Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa
File:                     63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa (raw, json)
Hash identifier:          2ni2vJyK+/lq5BZiUGbLECocquzdfSNxqomko8BbnwY=
Subject key identifier:   47:35:33:17:E6:F7:39:9E:CB:A7:D5:C4:C0:76:50:B7:F9:36:80:0F
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F43285849CE9A6514E9672D1A18FC6F00
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     13638
IP address blocks:        2606:5100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:65:14:e9:67:2d:1a:18:fc:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=58f24b61-1ede-4483-90c5-9952494c00e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:b2:2c:3c:e0:58:e9:a2:f7:e6:55:5d:fe:
                    5d:c1:27:f5:da:fb:0a:20:4e:c1:ba:8b:91:7f:3d:
                    d5:9e:66:29:fb:00:5a:af:96:67:e4:f6:80:18:6c:
                    e2:38:32:88:54:0c:a1:0a:e1:cf:b6:d6:1c:3c:40:
                    73:e4:24:75:47:07:cf:f2:ff:09:ed:3e:8e:64:b8:
                    a4:40:e0:e8:05:32:8e:25:2c:2f:9c:b5:85:6d:24:
                    64:0b:63:64:72:c2:a8:2a:e6:3f:30:42:64:a6:c3:
                    38:51:a9:de:35:7f:a8:dc:7c:a2:15:f3:03:45:e9:
                    94:c0:e3:06:84:83:59:3a:da:64:c5:68:ca:15:c8:
                    cc:0b:e1:cb:bb:65:2a:10:57:9d:d8:01:44:fa:ed:
                    eb:6c:75:ac:a8:23:3a:9e:af:f4:e6:e8:d9:30:dc:
                    7a:db:d6:90:c8:33:cf:c0:34:6a:57:dd:b0:a0:89:
                    a3:57:84:7c:88:2b:0c:f1:ec:06:b7:10:97:9d:8f:
                    06:13:8d:59:ff:36:01:24:91:64:df:cd:be:3a:00:
                    d8:51:1d:ce:aa:a7:86:28:81:06:11:02:d7:56:ff:
                    3c:f3:43:72:e8:c3:39:6a:d1:81:bf:53:1d:b8:4f:
                    ac:f8:1e:98:a3:c6:6a:1e:46:c0:48:79:f0:d3:87:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:35:33:17:E6:F7:39:9E:CB:A7:D5:C4:C0:76:50:B7:F9:36:80:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:20:0a:03:ec:11:c9:18:66:fc:d4:ab:81:fc:2f:62:ae:
         1d:5d:e4:a5:dc:3d:8c:6f:00:2f:ea:0f:52:6c:f2:95:05:1f:
         34:42:02:2c:6d:10:65:a0:4e:0c:9a:31:df:8d:31:e5:e0:99:
         56:3c:96:60:ef:ca:7b:bc:14:02:26:f2:da:85:0b:27:14:64:
         08:71:b0:6e:dc:8c:e0:08:36:ac:07:d0:16:54:6d:78:d3:52:
         dc:a5:2a:50:c3:95:fa:72:cc:25:a4:fe:91:a0:d4:5c:92:6a:
         97:2f:5f:79:75:e0:61:85:93:5e:16:36:5e:a1:25:fd:57:4a:
         67:9c:6f:ec:60:19:a0:17:96:58:cb:43:45:ed:ca:2b:5b:cd:
         1a:ef:43:f2:a5:e7:bc:5a:44:a3:44:ca:a2:79:4f:7e:fd:56:
         99:3c:d0:4d:42:6e:71:3b:79:a4:a4:e4:43:e7:ed:86:f9:59:
         7e:40:c5:d2:95:86:b2:da:c5:68:e8:81:52:18:10:c5:a0:c2:
         0e:86:cc:14:f9:f0:e1:6a:25:e0:62:02:1f:92:e3:e7:de:7b:
         dc:45:80:22:76:93:ad:a7:dc:21:d6:69:b1:fd:43:1f:66:c5:
         3e:4d:d8:ce:b3:64:af:e0:eb:60:a3:b1:0c:04:c4:dc:25:b6:
         ac:b3:ff:cc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnOmmUU6WctGhj8bwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4
ZmI3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
NThmMjRiNjEtMWVkZS00NDgzLTkwYzUtOTk1MjQ5NGMwMGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTKyLDzgWOmi9+ZVXf5dwSf12vsKIE7BuouR
fz3VnmYp+wBar5Zn5PaAGGziODKIVAyhCuHPttYcPEBz5CR1RwfP8v8J7T6OZLik
QODoBTKOJSwvnLWFbSRkC2NkcsKoKuY/MEJkpsM4UaneNX+o3HyiFfMDRemUwOMG
hINZOtpkxWjKFcjMC+HLu2UqEFed2AFE+u3rbHWsqCM6nq/05ujZMNx629aQyDPP
wDRqV92woImjV4R8iCsM8ewGtxCXnY8GE41Z/zYBJJFk382+OgDYUR3OqqeGKIEG
EQLXVv8880Ny6MM5atGBv1MduE+s+B6Yo8ZqHkbASHnw04fq3wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEc1Mxfm9zmey6fVxMB2ULf5NoAPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2
YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvNjNiYzhiODEtZjdkNy0z
YzI5LTgyMmQtNTk3YzJmNWJmZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3
NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy
OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5
MGUwMjhmYjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZRADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAMryAKA+wRyRhm/NSrgfwvYq4dXeSl3D2MbwAv6g9SbPKVBR80QgIs
bRBloE4MmjHfjTHl4JlWPJZg78p7vBQCJvLahQsnFGQIcbBu3IzgCDasB9AWVG14
01LcpSpQw5X6cswlpP6RoNRckmqXL195deBhhZNeFjZeoSX9V0pnnG/sYBmgF5ZY
y0NF7corW80a70Pypee8WkSjRMqieU9+/VaZPNBNQm5xO3mkpORD5+2G+Vl+QMXS
lYay2sVo6IFSGBDFoMIOhswU+fDhaiXgYgIfkuPn3nvcRYAidpOtp9wh1mmx/UMf
ZsU+TdjOs2Sv4Otgo7EMBMTcJbass//M
-----END CERTIFICATE-----
Generated at Mon May 12 05:32:33 2025 by rpki-client