Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa
File:                     c04eae26-66e7-330c-8da9-b02ffb952def.roa (raw, json)
Hash identifier:          GT/pwvn50jA5V8SdB0yLG0FXq2dNXBi5GiLLqJ0yfqU=
Subject key identifier:   8B:E3:96:AB:6C:3B:99:5E:9E:CB:EB:94:EC:60:63:1B:8A:2F:A4:04
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A5335A0760842C0098303DC00
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2606:dc00:ff00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a0:76:08:42:c0:09:83:03:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=d134fe56-c665-4d6f-846a-592dd172e3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d3:f2:07:8b:83:be:ea:18:8e:b0:fb:d7:49:
                    1c:ae:0a:bf:1e:3c:3b:d6:bb:1e:e4:ec:54:99:e6:
                    37:4b:98:02:58:dc:17:b9:6e:d0:15:e2:34:5b:7c:
                    fc:e6:7d:e0:91:8f:10:e3:43:e5:e2:ad:f4:7c:d2:
                    a6:02:28:e3:2c:84:4a:46:13:47:a2:bb:db:7b:ab:
                    be:34:a8:18:58:3d:3b:7a:70:22:e1:18:76:08:41:
                    94:f0:dc:a2:38:f8:c1:b0:0c:ab:dd:d3:8e:8d:3e:
                    06:80:2a:2d:cd:34:60:70:72:af:db:80:dd:72:49:
                    4d:44:e0:42:67:94:06:40:5a:5b:ac:b2:e4:87:6f:
                    53:91:9c:d3:20:be:f1:cf:32:4f:f9:03:b4:48:bb:
                    09:f9:a6:d8:4f:36:1a:d0:f2:f7:58:48:c4:74:0f:
                    32:c9:70:df:63:97:4a:b2:6d:11:16:e3:ef:57:d9:
                    a7:fa:24:ee:3d:29:5c:f9:c8:f7:d9:ba:1c:af:4a:
                    66:b4:8c:6a:dd:da:df:4f:e6:f3:68:75:b4:6a:f1:
                    3d:7d:b8:11:cd:be:8b:90:f2:19:8e:c7:e7:3b:d6:
                    74:83:93:2b:78:49:48:15:06:a4:10:d1:d7:8c:a1:
                    64:02:9c:0e:72:ba:40:4c:c3:70:3d:49:67:54:1e:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:96:AB:6C:3B:99:5E:9E:CB:EB:94:EC:60:63:1B:8A:2F:A4:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dc00:ff00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:84:b1:8e:c4:c7:09:14:d7:19:11:2d:18:bd:de:4d:fc:68:
         1d:5c:45:de:0f:e6:00:85:86:bb:39:eb:23:70:10:22:1b:9d:
         c7:ad:43:7a:02:ad:18:bd:3f:31:53:5e:32:d6:67:ee:58:2c:
         d4:1f:be:67:b6:81:02:ae:66:37:29:9c:7b:d7:11:a5:19:34:
         c7:3d:ad:04:2d:af:28:ad:e1:6e:e4:82:89:63:31:c1:f0:5e:
         47:ba:83:21:f1:94:05:64:3c:0c:fe:da:f1:88:4e:30:c5:44:
         05:2a:9c:ac:0f:34:4a:a6:88:f9:11:a7:c0:a3:56:5d:83:a4:
         da:c8:34:a2:cb:4c:d5:28:0e:d7:34:fe:08:ab:d0:d3:6b:4d:
         f8:f8:3b:ad:96:6a:8c:30:dd:25:15:3b:74:b1:07:7a:fe:24:
         6d:11:29:fc:7d:a5:d6:27:0c:ea:f6:00:78:d3:8f:c4:d4:0d:
         3a:05:0c:09:5d:b6:20:e1:15:0f:ec:cc:33:66:7b:f8:7b:8e:
         d3:84:80:cc:09:46:d6:a9:15:e3:31:48:6c:0f:83:d0:7b:f2:
         ea:10:f9:42:1d:be:63:3f:2b:a7:26:50:eb:07:6a:29:84:6b:
         8a:35:45:32:78:b9:4b:50:33:4a:e2:ae:cb:4f:92:ac:a9:1b:
         9f:16:34:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpTNaB2CELACYMD3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
ZDEzNGZlNTYtYzY2NS00ZDZmLTg0NmEtNTkyZGQxNzJlM2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9PyB4uDvuoYjrD710kcrgq/Hjw71rse5OxU
meY3S5gCWNwXuW7QFeI0W3z85n3gkY8Q40Pl4q30fNKmAijjLIRKRhNHorvbe6u+
NKgYWD07enAi4Rh2CEGU8NyiOPjBsAyr3dOOjT4GgCotzTRgcHKv24DdcklNROBC
Z5QGQFpbrLLkh29TkZzTIL7xzzJP+QO0SLsJ+abYTzYa0PL3WEjEdA8yyXDfY5dK
sm0RFuPvV9mn+iTuPSlc+cj32bocr0pmtIxq3drfT+bzaHW0avE9fbgRzb6LkPIZ
jsfnO9Z0g5MreElIFQakENHXjKFkApwOcrpATMNwPUlnVB4jOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIvjlqtsO5lensvrlOxgYxuKL6QEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYzA0ZWFlMjYtNjZlNy0z
MzBjLThkYTktYjAyZmZiOTUyZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbcAP8A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHSEsY7ExwkU1xkRLRi93k38aB1cRd4P5gCFhrs56yNwECIbncet
Q3oCrRi9PzFTXjLWZ+5YLNQfvme2gQKuZjcpnHvXEaUZNMc9rQQtryit4W7kgolj
McHwXke6gyHxlAVkPAz+2vGITjDFRAUqnKwPNEqmiPkRp8CjVl2DpNrINKLLTNUo
Dtc0/gir0NNrTfj4O62Waoww3SUVO3SxB3r+JG0RKfx9pdYnDOr2AHjTj8TUDToF
DAldtiDhFQ/szDNme/h7jtOEgMwJRtapFeMxSGwPg9B78uoQ+UIdvmM/K6cmUOsH
aimEa4o1RTJ4uUtQM0rirstPkqypG58WNMg=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:12 2025 by rpki-client