Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/52502368-68ec-3cd7-9fdc-a73408d6759f.roa
File:                     52502368-68ec-3cd7-9fdc-a73408d6759f.roa (raw, json)
Hash identifier:          1/G6EjRfazh7YmpVFll7axcGWXj9IgqE456Hdif6fZw=
Subject key identifier:   91:44:29:55:64:09:55:FB:E1:17:E7:95:91:07:30:17:42:2F:D5:75
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4199C28E2A8CA753FD00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/52502368-68ec-3cd7-9fdc-a73408d6759f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        2600:5c00:386c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:41:99:c2:8e:2a:8c:a7:53:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=84b37d79-ae2b-4a95-8eaa-df200e2d3494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:67:3d:54:a3:0b:94:d0:43:dd:eb:02:a8:29:
                    5b:df:48:b4:e7:6e:43:45:36:dd:50:41:0c:fb:7b:
                    0c:e2:21:a8:be:ca:74:ce:8c:a3:96:dd:60:7a:90:
                    d7:3a:7b:54:30:8d:73:40:e7:39:97:bb:97:4d:eb:
                    d5:43:90:66:dd:a8:9b:ca:fd:90:20:33:24:78:19:
                    eb:34:47:f1:9c:72:43:17:fd:d1:28:3d:25:69:26:
                    31:ea:e5:d5:e9:ff:d6:da:24:79:26:a1:27:1c:fa:
                    3f:56:d5:e8:27:f1:7f:ac:c5:df:25:a5:f7:06:ec:
                    d4:99:81:89:cf:a8:27:69:bf:17:31:bf:dc:30:69:
                    32:9b:b3:f3:98:f8:bc:61:97:dc:9d:08:d4:1a:22:
                    9e:24:14:e0:bf:93:68:ef:e4:2b:e3:fb:7e:7e:54:
                    29:5d:a3:03:cb:25:41:5b:d0:fe:9f:30:e8:76:02:
                    6b:ea:eb:39:ce:6a:81:61:8f:19:a4:7d:eb:f5:b9:
                    7f:ba:2c:22:22:40:8d:95:8b:83:b6:22:5c:5e:c4:
                    c3:61:bf:05:db:3f:0e:a5:8d:24:b1:fe:8b:67:b2:
                    dd:a6:8f:72:e1:e3:45:ff:f5:3a:a6:cd:6e:bf:f6:
                    36:51:d7:0e:65:fc:8f:e6:19:a4:7e:bc:19:11:05:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:44:29:55:64:09:55:FB:E1:17:E7:95:91:07:30:17:42:2F:D5:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/52502368-68ec-3cd7-9fdc-a73408d6759f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c00:386c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:98:ec:eb:e0:fd:90:ae:72:f8:1b:e1:8b:a9:f0:43:19:
         ff:6b:66:19:f4:2a:66:0c:4b:f0:50:95:cc:1c:a9:eb:03:82:
         e3:3c:f3:39:95:18:f5:75:b1:67:49:a9:05:cf:d6:1f:f6:bb:
         72:d3:40:5a:c4:35:ed:de:d7:1c:bc:58:2c:0f:e5:bb:da:7f:
         1f:57:c2:35:7d:da:f9:f0:6d:2a:f6:f3:f3:a3:a4:a7:63:47:
         38:6a:06:b6:e6:d4:dd:c8:6a:4a:56:16:07:62:8e:fd:b2:77:
         e1:e9:2e:3d:62:cd:e1:8b:5b:69:57:0b:0b:af:34:f3:f7:04:
         44:f4:52:2b:0e:b2:a0:94:90:42:b1:3d:90:84:1c:9e:54:5b:
         f4:b7:2d:c8:92:16:89:ed:24:e6:1f:2b:7d:50:d8:db:45:f7:
         8c:6a:5f:3c:9d:34:c2:94:11:76:95:68:f3:0f:f5:36:3f:c5:
         b4:05:42:93:a8:16:89:9b:bf:29:ff:48:21:0d:6d:58:7b:0a:
         db:31:bd:1a:d2:40:1f:b4:65:64:1b:b4:43:b7:2e:67:22:a5:
         20:97:81:8f:a8:b8:1a:e6:4e:12:fe:5e:04:16:7f:e5:3b:85:
         3b:f3:eb:c0:ca:42:e2:21:0b:68:d5:8d:31:1c:a8:57:9c:ac:
         c4:3c:98:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCkGZwo4qjKdT/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ODRiMzdkNzktYWUyYi00YTk1LThlYWEtZGYyMDBlMmQzNDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmc9VKMLlNBD3esCqClb30i0525DRTbdUEEM
+3sM4iGovsp0zoyjlt1gepDXOntUMI1zQOc5l7uXTevVQ5Bm3aibyv2QIDMkeBnr
NEfxnHJDF/3RKD0laSYx6uXV6f/W2iR5JqEnHPo/VtXoJ/F/rMXfJaX3BuzUmYGJ
z6gnab8XMb/cMGkym7PzmPi8YZfcnQjUGiKeJBTgv5No7+Qr4/t+flQpXaMDyyVB
W9D+nzDodgJr6us5zmqBYY8ZpH3r9bl/uiwiIkCNlYuDtiJcXsTDYb8F2z8OpY0k
sf6LZ7Ldpo9y4eNF//U6ps1uv/Y2UdcOZfyP5hmkfrwZEQUcYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJFEKVVkCVX74RfnlZEHMBdCL9V1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTI1MDIzNjgtNjhlYy0z
Y2Q3LTlmZGMtYTczNDA4ZDY3NTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBcADhs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD/5mOzr4P2QrnL4G+GLqfBDGf9rZhn0KmYMS/BQlcwcqesDguM8
8zmVGPV1sWdJqQXP1h/2u3LTQFrENe3e1xy8WCwP5bvafx9XwjV92vnwbSr28/Oj
pKdjRzhqBrbm1N3IakpWFgdijv2yd+HpLj1izeGLW2lXCwuvNPP3BET0UisOsqCU
kEKxPZCEHJ5UW/S3LciSFontJOYfK31Q2NtF94xqXzydNMKUEXaVaPMP9TY/xbQF
QpOoFombvyn/SCENbVh7CtsxvRrSQB+0ZWQbtEO3LmcipSCXgY+ouBrmThL+XgQW
f+U7hTvz68DKQuIhC2jVjTEcqFecrMQ8mMo=
-----END CERTIFICATE-----
Generated at Sun May 11 18:50:52 2025 by rpki-client