Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa
File:                     f52b129b-55ba-354b-9c3a-00936112d94e.roa (raw, json)
Hash identifier:          Ndo+sLl4mla3X5MSyKFFqqnqkpXJZtBmWtIHYf3kxf0=
Subject key identifier:   3F:A7:F1:60:20:CB:7E:B0:C5:05:87:DD:6C:90:EB:C4:E9:60:8D:90
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F43285849D594E268E970B10AC5AB4A20
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     32482
IP address blocks:        2605:7840:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e2:68:e9:70:b1:0a:c5:ab:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=f5058e15-25d5-40e6-8a29-6f7fce267a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:b8:a3:19:ad:09:98:d2:08:87:2d:73:32:
                    2d:f6:eb:d4:c9:8a:48:79:55:8c:d1:45:36:0e:f8:
                    f8:f4:b5:a8:1a:00:10:3a:b9:d9:99:93:21:f7:10:
                    e1:1f:cb:a1:bd:e7:8a:fc:e6:45:68:ae:c6:1a:f2:
                    64:c2:b8:2c:b5:72:cb:fd:19:34:3e:b6:14:2d:34:
                    88:79:7f:d1:81:17:b1:01:88:33:13:b9:00:0b:78:
                    d0:6a:a3:56:4e:e7:f0:2e:9a:d0:4f:fb:92:e5:eb:
                    c7:ae:82:af:2b:dc:59:c9:ad:91:c0:2c:ad:5c:53:
                    21:b5:b3:68:a2:a5:6d:40:e7:41:0a:2a:11:91:04:
                    40:78:05:2d:2d:b8:ed:3e:b5:3b:4e:ed:da:84:07:
                    39:3c:58:50:4c:82:2d:ab:3c:3f:55:88:dc:17:7b:
                    0e:96:ed:a1:b9:b5:a9:43:9d:ac:c0:8d:43:ec:7d:
                    9c:f3:a2:df:46:ff:74:ca:4d:a9:86:a2:f1:e5:e3:
                    c7:d0:fb:36:ce:8f:fe:8f:37:72:1f:8b:87:d8:29:
                    04:f1:8e:fe:f2:1a:fd:f7:56:59:d0:ca:5a:ea:e0:
                    e5:13:01:7e:62:2f:c5:29:1c:35:a9:23:3a:b0:03:
                    13:fc:f4:8a:6f:83:53:21:ca:d4:10:30:bd:cd:0d:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A7:F1:60:20:CB:7E:B0:C5:05:87:DD:6C:90:EB:C4:E9:60:8D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7840:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:9d:d5:db:ae:db:54:59:e2:83:c0:1c:c4:29:30:2b:8d:c0:
         40:57:31:7e:4d:69:96:c6:81:85:4c:05:fe:23:0b:5c:b9:61:
         36:14:ca:ea:f5:6b:da:82:9f:b6:5c:4d:a2:95:01:18:98:b8:
         ba:89:f4:6a:5b:19:7a:77:08:f7:34:de:3c:fc:6f:52:a6:9a:
         15:d2:76:9a:c4:7f:bf:d4:f2:2b:79:25:4c:df:6c:a6:93:d7:
         71:96:ab:b0:ed:71:8a:53:6b:0e:f3:d3:f6:24:8b:1b:b9:cd:
         57:71:05:46:10:2a:72:07:04:96:18:5f:89:6c:21:54:13:85:
         9f:d2:e3:e3:29:8a:12:89:a4:05:19:fa:19:66:74:f0:a8:07:
         e0:87:d4:d6:a9:7d:bc:09:cb:cd:6a:0f:06:b5:bd:44:ff:25:
         80:71:ed:1f:c4:3c:73:48:ba:22:b7:49:6f:81:b5:e8:a0:0e:
         8a:77:2c:1e:66:5b:d9:f2:86:3d:74:07:9a:dc:83:46:ae:8f:
         da:ea:ad:2f:87:6d:60:d2:c5:dd:96:41:5e:b6:be:f8:7f:c6:
         3f:3e:5c:1f:9b:df:66:be:73:cb:af:be:e6:e3:56:1a:69:9e:
         22:d3:da:ee:d7:37:15:82:45:b2:db:e2:7e:3a:f2:ff:47:13:
         71:a0:1b:08
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnVlOJo6XCxCsWrSiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz
ODkwMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZjUwNThlMTUtMjVkNS00MGU2LThhMjktNmY3ZmNlMjY3YTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeu4oxmtCZjSCIctczIt9uvUyYpIeVWM0UU2
Dvj49LWoGgAQOrnZmZMh9xDhH8uhveeK/OZFaK7GGvJkwrgstXLL/Rk0PrYULTSI
eX/RgRexAYgzE7kAC3jQaqNWTufwLprQT/uS5evHroKvK9xZya2RwCytXFMhtbNo
oqVtQOdBCioRkQRAeAUtLbjtPrU7Tu3ahAc5PFhQTIItqzw/VYjcF3sOlu2hubWp
Q52swI1D7H2c86LfRv90yk2phqLx5ePH0Ps2zo/+jzdyH4uH2CkE8Y7+8hr991ZZ
0Mpa6uDlEwF+Yi/FKRw1qSM6sAMT/PSKb4NTIcrUEDC9zQ0oHwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD+n8WAgy36wxQWH3WyQ68TpYI2QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl
NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvZjUyYjEyOWItNTViYS0z
NTRiLTljM2EtMDA5MzYxMTJkOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5
N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4
Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx
NjRlODM4OTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgV4QCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEArJ3V267bVFnig8AcxCkwK43AQFcxfk1plsaBhUwF/iMLXLlhNhTK
6vVr2oKftlxNopUBGJi4uon0alsZencI9zTePPxvUqaaFdJ2msR/v9TyK3klTN9s
ppPXcZarsO1xilNrDvPT9iSLG7nNV3EFRhAqcgcElhhfiWwhVBOFn9Lj4ymKEomk
BRn6GWZ08KgH4IfU1ql9vAnLzWoPBrW9RP8lgHHtH8Q8c0i6IrdJb4G16KAOincs
HmZb2fKGPXQHmtyDRq6P2uqtL4dtYNLF3ZZBXra++H/GPz5cH5vfZr5zy6++5uNW
GmmeItPa7tc3FYJFstvifjry/0cTcaAbCA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:44:18 2025 by rpki-client