Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e74c8d4-17bc-3b2c-aa2a-f24e7f4acec1.roa
File:                     3e74c8d4-17bc-3b2c-aa2a-f24e7f4acec1.roa (raw, json)
Hash identifier:          1yexnvZ9nBtGaQIAWdnU5PXgnV0Fp64zbg+b73NgsIM=
Subject key identifier:   63:11:EE:6D:8A:F9:B2:08:2A:4F:FB:A5:F2:E8:5A:72:E8:E0:AA:DC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD07FD3E622ED7571D500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e74c8d4-17bc-3b2c-aa2a-f24e7f4acec1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        2600:6000:fb34::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d0:7f:d3:e6:22:ed:75:71:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=250f0290-2d16-4df4-8425-3a98434b5ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:87:c7:4b:8b:be:1c:3b:fa:6e:4d:fe:8a:
                    90:02:9d:a7:a1:af:f6:38:b3:65:d7:21:99:e0:f2:
                    e0:ca:fd:0e:0c:4c:fc:43:28:47:47:d2:e3:8d:90:
                    7e:aa:e5:c2:c1:cb:c4:e7:74:f7:b8:2c:8f:e6:70:
                    95:bd:b3:9a:c1:0d:81:48:f6:98:7f:5b:bd:b5:a7:
                    7f:07:27:2c:f5:b0:72:1b:91:5c:c5:45:18:73:ba:
                    27:6a:39:27:ea:b8:f7:14:63:25:2a:c4:0e:dc:e0:
                    26:55:32:db:2c:74:56:fd:3c:72:fb:ff:8c:22:aa:
                    db:a4:2d:1b:0f:d9:6b:ac:7d:97:e1:4e:06:5e:b0:
                    13:69:ed:6d:d0:a1:9b:bd:14:3b:d7:f0:c5:b3:7d:
                    f2:24:19:08:54:d6:df:97:3a:da:a4:f1:03:a7:e8:
                    30:e9:ee:ae:e9:d1:c9:e9:1e:79:6c:54:42:f4:8e:
                    4f:d9:08:c6:bf:4d:e3:6a:7a:23:aa:c0:e5:9b:53:
                    ad:8b:20:30:1b:e7:1a:57:04:0d:ee:6c:32:d2:05:
                    45:34:43:e7:7b:28:b9:08:17:aa:e8:53:8c:b8:0c:
                    a2:bf:43:67:75:78:83:2b:13:15:9a:e2:44:8c:da:
                    da:56:80:03:1f:70:a5:4c:25:af:82:a6:0d:21:d8:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:11:EE:6D:8A:F9:B2:08:2A:4F:FB:A5:F2:E8:5A:72:E8:E0:AA:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e74c8d4-17bc-3b2c-aa2a-f24e7f4acec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:fb34::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:84:a3:ab:e6:ce:2e:0c:57:38:3b:23:80:fa:00:31:01:6e:
         28:4a:6b:7b:1d:ab:9a:27:b6:cc:c9:f4:36:29:8b:08:3b:90:
         3e:0b:dd:79:45:13:94:fc:77:8c:00:16:e7:78:eb:ea:e6:1c:
         a4:17:24:42:c3:49:86:46:b1:b6:f9:45:e1:6f:9d:79:57:f4:
         e3:2a:7d:0d:d3:54:12:10:e5:d7:de:f7:fb:32:ff:76:37:f7:
         6a:d4:06:35:c8:f8:44:ae:5e:f5:eb:3d:dd:76:77:ca:29:37:
         4a:35:1c:d4:a0:71:f2:ca:5c:49:0b:98:af:12:7f:89:1a:ed:
         b6:87:f0:b1:a2:ea:75:b1:f3:d9:13:cc:75:bd:b3:3c:c5:0e:
         2a:04:1d:61:83:91:35:91:c1:69:79:75:48:ec:87:b5:3f:d6:
         5f:ab:b5:26:bb:46:f5:fa:be:4f:63:38:47:3e:f5:b0:a1:d5:
         55:33:d8:a1:99:71:c8:09:25:e2:ad:2d:e3:93:87:ec:1a:e0:
         4f:ed:3b:d3:c4:9f:05:b9:53:b6:a3:6c:ef:50:73:be:59:48:
         a8:dd:b8:1c:39:f9:90:d2:15:6e:71:67:ef:1f:00:ff:55:83:
         1a:e0:52:5d:48:ff:a5:c5:3d:a2:ad:79:3f:c7:bb:db:7e:7b:
         0a:97:19:7d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCtB/0+Yi7XVx1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MjUwZjAyOTAtMmQxNi00ZGY0LTg0MjUtM2E5ODQzNGI1ZWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf6Hx0uLvhw7+m5N/oqQAp2noa/2OLNl1yGZ
4PLgyv0ODEz8QyhHR9LjjZB+quXCwcvE53T3uCyP5nCVvbOawQ2BSPaYf1u9tad/
Bycs9bByG5FcxUUYc7onajkn6rj3FGMlKsQO3OAmVTLbLHRW/Txy+/+MIqrbpC0b
D9lrrH2X4U4GXrATae1t0KGbvRQ71/DFs33yJBkIVNbflzrapPEDp+gw6e6u6dHJ
6R55bFRC9I5P2QjGv03janojqsDlm1OtiyAwG+caVwQN7mwy0gVFNEPneyi5CBeq
6FOMuAyiv0NndXiDKxMVmuJEjNraVoADH3ClTCWvgqYNIdhIFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGMR7m2K+bIIKk/7pfLoWnLo4KrcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2U3NGM4ZDQtMTdiYy0z
YjJjLWFhMmEtZjI0ZTdmNGFjZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBgAPs0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADiEo6vmzi4MVzg7I4D6ADEBbihKa3sdq5ontszJ9DYpiwg7kD4L
3XlFE5T8d4wAFud46+rmHKQXJELDSYZGsbb5ReFvnXlX9OMqfQ3TVBIQ5dfe9/sy
/3Y392rUBjXI+ESuXvXrPd12d8opN0o1HNSgcfLKXEkLmK8Sf4ka7baH8LGi6nWx
89kTzHW9szzFDioEHWGDkTWRwWl5dUjsh7U/1l+rtSa7RvX6vk9jOEc+9bCh1VUz
2KGZccgJJeKtLeOTh+wa4E/tO9PEnwW5U7ajbO9Qc75ZSKjduBw5+ZDSFW5xZ+8f
AP9VgxrgUl1I/6XFPaKteT/Hu9t+ewqXGX0=
-----END CERTIFICATE-----
Generated at Sat May 10 19:08:09 2025 by rpki-client