Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa
File:                     d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa (raw, json)
Hash identifier:          0jRCBrCDZrihyXSvkB6JaEN1ESNB38VhAQQH6cRoZn0=
Subject key identifier:   58:B7:3E:33:EA:B0:8A:97:0E:A3:C4:1D:ED:AB:0E:E6:9F:F5:0D:4A
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F432858496FAF0EAAD983C9A95F8AA588
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397952
IP address blocks:        2605:3dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:0e:aa:d9:83:c9:a9:5f:8a:a5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=4d342ca3-733a-41cb-a06c-0fa9fd423406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:5e:84:a4:3d:3f:9d:97:b0:81:ef:20:64:
                    60:94:3f:20:1e:38:fd:e6:34:75:d4:92:33:da:1e:
                    43:b8:f9:37:e0:b3:f5:66:2b:8f:34:f6:fa:e8:8e:
                    4e:4b:68:b2:82:78:2b:e5:81:d7:a8:3e:85:ef:40:
                    bc:0b:a0:f6:cb:05:01:03:fa:db:9a:c2:de:8f:ba:
                    7d:49:bf:f2:7b:ec:ed:57:bb:1d:0c:e1:ea:4a:31:
                    e5:c8:e9:0f:ae:d9:a1:5a:eb:14:8a:a7:b6:b1:9d:
                    88:76:83:1d:2d:7a:82:c8:6e:77:1c:dd:b8:7f:6f:
                    0c:a4:08:12:b0:be:65:b3:b7:ff:ae:59:21:77:6b:
                    e5:8b:61:c9:db:28:46:5e:8c:6c:86:bd:d9:2a:a6:
                    84:fa:49:7f:e5:e6:50:14:c1:b8:66:33:21:39:5c:
                    17:74:d9:35:6a:df:c5:89:71:34:d7:0a:14:c9:cb:
                    8a:b1:25:15:47:35:a8:35:4b:53:03:3e:ef:0e:55:
                    d4:b5:01:02:c2:46:f4:75:b3:c9:e1:f8:ea:9f:f2:
                    69:b9:4e:11:92:14:6b:b1:f8:21:aa:4f:ec:c8:42:
                    e8:5d:c8:05:33:08:1d:a2:78:7a:0a:31:5d:16:57:
                    48:01:bc:dd:8b:7d:dd:e1:49:55:8f:70:24:54:2d:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B7:3E:33:EA:B0:8A:97:0E:A3:C4:1D:ED:AB:0E:E6:9F:F5:0D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:c5:ed:a3:25:6a:96:d8:38:6b:0b:dc:28:47:21:08:ce:
         b7:27:37:a4:7b:d1:74:e7:8f:bc:a0:61:f0:3e:dc:b3:e3:89:
         70:67:f7:07:ca:85:f1:ed:0a:63:37:50:29:d5:54:1a:4b:22:
         39:1c:23:3d:00:9b:2e:34:04:64:02:98:91:a6:e6:aa:95:a9:
         2a:14:4f:62:66:90:fa:54:19:70:09:fb:bf:0f:d4:9e:7a:4d:
         08:71:21:8b:e3:6d:1c:75:28:81:61:26:ab:be:88:cd:a9:6c:
         9b:55:08:5c:c0:d9:55:7e:ed:fc:2a:1d:87:df:f8:11:e6:7b:
         c7:5a:d4:1e:76:3d:5c:02:cc:91:97:4f:9e:98:32:b0:8c:ab:
         29:de:34:44:e5:1f:3e:49:3f:1e:81:4c:17:52:99:99:23:a6:
         be:c8:82:1a:d6:92:14:93:c0:ff:35:df:c3:f6:69:85:63:3e:
         04:e9:11:56:9f:a7:0a:83:06:36:c7:88:bd:5a:bb:41:23:10:
         33:14:32:a9:9c:bd:a1:13:dc:81:7c:97:43:5c:a3:c8:50:8e:
         6a:de:ee:59:e9:4a:06:98:6e:be:c0:8b:51:71:0c:76:9c:c1:
         22:b8:50:8e:b5:d7:ba:82:21:2f:41:93:92:90:70:d8:de:ac:
         40:08:71:3b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElvrw6q2YPJqV+KpYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyNjQ1OTItYmNjMy00OGYxLWE3ODItOGJhNDhmYzUw
NmZhMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
NGQzNDJjYTMtNzMzYS00MWNiLWEwNmMtMGZhOWZkNDIzNDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmxehKQ9P52XsIHvIGRglD8gHjj95jR11JIz
2h5DuPk34LP1ZiuPNPb66I5OS2iygngr5YHXqD6F70C8C6D2ywUBA/rbmsLej7p9
Sb/ye+ztV7sdDOHqSjHlyOkPrtmhWusUiqe2sZ2IdoMdLXqCyG53HN24f28MpAgS
sL5ls7f/rlkhd2vli2HJ2yhGXoxshr3ZKqaE+kl/5eZQFMG4ZjMhOVwXdNk1at/F
iXE01woUycuKsSUVRzWoNUtTAz7vDlXUtQECwkb0dbPJ4fjqn/JpuU4RkhRrsfgh
qk/syELoXcgFMwgdonh6CjFdFldIAbzdi33d4UlVj3AkVC3g6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFi3PjPqsIqXDqPEHe2rDuaf9Q1KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lODI2
NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0OGZjNTA2ZmEvZDljZTZiYmQtODFhOS0z
OGIwLWI2ZDItZWQzYjYwMTdhNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTgyNjQ1OTItYmNjMy00OGYxLWE3
ODItOGJhNDhmYzUwNmZhL2U4MjY0NTkyLWJjYzMtNDhmMS1hNzgyLThiYTQ4ZmM1
MDZmYS5jcmwwHwYDVR0jBBgwFoAUiHdMTp8/9MLgRDap8Qq21ISdpwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lODI2NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0
OGZjNTA2ZmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgU9wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBtQ8XtoyVqltg4awvcKEchCM63Jzeke9F054+8oGHwPtyz44lwZ/cH
yoXx7QpjN1Ap1VQaSyI5HCM9AJsuNARkApiRpuaqlakqFE9iZpD6VBlwCfu/D9Se
ek0IcSGL420cdSiBYSarvojNqWybVQhcwNlVfu38Kh2H3/gR5nvHWtQedj1cAsyR
l0+emDKwjKsp3jRE5R8+ST8egUwXUpmZI6a+yIIa1pIUk8D/Nd/D9mmFYz4E6RFW
n6cKgwY2x4i9WrtBIxAzFDKpnL2hE9yBfJdDXKPIUI5q3u5Z6UoGmG6+wItRcQx2
nMEiuFCOtde6giEvQZOSkHDY3qxACHE7
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:15:54 2025 by rpki-client