Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa
File:                     91c113ca-efd5-351d-aee5-8cfa7262f18e.roa (raw, json)
Hash identifier:          /CM0IgcJE7tjsnh4GYT3y8L1XKNgaqhKnFnz0Qcwe8k=
Subject key identifier:   ED:8C:01:A1:F5:1E:39:15:6B:84:67:F7:96:CB:05:BB:DB:F7:91:69
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285849B149E9D9DD93CEAB753D2260
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     62588
IP address blocks:        2607:f790:fff0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:e9:d9:dd:93:ce:ab:75:3d:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=a7599554-a835-4d69-a8c5-7c11ae4729dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:6f:61:11:14:af:07:50:e6:49:44:ad:fd:
                    e4:78:8b:71:03:5f:44:56:ff:1b:2b:38:e1:fa:12:
                    4c:d7:29:cd:15:27:d6:6b:d9:16:69:b0:42:98:a4:
                    bb:14:b4:8c:b3:83:07:23:6e:47:69:0c:38:50:fb:
                    09:77:93:c3:fe:21:c0:e8:8b:07:06:48:52:de:df:
                    86:ee:a1:62:f8:e8:50:66:cf:40:13:49:41:1f:58:
                    52:3e:4f:82:97:8b:a7:02:eb:c2:ce:83:3e:20:c1:
                    5f:88:44:bc:c1:32:2a:0f:d3:ca:f9:29:12:8d:f6:
                    2b:16:30:56:46:d3:e8:a7:dc:cb:9d:f0:a9:00:23:
                    ce:f4:39:20:93:a7:b3:36:25:ba:da:e2:cf:b6:fa:
                    ef:7b:ee:f8:25:11:70:73:4a:5a:dd:16:aa:43:44:
                    8a:19:a1:07:c9:d9:95:e9:84:65:14:fc:d5:6d:d0:
                    66:d6:62:77:73:e7:a8:ca:be:09:10:63:0d:54:5c:
                    2e:22:bc:68:6e:78:e8:7a:eb:bd:40:45:b0:04:3c:
                    7d:c8:c3:10:3d:20:2c:ad:2a:bf:28:73:fc:e1:ed:
                    6b:82:86:28:2b:14:be:b5:e3:1b:6c:3d:e9:f7:ec:
                    1e:d1:6f:4d:2b:bb:ed:2f:8d:ff:83:df:53:31:f2:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:01:A1:F5:1E:39:15:6B:84:67:F7:96:CB:05:BB:DB:F7:91:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:37:19:58:0f:3e:05:5a:ee:e0:d3:35:8d:42:f4:b9:4f:f4:
         62:d7:de:bd:76:9a:a9:af:7f:0a:73:5c:36:c6:a3:ea:60:7d:
         73:08:52:18:9d:5e:6c:08:90:6d:0b:1d:0c:0f:a7:86:c2:97:
         eb:bb:2c:ec:69:9b:b2:65:76:78:4f:30:06:78:a7:04:8d:57:
         12:37:f6:d8:53:a2:f0:78:f2:99:04:f8:53:82:f9:6e:6d:54:
         4d:c3:9c:36:b5:6c:31:76:95:5a:86:b5:e1:c2:7e:ee:83:3d:
         02:a8:d4:c9:28:b9:8e:77:7d:a4:a9:18:5c:53:31:82:97:a9:
         c9:c2:42:56:98:33:0f:46:fb:f3:d7:d5:16:8e:66:71:5f:99:
         fa:58:01:22:0a:a0:40:58:5d:b6:05:47:79:58:73:a6:77:df:
         c9:47:eb:b5:08:64:1b:5a:11:df:66:4b:9e:dd:22:92:1e:15:
         cb:ea:93:1d:5b:33:2f:62:bc:19:31:27:ab:ae:4d:c6:d8:4e:
         1d:b3:41:89:d7:83:a4:ec:3c:fd:61:fb:bd:90:72:ae:9a:69:
         f9:74:8c:89:73:04:44:50:75:dd:7a:bc:c8:d5:ed:97:99:08:
         01:ae:57:78:2c:35:d1:a2:eb:be:0e:87:c9:ec:4f:db:cd:84:
         56:cc:b6:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSenZ3ZPOq3U9ImAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
YTc1OTk1NTQtYTgzNS00ZDY5LWE4YzUtN2MxMWFlNDcyOWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiBvYREUrwdQ5klErf3keItxA19EVv8bKzjh
+hJM1ynNFSfWa9kWabBCmKS7FLSMs4MHI25HaQw4UPsJd5PD/iHA6IsHBkhS3t+G
7qFi+OhQZs9AE0lBH1hSPk+Cl4unAuvCzoM+IMFfiES8wTIqD9PK+SkSjfYrFjBW
RtPop9zLnfCpACPO9Dkgk6ezNiW62uLPtvrve+74JRFwc0pa3RaqQ0SKGaEHydmV
6YRlFPzVbdBm1mJ3c+eoyr4JEGMNVFwuIrxobnjoeuu9QEWwBDx9yMMQPSAsrSq/
KHP84e1rgoYoKxS+teMbbD3p9+we0W9NK7vtL43/g99TMfL8GQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO2MAaH1HjkVa4Rn95bLBbvb95FpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOTFjMTEzY2EtZWZkNS0z
NTFkLWFlZTUtOGNmYTcyNjJmMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3kP/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEE3GVgPPgVa7uDTNY1C9LlP9GLX3r12mqmvfwpzXDbGo+pgfXMI
UhidXmwIkG0LHQwPp4bCl+u7LOxpm7JldnhPMAZ4pwSNVxI39thTovB48pkE+FOC
+W5tVE3DnDa1bDF2lVqGteHCfu6DPQKo1MkouY53faSpGFxTMYKXqcnCQlaYMw9G
+/PX1RaOZnFfmfpYASIKoEBYXbYFR3lYc6Z338lH67UIZBtaEd9mS57dIpIeFcvq
kx1bMy9ivBkxJ6uuTcbYTh2zQYnXg6TsPP1h+72Qcq6aafl0jIlzBERQdd16vMjV
7ZeZCAGuV3gsNdGi674Oh8nsT9vNhFbMtsc=
-----END CERTIFICATE-----
Generated at Sun Jun 1 16:59:13 2025 by rpki-client