Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa
File:                     f075ba46-636e-3a48-a603-d735fcd312c4.roa (raw, json)
Hash identifier:          6FnQGFHOlkiLQZF2xG/CoDAMJHaNBBrq+2FoDNMAANk=
Subject key identifier:   AE:14:B6:FD:F8:33:E9:64:29:02:B3:4C:00:B8:DC:DD:7F:9A:BC:5C
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F43285849A784C3D201A2FDAB2AA1C580
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     398143
IP address blocks:        2604:cbc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c3:d2:01:a2:fd:ab:2a:a1:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=25a74630-f264-43ba-ae0f-323b2f2dc469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:91:ca:4b:ca:d2:36:3e:a0:07:7b:44:ad:
                    b8:9e:f2:c3:fe:3f:02:ab:de:4d:78:35:4f:a4:d6:
                    19:e9:72:7c:8a:58:c7:cb:cd:46:7b:af:74:7c:03:
                    40:41:fd:91:db:a0:32:27:ea:25:cb:54:3e:ec:01:
                    c3:5d:41:05:08:98:a1:f5:3a:62:ef:70:13:14:d4:
                    0d:d6:3c:f4:3e:b8:8c:3f:8b:a1:e4:f6:85:24:40:
                    b3:df:88:43:5d:76:26:ce:8b:ad:af:6f:9a:56:c6:
                    50:9d:c7:89:b5:87:52:61:f8:ae:f7:46:d4:df:01:
                    0d:2d:a5:4d:ae:8a:09:33:8c:ac:54:6e:c7:6f:80:
                    d4:34:5e:76:fa:cf:7c:86:1a:64:4d:7e:f0:7f:af:
                    07:41:49:f6:6e:53:3b:b1:bc:26:5d:a9:e5:83:75:
                    19:73:3c:66:62:18:41:b9:d0:90:c9:79:dc:55:ac:
                    74:4b:ec:d4:97:fc:af:f8:80:00:67:7c:3c:6c:02:
                    38:2b:87:07:58:07:5c:04:4c:1c:87:e7:2e:7f:52:
                    69:7a:1b:1c:4d:16:7d:af:76:eb:ed:fb:ad:f2:67:
                    70:65:3e:af:11:37:5c:75:f0:05:23:a9:d8:45:3b:
                    ae:d7:bd:20:d6:2e:6f:6f:94:bd:76:cf:5f:ac:a5:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:B6:FD:F8:33:E9:64:29:02:B3:4C:00:B8:DC:DD:7F:9A:BC:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:37:36:da:cb:1b:22:45:c5:9a:97:3f:8c:7b:b2:5c:28:97:
         8e:2c:7d:81:ad:93:13:b5:72:96:5d:df:b4:e5:cb:1a:ca:8b:
         af:3d:25:1e:3a:d8:3d:09:58:7f:86:f2:0a:29:c1:c4:dc:ba:
         8a:45:a5:75:fa:3a:d9:be:01:f0:ea:c3:40:89:1a:57:0b:7f:
         b2:58:c4:98:72:69:6f:d7:d6:10:ae:07:6a:da:88:d0:ec:11:
         ed:81:34:c8:47:cb:5d:cd:56:7f:94:18:f1:da:46:95:da:2e:
         90:39:1e:fd:ae:95:47:64:0c:b2:b7:f1:16:d3:34:82:2f:7b:
         36:d5:da:2b:81:cb:e3:d6:70:38:73:22:63:ed:76:36:31:80:
         16:58:61:65:e1:2b:c2:0e:4c:9c:eb:c6:7b:47:70:98:c8:79:
         bd:f5:0a:d6:0e:ad:74:0b:5d:2c:40:49:c8:f6:31:1f:7d:2a:
         62:00:d1:58:04:a3:86:f7:66:4c:d6:b1:39:6e:8f:9f:ec:20:
         c6:fd:a0:43:b2:17:04:60:bb:7b:c3:ec:8b:d7:65:ad:9a:c1:
         dc:e5:f8:bd:f4:5c:7d:da:3d:9f:b9:8e:c1:a9:f2:b6:4e:7f:
         d7:96:2f:87:bd:b9:05:e9:06:24:7b:38:28:0c:45:41:39:20:
         dd:da:67:e5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmnhMPSAaL9qyqhxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh
YWQ5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
MjVhNzQ2MzAtZjI2NC00M2JhLWFlMGYtMzIzYjJmMmRjNDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9eRykvK0jY+oAd7RK24nvLD/j8Cq95NeDVP
pNYZ6XJ8iljHy81Ge690fANAQf2R26AyJ+oly1Q+7AHDXUEFCJih9Tpi73ATFNQN
1jz0PriMP4uh5PaFJECz34hDXXYmzoutr2+aVsZQnceJtYdSYfiu90bU3wENLaVN
rooJM4ysVG7Hb4DUNF52+s98hhpkTX7wf68HQUn2blM7sbwmXanlg3UZczxmYhhB
udCQyXncVax0S+zUl/yv+IAAZ3w8bAI4K4cHWAdcBEwch+cuf1JpehscTRZ9r3br
7fut8mdwZT6vETdcdfAFI6nYRTuu170g1i5vb5S9ds9frKXnrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK4Utv34M+lkKQKzTAC43N1/mrxcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy
MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvZjA3NWJhNDYtNjM2ZS0z
YTQ4LWE2MDMtZDczNWZjZDMxMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy
NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl
YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0
OGE0ZWFhZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTLwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCYNzbayxsiRcWalz+Me7JcKJeOLH2BrZMTtXKWXd+05csayouvPSUe
Otg9CVh/hvIKKcHE3LqKRaV1+jrZvgHw6sNAiRpXC3+yWMSYcmlv19YQrgdq2ojQ
7BHtgTTIR8tdzVZ/lBjx2kaV2i6QOR79rpVHZAyyt/EW0zSCL3s21dorgcvj1nA4
cyJj7XY2MYAWWGFl4SvCDkyc68Z7R3CYyHm99QrWDq10C10sQEnI9jEffSpiANFY
BKOG92ZM1rE5bo+f7CDG/aBDshcEYLt7w+yL12WtmsHc5fi99Fx92j2fuY7BqfK2
Tn/Xli+HvbkF6QYkezgoDEVBOSDd2mfl
-----END CERTIFICATE-----
Generated at Sun May 11 21:18:29 2025 by rpki-client