Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa
File:                     6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa (raw, json)
Hash identifier:          VFCmvH7cCpX3VuxHtFRoTChiVqB0pF2+jV4/bhpZaCE=
Subject key identifier:   65:1A:2A:6B:54:A6:36:75:5B:94:41:22:76:51:C6:53:3F:E9:13:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA655E9DFC9B66D3000380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     36627
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:65:5e:9d:fc:9b:66:d3:00:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=640eea47-053c-4b47-8f2b-d3e978903fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:ab:c4:08:38:6d:23:3e:5e:23:7a:01:19:
                    71:4b:20:ce:73:bb:9f:2a:51:5d:7f:43:fb:3d:2f:
                    80:b0:f7:b9:48:3b:e6:4c:01:0c:d7:2a:1d:fe:cb:
                    b4:c6:4e:50:c9:e9:f0:2e:c1:99:5c:88:a9:79:31:
                    a7:06:08:a4:02:81:0a:3c:ce:e7:64:79:c6:d7:5a:
                    0f:dc:54:52:80:46:dc:f8:0d:b5:0b:63:2a:8b:36:
                    a2:4a:4e:9f:a6:51:49:a8:a5:a0:bf:5a:5a:fd:c9:
                    87:34:24:f7:99:d4:10:8c:ca:08:38:bf:d2:f6:33:
                    d2:08:23:1e:db:da:ce:ce:f1:34:9a:38:fc:bf:59:
                    1b:ea:a0:be:7c:2f:72:0d:f9:a0:7f:8e:a6:52:07:
                    4a:1e:13:74:8d:6a:04:8b:a5:7d:ef:c3:8e:e4:d3:
                    78:ed:1a:8f:a7:cc:77:b1:cf:e5:7a:d0:a4:4e:2a:
                    b4:95:73:93:15:2f:60:59:a6:d1:a6:76:91:2f:ae:
                    58:d3:80:9f:53:41:72:b3:61:07:ba:15:24:73:98:
                    ca:8f:fa:ea:b3:46:4d:e9:e7:9d:04:15:6a:1e:05:
                    f1:50:a5:c2:10:83:d6:16:06:42:d3:73:44:cb:b0:
                    58:e3:d6:65:f6:14:c1:c2:e6:ab:81:11:e7:79:ff:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1A:2A:6B:54:A6:36:75:5B:94:41:22:76:51:C6:53:3F:E9:13:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dee3f14-1058-3f6f-8190-2afa6e3620b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:71:3a:b7:3e:83:91:25:28:fa:73:af:67:c0:00:81:f6:59:
         2f:1e:24:08:c7:19:e1:82:66:6f:d7:bc:bc:fd:8f:cd:5d:b6:
         1f:ee:dc:da:84:f6:d0:0e:13:36:04:54:33:66:7a:56:02:23:
         6f:f8:22:14:46:1c:52:e9:27:77:bc:b7:8f:96:68:7a:e3:eb:
         e7:cf:ff:28:26:dd:84:22:11:1c:62:31:96:fd:d2:21:b8:ba:
         73:30:a8:e7:cc:32:82:72:98:aa:d1:1e:57:8a:a2:e0:55:c4:
         ab:fd:bf:a0:09:d5:c3:0b:e9:65:b7:06:e6:30:1c:36:b0:e5:
         69:f9:63:47:21:97:b6:bc:a0:89:3d:90:cf:0c:15:6f:e7:e3:
         98:8b:12:15:d2:6b:1f:9c:54:93:dc:d3:2c:52:24:82:14:02:
         67:f8:a5:ee:d6:dc:73:f5:00:97:13:15:18:b9:06:b7:b6:32:
         8e:18:18:fe:52:77:ca:60:c6:fa:3e:11:03:10:a3:1d:ab:17:
         a6:0f:57:e7:2a:96:90:f5:48:f5:19:c6:fb:d0:93:3a:3e:4f:
         3c:3e:fd:f2:96:d2:93:a2:da:d1:23:17:6d:b3:a7:f1:b1:31:
         0c:b4:88:b2:f8:b2:df:80:88:b3:73:2f:6c:19:ef:fa:3a:c3:
         44:d7:56:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6mVenfybZtMAA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
NjQwZWVhNDctMDUzYy00YjQ3LThmMmItZDNlOTc4OTAzZmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTGrxAg4bSM+XiN6ARlxSyDOc7ufKlFdf0P7
PS+AsPe5SDvmTAEM1yod/su0xk5QyenwLsGZXIipeTGnBgikAoEKPM7nZHnG11oP
3FRSgEbc+A21C2MqizaiSk6fplFJqKWgv1pa/cmHNCT3mdQQjMoIOL/S9jPSCCMe
29rOzvE0mjj8v1kb6qC+fC9yDfmgf46mUgdKHhN0jWoEi6V978OO5NN47RqPp8x3
sc/letCkTiq0lXOTFS9gWabRpnaRL65Y04CfU0Fys2EHuhUkc5jKj/rqs0ZN6eed
BBVqHgXxUKXCEIPWFgZC03NEy7BY49Zl9hTBwuargRHnef+0BwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGUaKmtUpjZ1W5RBInZRxlM/6RNpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmRlZTNmMTQtMTA1OC0z
ZjZmLTgxOTAtMmFmYTZlMzYyMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD1xOrc+g5ElKPpzr2fAAIH2WS8eJAjHGeGCZm/XvLz9j81dth/u
3NqE9tAOEzYEVDNmelYCI2/4IhRGHFLpJ3e8t4+WaHrj6+fP/ygm3YQiERxiMZb9
0iG4unMwqOfMMoJymKrRHleKouBVxKv9v6AJ1cML6WW3BuYwHDaw5Wn5Y0chl7a8
oIk9kM8MFW/n45iLEhXSax+cVJPc0yxSJIIUAmf4pe7W3HP1AJcTFRi5Bre2Mo4Y
GP5Sd8pgxvo+EQMQox2rF6YPV+cqlpD1SPUZxvvQkzo+Tzw+/fKW0pOi2tEjF22z
p/GxMQy0iLL4st+AiLNzL2wZ7/o6w0TXVto=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:41 2025 by rpki-client