Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b76fa1d9-da11-3cb9-a24b-54b4d3bb57e8.roa
File:                     b76fa1d9-da11-3cb9-a24b-54b4d3bb57e8.roa (raw, json)
Hash identifier:          gEd6KC9GakLHSI8u8rhP/mfw7WBZ2cAej5b7zv36mgo=
Subject key identifier:   B2:64:CE:BA:67:87:57:DA:EC:2C:0B:5B:83:F3:31:8A:EF:4B:B7:E3
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584A374AC3D22BC9FB85759E20A0
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b76fa1d9-da11-3cb9-a24b-54b4d3bb57e8.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     32133
IP address blocks:        2606:8e80:6800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c3:d2:2b:c9:fb:85:75:9e:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=349ad497-ada2-480c-84cd-c8ffa0f088fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:11:1d:23:a9:55:73:06:66:30:dd:80:45:
                    c8:8f:ef:52:30:d6:de:f5:5c:73:05:b1:d2:56:41:
                    1a:5f:4a:1a:07:74:f9:87:4d:1f:a6:76:90:5f:b4:
                    06:8d:30:f1:a0:bd:af:9c:21:e9:39:f9:ed:01:fa:
                    35:6a:ea:28:3c:0c:b8:5c:fa:c2:f6:7f:63:3d:ae:
                    a3:be:11:51:cc:82:2b:59:c1:89:d7:56:bf:05:0c:
                    0c:d6:ff:f4:dd:24:0e:bb:6c:ee:60:0e:a8:cc:ac:
                    c5:50:75:d8:fb:4f:e0:67:c1:7e:04:3d:f1:a5:af:
                    19:30:a6:12:d2:b3:00:43:d6:ed:0c:2a:98:e3:13:
                    c3:21:c7:d6:00:af:12:bd:45:51:d4:b7:bd:ea:74:
                    81:46:1e:43:b9:06:79:71:7f:e0:8b:3f:19:10:f8:
                    bb:25:4d:f1:f2:ec:bd:d9:54:e6:79:53:35:1f:87:
                    3d:c8:27:74:de:26:05:2d:36:0a:14:6e:a8:44:e1:
                    58:24:fd:d5:c6:08:ca:56:2b:b1:89:2a:c3:b4:5d:
                    2e:24:5f:08:87:54:9d:c7:ec:59:2b:57:41:07:ef:
                    0f:82:76:74:40:45:25:e3:0e:46:5b:68:c5:7d:5d:
                    44:42:15:cf:13:8a:2f:17:66:b3:0c:09:7e:c5:67:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:64:CE:BA:67:87:57:DA:EC:2C:0B:5B:83:F3:31:8A:EF:4B:B7:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b76fa1d9-da11-3cb9-a24b-54b4d3bb57e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:6800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b5:4d:cc:e1:5f:ad:09:b1:16:3f:64:a6:f8:f7:1a:f5:bc:
         3b:9f:6e:10:30:93:9f:7d:a5:83:45:8d:1a:0e:ce:b6:28:07:
         86:4f:de:28:9f:41:a7:af:28:47:6b:45:18:5c:3b:c1:ed:2e:
         e1:bc:31:b5:fc:33:77:83:94:1f:5c:ef:f6:3e:19:40:aa:ff:
         eb:b9:96:87:95:33:6b:59:13:8a:e6:25:d1:e6:11:04:2e:f1:
         31:86:51:7f:c2:41:63:10:b4:37:82:e2:59:e8:7b:b8:de:e9:
         42:17:2d:c4:11:76:90:c9:fc:b7:c8:16:07:86:36:3a:f8:7f:
         7a:4c:87:7c:29:12:c1:5d:de:3b:0d:68:c5:09:84:5e:92:eb:
         a3:78:ea:8e:b2:34:37:d3:1c:30:b6:e6:62:2f:71:a1:1c:3b:
         81:56:56:b7:ee:e8:d3:d5:71:2f:73:af:d9:8a:d5:b0:37:34:
         be:9d:87:7b:be:43:97:fc:07:77:b2:a4:14:24:19:12:f6:58:
         8e:92:12:0a:b6:93:60:f2:86:d7:b8:94:a2:0b:13:72:5d:49:
         40:48:3d:66:0c:a3:3a:54:4c:cd:3e:7d:e6:8f:5e:2f:f7:dd:
         4e:99:98:db:76:c3:04:6e:f6:4f:86:0c:f4:97:d5:c4:59:a0:
         79:8b:0c:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEo3SsPSK8n7hXWeIKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
MzQ5YWQ0OTctYWRhMi00ODBjLTg0Y2QtYzhmZmEwZjA4OGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshkRHSOpVXMGZjDdgEXIj+9SMNbe9VxzBbHS
VkEaX0oaB3T5h00fpnaQX7QGjTDxoL2vnCHpOfntAfo1auooPAy4XPrC9n9jPa6j
vhFRzIIrWcGJ11a/BQwM1v/03SQOu2zuYA6ozKzFUHXY+0/gZ8F+BD3xpa8ZMKYS
0rMAQ9btDCqY4xPDIcfWAK8SvUVR1Le96nSBRh5DuQZ5cX/giz8ZEPi7JU3x8uy9
2VTmeVM1H4c9yCd03iYFLTYKFG6oROFYJP3VxgjKViuxiSrDtF0uJF8Ih1Sdx+xZ
K1dBB+8PgnZ0QEUl4w5GW2jFfV1EQhXPE4ovF2azDAl+xWf2ZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLJkzrpnh1fa7CwLW4PzMYrvS7fjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvYjc2ZmExZDktZGExMS0z
Y2I5LWEyNGItNTRiNGQzYmI1N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgaOgGgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAiLVNzOFfrQmxFj9kpvj3GvW8O59uEDCTn32lg0WNGg7OtigHhk/e
KJ9Bp68oR2tFGFw7we0u4bwxtfwzd4OUH1zv9j4ZQKr/67mWh5Uza1kTiuYl0eYR
BC7xMYZRf8JBYxC0N4LiWeh7uN7pQhctxBF2kMn8t8gWB4Y2Ovh/ekyHfCkSwV3e
Ow1oxQmEXpLro3jqjrI0N9McMLbmYi9xoRw7gVZWt+7o09VxL3Ov2YrVsDc0vp2H
e75Dl/wHd7KkFCQZEvZYjpISCraTYPKG17iUogsTcl1JQEg9ZgyjOlRMzT595o9e
L/fdTpmY23bDBG72T4YM9JfVxFmgeYsM7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:17:31 2025 by rpki-client