Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa
File:                     2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa (raw, json)
Hash identifier:          LrS9Hkund1EHFVeSCQrOSMy2O01q44lA+szCpZPAMOU=
Subject key identifier:   36:AE:D5:86:FB:A2:BC:C4:E9:0A:35:B9:2B:87:35:0F:78:03:93:17
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F43285849BDDA1AAC388D84ADC1DF7548
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     36549
IP address blocks:        2606:b200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:1a:ac:38:8d:84:ad:c1:df:75:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=451bf6b1-5668-47f9-8a60-6726110dc2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:26:42:f4:c7:cb:29:31:ac:1a:4f:98:f0:
                    8a:2e:03:17:18:33:58:68:e8:84:4d:2b:fa:d8:eb:
                    03:f6:11:32:10:1e:ea:3d:a0:c1:bb:44:eb:c2:10:
                    8a:36:0c:f6:63:16:7d:eb:56:7f:15:dc:23:bd:97:
                    57:89:42:46:3b:e3:eb:c0:ab:7d:12:38:b1:34:8b:
                    d8:f6:18:f0:8c:2e:2f:5f:a8:4a:9f:4e:95:1a:bc:
                    b9:3b:d7:e8:f8:46:ab:da:07:91:89:be:a3:cc:15:
                    f2:3d:90:a0:6d:79:81:a0:10:99:d3:3b:2a:17:9e:
                    99:68:1c:cd:fd:57:1f:6c:4f:b8:4e:e5:00:aa:e8:
                    60:ef:3b:86:2e:aa:7a:9c:7d:7b:80:6c:01:46:c0:
                    df:04:4e:a5:90:0d:fd:95:cd:60:32:d7:25:28:87:
                    aa:a4:bb:8e:4c:ca:82:70:02:bc:87:c2:c9:27:b8:
                    11:8d:d9:83:de:74:cd:32:5e:29:e3:a2:e4:1e:79:
                    03:91:2e:57:d2:35:7c:fa:39:bc:c9:7d:a1:9e:b3:
                    08:22:da:b8:5d:39:49:38:e8:5c:91:18:25:99:5b:
                    05:9c:e3:0d:62:3c:53:e7:1a:66:06:fe:b5:b4:a9:
                    6c:25:df:31:48:d7:c1:29:f8:53:6e:23:22:83:82:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AE:D5:86:FB:A2:BC:C4:E9:0A:35:B9:2B:87:35:0F:78:03:93:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:bd:e8:5a:a3:34:a1:c5:67:96:aa:bf:1a:25:33:b6:79:28:
         03:be:03:42:91:0f:2e:0f:fe:35:b1:ef:8c:0c:8c:31:17:6a:
         05:e9:f3:19:6a:54:05:bc:5c:0b:eb:0d:20:63:fe:be:8b:6b:
         56:eb:b9:82:8f:ce:3c:4a:93:2f:0e:6e:43:dc:f6:6d:70:dc:
         31:f8:ed:9c:e3:12:4f:65:22:60:93:fd:68:1d:e7:c2:31:a0:
         9e:84:d6:48:64:1f:d6:df:7a:c1:f7:a0:f1:8d:b6:24:c3:f5:
         9b:cf:08:9e:e4:0a:f2:33:80:ce:2b:a1:43:ed:91:5e:8b:d0:
         d2:34:31:3c:66:a0:d4:d7:bd:6f:f8:cf:ae:a8:24:17:0b:7a:
         ba:4a:34:f9:5d:56:ac:12:d1:e8:1a:ef:88:e8:da:21:d7:11:
         b2:f9:2e:3c:6e:a0:d8:fb:1e:0c:48:33:c6:61:24:67:71:43:
         6f:5f:47:dd:b3:1d:d2:32:ce:8b:a6:d7:4b:41:51:91:6d:68:
         5d:e8:a2:e5:db:08:45:6c:d3:34:f6:f3:80:44:e5:30:07:dc:
         31:57:6e:74:e4:f9:5a:51:29:37:2a:ad:9f:73:56:18:a5:12:
         ca:fb:61:54:c6:99:fa:88:8a:a4:74:d3:e4:87:4c:40:df:1b:
         8f:a2:a4:11
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm92hqsOI2ErcHfdUgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi
ZjNjMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
NDUxYmY2YjEtNTY2OC00N2Y5LThhNjAtNjcyNjExMGRjMmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjUmQvTHyykxrBpPmPCKLgMXGDNYaOiETSv6
2OsD9hEyEB7qPaDBu0TrwhCKNgz2YxZ961Z/FdwjvZdXiUJGO+PrwKt9EjixNIvY
9hjwjC4vX6hKn06VGry5O9fo+Ear2geRib6jzBXyPZCgbXmBoBCZ0zsqF56ZaBzN
/VcfbE+4TuUAquhg7zuGLqp6nH17gGwBRsDfBE6lkA39lc1gMtclKIeqpLuOTMqC
cAK8h8LJJ7gRjdmD3nTNMl4p46LkHnkDkS5X0jV8+jm8yX2hnrMIItq4XTlJOOhc
kRglmVsFnOMNYjxT5xpmBv61tKlsJd8xSNfBKfhTbiMig4IUiwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDau1Yb7orzE6Qo1uSuHNQ94A5MXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm
ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvMmJlODNlNGMtN2ExMi0z
MzJjLWE5ZGYtNDllM2Y1ZmNiMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3
NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk
YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk
YmVhZGJmM2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgayADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDbvehaozShxWeWqr8aJTO2eSgDvgNCkQ8uD/41se+MDIwxF2oF6fMZ
alQFvFwL6w0gY/6+i2tW67mCj848SpMvDm5D3PZtcNwx+O2c4xJPZSJgk/1oHefC
MaCehNZIZB/W33rB96DxjbYkw/Wbzwie5AryM4DOK6FD7ZFei9DSNDE8ZqDU171v
+M+uqCQXC3q6SjT5XVasEtHoGu+I6Noh1xGy+S48bqDY+x4MSDPGYSRncUNvX0fd
sx3SMs6LptdLQVGRbWhd6KLl2whFbNM09vOAROUwB9wxV2505PlaUSk3Kq2fc1YY
pRLK+2FUxpn6iIqkdNPkh0xA3xuPoqQR
-----END CERTIFICATE-----
Generated at Sat May 10 11:23:50 2025 by rpki-client