Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
File:                     f3eb19d5-af1e-3d62-921a-950796610e1c.roa (raw, json)
Hash identifier:          X2DkBAlgibvdTkxgkyL8GH+oGkrb6eUrx6gezpew2Qo=
Subject key identifier:   A5:4C:4E:10:54:01:C8:B5:5A:A3:F0:52:F3:97:FC:B4:8D:84:CC:DD
Certificate issuer:       /CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
Certificate serial:       010D0C9F4328584988CF30C7793D4F82A482F0C0
Authority key identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     393581
IP address blocks:        2620:1fe::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:30:c7:79:3d:4f:82:a4:82:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=5fc8f49d-1bc3-4a53-a9a3-2ee222136c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:38:ee:9b:ef:6a:25:91:5d:2b:d2:92:d8:f1:
                    0f:88:f8:44:0a:db:16:ea:40:1d:dd:b1:03:58:60:
                    55:b3:da:10:2d:96:e8:30:1a:97:0a:80:20:b1:55:
                    e6:fc:2c:1c:15:50:76:d2:70:38:ce:38:9f:12:9a:
                    08:68:e8:45:ee:40:ca:d2:70:94:16:9e:e6:5f:61:
                    14:c3:74:51:0c:9a:9c:76:21:da:d8:79:59:77:a0:
                    96:f1:fe:3b:a4:d4:fa:ab:57:a8:6f:00:8e:af:50:
                    34:28:bb:d5:21:df:62:52:a7:0a:66:90:81:65:4b:
                    10:47:06:37:32:04:3e:f4:c4:49:d8:6f:7a:ec:50:
                    e7:26:ad:42:52:00:e2:7c:e1:8f:57:cf:3e:d3:2a:
                    45:1f:9e:1b:55:bb:4e:39:36:ec:ad:d1:e5:6f:64:
                    7e:13:1d:2b:d9:09:37:96:a7:42:cb:b0:6e:a6:77:
                    6d:d6:9a:5a:f4:d3:3d:d0:69:01:4e:af:46:a9:3e:
                    cf:de:26:45:5c:c0:ca:66:5b:11:6a:36:91:3e:2f:
                    6f:da:6a:fd:e0:7c:5a:0e:1e:91:d9:e8:ac:16:b1:
                    9e:ec:28:9f:7b:d5:10:76:0f:da:59:c1:05:54:a6:
                    43:50:e2:f2:7b:2f:90:bd:41:d3:e5:33:c3:ae:d3:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4C:4E:10:54:01:C8:B5:5A:A3:F0:52:F3:97:FC:B4:8D:84:CC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl

            X509v3 Authority Key Identifier:
                keyid:CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1fe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a3:ec:57:a0:87:b4:0d:5e:85:6a:b1:28:a3:bc:3b:92:e2:
         20:a9:06:ce:84:f7:cd:b5:ad:67:7b:0d:49:4e:79:ed:0c:53:
         89:e1:d1:f5:f6:d9:12:fd:c2:8d:1d:8e:10:47:e9:5a:a4:ec:
         ad:e2:18:5e:52:04:48:08:eb:2e:98:cf:07:6a:84:71:34:f6:
         22:05:f0:6a:df:df:6f:3a:e8:ee:27:a9:b4:f9:fc:39:1f:7e:
         cc:a3:4e:38:8f:95:f3:ee:6e:63:a5:1b:9c:09:f3:e0:5a:e1:
         4d:76:f9:f3:32:41:7b:e2:00:57:92:3c:b3:df:fb:49:7d:e7:
         d0:a8:f2:5d:39:be:84:c0:6c:db:ed:90:e9:ac:ef:2b:d8:ad:
         0c:88:fc:d8:c6:b3:14:1d:5d:85:6d:76:fb:33:47:85:be:7d:
         93:6e:a2:2e:bd:80:16:44:18:1e:aa:b7:81:c2:e3:71:4b:34:
         21:8d:9a:33:06:84:3e:78:fb:d7:c6:a8:a5:94:00:4c:3d:9c:
         30:72:a8:c4:ab:a9:91:73:d1:b9:f4:00:4d:ed:1c:78:82:5a:
         e1:32:d9:d2:68:27:e8:5a:22:4b:03:dc:70:b1:43:a4:dd:47:
         16:cd:e6:a4:b6:34:62:8c:22:ed:67:68:dd:12:00:87:90:36:
         fc:b7:ed:41
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmIzzDHeT1PgqSC8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI2NmZjNWUtOGEwNS00ODg1LThlMTgtMjMzMGE4M2Zj
NWY2MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
NWZjOGY0OWQtMWJjMy00YTUzLWE5YTMtMmVlMjIyMTM2YzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Djum+9qJZFdK9KS2PEPiPhECtsW6kAd3bED
WGBVs9oQLZboMBqXCoAgsVXm/CwcFVB20nA4zjifEpoIaOhF7kDK0nCUFp7mX2EU
w3RRDJqcdiHa2HlZd6CW8f47pNT6q1eobwCOr1A0KLvVId9iUqcKZpCBZUsQRwY3
MgQ+9MRJ2G967FDnJq1CUgDifOGPV88+0ypFH54bVbtOOTbsrdHlb2R+Ex0r2Qk3
lqdCy7Bupndt1ppa9NM90GkBTq9GqT7P3iZFXMDKZlsRajaRPi9v2mr94HxaDh6R
2eisFrGe7Cife9UQdg/aWcEFVKZDUOLyey+QvUHT5TPDrtOYlwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKVMThBUAci1WqPwUvOX/LSNhMzdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjY2
ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMwYTgzZmM1ZjYvZjNlYjE5ZDUtYWYxZS0z
ZDYyLTkyMWEtOTUwNzk2NjEwZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI2NmZjNWUtOGEwNS00ODg1LThl
MTgtMjMzMGE4M2ZjNWY2L2MyNjZmYzVlLThhMDUtNDg4NS04ZTE4LTIzMzBhODNm
YzVmNi5jcmwwHwYDVR0jBBgwFoAUzRYZ3WaZijnk/E6xJCuix2NyByowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jMjY2ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMw
YTgzZmM1ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiAB/gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWaPsV6CHtA1ehWqxKKO8O5LiIKkGzoT3zbWtZ3sNSU557QxTieHR
9fbZEv3CjR2OEEfpWqTsreIYXlIESAjrLpjPB2qEcTT2IgXwat/fbzro7ieptPn8
OR9+zKNOOI+V8+5uY6UbnAnz4FrhTXb58zJBe+IAV5I8s9/7SX3n0KjyXTm+hMBs
2+2Q6azvK9itDIj82MazFB1dhW12+zNHhb59k26iLr2AFkQYHqq3gcLjcUs0IY2a
MwaEPnj718aopZQATD2cMHKoxKupkXPRufQATe0ceIJa4TLZ0mgn6FoiSwPccLFD
pN1HFs3mpLY0Yowi7Wdo3RIAh5A2/LftQQ==
-----END CERTIFICATE-----
Generated at Wed May 7 10:33:08 2025 by rpki-client