Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa
File:                     ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa (raw, json)
Hash identifier:          6qcA99OD25QQ/ZiT2FBJQOzabe+KVogFE6GaoLvFFrc=
Subject key identifier:   33:7F:F6:95:45:90:8B:D5:66:8A:78:94:17:4C:08:62:F4:B4:43:31
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285848FD56A9D419C20D22E8BA0960
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     212105
IP address blocks:        2605:f440:beef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:a9:d4:19:c2:0d:22:e8:ba:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=688cc797-89ac-4005-8fa4-b8f6f4d348da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:20:ee:3c:2f:82:30:91:7b:e4:30:c9:a3:
                    e5:9e:06:ae:91:be:33:8f:3c:4c:e2:f2:92:ba:12:
                    db:be:18:24:a3:cc:20:7c:b5:f9:91:0c:63:41:c6:
                    fe:be:86:41:32:0e:d2:82:58:60:fc:4d:62:3a:7b:
                    17:93:67:b6:00:33:c4:7e:e1:55:6e:33:dd:c3:5a:
                    db:fc:b7:c0:8f:47:0d:70:bd:68:7a:27:82:71:14:
                    c4:76:33:05:81:4b:e3:d1:b9:30:5f:99:33:3f:c3:
                    7e:d5:57:cd:12:62:55:e5:03:91:d0:52:17:f9:60:
                    82:b4:69:cb:a2:36:24:f3:16:b1:ba:d1:13:d4:47:
                    93:63:6f:06:d9:ac:76:af:36:ca:c6:f8:4c:5f:37:
                    05:a4:59:52:2b:f0:2d:99:a1:b5:59:30:e3:c9:d2:
                    97:ec:83:de:0b:a5:96:9f:3a:4d:3b:58:4e:a7:a1:
                    6f:67:4a:28:34:4b:45:c8:64:2b:d8:a0:af:a3:fb:
                    d2:df:1d:71:d0:22:75:bf:0e:63:be:e0:2a:4f:ef:
                    a7:39:01:53:b4:e4:0e:50:1f:04:1d:90:20:08:1e:
                    e6:6d:44:9e:c6:23:5d:f3:21:bd:6d:2d:f5:12:0e:
                    e3:32:c7:7b:d3:39:e8:1c:c0:33:80:41:68:09:59:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7F:F6:95:45:90:8B:D5:66:8A:78:94:17:4C:08:62:F4:B4:43:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:beef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:aa:a9:75:b9:33:cb:52:41:d0:2b:87:9f:54:34:cb:61:
         66:0a:53:5e:43:6e:de:d2:dc:a4:ac:89:62:d8:4e:09:7b:86:
         f0:12:84:49:52:b8:7b:b7:9c:ce:da:57:e8:82:d4:ae:e5:75:
         f0:42:7a:14:11:d9:0a:16:08:1b:49:2c:b7:3d:b2:0f:10:41:
         b7:00:bf:aa:15:46:6d:68:b4:fd:45:62:62:b9:65:cc:22:67:
         d0:2f:cd:e8:94:0f:48:a1:4d:26:f3:66:b8:b1:c8:d7:c7:15:
         28:6d:d7:a5:df:86:96:87:d5:2a:99:3a:e1:a6:44:85:36:13:
         07:e3:76:54:c9:46:09:8c:59:5c:30:36:bf:36:3e:fd:90:fb:
         64:cc:fb:6e:cc:6c:d4:69:a3:ec:23:3e:3c:3f:2a:ff:9c:b4:
         67:26:87:70:c3:3a:13:a8:35:50:2e:3b:ce:a4:16:01:22:ba:
         d0:73:87:23:72:6f:f6:b1:d3:73:30:e8:dc:c2:df:fc:a0:de:
         19:fc:d9:f5:bf:75:0f:ac:90:ae:cc:00:cf:cf:21:87:2a:32:
         e4:53:2e:ba:eb:05:5a:67:e6:b3:93:30:dc:cb:e4:95:75:e0:
         10:48:da:e4:42:6c:12:b6:66:94:b4:9a:7d:e4:73:17:86:a2:
         c8:29:de:6d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VqnUGcINIui6CWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
Njg4Y2M3OTctODlhYy00MDA1LThmYTQtYjhmNmY0ZDM0OGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ksg7jwvgjCRe+QwyaPlngaukb4zjzxM4vKS
uhLbvhgko8wgfLX5kQxjQcb+voZBMg7Sglhg/E1iOnsXk2e2ADPEfuFVbjPdw1rb
/LfAj0cNcL1oeieCcRTEdjMFgUvj0bkwX5kzP8N+1VfNEmJV5QOR0FIX+WCCtGnL
ojYk8xaxutET1EeTY28G2ax2rzbKxvhMXzcFpFlSK/AtmaG1WTDjydKX7IPeC6WW
nzpNO1hOp6FvZ0ooNEtFyGQr2KCvo/vS3x1x0CJ1vw5jvuAqT++nOQFTtOQOUB8E
HZAgCB7mbUSexiNd8yG9bS31Eg7jMsd70znoHMAzgEFoCVlqlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDN/9pVFkIvVZop4lBdMCGL0tEMxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvZWM5OWZlYTEtNmYxNC0z
ZTNmLWI4ZWUtZDFlMzA1YjY2OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QL7v
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA6wqql1uTPLUkHQK4efVDTLYWYKU15Dbt7S3KSsiWLYTgl7hvAS
hElSuHu3nM7aV+iC1K7ldfBCehQR2QoWCBtJLLc9sg8QQbcAv6oVRm1otP1FYmK5
ZcwiZ9AvzeiUD0ihTSbzZrixyNfHFSht16XfhpaH1SqZOuGmRIU2EwfjdlTJRgmM
WVwwNr82Pv2Q+2TM+27MbNRpo+wjPjw/Kv+ctGcmh3DDOhOoNVAuO86kFgEiutBz
hyNyb/ax03Mw6NzC3/yg3hn82fW/dQ+skK7MAM/PIYcqMuRTLrrrBVpn5rOTMNzL
5JV14BBI2uRCbBK2ZpS0mn3kcxeGosgp3m0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:26 2025 by rpki-client