Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa
File:                     bca96b09-e170-3659-abb9-52dfeaf972fd.roa (raw, json)
Hash identifier:          LuAtm32IGIS06aHT3kRrFg8xO4lLBBPfTUi2elyedno=
Subject key identifier:   5A:AF:3C:8E:B5:77:48:FF:0D:9F:31:D2:9A:6C:80:05:C6:30:1F:D2
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A4C3B07BD5AE794A9DA34ECC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     6643
IP address blocks:        2606:cb00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:07:bd:5a:e7:94:a9:da:34:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=157e340e-5643-47da-b9fe-4a0fbf977c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:5d:2c:b4:08:c6:8c:90:f9:d7:d5:19:d9:
                    08:20:36:96:35:58:96:4d:9e:e3:87:89:b9:1a:b5:
                    1c:3f:c4:53:51:09:38:4e:38:dd:df:e8:42:87:24:
                    e6:22:d1:d9:f1:aa:aa:fc:1e:a7:6e:92:bf:fe:7f:
                    dc:17:2b:99:d1:4b:75:50:5c:eb:3d:db:80:e2:34:
                    84:1c:d4:3a:c6:e7:8f:84:15:91:08:1c:75:c9:75:
                    ea:27:56:a0:c7:c3:46:24:2d:0a:12:f7:75:16:67:
                    e8:66:6d:37:a7:1d:76:79:7a:f0:d3:54:a7:8c:be:
                    2b:2e:9e:46:b8:39:af:c2:c0:60:4e:90:e3:32:ed:
                    d2:bd:a4:16:7f:a8:e0:45:21:72:79:99:b6:04:dc:
                    5a:45:dd:1a:e6:ed:ea:2e:89:b6:bd:38:a1:76:1c:
                    30:d4:f6:03:ac:3f:01:6f:8b:a7:6b:86:3d:f6:e2:
                    75:f5:86:d1:6b:c6:68:12:c6:d5:ba:8d:0b:1f:92:
                    8e:bb:6d:53:17:27:f0:b3:2c:5a:2a:45:65:c0:f0:
                    d1:70:33:2c:b1:25:9d:7d:11:b7:75:d9:c6:ac:96:
                    f2:ea:b0:54:46:80:fa:c2:17:0f:1b:2a:b7:23:3d:
                    f7:88:5b:6d:8b:e5:52:c5:77:ab:cd:b7:9a:bc:9d:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AF:3C:8E:B5:77:48:FF:0D:9F:31:D2:9A:6C:80:05:C6:30:1F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cb00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:89:2f:16:a3:22:58:bf:6c:3a:d0:ba:c0:3b:d1:43:d9:76:
         c9:97:57:74:a3:26:46:12:41:0c:77:74:00:56:e7:70:68:45:
         72:d4:12:99:da:03:2a:37:ac:17:11:0b:ef:4d:81:8d:a0:e0:
         19:9c:fe:d3:9d:7d:f5:e0:c9:57:61:92:4b:24:a0:bc:11:48:
         7e:6c:72:a4:1d:f9:82:1d:e6:b1:e0:f5:03:b5:81:c7:3c:a0:
         fe:c9:01:eb:e5:f3:80:31:0c:3b:19:b0:e8:f6:ec:af:75:3b:
         86:84:1d:a3:de:2f:bf:19:af:9d:25:7d:e4:62:0e:61:c0:bd:
         87:8c:31:13:bf:6f:48:94:30:54:44:e6:90:fb:62:e2:19:e0:
         4d:b7:44:ee:c0:d3:4a:47:a1:40:59:17:4e:04:ba:fa:63:f6:
         21:27:64:d1:47:10:b4:b5:9b:b2:a2:90:3d:48:83:a5:7f:87:
         bd:1f:a5:aa:e4:86:66:0f:42:58:ae:ef:63:5f:76:2e:02:cc:
         28:6c:b6:b8:94:17:27:04:d1:1b:63:02:58:d9:8a:13:88:94:
         50:36:20:85:d8:7b:04:9b:19:5f:d7:75:5f:6d:29:a6:66:d0:
         15:c7:83:6b:86:13:7b:93:67:14:46:ee:c9:c8:46:36:09:e4:
         ec:05:35:ad
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpMOwe9WueUqdo07MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
MTU3ZTM0MGUtNTY0My00N2RhLWI5ZmUtNGEwZmJmOTc3YzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVVdLLQIxoyQ+dfVGdkIIDaWNViWTZ7jh4m5
GrUcP8RTUQk4Tjjd3+hChyTmItHZ8aqq/B6nbpK//n/cFyuZ0Ut1UFzrPduA4jSE
HNQ6xuePhBWRCBx1yXXqJ1agx8NGJC0KEvd1FmfoZm03px12eXrw01SnjL4rLp5G
uDmvwsBgTpDjMu3SvaQWf6jgRSFyeZm2BNxaRd0a5u3qLom2vTihdhww1PYDrD8B
b4una4Y99uJ19YbRa8ZoEsbVuo0LH5KOu21TFyfwsyxaKkVlwPDRcDMssSWdfRG3
ddnGrJby6rBURoD6whcPGyq3Iz33iFtti+VSxXerzbeavJ0YkQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFqvPI61d0j/DZ8x0ppsgAXGMB/SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmNhOTZiMDktZTE3MC0z
NjU5LWFiYjktNTJkZmVhZjk3MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbLADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA1iS8WoyJYv2w60LrAO9FD2XbJl1d0oyZGEkEMd3QAVudwaEVy1BKZ
2gMqN6wXEQvvTYGNoOAZnP7TnX314MlXYZJLJKC8EUh+bHKkHfmCHeax4PUDtYHH
PKD+yQHr5fOAMQw7GbDo9uyvdTuGhB2j3i+/Ga+dJX3kYg5hwL2HjDETv29IlDBU
ROaQ+2LiGeBNt0TuwNNKR6FAWRdOBLr6Y/YhJ2TRRxC0tZuyopA9SIOlf4e9H6Wq
5IZmD0JYru9jX3YuAswobLa4lBcnBNEbYwJY2YoTiJRQNiCF2HsEmxlf13VfbSmm
ZtAVx4NrhhN7k2cURu7JyEY2CeTsBTWt
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:25:54 2025 by rpki-client