Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/4cbd2cb8-e5c6-3ecb-98e4-ee9d0fe2b2ac.roa
File:                     4cbd2cb8-e5c6-3ecb-98e4-ee9d0fe2b2ac.roa (raw, json)
Hash identifier:          EABD9YdjjYY+ecLj0nWsPvaQxjR1Pue5U5wKzK+oUOw=
Subject key identifier:   57:BF:51:0D:A8:B4:9D:B0:60:D6:7C:E1:46:3F:91:45:C4:43:9E:34
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584A53359D7212744C211A1CF280
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/4cbd2cb8-e5c6-3ecb-98e4-ee9d0fe2b2ac.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     13335
IP address blocks:        2620:127:f00e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:9d:72:12:74:4c:21:1a:1c:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=c8295799-6d4d-4891-8b58-4025dbab2e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:0d:59:49:f1:49:1a:d7:eb:33:e1:31:5a:
                    d2:a0:ce:4c:0b:95:be:33:37:34:53:12:18:a0:92:
                    0e:b2:3a:92:ce:4c:73:df:3a:d6:9b:43:cf:1a:c2:
                    18:ec:7b:ab:21:b7:ee:53:25:c0:14:cc:dc:b0:fb:
                    db:c9:a2:dc:3a:51:19:51:0a:be:ba:07:0c:ce:02:
                    03:df:39:3b:72:bd:96:9c:0a:27:13:17:20:22:37:
                    45:e8:1d:ea:d3:58:a4:7a:c2:2d:af:0a:b7:43:8b:
                    2e:cb:cf:a3:2d:95:37:27:a2:2f:fe:48:76:95:dd:
                    78:d3:9e:81:d7:2f:3a:9b:a0:66:5e:12:b0:24:53:
                    7b:b1:f7:0d:ec:36:08:3d:e9:41:55:a6:d0:06:7f:
                    80:27:5f:f2:47:7e:d2:2a:7c:31:e8:98:8b:45:b7:
                    e5:39:7f:4d:d0:e3:c2:09:d5:3a:12:8c:c3:8e:42:
                    b2:64:7d:bd:67:96:79:34:f6:0b:83:9e:88:f8:00:
                    bf:76:82:f7:b9:bc:db:89:19:37:22:03:80:73:00:
                    4f:94:e5:a1:ab:6b:bc:c6:c5:ea:b9:1f:23:1b:58:
                    1b:67:b2:6e:fa:c9:fc:df:3f:e9:c5:50:27:d7:3c:
                    53:1e:e8:3d:f9:d8:83:8b:e6:61:d8:a1:f2:a9:ee:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:51:0D:A8:B4:9D:B0:60:D6:7C:E1:46:3F:91:45:C4:43:9E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/4cbd2cb8-e5c6-3ecb-98e4-ee9d0fe2b2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:127:f00e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:5a:03:65:4a:ba:ac:65:c8:d2:9c:66:ae:e8:d9:61:39:
         e8:4c:e9:ed:72:c6:6f:cb:20:49:77:b4:4f:48:ff:18:75:2d:
         5f:1f:dc:1b:cf:32:06:ca:0a:d2:1e:a0:74:db:18:82:81:ce:
         8c:04:55:bd:fb:b8:70:8c:30:cd:fa:62:0a:d8:5c:79:85:02:
         da:e5:88:ae:7e:6a:02:d5:69:e1:0e:9f:20:55:1d:77:7e:59:
         3e:cb:d4:ce:5a:38:d1:df:33:9b:36:68:41:ab:aa:5e:3b:b2:
         be:ae:93:83:db:22:da:43:08:1d:4d:a6:53:88:3a:21:4b:64:
         a1:82:69:88:68:97:2d:1f:5b:90:ac:8c:6f:c5:b4:3d:87:d3:
         4c:57:49:20:20:2b:1e:be:58:26:5d:4c:d8:78:29:c2:ba:1e:
         7e:7a:49:14:8a:cc:03:2c:bf:62:48:81:ea:9a:88:91:a3:b9:
         9c:ed:c8:fd:64:e0:ba:f6:7b:d4:d6:fe:f8:6f:0a:1f:ca:7d:
         82:3b:e4:ef:57:6a:b3:b3:22:44:9b:c1:ba:9e:78:03:84:13:
         e4:0f:72:a7:5c:5a:7a:70:4c:aa:39:d2:dc:0f:60:36:5d:77:
         df:04:23:5a:76:55:4b:24:09:5c:44:34:ed:89:d2:4c:6b:29:
         dc:e3:91:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpTNZ1yEnRMIRoc8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
YzgyOTU3OTktNmQ0ZC00ODkxLThiNTgtNDAyNWRiYWIyZTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyINWUnxSRrX6zPhMVrSoM5MC5W+Mzc0UxIY
oJIOsjqSzkxz3zrWm0PPGsIY7HurIbfuUyXAFMzcsPvbyaLcOlEZUQq+ugcMzgID
3zk7cr2WnAonExcgIjdF6B3q01ikesItrwq3Q4suy8+jLZU3J6Iv/kh2ld14056B
1y86m6BmXhKwJFN7sfcN7DYIPelBVabQBn+AJ1/yR37SKnwx6JiLRbflOX9N0OPC
CdU6EozDjkKyZH29Z5Z5NPYLg56I+AC/doL3ubzbiRk3IgOAcwBPlOWhq2u8xsXq
uR8jG1gbZ7Ju+sn83z/pxVAn1zxTHug9+diDi+Zh2KHyqe4tAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFe/UQ2otJ2wYNZ84UY/kUXEQ540MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvNGNiZDJjYjgtZTVjNi0z
ZWNiLTk4ZTQtZWU5ZDBmZTJiMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABJ/AO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEgKWgNlSrqsZcjSnGau6NlhOehM6e1yxm/LIEl3tE9I/xh1LV8f
3BvPMgbKCtIeoHTbGIKBzowEVb37uHCMMM36YgrYXHmFAtrliK5+agLVaeEOnyBV
HXd+WT7L1M5aONHfM5s2aEGrql47sr6uk4PbItpDCB1NplOIOiFLZKGCaYholy0f
W5CsjG/FtD2H00xXSSAgKx6+WCZdTNh4KcK6Hn56SRSKzAMsv2JIgeqaiJGjuZzt
yP1k4Lr2e9TW/vhvCh/KfYI75O9XarOzIkSbwbqeeAOEE+QPcqdcWnpwTKo50twP
YDZdd98EI1p2VUskCVxENO2J0kxrKdzjkdc=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:01:52 2025 by rpki-client