0a:80:e2:40:e5:ee:f7:e8:21:a4:63:b9:79:ec:37:
         db:d1:eb:dd:fe:53:74:fb:fa:9c:0d:32:bc:78:8b:00:d0:be:
         d4:65:94:71:53:76:9b:e8:e0:a5:bb:92:d7:87:9e:cb:6e:bd:
         07:ac:10:f9:fc:2f:93:a6:9e:6a:52:22:22:6e:82:3c:5a:60:
         5d:8f:22:9f:c6:08:26:74:17:55:a7:a2:3a:8b:01:34:88:a9:
         51:c0:fa:ec:9c:10:e0:37:0b:3f:18:79:1d:95:25:71:2c:77:
         a6:5d:0c:04:df:ff:35:db:6e:fd:b2:65:c1:fa:69:5a:02:bc:
         1a:7e:9c:81:4c:d0:fd:e3:24:3f:46:13:5b:87:26:70:bc:49:
         42:34:33:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn3FTKLKrqiJ7qToCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZmJjMzQ3NTktMDQyMy00MzdjLWI5YjctMDFkNjhmMzFhMDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr1VoLhj7pEbKz8uhb/4Du7ph9gaVA/gpwzd
RQWxB49+95kqPYPkERN6Ukh+eSqk7WBi/GZhzpxneKZH4tj21G0K7t1xEe21FydA
rlE5BKUXQjSMraJYsP0gr2EHnvfTLCNEml+cWw8ijofU1UeeEUL1A2FrYJi6Mo7p
6qnchJKQpanmT7KZpHnHr48Q6W9BbX5dEohUj7pO3FScU/fkpNZMWqQD1Je4hlIe
pWXNNFAxWwCp8IRDOerBD0uC6is+OQ0sda0rpm6iXI8cnBQ00C2E4BVY8+WMztwU
HOE6X2ywv9mTnRXyXGrMcJov5o/lEAybswjYNwSZfcvJTavZKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAD+ll4WA73DS8S6HsfBZ7GFC87bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMwOTY2NDEtODUyMi0z
NGYwLThlNmQtZGViM2QxY2UzYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADA3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJJYnVuGNVUYn22I/SFfKxgbXJPRbnhBgnXNOLY990NUMg/645Oe
LGew2jzVD2Az7SLHTR/Ki6I8ACjQ4KuVlIqiqekfsTYEJuWLt7t7f95Tw3eXbptJ
kBGSO3zpGQ/SFnlt74WwWGdOsHJpHj/NXgqA4kDl7vfoIaRjuXnsN9vR693+U3T7
+pwNMrx4iwDQvtRllHFTdpvo4KW7kteHnstuvQesEPn8L5OmnmpSIiJugjxaYF2P
Ip/GCCZ0F1WnojqLATSIqVHA+uycEOA3Cz8YeR2VJXEsd6ZdDATf/zXbbv2yZcH6
aVoCvBp+nIFM0P3jJD9GE1uHJnC8SUI0M98=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:54:25 2025 by rpki-client