Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc917834-bd69-3678-97ee-4bf30921769b.roa
File:                     dc917834-bd69-3678-97ee-4bf30921769b.roa (raw, json)
Hash identifier:          9i6tH8akQncOLtoF5Im1UJ3QMwphdFwtJgvuRp2Ig4A=
Subject key identifier:   4E:44:82:B1:91:BD:67:2E:BA:07:AC:34:AF:2D:0A:FD:6C:A1:01:FB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A5E57ADE241E4559306A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc917834-bd69-3678-97ee-4bf30921769b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2600:5c00:4558::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:5e:57:ad:e2:41:e4:55:93:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=30a65437-86cf-469f-8cfb-d649e2fdb500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:94:29:f5:87:43:19:fb:c0:67:1d:41:9f:
                    e2:ea:4b:e2:39:0b:f4:f4:77:d8:d0:61:e5:3c:da:
                    c6:4c:19:f9:f9:84:d9:ea:0f:a7:46:6a:a4:69:88:
                    73:ae:bd:c3:08:3b:0f:e3:f1:1e:d3:0b:06:89:d5:
                    5d:13:50:a4:be:ca:e6:c2:b1:6d:0c:7d:46:36:9a:
                    08:09:c3:f4:fe:5c:69:39:e7:08:f2:c0:a6:ad:f6:
                    2d:a3:3e:96:74:ae:98:6f:2b:e2:00:8b:9c:ec:78:
                    01:01:83:c0:ed:e5:c3:56:b8:14:f8:f8:6f:bd:46:
                    ee:97:1c:5f:68:84:da:e7:76:cf:5b:58:4f:da:ed:
                    3e:d6:41:cd:7f:b7:14:1c:57:61:f1:c5:7c:eb:9f:
                    32:5a:d1:7b:68:32:b3:ef:08:b6:8b:f8:b0:c5:26:
                    44:d9:8c:a4:f4:a5:3a:e3:69:30:79:60:42:79:ae:
                    fb:ff:8f:7d:57:e2:1c:37:77:0b:df:cf:81:2e:5b:
                    4c:29:d2:3f:e3:93:01:a0:c0:15:c8:a3:81:ab:36:
                    d7:24:7f:30:ad:fa:bc:60:5f:87:df:d9:20:d2:47:
                    3a:b3:49:c8:b0:02:0b:e0:75:bb:2d:f1:ec:7b:aa:
                    e2:02:8b:be:65:92:4c:a3:98:88:32:b1:0f:6c:7c:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:44:82:B1:91:BD:67:2E:BA:07:AC:34:AF:2D:0A:FD:6C:A1:01:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc917834-bd69-3678-97ee-4bf30921769b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c00:4558::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e2:64:dd:c1:a7:aa:63:b6:aa:a3:75:67:91:14:4c:1e:2d:
         b9:de:e7:2b:20:19:1e:ef:34:3e:1c:e8:98:d9:0b:45:a9:75:
         91:d4:3a:aa:05:99:ac:dd:40:6c:37:1d:c2:20:9d:6e:a8:9b:
         90:f0:27:4a:95:e2:9b:82:f0:4a:dc:cd:a4:8c:62:39:98:df:
         3c:df:1e:bc:55:0f:0e:0f:99:a8:9b:51:e5:bc:72:25:2e:77:
         b2:18:fe:02:1f:e8:75:9e:b7:7f:a3:10:8e:09:02:06:1f:14:
         84:73:7b:f3:af:78:44:c7:7b:d1:04:9b:4b:e0:54:1d:7c:69:
         c1:46:31:00:9d:af:87:e6:7e:b1:b1:8f:f9:a3:8a:46:99:30:
         64:6e:f3:f0:ba:69:37:20:f8:96:ab:49:b6:8e:d6:79:85:f1:
         3d:2b:02:7a:2f:58:df:f2:36:91:ed:56:a2:b8:e2:80:18:ee:
         b4:06:8c:45:2c:8a:80:8d:63:3d:17:cd:4e:65:f2:9a:cb:56:
         f2:ed:3d:56:8e:2c:38:61:ef:9f:0f:fa:02:08:fa:31:e7:22:
         9b:ab:61:b3:b3:e5:da:db:be:29:9b:e5:17:77:0e:a3:17:ce:
         0a:be:0a:67:6a:e9:14:10:94:e7:52:79:5f:74:f7:33:10:8a:
         8e:62:1d:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCl5XreJB5FWTBqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MzBhNjU0MzctODZjZi00NjlmLThjZmItZDY0OWUyZmRiNTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxCUKfWHQxn7wGcdQZ/i6kviOQv09HfY0GHl
PNrGTBn5+YTZ6g+nRmqkaYhzrr3DCDsP4/Ee0wsGidVdE1CkvsrmwrFtDH1GNpoI
CcP0/lxpOecI8sCmrfYtoz6WdK6YbyviAIuc7HgBAYPA7eXDVrgU+PhvvUbulxxf
aITa53bPW1hP2u0+1kHNf7cUHFdh8cV8658yWtF7aDKz7wi2i/iwxSZE2Yyk9KU6
42kweWBCea77/499V+IcN3cL38+BLltMKdI/45MBoMAVyKOBqzbXJH8wrfq8YF+H
39kg0kc6s0nIsAIL4HW7LfHse6riAou+ZZJMo5iIMrEPbHwN8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE5EgrGRvWcuugesNK8tCv1soQH7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZGM5MTc4MzQtYmQ2OS0z
Njc4LTk3ZWUtNGJmMzA5MjE3NjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBcAEVY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGriZN3Bp6pjtqqjdWeRFEweLbne5ysgGR7vND4c6JjZC0WpdZHU
OqoFmazdQGw3HcIgnW6om5DwJ0qV4puC8ErczaSMYjmY3zzfHrxVDw4PmaibUeW8
ciUud7IY/gIf6HWet3+jEI4JAgYfFIRze/OveETHe9EEm0vgVB18acFGMQCdr4fm
frGxj/mjikaZMGRu8/C6aTcg+JarSbaO1nmF8T0rAnovWN/yNpHtVqK44oAY7rQG
jEUsioCNYz0XzU5l8prLVvLtPVaOLDhh758P+gII+jHnIpurYbOz5drbvimb5Rd3
DqMXzgq+Cmdq6RQQlOdSeV909zMQio5iHRc=
-----END CERTIFICATE-----
Generated at Tue May 13 00:24:43 2025 by rpki-client