Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/5a340a4f-bc7f-3cfe-ae58-9b9dd1ecbc8e.roa
File:                     5a340a4f-bc7f-3cfe-ae58-9b9dd1ecbc8e.roa (raw, json)
Hash identifier:          dPvwk6G79D1L/NfM2cpOVaeh3Yjm6eA1pKj4nFwVyao=
Subject key identifier:   90:BA:CE:32:32:E4:A8:91:14:44:85:81:DC:AE:5C:55:5B:8C:23:BC
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F43285848B5C5C0C54D8502562AE67340
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/5a340a4f-bc7f-3cfe-ae58-9b9dd1ecbc8e.roa
Signing time:             Wed 29 Jan 2025 22:46:39 +0000
ROA not before:           Wed 29 Jan 2025 22:46:39 +0000
ROA not after:            Tue 29 Apr 2025 21:46:39 +0000
asID:                     21581
IP address blocks:        2606:7100:3000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b5:c5:c0:c5:4d:85:02:56:2a:e6:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Jan 29 22:46:39 2025 GMT
            Not After : Apr 29 21:46:39 2025 GMT
        Subject: CN=08298cc1-b614-4bd7-99cb-4b0994d47205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:78:1f:fb:53:5e:34:9e:29:92:97:bc:8c:
                    c8:36:db:36:64:58:81:ca:03:ff:64:1b:96:d1:4e:
                    be:ac:f5:ea:ad:f9:78:fb:77:b2:6e:b6:18:b8:19:
                    98:a1:37:03:95:80:45:2a:74:94:c0:3f:e2:7e:77:
                    1f:60:a3:3f:2b:11:16:d5:18:b3:95:59:cc:76:27:
                    25:0a:ff:28:72:c1:06:61:97:ce:c4:c5:d5:0b:c9:
                    3f:8d:fa:69:80:89:c9:8a:c9:a7:16:2f:2a:32:1a:
                    e6:79:a0:73:95:7a:b2:98:a8:c3:8a:68:b0:a8:99:
                    d2:1e:33:69:0d:4a:ba:d1:be:df:e5:69:86:3c:aa:
                    de:0c:b5:c2:27:01:72:84:f4:01:89:ea:79:0e:d1:
                    94:92:0e:e5:3a:7a:90:8b:3a:fa:7e:30:9e:29:87:
                    0c:20:c8:98:bb:6f:a9:cc:ce:26:0f:71:48:1d:16:
                    ca:d9:74:62:4f:8f:ed:07:be:20:05:8e:43:fa:7c:
                    32:44:58:d6:4f:e2:ec:80:85:dd:93:0b:9d:e6:50:
                    6c:e0:22:a6:b9:ba:2e:31:1f:4a:31:9c:a3:07:fd:
                    20:7d:12:a1:a1:89:2d:a2:b7:fd:fc:1f:6d:88:ed:
                    ca:89:67:e6:a0:26:1f:c4:9f:1c:12:4e:f3:fe:4d:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BA:CE:32:32:E4:A8:91:14:44:85:81:DC:AE:5C:55:5B:8C:23:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/5a340a4f-bc7f-3cfe-ae58-9b9dd1ecbc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7100:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0d:e2:6b:cc:71:78:51:b2:c3:e7:b0:7d:b4:7a:24:8a:b2:
         d1:fd:f5:dd:c8:5c:cc:c0:24:a8:43:be:ba:86:53:c5:43:fb:
         33:54:8c:20:61:1c:94:01:8a:61:13:6c:e7:b0:04:01:6c:ec:
         45:25:68:d3:a7:12:41:e9:ab:e4:e0:14:59:a3:23:4e:1e:3b:
         ea:c9:d5:f1:8f:24:c3:df:2a:33:8d:de:a8:42:ea:80:63:bb:
         ad:d5:c0:4e:5f:1c:df:bb:2e:a6:71:ef:d7:d3:33:70:fe:f6:
         eb:ea:59:be:c8:2c:02:ef:be:92:be:ac:9e:6b:89:8a:90:3f:
         32:a3:7c:b9:07:51:05:eb:2b:ce:12:5d:21:36:7e:50:7e:cf:
         71:80:8e:2f:85:d6:d2:0e:97:ba:63:2d:6e:10:34:8c:f6:f7:
         2c:cb:a2:d1:e0:db:ba:60:40:43:67:c6:ce:18:93:8b:8f:c1:
         ee:9b:91:2c:fb:f5:13:f9:6e:76:ec:10:97:1b:db:a2:51:40:
         d6:3c:0c:ac:3d:be:bb:b1:df:f0:1d:cf:d7:dc:7b:62:83:b7:
         3d:63:99:fa:05:61:bf:3d:20:29:a7:88:38:bd:d0:97:de:4f:
         46:c2:70:18:79:72:b6:d9:58:fb:e8:f8:c3:73:bb:3a:c1:9e:
         83:5b:27:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi1xcDFTYUCVirmc0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh
ZDRjMB4XDTI1MDEyOTIyNDYzOVoXDTI1MDQyOTIxNDYzOVowLzEtMCsGA1UEAxMk
MDgyOThjYzEtYjYxNC00YmQ3LTk5Y2ItNGIwOTk0ZDQ3MjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1x4H/tTXjSeKZKXvIzINts2ZFiBygP/ZBuW
0U6+rPXqrfl4+3eybrYYuBmYoTcDlYBFKnSUwD/ifncfYKM/KxEW1RizlVnMdicl
Cv8ocsEGYZfOxMXVC8k/jfppgInJismnFi8qMhrmeaBzlXqymKjDimiwqJnSHjNp
DUq60b7f5WmGPKreDLXCJwFyhPQBiep5DtGUkg7lOnqQizr6fjCeKYcMIMiYu2+p
zM4mD3FIHRbK2XRiT4/tB74gBY5D+nwyRFjWT+LsgIXdkwud5lBs4CKmubouMR9K
MZyjB/0gfRKhoYktorf9/B9tiO3KiWfmoCYfxJ8cEk7z/k1fRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJC6zjIy5KiRFESFgdyuXFVbjCO8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll
NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvNWEzNDBhNGYtYmM3Zi0z
Y2ZlLWFlNTgtOWI5ZGQxZWNiYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy
MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi
YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk
NDM4YmFkNGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZxADAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABoN4mvMcXhRssPnsH20eiSKstH99d3IXMzAJKhDvrqGU8VD+zNU
jCBhHJQBimETbOewBAFs7EUlaNOnEkHpq+TgFFmjI04eO+rJ1fGPJMPfKjON3qhC
6oBju63VwE5fHN+7LqZx79fTM3D+9uvqWb7ILALvvpK+rJ5riYqQPzKjfLkHUQXr
K84SXSE2flB+z3GAji+F1tIOl7pjLW4QNIz29yzLotHg27pgQENnxs4Yk4uPwe6b
kSz79RP5bnbsEJcb26JRQNY8DKw9vrux3/Adz9fce2KDtz1jmfoFYb89ICmniDi9
0JfeT0bCcBh5crbZWPvo+MNzuzrBnoNbJ9E=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:47:42 2025 by rpki-client