Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa
File:                     ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa (raw, json)
Hash identifier:          gnlzGVAkaNfx/aiLZf3pUbENWS/uxo7DABDG+qtMCW8=
Subject key identifier:   16:91:4E:3B:43:FC:6D:BF:AB:45:09:BF:D8:AE:0E:D5:25:31:37:41
Certificate issuer:       /CN=d3d6dade-3164-4681-8f0a-34023fdf6934
Certificate serial:       010D0C9F4328584A45403413E1D9A09957E39B80
Authority key identifier: C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     26342
IP address blocks:        2620:1bd:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:34:13:e1:d9:a0:99:57:e3:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d6dade-3164-4681-8f0a-34023fdf6934
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=a4c338eb-c9b7-4229-9708-3317d6833109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:de:e7:33:f1:8c:61:07:69:3f:0c:99:ec:96:
                    95:f0:24:ed:fa:0c:5a:44:08:b9:f4:74:ed:ee:4b:
                    06:f4:f3:54:94:2f:72:f7:b5:07:d1:a2:a2:0d:9b:
                    d2:20:35:05:5f:35:8b:6e:36:42:0c:b3:52:93:3e:
                    46:f2:d8:04:f2:91:19:67:40:bf:09:90:37:65:42:
                    8c:4e:49:ba:a8:f6:c8:7e:8a:55:9b:b1:a1:60:32:
                    6b:cc:74:f8:db:76:95:4c:d5:64:f3:cd:3a:49:da:
                    e6:ab:f2:a5:f4:bb:a4:1f:a5:e5:dc:a0:89:79:b9:
                    28:1a:81:c5:3d:51:fa:21:dd:45:ff:07:5f:53:63:
                    cd:5f:4e:a0:42:88:cd:8f:98:3b:ea:42:7d:49:31:
                    57:52:bc:9a:85:5e:28:7c:d5:6a:b4:dc:d8:05:75:
                    a2:9d:9e:42:cf:36:a1:72:43:9e:48:fb:49:f6:22:
                    e4:ad:98:fe:bb:4b:b3:ea:1d:d7:2e:30:5e:a5:b3:
                    b2:26:60:f2:ab:9c:76:9c:35:0d:60:d7:08:ec:d9:
                    ce:08:71:71:8f:68:6a:05:be:3b:ab:12:c3:d1:ef:
                    06:83:20:49:49:4c:59:b1:b1:97:d5:f0:14:67:ad:
                    46:98:dd:06:c4:74:43:c6:07:73:45:0a:56:5b:97:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:91:4E:3B:43:FC:6D:BF:AB:45:09:BF:D8:AE:0E:D5:25:31:37:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/ecc829f8-94c1-3b9d-be9a-7d7ad1b6c0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934/d3d6dade-3164-4681-8f0a-34023fdf6934.crl

            X509v3 Authority Key Identifier:
                keyid:C1:AF:E2:87:67:47:80:F6:41:ED:4E:F3:15:35:61:3F:3C:C5:68:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d3d6dade-3164-4681-8f0a-34023fdf6934.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1bd:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:08:c3:b5:1f:0d:d1:93:46:79:ca:3a:14:ba:a2:3a:1f:ca:
         ba:7e:93:56:28:c2:84:bc:f7:6f:08:92:86:32:07:70:16:df:
         c4:eb:27:fd:d0:3f:00:6d:95:90:31:c1:c8:fc:b7:de:04:89:
         68:c7:27:17:bc:4d:2f:91:2c:b6:22:76:7e:b1:e3:e1:7c:b9:
         08:ae:f9:83:b8:42:74:2c:7e:6b:c6:c4:41:02:3a:c1:5c:10:
         67:ce:6c:71:0f:61:43:cf:a2:45:ce:53:4f:4d:f6:83:3d:d1:
         fd:26:4b:79:9d:96:3b:a9:ba:d9:a4:66:c5:ce:4d:34:09:bd:
         32:69:13:24:d4:76:d4:30:a6:ac:bb:6c:3b:6d:f7:52:d2:b0:
         58:70:69:85:cb:49:fa:43:f3:00:03:35:bc:f6:e3:c6:a6:a8:
         6d:ce:64:9c:10:91:9c:a7:16:6f:e3:71:9e:af:66:f4:31:a0:
         df:93:7b:ee:3e:0b:cb:da:f8:b6:0a:4a:cc:ba:32:f8:f0:9e:
         09:ff:42:60:42:25:c4:ea:1d:c7:1a:36:d6:1a:3a:5b:79:ef:
         f6:57:4a:ae:42:ae:02:9c:19:a1:76:e7:50:1a:a2:64:e5:08:
         0d:ff:0b:8e:7c:6b:14:2b:2c:5d:ee:8f:30:0c:58:90:33:42:
         ad:e2:64:d6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpFQDQT4dmgmVfjm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNkNmRhZGUtMzE2NC00NjgxLThmMGEtMzQwMjNmZGY2
OTM0MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk
YTRjMzM4ZWItYzliNy00MjI5LTk3MDgtMzMxN2Q2ODMzMTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz97nM/GMYQdpPwyZ7JaV8CTt+gxaRAi59HTt
7ksG9PNUlC9y97UH0aKiDZvSIDUFXzWLbjZCDLNSkz5G8tgE8pEZZ0C/CZA3ZUKM
Tkm6qPbIfopVm7GhYDJrzHT423aVTNVk8806Sdrmq/Kl9LukH6Xl3KCJebkoGoHF
PVH6Id1F/wdfU2PNX06gQojNj5g76kJ9STFXUryahV4ofNVqtNzYBXWinZ5Czzah
ckOeSPtJ9iLkrZj+u0uz6h3XLjBepbOyJmDyq5x2nDUNYNcI7NnOCHFxj2hqBb47
qxLD0e8GgyBJSUxZsbGX1fAUZ61GmN0GxHRDxgdzRQpWW5f/SQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBaRTjtD/G2/q0UJv9iuDtUlMTdBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kM2Q2
ZGFkZS0zMTY0LTQ2ODEtOGYwYS0zNDAyM2ZkZjY5MzQvZWNjODI5ZjgtOTRjMS0z
YjlkLWJlOWEtN2Q3YWQxYjZjMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDNkNmRhZGUtMzE2NC00NjgxLThm
MGEtMzQwMjNmZGY2OTM0L2QzZDZkYWRlLTMxNjQtNDY4MS04ZjBhLTM0MDIzZmRm
NjkzNC5jcmwwHwYDVR0jBBgwFoAUwa/ih2dHgPZB7U7zFTVhPzzFaKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kM2Q2ZGFkZS0zMTY0LTQ2ODEtOGYwYS0zNDAy
M2ZkZjY5MzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABvUAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADAjDtR8N0ZNGeco6FLqiOh/Kun6TVijChLz3bwiShjIHcBbfxOsn
/dA/AG2VkDHByPy33gSJaMcnF7xNL5EstiJ2frHj4Xy5CK75g7hCdCx+a8bEQQI6
wVwQZ85scQ9hQ8+iRc5TT032gz3R/SZLeZ2WO6m62aRmxc5NNAm9MmkTJNR21DCm
rLtsO233UtKwWHBphctJ+kPzAAM1vPbjxqaobc5knBCRnKcWb+Nxnq9m9DGg35N7
7j4Ly9r4tgpKzLoy+PCeCf9CYEIlxOodxxo21ho6W3nv9ldKrkKuApwZoXbnUBqi
ZOUIDf8LjnxrFCssXe6PMAxYkDNCreJk1g==
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:06:43 2025 by rpki-client