Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/05696613-6789-39f4-96db-1c6ea64bac2e.roa
File:                     05696613-6789-39f4-96db-1c6ea64bac2e.roa (raw, json)
Hash identifier:          ktriKPnKB8LWspfAaDqeilY6ylKLaRZTcu2KistRSC4=
Subject key identifier:   98:A1:F6:E4:15:91:98:FA:96:A6:F0:1E:3B:D6:EB:A9:03:66:CD:09
Certificate issuer:       /CN=e5c2b906-947b-452e-a546-6011e1a0e535
Certificate serial:       010D0C9F43285849DF5A620B4654A9D4F2651440
Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/05696613-6789-39f4-96db-1c6ea64bac2e.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     101
IP address blocks:        2001:504:b::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:62:0b:46:54:a9:d4:f2:65:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=7ad6f8d5-4545-4512-97a6-6d3e7840372e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:95:d4:bd:4e:de:94:92:6c:e8:81:a6:9c:1e:
                    2b:b7:5a:55:b1:5f:08:4a:d9:ef:e2:c4:cd:78:9b:
                    9c:6f:ad:6b:b4:69:a6:50:23:26:7f:2d:92:c3:d4:
                    d9:c7:9e:8e:07:b1:a2:b0:1e:b5:e6:9f:cf:e1:ad:
                    3a:57:36:94:29:e0:bf:5e:b1:01:97:9a:e4:c4:c2:
                    52:4d:03:51:29:88:9d:63:db:e9:3a:cf:6e:9d:89:
                    45:48:f6:72:a5:bb:10:b4:d8:fd:0b:cc:36:41:d0:
                    9c:dc:5f:89:94:9f:8a:fc:b4:2e:b2:a6:42:ea:26:
                    20:e4:94:7b:4e:13:f1:bd:59:19:80:80:48:fa:14:
                    c4:95:69:d0:63:9a:ab:79:c7:7e:3d:7a:94:c8:0a:
                    8f:43:fc:aa:53:a8:f6:5a:7e:1d:96:e9:b9:6f:36:
                    2d:39:15:0a:d5:69:e9:ac:c9:7b:10:a6:78:05:f5:
                    cd:ac:fa:be:dc:66:02:58:cf:13:b7:a0:b6:19:01:
                    60:10:23:52:35:78:fe:60:33:43:0a:8b:e4:f7:28:
                    4a:6c:3f:66:5d:66:6e:2a:20:f8:31:77:a1:79:ee:
                    ec:da:25:f2:c1:4d:ba:3e:4c:44:46:5e:4e:a0:31:
                    74:16:cf:9d:e2:aa:0f:a2:09:43:93:cc:a5:fa:b6:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A1:F6:E4:15:91:98:FA:96:A6:F0:1E:3B:D6:EB:A9:03:66:CD:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/05696613-6789-39f4-96db-1c6ea64bac2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl

            X509v3 Authority Key Identifier:
                keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:eb:4b:2d:05:5b:5f:29:03:14:c3:93:54:ff:1d:c3:e2:71:
         2e:28:75:47:37:82:49:38:c9:30:90:94:35:f6:34:d6:1d:bf:
         59:65:54:ff:5f:43:d8:1d:43:05:42:df:db:44:d0:84:1e:e1:
         20:e6:e4:c7:7b:74:0d:90:da:ff:11:55:19:21:0e:14:2f:83:
         69:ed:cf:28:c1:76:e5:ba:3d:01:d7:79:fc:9b:ea:80:95:df:
         7f:67:69:c7:6d:80:38:90:f5:50:1a:0f:82:5c:d5:0a:a4:d1:
         e8:50:cb:3c:57:55:d9:9b:b9:fa:ff:51:83:13:03:4e:1e:89:
         25:b8:e6:36:56:47:9a:36:76:e6:84:00:d1:2f:24:1a:01:98:
         82:c7:e0:1c:f6:df:ab:a8:e2:94:d2:96:09:c8:c0:97:08:7e:
         06:72:34:e4:3d:24:f7:3c:96:20:36:ad:fc:23:af:91:e1:37:
         ca:fd:75:25:3a:c2:55:cb:56:4b:00:d6:f1:c3:b8:74:16:39:
         3a:88:6e:53:e1:1c:68:3c:b4:41:9a:0f:cd:0a:06:7f:6d:f8:
         cb:93:cb:f5:8c:33:47:09:17:50:f3:62:5b:bc:6d:17:b4:21:
         1d:6b:3d:43:79:ad:b9:6c:56:d4:1b:0b:ed:a6:f8:0f:a8:68:
         53:9b:19:e4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnfWmILRlSp1PJlFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTVjMmI5MDYtOTQ3Yi00NTJlLWE1NDYtNjAxMWUxYTBl
NTM1MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
N2FkNmY4ZDUtNDU0NS00NTEyLTk3YTYtNmQzZTc4NDAzNzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpXUvU7elJJs6IGmnB4rt1pVsV8IStnv4sTN
eJucb61rtGmmUCMmfy2Sw9TZx56OB7GisB615p/P4a06VzaUKeC/XrEBl5rkxMJS
TQNRKYidY9vpOs9unYlFSPZypbsQtNj9C8w2QdCc3F+JlJ+K/LQusqZC6iYg5JR7
ThPxvVkZgIBI+hTElWnQY5qrecd+PXqUyAqPQ/yqU6j2Wn4dlum5bzYtORUK1Wnp
rMl7EKZ4BfXNrPq+3GYCWM8Tt6C2GQFgECNSNXj+YDNDCovk9yhKbD9mXWZuKiD4
MXehee7s2iXywU26PkxERl5OoDF0Fs+d4qoPoglDk8yl+rbOrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJih9uQVkZj6lqbwHjvW66kDZs0JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lNWMy
YjkwNi05NDdiLTQ1MmUtYTU0Ni02MDExZTFhMGU1MzUvMDU2OTY2MTMtNjc4OS0z
OWY0LTk2ZGItMWM2ZWE2NGJhYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTVjMmI5MDYtOTQ3Yi00NTJlLWE1
NDYtNjAxMWUxYTBlNTM1L2U1YzJiOTA2LTk0N2ItNDUyZS1hNTQ2LTYwMTFlMWEw
ZTUzNS5jcmwwHwYDVR0jBBgwFoAUB0/j0KrwEb96y8hRayHlvJ5en8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lNWMyYjkwNi05NDdiLTQ1MmUtYTU0Ni02MDEx
ZTFhMGU1MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGnrSy0FW18pAxTDk1T/HcPicS4odUc3gkk4yTCQlDX2NNYdv1ll
VP9fQ9gdQwVC39tE0IQe4SDm5Md7dA2Q2v8RVRkhDhQvg2ntzyjBduW6PQHXefyb
6oCV339nacdtgDiQ9VAaD4Jc1Qqk0ehQyzxXVdmbufr/UYMTA04eiSW45jZWR5o2
duaEANEvJBoBmILH4Bz236uo4pTSlgnIwJcIfgZyNOQ9JPc8liA2rfwjr5HhN8r9
dSU6wlXLVksA1vHDuHQWOTqIblPhHGg8tEGaD80KBn9t+MuTy/WMM0cJF1DzYlu8
bRe0IR1rPUN5rblsVtQbC+2m+A+oaFObGeQ=
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:32:21 2025 by rpki-client