Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/a6d1a955-218f-3aa1-9423-9a887606550a.roa
File:                     a6d1a955-218f-3aa1-9423-9a887606550a.roa (raw, json)
Hash identifier:          wPx8/FPqUYxUmfRbfsDRcfKyUNnw345wotzbe24QYys=
Subject key identifier:   50:EC:EB:D1:29:11:1D:7C:52:08:79:CE:6D:97:D0:E2:56:EE:AF:A8
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F43285849BC74A3756D1EFBC72E232060
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/a6d1a955-218f-3aa1-9423-9a887606550a.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     150325
IP address blocks:        2607:eb40:3000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:a3:75:6d:1e:fb:c7:2e:23:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=0427d908-8b47-427e-a8fa-278c0f07b9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:45:79:4c:c9:ab:ab:d5:b6:58:68:9c:f1:
                    94:ac:11:1a:ed:d3:43:cc:8b:6a:df:48:89:2a:d9:
                    24:3e:75:80:5c:7a:72:de:f5:80:8a:88:0c:fc:48:
                    e0:f2:eb:12:38:ff:c7:c6:e0:3f:94:24:dc:e0:55:
                    55:2b:76:47:0e:68:25:c1:cb:a7:07:14:12:60:87:
                    6a:a4:e3:67:f0:5e:d8:d2:d1:d4:83:fd:f7:21:bb:
                    b4:68:03:af:dc:51:57:f4:2b:e8:0a:e2:79:73:44:
                    7d:c5:e2:d2:90:27:a6:7b:e9:38:20:5c:a5:59:d4:
                    a0:df:38:63:91:df:73:07:5a:8a:36:cd:68:06:2a:
                    e3:87:d1:62:e7:de:2e:cd:b4:6d:00:3a:c8:fd:3a:
                    76:fe:e1:35:a3:0b:f4:d7:44:a5:60:08:9f:20:24:
                    69:6b:9b:24:f4:65:a6:f8:d6:3b:27:b4:ec:9b:29:
                    8b:57:89:a1:aa:31:f1:3e:b4:e7:5f:e3:22:5b:a7:
                    33:df:f4:f5:9e:29:70:30:79:c1:73:a0:11:d5:4e:
                    bd:d7:87:4a:4a:72:27:2a:b3:fc:65:26:b7:18:00:
                    ed:ef:7e:7c:2e:86:5a:7c:64:a0:3b:87:c5:9f:92:
                    16:b2:ef:fe:ac:91:73:a9:7a:f3:2c:7f:7a:0f:18:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:EB:D1:29:11:1D:7C:52:08:79:CE:6D:97:D0:E2:56:EE:AF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/a6d1a955-218f-3aa1-9423-9a887606550a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:70:b8:09:ae:29:6e:d9:d9:d5:c4:ca:6c:eb:b6:3a:e6:63:
         52:aa:f6:82:dc:df:94:0e:b9:14:06:a2:76:83:94:cc:a0:c9:
         31:33:f0:41:51:5e:1d:58:80:a4:a6:2c:d7:11:b7:f5:c3:fb:
         72:7d:01:1f:0c:43:e7:a6:f3:65:11:bf:8d:86:6f:a8:1d:ab:
         4e:ce:8b:e8:eb:0b:87:74:38:02:e3:75:d4:a2:57:3b:68:c8:
         c2:dd:05:af:c1:01:4b:72:02:92:c5:16:8b:c3:9d:34:30:41:
         c0:a5:2f:4c:2a:73:65:94:6f:b6:6a:b0:e0:a4:2c:4e:93:92:
         d9:70:5f:83:52:1b:ab:43:cd:7e:ee:4a:b6:66:e9:cb:8a:72:
         ac:79:42:95:5f:97:95:46:b0:cb:e8:1b:01:94:16:ee:d7:b3:
         28:83:70:86:00:28:ef:1e:b3:c4:10:7d:97:ee:56:56:b3:22:
         cf:c5:ca:6c:4d:e9:59:e7:4b:c2:d5:dc:5c:05:db:c0:36:4f:
         76:03:e3:fe:fb:0f:96:a2:08:ac:af:e2:8c:f5:34:c0:c2:28:
         30:bb:4c:de:da:41:01:10:20:e0:63:49:ca:11:8c:6f:2d:59:
         d3:8a:49:36:39:fd:49:49:ee:06:dd:0a:e2:c3:0a:31:79:25:
         c7:6d:c9:f6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEm8dKN1bR77xy4jIGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY1OTk4MTUtYWEzOS00Y2IxLTg2YjgtZGY2NWRhNTBj
YjM1MB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk
MDQyN2Q5MDgtOGI0Ny00MjdlLWE4ZmEtMjc4YzBmMDdiOWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU5FeUzJq6vVtlhonPGUrBEa7dNDzItq30iJ
KtkkPnWAXHpy3vWAiogM/Ejg8usSOP/HxuA/lCTc4FVVK3ZHDmglwcunBxQSYIdq
pONn8F7Y0tHUg/33Ibu0aAOv3FFX9CvoCuJ5c0R9xeLSkCeme+k4IFylWdSg3zhj
kd9zB1qKNs1oBirjh9Fi594uzbRtADrI/Tp2/uE1owv010SlYAifICRpa5sk9GWm
+NY7J7TsmymLV4mhqjHxPrTnX+MiW6cz3/T1nilwMHnBc6AR1U6914dKSnInKrP8
ZSa3GADt7358LoZafGSgO4fFn5IWsu/+rJFzqXrzLH96DxhdYQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFDs69EpER18Ugh5zm2X0OJW7q+oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjU5
OTgxNS1hYTM5LTRjYjEtODZiOC1kZjY1ZGE1MGNiMzUvYTZkMWE5NTUtMjE4Zi0z
YWExLTk0MjMtOWE4ODc2MDY1NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY1OTk4MTUtYWEzOS00Y2IxLTg2
YjgtZGY2NWRhNTBjYjM1LzZmNTk5ODE1LWFhMzktNGNiMS04NmI4LWRmNjVkYTUw
Y2IzNS5jcmwwHwYDVR0jBBgwFoAUAPHvLEA9jvvZgKciL/ZUiJemDBMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjU5OTgxNS1hYTM5LTRjYjEtODZiOC1kZjY1
ZGE1MGNiMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfrQDAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkHC4Ca4pbtnZ1cTKbOu2OuZjUqr2gtzflA65FAaidoOUzKDJMTPw
QVFeHViApKYs1xG39cP7cn0BHwxD56bzZRG/jYZvqB2rTs6L6OsLh3Q4AuN11KJX
O2jIwt0Fr8EBS3ICksUWi8OdNDBBwKUvTCpzZZRvtmqw4KQsTpOS2XBfg1Ibq0PN
fu5Ktmbpy4pyrHlClV+XlUawy+gbAZQW7tezKINwhgAo7x6zxBB9l+5WVrMiz8XK
bE3pWedLwtXcXAXbwDZPdgPj/vsPlqIIrK/ijPU0wMIoMLtM3tpBARAg4GNJyhGM
by1Z04pJNjn9SUnuBt0K4sMKMXklx23J9g==
-----END CERTIFICATE-----
Generated at Thu May 8 00:13:30 2025 by rpki-client