Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa
File:                     f5e65c7c-0298-34e7-8190-79fa24c0e960.roa (raw, json)
Hash identifier:          Zh1vSzC9M3n+MbciM3Sdy8KrqI5a6DF5qJbRmgbo+Xk=
Subject key identifier:   AE:A3:04:D2:0A:91:8B:A0:31:4D:74:1B:FF:D0:A5:24:1B:63:9A:91
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A146562191A5D86D8F5753EC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:62:19:1a:5d:86:d8:f5:75:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=e6676e35-f89c-4694-b173-a648575fb1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:37:63:93:a9:58:ff:42:89:c7:af:e1:ef:
                    b9:54:46:7c:fd:59:4d:d5:33:c9:61:f6:5e:e4:73:
                    16:01:22:d6:49:eb:69:36:e1:5a:98:3d:c8:86:f8:
                    42:a9:ad:32:fb:ac:3a:81:c1:05:6c:fe:41:ed:5d:
                    78:5a:c1:62:8c:40:02:7d:4e:42:fb:65:a0:88:30:
                    83:30:e7:26:fe:ae:fc:a5:ce:41:22:57:85:2b:bf:
                    34:a8:53:95:dc:24:51:d6:fa:5f:6c:75:58:d3:c8:
                    a7:3e:a6:66:79:4d:ba:36:07:b8:b9:21:0e:79:8e:
                    c0:e8:53:ae:14:21:37:13:b9:1b:bd:e5:d0:be:d4:
                    98:f0:d7:4c:2d:56:20:ae:6f:e0:6f:d5:6e:0e:17:
                    8f:8f:d6:5d:78:8c:5a:f7:c4:d4:f4:7d:f8:e8:94:
                    36:71:9b:10:38:8e:91:f2:5b:9d:f9:cf:5a:1b:44:
                    cb:12:63:d3:95:df:3a:5d:7d:fe:85:e6:99:9e:f5:
                    d1:97:f2:1f:4f:ac:d5:cf:46:e2:c9:78:e6:70:e8:
                    45:90:9a:0a:3f:b9:23:48:ee:5d:3f:95:c9:3b:0c:
                    99:6c:8f:cd:ef:85:94:06:9c:0a:2a:bc:46:c3:74:
                    42:fc:45:f1:39:5b:50:8d:86:3b:9f:5d:3b:b9:26:
                    61:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:04:D2:0A:91:8B:A0:31:4D:74:1B:FF:D0:A5:24:1B:63:9A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f5e65c7c-0298-34e7-8190-79fa24c0e960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1060::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:69:1e:67:43:7f:d6:4b:c0:7f:f8:2f:08:b2:c0:3b:f5:b2:
         4c:6b:7d:00:52:fe:b6:19:88:93:4d:c3:b3:55:11:9e:db:6c:
         da:7d:42:be:78:df:38:c9:30:fa:7a:79:93:be:01:fe:53:e7:
         1c:54:b8:5d:2b:e1:a3:d9:17:18:4d:36:90:ea:ae:26:7f:29:
         3f:68:94:55:97:f4:8a:59:fd:de:d1:a5:a0:aa:80:d2:0e:b7:
         f0:51:e9:6c:f0:42:49:55:cf:bc:e8:33:13:8c:2e:17:30:68:
         ce:5d:55:aa:a3:da:b2:00:1b:27:f0:f5:30:75:19:8d:1f:03:
         e2:d9:50:37:7a:2d:58:97:16:fc:3d:2e:c8:e1:44:6f:d3:dd:
         03:b2:ce:ee:ed:11:ac:f0:76:12:54:ff:9f:0b:8e:5b:60:c0:
         61:d3:2b:5c:0b:bf:79:2c:8a:73:57:3c:40:8a:b2:a8:88:ef:
         f9:82:27:7a:89:0f:ad:33:f1:16:d9:e7:c8:f6:3c:3a:ba:eb:
         38:28:35:d6:5f:ae:7f:30:02:bb:2c:5b:ee:5c:f1:97:1f:35:
         36:f0:3c:20:56:5e:9d:81:18:dc:8e:7b:15:03:e0:49:dc:3b:
         2f:ac:fc:a0:1f:84:a3:7d:67:0c:9f:49:1a:21:5c:9c:f5:b3:
         d7:ce:ab:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZWIZGl2G2PV1PsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZTY2NzZlMzUtZjg5Yy00Njk0LWIxNzMtYTY0ODU3NWZiMWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bc3Y5OpWP9Cicev4e+5VEZ8/VlN1TPJYfZe
5HMWASLWSetpNuFamD3IhvhCqa0y+6w6gcEFbP5B7V14WsFijEACfU5C+2WgiDCD
MOcm/q78pc5BIleFK780qFOV3CRR1vpfbHVY08inPqZmeU26Nge4uSEOeY7A6FOu
FCE3E7kbveXQvtSY8NdMLVYgrm/gb9VuDhePj9ZdeIxa98TU9H346JQ2cZsQOI6R
8lud+c9aG0TLEmPTld86XX3+heaZnvXRl/IfT6zVz0biyXjmcOhFkJoKP7kjSO5d
P5XJOwyZbI/N74WUBpwKKrxGw3RC/EXxOVtQjYY7n107uSZhRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK6jBNIKkYugMU10G//QpSQbY5qRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZjVlNjVjN2MtMDI5OC0z
NGU3LTgxOTAtNzlmYTI0YzBlOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB1pHmdDf9ZLwH/4LwiywDv1skxrfQBS/rYZiJNNw7NVEZ7bbNp9
Qr543zjJMPp6eZO+Af5T5xxUuF0r4aPZFxhNNpDqriZ/KT9olFWX9IpZ/d7RpaCq
gNIOt/BR6WzwQklVz7zoMxOMLhcwaM5dVaqj2rIAGyfw9TB1GY0fA+LZUDd6LViX
Fvw9LsjhRG/T3QOyzu7tEazwdhJU/58LjltgwGHTK1wLv3ksinNXPECKsqiI7/mC
J3qJD60z8RbZ58j2PDq66zgoNdZfrn8wArssW+5c8ZcfNTbwPCBWXp2BGNyOexUD
4EncOy+s/KAfhKN9ZwyfSRohXJz1s9fOqyU=
-----END CERTIFICATE-----
Generated at Sun Jun 29 23:42:48 2025 by rpki-client