Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa
File:                     4be56354-f558-3bd5-98d1-2a45b275dad7.roa (raw, json)
Hash identifier:          ByZWd4A4T0hxWZA1poynfQvHOhNQ05oOpEo+4Z9z2z0=
Subject key identifier:   53:F9:10:29:8E:AF:91:50:E2:C8:1B:D1:25:71:13:D3:7F:13:BD:62
Certificate issuer:       /CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
Certificate serial:       010D0C9F4328584A5FC5DDD1A6136B46EB8CF880
Authority key identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     18140
IP address blocks:        2620:e6:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:dd:d1:a6:13:6b:46:eb:8c:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=60245090-7c25-4cb8-bcdc-4228e89ba7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:46:78:72:66:c7:6d:28:11:53:9f:27:ef:
                    a3:fc:99:0e:ee:cd:20:e7:d2:61:a6:6e:f1:ca:0d:
                    68:92:c4:97:34:f7:da:fa:3e:ea:b0:49:a5:9e:fc:
                    16:30:b2:b0:12:c8:91:0a:48:ec:e0:69:7f:db:43:
                    78:a4:ac:04:d4:e4:ea:13:73:6f:bb:ea:5e:cc:70:
                    24:c3:c2:fd:40:02:2f:c3:18:16:fb:ae:d0:cd:47:
                    48:d5:74:18:08:02:cc:89:76:bd:7e:6c:df:74:f3:
                    a1:f9:19:57:ca:3c:21:e1:ae:ad:53:a0:af:98:1e:
                    42:9e:05:da:6d:40:b8:b2:ed:ae:1a:59:4a:cf:a5:
                    50:07:0c:63:60:ac:27:24:c3:b5:3f:8f:29:2f:76:
                    ab:57:07:7e:93:3a:c4:a6:2a:1c:b0:91:2b:0f:31:
                    84:a8:9c:e7:69:1c:d3:88:66:a3:1c:e2:23:84:64:
                    78:33:ce:6d:47:15:4a:50:5b:7d:33:ad:7e:0a:b7:
                    2e:32:e8:73:f7:5d:72:a8:dc:2b:63:66:af:ee:5a:
                    b7:5a:77:2a:3e:ac:cd:cf:2a:d7:12:66:0d:fb:a1:
                    ba:77:02:c9:6a:a9:85:43:f9:b4:da:20:5b:81:a1:
                    67:a7:21:39:91:f1:bc:07:77:ae:fb:3f:ab:df:38:
                    6f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F9:10:29:8E:AF:91:50:E2:C8:1B:D1:25:71:13:D3:7F:13:BD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e6:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:1f:b9:65:b7:b6:fe:fc:fd:55:85:5c:f3:f0:2f:f2:01:
         b7:9a:49:a2:45:87:93:c9:0b:25:28:09:2a:ba:95:b4:05:12:
         d4:17:0a:fd:3b:29:1e:0f:d8:13:33:8c:24:a4:90:07:68:2a:
         7b:39:66:40:ee:5f:87:4b:94:40:74:2b:76:42:89:12:8e:d8:
         80:1d:1f:e9:97:26:6c:28:5e:f8:02:80:e4:d9:e6:29:bc:b3:
         55:97:71:9f:d7:08:22:bb:f8:13:07:36:ac:ba:eb:e6:36:ff:
         2d:14:fc:96:ed:2d:79:bb:23:57:3d:11:ca:7e:47:9b:a5:0a:
         37:6c:d4:cd:c2:9b:88:85:a1:18:21:57:e8:3a:c0:13:84:b2:
         c1:b4:ce:87:c5:81:6a:df:bb:e8:b4:a9:80:c0:53:47:f1:ee:
         d5:d1:83:32:12:44:db:bd:0f:3a:28:1b:8c:5a:86:b5:ff:40:
         a4:00:f4:08:60:18:23:28:99:3b:13:23:3a:1d:73:9e:cf:a4:
         62:55:e8:19:03:4d:68:bb:a9:2d:2a:f5:5e:0b:ba:41:94:8c:
         f8:10:04:44:6e:27:67:aa:5d:7f:08:61:b1:3b:64:20:2a:f7:
         72:d3:f0:c0:dc:9a:a5:49:b6:69:5e:37:6c:bd:5e:c3:4a:ae:
         61:8e:76:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxd3RphNrRuuM+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWZmNDNhYWItYzhjMi00ZjIzLTkxZTUtMzczYmUyNDYy
ZTlmMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
NjAyNDUwOTAtN2MyNS00Y2I4LWJjZGMtNDIyOGU4OWJhN2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQxGeHJmx20oEVOfJ++j/JkO7s0g59Jhpm7x
yg1oksSXNPfa+j7qsEmlnvwWMLKwEsiRCkjs4Gl/20N4pKwE1OTqE3Nvu+pezHAk
w8L9QAIvwxgW+67QzUdI1XQYCALMiXa9fmzfdPOh+RlXyjwh4a6tU6CvmB5CngXa
bUC4su2uGllKz6VQBwxjYKwnJMO1P48pL3arVwd+kzrEpiocsJErDzGEqJznaRzT
iGajHOIjhGR4M85tRxVKUFt9M61+CrcuMuhz911yqNwrY2av7lq3WncqPqzNzyrX
EmYN+6G6dwLJaqmFQ/m02iBbgaFnpyE5kfG8B3eu+z+r3zhv6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFP5ECmOr5FQ4sgb0SVxE9N/E71iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZmY0
M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0NjJlOWYvNGJlNTYzNTQtZjU1OC0z
YmQ1LTk4ZDEtMmE0NWIyNzVkYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWZmNDNhYWItYzhjMi00ZjIzLTkx
ZTUtMzczYmUyNDYyZTlmLzlmZjQzYWFiLWM4YzItNGYyMy05MWU1LTM3M2JlMjQ2
MmU5Zi5jcmwwHwYDVR0jBBgwFoAUVkV1ptyZORaIvNP+hpr9nOn9dBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNi
ZTI0NjJlOWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA5sAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+OH7llt7b+/P1VhVzz8C/yAbeaSaJFh5PJCyUoCSq6lbQFEtQX
Cv07KR4P2BMzjCSkkAdoKns5ZkDuX4dLlEB0K3ZCiRKO2IAdH+mXJmwoXvgCgOTZ
5im8s1WXcZ/XCCK7+BMHNqy66+Y2/y0U/JbtLXm7I1c9Ecp+R5ulCjds1M3Cm4iF
oRghV+g6wBOEssG0zofFgWrfu+i0qYDAU0fx7tXRgzISRNu9DzooG4xahrX/QKQA
9AhgGCMomTsTIzodc57PpGJV6BkDTWi7qS0q9V4LukGUjPgQBERuJ2eqXX8IYbE7
ZCAq93LT8MDcmqVJtmleN2y9XsNKrmGOduo=
-----END CERTIFICATE-----
Generated at Mon Jul 7 03:35:22 2025 by rpki-client