Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa
File:                     6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa (raw, json)
Hash identifier:          ETL6j3971XhRiz9p8B0zT7XCd/KlusADXLNnLiXVfEI=
Subject key identifier:   70:29:26:4C:EA:56:44:13:25:C1:55:6C:A9:E0:42:F7:35:B4:33:B0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E2252B194D52FDE85DAA5DD0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     12222
IP address blocks:        2001:4878:b102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:2b:19:4d:52:fd:e8:5d:aa:5d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=325b83c0-b525-44f2-9ef6-011383774a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:a2:43:15:c9:4a:99:08:99:85:91:35:dc:
                    ae:2d:5d:92:f4:8d:53:b3:76:a5:8b:22:90:2c:e4:
                    d6:ee:44:c2:44:65:2c:97:d9:0a:6e:0b:5f:a3:9d:
                    c4:c1:8c:ca:48:87:e2:4a:b4:45:65:e4:63:6e:cd:
                    5d:40:ae:a5:0b:36:7b:c0:7e:5a:09:f6:11:79:b2:
                    bc:7c:86:35:86:06:3c:32:d9:0c:e3:d2:14:5a:47:
                    ad:b1:07:43:3e:1e:a5:ae:4e:9b:07:76:e8:f8:ff:
                    30:50:08:03:1c:50:ff:ff:f9:10:d3:9c:55:1f:62:
                    40:4d:2a:9a:aa:c3:6c:97:e2:d2:36:20:6e:11:26:
                    4b:cd:98:42:94:73:b0:44:bf:fc:5c:e2:01:c7:6a:
                    5f:76:ac:9b:fa:7e:a0:b9:45:17:37:92:b8:db:30:
                    7d:87:ad:24:1b:79:32:0d:e3:fb:10:e8:a8:8a:ed:
                    5f:01:70:a7:f7:2b:6c:9b:6c:ec:c4:d2:ff:ae:48:
                    e2:58:34:e8:81:f4:dc:e6:f2:16:bb:6a:2f:b7:8c:
                    53:81:b6:57:cf:4d:25:fd:ee:3f:e2:86:9d:6f:41:
                    ce:d3:7b:c2:62:df:78:55:c4:8b:22:31:dd:45:d1:
                    9d:05:aa:a6:21:5b:be:b7:ea:83:6a:0a:5d:38:f1:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:29:26:4C:EA:56:44:13:25:C1:55:6C:A9:E0:42:F7:35:B4:33:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:b102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:4a:31:e1:2b:05:df:09:76:42:74:73:c9:c1:5a:6b:dc:
         d9:90:f5:c8:51:15:f9:8f:4b:ab:06:77:4f:f5:a7:16:0e:9b:
         2e:aa:3d:6f:09:83:a6:3b:ef:84:15:be:2b:1a:bd:3b:b4:22:
         d1:68:90:61:27:54:ea:70:43:72:69:34:45:9b:e8:1f:31:1a:
         3a:d2:c0:11:7a:6f:d0:ad:ae:bc:21:35:24:fb:9b:b1:cb:ba:
         cf:07:a5:b2:ce:9a:4d:67:45:54:29:90:e5:1d:85:e4:f0:92:
         f3:20:9e:a9:0a:d3:5e:5b:c5:d1:12:48:69:2b:43:b3:32:a6:
         4e:c7:e7:2a:53:d2:47:08:2c:5a:1d:1b:2b:93:94:32:cd:5b:
         58:f0:94:27:29:0f:54:55:35:98:55:a1:5c:9a:23:56:54:b1:
         22:ac:c7:0e:44:64:2a:45:8d:17:f8:1c:92:49:fa:a7:a1:1f:
         a1:1e:10:31:fa:28:03:6a:a0:99:b8:34:f1:28:ad:9e:12:1a:
         11:db:f5:93:76:97:a2:8a:05:79:7e:fa:93:a4:7e:62:f2:81:
         51:6b:71:da:b8:95:fd:a8:7e:af:e8:cc:56:c9:26:2d:e8:23:
         f2:20:8a:bc:8b:80:c3:b5:25:f3:a4:ee:9b:20:0e:31:a6:bf:
         16:cd:7d:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJSsZTVL96F2qXdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
MzI1YjgzYzAtYjUyNS00NGYyLTllZjYtMDExMzgzNzc0YTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuteiQxXJSpkImYWRNdyuLV2S9I1Ts3aliyKQ
LOTW7kTCRGUsl9kKbgtfo53EwYzKSIfiSrRFZeRjbs1dQK6lCzZ7wH5aCfYRebK8
fIY1hgY8MtkM49IUWketsQdDPh6lrk6bB3bo+P8wUAgDHFD///kQ05xVH2JATSqa
qsNsl+LSNiBuESZLzZhClHOwRL/8XOIBx2pfdqyb+n6guUUXN5K42zB9h60kG3ky
DeP7EOioiu1fAXCn9ytsm2zsxNL/rkjiWDTogfTc5vIWu2ovt4xTgbZXz00l/e4/
4oadb0HO03vCYt94VcSLIjHdRdGdBaqmIVu+t+qDagpdOPGTDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHApJkzqVkQTJcFVbKngQvc1tDOwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmFiODZlZWYtOGIzOS0z
ZDJjLWE2N2ItYTViYWQ1Y2NlMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeLEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACxMSjHhKwXfCXZCdHPJwVpr3NmQ9chRFfmPS6sGd0/1pxYOmy6q
PW8Jg6Y774QVvisavTu0ItFokGEnVOpwQ3JpNEWb6B8xGjrSwBF6b9CtrrwhNST7
m7HLus8HpbLOmk1nRVQpkOUdheTwkvMgnqkK015bxdESSGkrQ7Mypk7H5ypT0kcI
LFodGyuTlDLNW1jwlCcpD1RVNZhVoVyaI1ZUsSKsxw5EZCpFjRf4HJJJ+qehH6Ee
EDH6KANqoJm4NPEorZ4SGhHb9ZN2l6KKBXl++pOkfmLygVFrcdq4lf2ofq/ozFbJ
Ji3oI/IgiryLgMO1JfOk7psgDjGmvxbNfVo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:17 2025 by rpki-client