Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa
File:                     bfc793ce-a993-3340-a83b-f59fc42e0a54.roa (raw, json)
Hash identifier:          kV7hmIv7SEqamQHaRfreQogapW50Xt/emuLE4oxHgD4=
Subject key identifier:   8E:16:15:EF:2D:BF:8C:D1:16:D9:40:85:62:33:73:91:5D:55:41:FD
Certificate issuer:       /CN=206b65c6-b880-42a7-b728-a37b15fc236d
Certificate serial:       010D0C9F43285848EF61587C94CF3D9CA3CDE880
Authority key identifier: 29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     35889
IP address blocks:        2604:8ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:58:7c:94:cf:3d:9c:a3:cd:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206b65c6-b880-42a7-b728-a37b15fc236d
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=d9e87efc-e832-464a-9b9c-879902417dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:4b:e8:bd:4d:ad:7f:42:c3:23:8a:0f:6e:
                    9f:b1:71:ec:6b:21:48:b0:cd:31:8f:66:5a:70:29:
                    95:37:7d:79:de:c8:5a:78:ac:5d:f9:7d:da:0a:43:
                    ef:12:06:ab:00:01:74:e0:c7:3d:62:59:73:e6:6f:
                    e7:50:73:96:1f:fc:16:49:57:3a:f5:ac:d8:80:d1:
                    e7:0d:ab:43:b0:80:40:b6:48:8f:5b:2e:3d:e0:5f:
                    55:e6:5f:0a:d4:90:43:ab:c8:94:05:3d:9e:d5:51:
                    6d:9d:65:30:0e:d0:c9:b1:1a:8e:f3:fa:f0:03:bd:
                    39:0f:6c:13:dc:a1:e1:a4:25:22:23:bb:48:df:58:
                    d0:1c:a9:72:43:eb:f0:3f:fc:ab:96:1a:27:14:28:
                    cc:11:52:6e:65:34:d9:8e:13:33:b1:0a:50:25:6d:
                    67:8f:fb:9b:86:b2:78:b7:4e:5f:b1:f7:89:c2:c2:
                    0c:2d:54:51:fc:34:e2:fa:2f:13:d2:7b:90:09:cc:
                    9a:53:24:89:54:3a:4d:15:73:ab:43:41:7a:e5:8f:
                    b9:31:fb:81:61:b5:a0:db:76:82:78:c0:36:58:f7:
                    82:89:98:cc:11:2f:23:a7:ef:6b:e2:16:89:fe:63:
                    40:f8:16:4d:ac:97:a6:ba:24:aa:a3:7a:e4:55:41:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:16:15:EF:2D:BF:8C:D1:16:D9:40:85:62:33:73:91:5D:55:41:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl

            X509v3 Authority Key Identifier:
                keyid:29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:ee:5b:22:18:87:a7:1b:3b:77:fc:64:9b:ed:1f:19:4a:
         aa:69:33:98:fc:8e:5a:b0:36:71:3b:2a:da:77:f4:40:b5:59:
         b8:7d:cd:b0:ea:cd:75:51:cf:2e:f1:d2:2d:2d:e2:a3:7a:db:
         38:4c:00:5d:2e:17:63:23:5b:64:80:ee:f8:75:ee:02:67:d9:
         97:ca:60:ae:e4:92:64:d6:1f:f0:74:ae:e2:6c:fb:2c:5b:39:
         f5:09:57:02:2a:d3:12:85:04:fb:6e:11:b8:bd:00:40:f5:da:
         62:a2:02:d8:63:c8:45:be:79:14:96:06:cf:2d:f9:ad:8b:eb:
         9c:94:c7:b0:ab:56:56:4e:59:a2:c3:f4:f8:fa:32:11:19:1b:
         84:c6:2e:ec:bb:a6:24:24:72:d4:d4:74:c6:c8:25:38:53:d0:
         12:00:09:8a:2d:c1:e2:40:a7:3c:7f:5f:79:17:90:22:08:74:
         b7:8d:4a:6f:8f:5c:78:58:d8:6b:05:c5:22:06:31:de:40:b4:
         cf:3a:4f:da:47:53:12:13:c7:93:2b:0e:43:f6:0e:55:78:3e:
         da:da:0f:f7:89:63:8c:bc:85:6e:4d:7c:75:cd:ea:69:e1:03:
         d6:d9:90:50:71:49:a9:c5:45:fa:90:6d:3a:7c:2c:a4:88:6c:
         4f:4b:94:05
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjvYVh8lM89nKPN6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA2YjY1YzYtYjg4MC00MmE3LWI3MjgtYTM3YjE1ZmMy
MzZkMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZDllODdlZmMtZTgzMi00NjRhLTliOWMtODc5OTAyNDE3ZGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi5L6L1NrX9CwyOKD26fsXHsayFIsM0xj2Za
cCmVN3153shaeKxd+X3aCkPvEgarAAF04Mc9Yllz5m/nUHOWH/wWSVc69azYgNHn
DatDsIBAtkiPWy494F9V5l8K1JBDq8iUBT2e1VFtnWUwDtDJsRqO8/rwA705D2wT
3KHhpCUiI7tI31jQHKlyQ+vwP/yrlhonFCjMEVJuZTTZjhMzsQpQJW1nj/ubhrJ4
t05fsfeJwsIMLVRR/DTi+i8T0nuQCcyaUySJVDpNFXOrQ0F65Y+5MfuBYbWg23aC
eMA2WPeCiZjMES8jp+9r4haJ/mNA+BZNrJemuiSqo3rkVUE/7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI4WFe8tv4zRFtlAhWIzc5FdVUH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDZi
NjVjNi1iODgwLTQyYTctYjcyOC1hMzdiMTVmYzIzNmQvYmZjNzkzY2UtYTk5My0z
MzQwLWE4M2ItZjU5ZmM0MmUwYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA2YjY1YzYtYjg4MC00MmE3LWI3
MjgtYTM3YjE1ZmMyMzZkLzIwNmI2NWM2LWI4ODAtNDJhNy1iNzI4LWEzN2IxNWZj
MjM2ZC5jcmwwHwYDVR0jBBgwFoAUKVV8DO6NGLE/hbyF1yM2h+MfMwQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDZiNjVjNi1iODgwLTQyYTctYjcyOC1hMzdi
MTVmYzIzNmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSKwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBL9O5bIhiHpxs7d/xkm+0fGUqqaTOY/I5asDZxOyrad/RAtVm4fc2w
6s11Uc8u8dItLeKjets4TABdLhdjI1tkgO74de4CZ9mXymCu5JJk1h/wdK7ibPss
Wzn1CVcCKtMShQT7bhG4vQBA9dpiogLYY8hFvnkUlgbPLfmti+uclMewq1ZWTlmi
w/T4+jIRGRuExi7su6YkJHLU1HTGyCU4U9ASAAmKLcHiQKc8f195F5AiCHS3jUpv
j1x4WNhrBcUiBjHeQLTPOk/aR1MSE8eTKw5D9g5VeD7a2g/3iWOMvIVuTXx1zepp
4QPW2ZBQcUmpxUX6kG06fCykiGxPS5QF
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:43:11 2025 by rpki-client