Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa
File:                     331c6c6e-98dd-3608-aec1-5daf85578cc8.roa (raw, json)
Hash identifier:          12c9R66NUDe2kMPArbtTZ4thDBbeP4riFxRz4250e2w=
Subject key identifier:   39:58:7C:EE:87:BB:29:50:22:A2:B7:FD:CC:29:D7:C3:B9:4F:01:4F
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F43285849A784C4B26ECD7664277E3F80
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        2607:6bc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c4:b2:6e:cd:76:64:27:7e:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=76ecc81c-ff33-4aee-92c1-1fdb578bc8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:04:a0:b1:66:11:41:67:bc:eb:b3:c2:79:
                    34:79:72:f9:ed:f9:48:f3:fe:6e:65:1b:0f:1b:41:
                    f1:43:29:79:0c:55:68:96:4c:f1:8c:ff:3f:b4:c2:
                    06:d1:ee:f4:8d:4d:fe:39:ba:a5:95:1d:95:8b:6c:
                    a8:f5:a4:cc:64:b4:ce:7c:9c:8c:0a:01:fd:73:6b:
                    6c:62:7c:05:33:47:9f:22:55:49:6b:d5:d3:d2:d1:
                    09:a9:9b:d3:d0:8f:a7:bd:f9:16:64:8c:14:43:c0:
                    8b:fe:69:f7:c6:a9:6a:a7:5b:e9:f8:40:2b:07:4a:
                    1f:37:20:85:5d:b5:42:0e:41:3e:9b:68:88:73:57:
                    12:b8:10:a6:33:33:cc:26:b2:9a:6e:c8:39:a4:74:
                    8c:6c:f0:d2:f5:5b:5d:40:e5:25:9e:20:ae:9b:2d:
                    85:9f:8a:84:29:59:c1:da:ed:fc:d5:26:16:97:85:
                    5e:30:f5:f4:ff:93:41:bd:8f:c6:02:42:7e:da:24:
                    a6:d4:f2:9d:ef:1f:63:a4:a5:ad:3a:3e:54:f8:2f:
                    ec:0a:67:96:3e:c7:94:a0:09:79:c2:a8:91:c7:e7:
                    a5:b9:38:6a:8b:06:eb:ca:ea:71:b4:60:5e:6c:dc:
                    cf:93:6b:4e:6a:4f:61:13:a1:f7:0f:b6:de:fa:dc:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:58:7C:EE:87:BB:29:50:22:A2:B7:FD:CC:29:D7:C3:B9:4F:01:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:79:5a:2c:1b:c9:51:89:90:8e:18:ba:68:9a:85:fe:4d:22:
         2a:f7:08:12:54:3a:7a:45:70:4e:e6:70:27:7c:6d:df:eb:2d:
         70:6f:ee:cf:86:8e:b3:e6:ea:48:98:a7:d1:30:66:c4:ec:6e:
         40:8c:eb:40:d8:d2:30:f8:51:a0:a6:94:67:6c:1d:32:a0:4b:
         f4:6f:dc:b5:c1:45:af:98:96:a2:e6:9e:93:47:6d:cd:f1:2a:
         4f:20:1c:21:aa:fe:c4:38:78:13:4a:f7:74:54:21:7f:ae:89:
         0e:d0:c8:60:d6:16:f7:2f:1b:fb:69:67:7c:6e:1c:91:27:a4:
         0c:f5:3f:ae:06:ab:30:f4:14:d1:5b:0e:d7:ff:85:83:10:e4:
         93:81:46:57:32:9a:42:ed:68:cf:84:4d:b3:f6:86:dc:e1:12:
         20:1c:2a:23:1b:15:1e:55:1e:9a:0e:19:43:20:0e:c0:6b:12:
         e1:e5:72:b4:f3:d5:16:49:64:b7:9f:c2:2e:78:0f:53:d3:b0:
         b6:35:95:c1:7a:0f:61:f9:6c:c6:10:1e:28:d1:0a:a0:1d:49:
         3f:11:ab:73:8e:98:a6:43:99:da:6b:3b:f2:a8:70:31:bd:7d:
         27:85:7d:ed:07:a4:7d:60:17:6e:6f:34:e7:63:9c:5a:b5:32:
         1b:06:e8:ec
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmnhMSybs12ZCd+P4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5
OTc4MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
NzZlY2M4MWMtZmYzMy00YWVlLTkyYzEtMWZkYjU3OGJjOGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6wEoLFmEUFnvOuzwnk0eXL57flI8/5uZRsP
G0HxQyl5DFVolkzxjP8/tMIG0e70jU3+ObqllR2Vi2yo9aTMZLTOfJyMCgH9c2ts
YnwFM0efIlVJa9XT0tEJqZvT0I+nvfkWZIwUQ8CL/mn3xqlqp1vp+EArB0ofNyCF
XbVCDkE+m2iIc1cSuBCmMzPMJrKabsg5pHSMbPDS9VtdQOUlniCumy2Fn4qEKVnB
2u381SYWl4VeMPX0/5NBvY/GAkJ+2iSm1PKd7x9jpKWtOj5U+C/sCmeWPseUoAl5
wqiRx+eluThqiwbryupxtGBebNzPk2tOak9hE6H3D7be+twUvQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDlYfO6HuylQIqK3/cwp18O5TwFPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh
MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvMzMxYzZjNmUtOThkZC0z
NjA4LWFlYzEtNWRhZjg1NTc4Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll
OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3
OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0
NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBxeVosG8lRiZCOGLpomoX+TSIq9wgSVDp6RXBO5nAnfG3f6y1wb+7P
ho6z5upImKfRMGbE7G5AjOtA2NIw+FGgppRnbB0yoEv0b9y1wUWvmJai5p6TR23N
8SpPIBwhqv7EOHgTSvd0VCF/rokO0Mhg1hb3Lxv7aWd8bhyRJ6QM9T+uBqsw9BTR
Ww7X/4WDEOSTgUZXMppC7WjPhE2z9obc4RIgHCojGxUeVR6aDhlDIA7AaxLh5XK0
89UWSWS3n8IueA9T07C2NZXBeg9h+WzGEB4o0QqgHUk/EatzjpimQ5naazvyqHAx
vX0nhX3tB6R9YBdubzTnY5xatTIbBujs
-----END CERTIFICATE-----
Generated at Mon May 5 10:17:10 2025 by rpki-client