Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/a98a384d-a2fd-342b-92b5-789d04b2d62b.roa
File:                     a98a384d-a2fd-342b-92b5-789d04b2d62b.roa (raw, json)
Hash identifier:          DsGNNGsZ/7HaUCTe2F315rfoMn7b4HFzYGTi/82e3lU=
Subject key identifier:   7A:7A:CA:02:4A:58:59:F5:A6:64:B6:EB:BC:6D:78:E0:84:06:D6:CD
Certificate issuer:       /CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
Certificate serial:       010D0C9F4328584832F02770A8DAC90ADA45B780
Authority key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/a98a384d-a2fd-342b-92b5-789d04b2d62b.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     46446
IP address blocks:        2606:5c00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:27:70:a8:da:c9:0a:da:45:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=574630fa-2cc8-4a15-97b3-cb71dccca875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:e0:24:9a:e0:c3:21:5c:03:62:6d:4c:dc:
                    e7:be:be:2c:8e:be:e3:f1:7f:bb:99:90:74:b0:9b:
                    9b:93:ee:08:20:28:7f:88:ff:f0:30:56:7a:14:76:
                    f0:7c:22:f8:f2:02:c2:5f:bf:7d:7f:6f:8e:15:39:
                    84:50:bf:29:b5:d8:81:62:ba:3d:09:af:66:41:b3:
                    cd:ff:c1:00:c9:c2:82:0f:55:93:ed:27:8e:2d:fe:
                    7f:24:46:f2:20:53:dc:b2:eb:bd:a3:53:bd:79:83:
                    64:f2:ac:f6:35:1e:0c:44:76:02:93:4e:cf:59:ec:
                    cf:9f:fc:a1:ec:f5:f6:9d:87:7f:ba:1a:69:6c:59:
                    81:0e:e2:a4:ef:6c:88:56:c0:7a:52:83:3c:3f:33:
                    10:66:b4:9e:8a:89:6d:15:32:c1:22:5d:d5:dd:2d:
                    23:54:f6:26:7b:b3:10:4f:37:e8:ad:1c:b7:f5:f8:
                    25:fe:ae:7c:0f:95:42:8c:e1:dd:c0:20:d3:03:8a:
                    c2:33:c4:80:88:0b:f3:57:e1:bc:c4:2a:74:e3:f8:
                    1c:9d:9d:f7:53:20:74:58:f6:77:c8:5f:a5:44:ef:
                    09:62:a3:43:fc:13:ec:39:a9:bd:9c:05:6f:c3:e2:
                    13:00:6d:9d:69:b9:eb:3c:a1:27:0f:2e:40:a3:37:
                    a4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7A:CA:02:4A:58:59:F5:A6:64:B6:EB:BC:6D:78:E0:84:06:D6:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/a98a384d-a2fd-342b-92b5-789d04b2d62b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:19:d5:71:6e:a8:86:3e:cb:66:a0:74:0d:9b:b4:56:3b:
         37:6b:06:e0:72:13:2d:72:8a:5a:a9:99:3c:fc:13:fd:b6:95:
         1c:bc:c5:c2:04:cd:92:71:6a:f6:7b:93:85:06:9d:49:ae:cd:
         2f:be:33:66:70:03:3f:6f:81:8a:a1:14:2b:f6:1c:b4:d8:96:
         e5:73:d5:af:e3:8d:7a:92:af:25:4f:09:07:80:b5:4b:b0:43:
         bf:d9:29:72:fd:52:1f:96:e2:ff:cb:2d:84:2c:b7:46:88:f6:
         09:7c:41:c4:c1:16:66:1d:46:4f:b1:2f:f5:57:a1:76:19:42:
         ea:1b:3c:5c:4d:dd:94:cb:73:57:32:bb:03:8d:62:57:df:be:
         53:98:dd:a9:42:d6:07:3c:d3:72:42:90:80:9d:75:f1:13:34:
         71:24:e0:0c:f8:93:46:bf:ea:1c:ae:fd:04:34:9d:db:fe:34:
         9d:10:1f:42:09:4e:4e:31:3d:2f:5f:23:df:17:28:d8:6e:2e:
         e9:04:04:82:b6:f3:bc:52:ce:ad:53:3d:1b:fa:1c:a3:22:c8:
         24:d3:58:71:90:e0:f7:15:44:d0:e4:b7:4b:22:9d:90:23:bc:
         26:42:a2:3a:87:b4:b3:85:99:1c:9f:d2:71:6a:34:0f:4d:4b:
         65:3c:9b:da
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgy8CdwqNrJCtpFt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg4N2M4ZWEtZDVhYy00ZjU5LTk0Y2QtNWRlN2E1YzUx
NjAwMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NTc0NjMwZmEtMmNjOC00YTE1LTk3YjMtY2I3MWRjY2NhODc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VzgJJrgwyFcA2JtTNznvr4sjr7j8X+7mZB0
sJubk+4IICh/iP/wMFZ6FHbwfCL48gLCX799f2+OFTmEUL8ptdiBYro9Ca9mQbPN
/8EAycKCD1WT7SeOLf5/JEbyIFPcsuu9o1O9eYNk8qz2NR4MRHYCk07PWezPn/yh
7PX2nYd/uhppbFmBDuKk72yIVsB6UoM8PzMQZrSeioltFTLBIl3V3S0jVPYme7MQ
TzforRy39fgl/q58D5VCjOHdwCDTA4rCM8SAiAvzV+G8xCp04/gcnZ33UyB0WPZ3
yF+lRO8JYqND/BPsOam9nAVvw+ITAG2dabnrPKEnDy5AozekkQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHp6ygJKWFn1pmS267xteOCEBtbNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODg3
YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3YTVjNTE2MDAvYTk4YTM4NGQtYTJmZC0z
NDJiLTkyYjUtNzg5ZDA0YjJkNjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg4N2M4ZWEtZDVhYy00ZjU5LTk0
Y2QtNWRlN2E1YzUxNjAwLzY4ODdjOGVhLWQ1YWMtNGY1OS05NGNkLTVkZTdhNWM1
MTYwMC5jcmwwHwYDVR0jBBgwFoAU4vJM+75XeR9VGBcYdJHcH0MyBxgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82ODg3YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3
YTVjNTE2MDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZcADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBgpRnVcW6ohj7LZqB0DZu0Vjs3awbgchMtcopaqZk8/BP9tpUcvMXC
BM2ScWr2e5OFBp1Jrs0vvjNmcAM/b4GKoRQr9hy02Jblc9Wv4416kq8lTwkHgLVL
sEO/2Sly/VIfluL/yy2ELLdGiPYJfEHEwRZmHUZPsS/1V6F2GULqGzxcTd2Uy3NX
MrsDjWJX375TmN2pQtYHPNNyQpCAnXXxEzRxJOAM+JNGv+ocrv0ENJ3b/jSdEB9C
CU5OMT0vXyPfFyjYbi7pBASCtvO8Us6tUz0b+hyjIsgk01hxkOD3FUTQ5LdLIp2Q
I7wmQqI6h7SzhZkcn9JxajQPTUtlPJva
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:31 2025 by rpki-client