Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/89c19010-b4b2-3194-9e35-6f0d6ef8a346.roa
File:                     89c19010-b4b2-3194-9e35-6f0d6ef8a346.roa (raw, json)
Hash identifier:          i5FnqBOvpkugwtqcwY4iztDGBMO8Rm+C01N8UN8q4dc=
Subject key identifier:   82:B3:0C:AC:AC:9A:82:2A:01:CD:A0:B5:D0:55:5E:DA:68:F2:C9:59
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F43285849CE9A3E5F43FB34600F3D58E0
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/89c19010-b4b2-3194-9e35-6f0d6ef8a346.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     46650
IP address blocks:        2001:1808::/32 maxlen: 48
                          2600:1a00::/32 maxlen: 48
                          2600:1a01::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:3e:5f:43:fb:34:60:0f:3d:58:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=75cfa524-97b1-4c6c-a1b1-e7d3bf31fd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:98:ea:55:cf:90:10:83:7b:10:ee:69:07:
                    73:9f:55:61:04:93:be:7e:aa:ba:7e:be:48:ee:45:
                    69:28:c8:74:a2:de:39:04:f8:93:3d:56:6b:78:99:
                    3b:28:86:6c:82:df:36:a5:28:33:0f:7e:a6:ad:7c:
                    69:29:e0:b3:a5:ec:44:29:d7:1a:20:46:38:bb:63:
                    1a:59:0a:e1:b9:3a:08:c3:01:67:55:d5:f2:9a:5b:
                    9a:3e:ee:f3:b2:5e:99:f7:50:27:14:b3:39:b0:b4:
                    cf:e4:2c:d4:06:8c:f7:55:12:8f:21:e6:10:7a:ab:
                    6d:ec:cd:c8:48:94:02:de:12:0a:09:30:9a:6d:a6:
                    d4:08:f0:5a:92:52:3f:eb:41:00:72:53:01:89:60:
                    0f:19:4b:5d:d1:8c:a1:cc:a2:6a:07:12:a4:0a:b7:
                    d8:d0:9f:ba:72:e3:59:62:55:a8:a5:c6:5b:2d:61:
                    c4:6d:a1:9b:a7:1b:95:a2:c6:e2:7e:ae:f9:12:c4:
                    2e:21:46:db:ea:fe:37:0a:73:34:dd:30:5c:c9:c7:
                    94:da:4b:24:27:72:a1:bb:7f:c6:c9:5b:6f:9f:a5:
                    2a:b3:3f:b5:85:35:f7:68:16:6b:b4:64:39:f2:86:
                    91:c1:7b:48:d9:15:4e:d9:6b:a7:84:3b:88:9b:fe:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B3:0C:AC:AC:9A:82:2A:01:CD:A0:B5:D0:55:5E:DA:68:F2:C9:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/89c19010-b4b2-3194-9e35-6f0d6ef8a346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1808::/32
                  2600:1a00::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:db:46:ed:1b:86:2e:7b:bf:c4:ad:5a:d2:d1:6b:9f:14:9a:
         1a:0d:b1:61:88:6c:eb:78:ac:ef:57:9b:f2:d5:17:d5:34:d1:
         33:56:03:06:30:d3:d7:58:9f:de:b0:26:d5:76:22:e6:4a:1b:
         2c:74:08:62:f5:dc:14:be:e8:d3:d9:72:61:5d:73:4a:2b:11:
         3e:96:11:75:3e:41:b3:4b:ea:31:41:36:a4:9a:c3:e3:7a:b7:
         e5:0f:ee:0f:b2:5d:a5:f2:40:00:25:40:69:0d:8b:db:77:93:
         4f:da:cc:33:78:3b:08:33:8c:e0:63:19:b7:4a:c4:e1:40:32:
         11:ca:0b:89:b3:81:25:d7:7d:95:0c:54:6b:0e:c3:09:e9:be:
         84:cb:a7:a8:6a:3d:55:70:f0:61:43:90:73:9e:bb:da:40:81:
         c0:26:3c:a5:28:eb:47:54:a2:03:9b:e9:41:b4:3e:75:40:ef:
         0b:6f:6e:f7:a5:9d:b8:da:f5:ec:e3:55:f9:3d:3a:a9:91:56:
         ed:ae:4b:88:91:be:45:8b:19:69:8d:20:2f:c6:cc:b4:c6:19:
         0a:e6:55:c3:15:3c:fa:fc:59:e0:53:d2:ee:70:ca:cc:20:62:
         b0:ee:9b:7f:a2:ec:2a:d4:b3:f7:13:a5:91:5b:c8:c0:36:87:
         39:20:84:23
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnOmj5fQ/s0YA89WOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTUzMzNhNmUtMzdkYy00MjEzLWI5MjgtYWUwMzQxNDU0
NzU5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
NzVjZmE1MjQtOTdiMS00YzZjLWExYjEtZTdkM2JmMzFmZDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyqY6lXPkBCDexDuaQdzn1VhBJO+fqq6fr5I
7kVpKMh0ot45BPiTPVZreJk7KIZsgt82pSgzD36mrXxpKeCzpexEKdcaIEY4u2Ma
WQrhuToIwwFnVdXymluaPu7zsl6Z91AnFLM5sLTP5CzUBoz3VRKPIeYQeqtt7M3I
SJQC3hIKCTCababUCPBaklI/60EAclMBiWAPGUtd0YyhzKJqBxKkCrfY0J+6cuNZ
YlWopcZbLWHEbaGbpxuVosbifq75EsQuIUbb6v43CnM03TBcyceU2kskJ3Khu3/G
yVtvn6Uqsz+1hTX3aBZrtGQ58oaRwXtI2RVO2WunhDuIm/7DZQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFIKzDKysmoIqAc2gtdBVXtpo8slZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMz
M2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAzNDE0NTQ3NTkvODljMTkwMTAtYjRiMi0z
MTk0LTllMzUtNmYwZDZlZjhhMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTUzMzNhNmUtMzdkYy00MjEzLWI5
MjgtYWUwMzQxNDU0NzU5L2U1MzMzYTZlLTM3ZGMtNDIxMy1iOTI4LWFlMDM0MTQ1
NDc1OS5jcmwwHwYDVR0jBBgwFoAUOTyba4RNEvBk9VO7j38xAKEnoHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMzM2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAz
NDE0NTQ3NTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAIAEYCAMF
ASYAGgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEABNtG7RuGLnu/xK1a0tFrnxSaGg2xYYhs63is71eb8tUX
1TTRM1YDBjDT11if3rAm1XYi5kobLHQIYvXcFL7o09lyYV1zSisRPpYRdT5Bs0vq
MUE2pJrD43q35Q/uD7JdpfJAACVAaQ2L23eTT9rMM3g7CDOM4GMZt0rE4UAyEcoL
ibOBJdd9lQxUaw7DCem+hMunqGo9VXDwYUOQc5672kCBwCY8pSjrR1SiA5vpQbQ+
dUDvC29u96WduNr17ONV+T06qZFW7a5LiJG+RYsZaY0gL8bMtMYZCuZVwxU8+vxZ
4FPS7nDKzCBisO6bf6LsKtSz9xOlkVvIwDaHOSCEIw==
-----END CERTIFICATE-----
Generated at Mon May 12 06:52:06 2025 by rpki-client