Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2606ecf8-0895-3684-9fd2-ac8cf0b5c69a.roa
File:                     2606ecf8-0895-3684-9fd2-ac8cf0b5c69a.roa (raw, json)
Hash identifier:          bpQcz4U1QRT9xMGkR99XKLxkrEYRwNtIOEDYJ00MQ3s=
Subject key identifier:   44:A6:CE:07:34:33:B1:70:B0:AB:66:D9:CD:B3:8A:63:93:96:30:9E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA3863643371A13902B80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2606ecf8-0895-3684-9fd2-ac8cf0b5c69a.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:80a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a3:86:36:43:37:1a:13:90:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=d174b58b-cf4f-41a2-b0d9-777a1f56e8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:4a:3e:5f:2b:3c:40:7e:f2:c3:4a:12:f0:
                    33:09:c0:38:5c:d0:d3:cf:d4:1b:53:db:72:c2:c6:
                    92:62:69:3a:f2:81:db:40:a0:38:76:a8:07:42:3d:
                    bd:e4:be:98:c9:8e:e3:71:0f:4c:95:20:f3:92:f3:
                    79:d5:55:79:43:e2:96:92:79:4a:9b:c3:8e:ca:f6:
                    12:84:ca:68:d9:94:8b:98:f8:5a:32:8c:3a:e6:d2:
                    84:88:46:43:c9:7a:73:48:d9:d6:fb:0a:be:b2:74:
                    8b:b8:f0:9a:c2:4e:d5:88:7c:58:ed:16:3b:02:2e:
                    fc:c5:ee:5a:4c:f1:87:ed:bf:10:90:0e:34:39:f7:
                    c2:cb:6e:b7:a0:84:ab:d6:02:37:83:97:12:00:88:
                    a1:00:b2:e4:a4:fb:13:12:ee:ce:14:3b:95:4c:9d:
                    84:87:ea:de:14:7e:43:9d:87:83:ce:de:71:a7:7a:
                    32:23:42:98:55:f8:90:3a:a0:ac:25:73:2d:e7:d8:
                    0e:fc:ee:3a:a2:a2:8b:e4:82:36:9b:9c:56:07:20:
                    07:01:f2:97:a1:2a:ea:6f:8e:53:82:4c:1f:a8:00:
                    17:ff:94:43:43:c7:e7:43:83:4d:e1:51:6f:d7:2b:
                    94:9e:df:b1:51:e3:a2:46:d0:61:3f:c7:7d:e8:d6:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:CE:07:34:33:B1:70:B0:AB:66:D9:CD:B3:8A:63:93:96:30:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2606ecf8-0895-3684-9fd2-ac8cf0b5c69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:61:77:ec:ca:69:7d:1f:63:1e:41:b0:b8:50:c5:79:e7:
         95:37:ba:84:12:93:f3:e6:4f:e9:2f:b8:81:74:71:0f:8c:d3:
         c7:d0:79:4b:bc:5f:50:ec:b2:81:cb:81:49:1c:e6:4f:fb:1d:
         bc:4f:ab:2f:04:ba:d8:df:33:51:a8:0d:80:8d:17:9d:b8:6f:
         e0:e0:46:3a:b9:8c:ef:b6:aa:aa:de:7b:ae:f3:be:90:e7:89:
         ca:4c:08:cb:27:37:49:9d:8a:f2:80:5d:55:49:4c:4d:ca:3e:
         a5:0e:57:02:36:92:2d:64:c9:cc:2f:8e:a9:58:61:05:d2:5c:
         d2:a2:3e:19:ff:d0:2a:1c:77:aa:63:8e:f8:50:ee:f8:99:d0:
         85:1d:81:d2:33:d2:d2:3a:e3:87:38:d4:3d:f0:4c:7e:69:73:
         3e:d8:b9:b7:61:00:f3:d7:bf:2c:ff:1c:06:e9:a0:70:9c:77:
         46:1f:fb:77:02:88:b2:a1:8e:20:a6:f0:6e:1d:13:37:74:3e:
         46:cc:2e:9e:93:a5:91:b4:f8:19:62:52:4f:46:2e:79:52:eb:
         59:b6:80:0f:e0:bb:a3:80:f4:d0:fd:50:0c:b5:84:24:a2:7e:
         f7:56:ce:39:63:3c:6e:17:67:e5:14:8f:73:2f:35:44:39:88:
         cf:d9:25:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P6OGNkM3GhOQK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZDE3NGI1OGItY2Y0Zi00MWEyLWIwZDktNzc3YTFmNTZlOGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWhKPl8rPEB+8sNKEvAzCcA4XNDTz9QbU9ty
wsaSYmk68oHbQKA4dqgHQj295L6YyY7jcQ9MlSDzkvN51VV5Q+KWknlKm8OOyvYS
hMpo2ZSLmPhaMow65tKEiEZDyXpzSNnW+wq+snSLuPCawk7ViHxY7RY7Ai78xe5a
TPGH7b8QkA40OffCy263oISr1gI3g5cSAIihALLkpPsTEu7OFDuVTJ2Eh+reFH5D
nYeDzt5xp3oyI0KYVfiQOqCsJXMt59gO/O46oqKL5II2m5xWByAHAfKXoSrqb45T
gkwfqAAX/5RDQ8fnQ4NN4VFv1yuUnt+xUeOiRtBhP8d96NbwAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFESmzgc0M7FwsKtm2c2zimOTljCeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjYwNmVjZjgtMDg5NS0z
Njg0LTlmZDItYWM4Y2YwYjVjNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYCi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGTyYXfsyml9H2MeQbC4UMV555U3uoQSk/PmT+kvuIF0cQ+M08fQ
eUu8X1DssoHLgUkc5k/7HbxPqy8EutjfM1GoDYCNF524b+DgRjq5jO+2qqree67z
vpDnicpMCMsnN0mdivKAXVVJTE3KPqUOVwI2ki1kycwvjqlYYQXSXNKiPhn/0Coc
d6pjjvhQ7viZ0IUdgdIz0tI644c41D3wTH5pcz7YubdhAPPXvyz/HAbpoHCcd0Yf
+3cCiLKhjiCm8G4dEzd0PkbMLp6TpZG0+BliUk9GLnlS61m2gA/gu6OA9ND9UAy1
hCSifvdWzjljPG4XZ+UUj3MvNUQ5iM/ZJYc=
-----END CERTIFICATE-----
Generated at Sat May 10 04:04:44 2025 by rpki-client