Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
File:                     f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa (raw, json)
Hash identifier:          Q69UexEbVkWhr8MYpahG89p0OY1AHyHJCDEjCM/f8wQ=
Subject key identifier:   81:4F:C3:28:8D:FC:9D:E5:44:02:F7:90:8B:BC:62:5B:AA:18:9C:26
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858492CB21F55C6275AEC820E2880
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2620:a0:200f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:1f:55:c6:27:5a:ec:82:0e:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=edd19d79-3a48-495a-abba-3ef547c596ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:07:cb:40:b7:a5:6e:b5:4f:67:2d:8c:78:
                    43:9c:87:b9:c0:6b:35:5c:2d:67:b0:ae:81:51:ba:
                    6c:99:f0:d6:49:15:86:98:14:fa:38:65:0f:6b:cd:
                    2e:98:c0:be:5d:43:71:db:b6:e2:14:cd:0e:c7:08:
                    65:56:63:a3:74:3e:f2:90:ce:df:e2:34:59:91:9d:
                    ae:b9:2c:6f:3d:4d:d7:17:43:a0:ce:3e:27:d4:69:
                    cb:0e:f9:d1:04:e1:f9:24:4b:50:15:88:70:d5:18:
                    20:09:97:64:d9:42:7d:f1:ef:45:87:25:4a:f6:ca:
                    17:52:f5:af:a6:58:3e:a8:ee:fd:89:c9:35:6a:f8:
                    39:f7:b2:2c:80:87:23:53:2e:45:a2:00:35:50:db:
                    4b:ed:10:61:cc:48:47:c0:b9:c0:42:df:4e:ec:79:
                    3a:40:cf:3d:0b:25:f6:08:f0:6b:71:a7:97:68:1c:
                    4a:88:d3:23:a5:b5:40:0d:32:9f:29:5f:ff:f2:e1:
                    3f:2c:65:97:3b:b4:ad:fa:f0:86:46:d2:8a:8c:ba:
                    96:69:08:c4:44:fe:bd:f5:98:2d:ed:ab:33:31:2c:
                    36:90:fb:bd:15:f5:8f:6f:a1:b1:4d:25:da:f3:a9:
                    a9:bf:6e:c6:7f:b6:1b:ea:7e:b9:2b:b5:0b:e8:ec:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4F:C3:28:8D:FC:9D:E5:44:02:F7:90:8B:BC:62:5B:AA:18:9C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e5:f6:f9:87:e7:21:50:0e:fa:95:18:55:09:40:40:0f:d7:
         14:fe:2e:28:47:97:85:b3:28:b7:8c:ee:b9:29:6d:72:76:45:
         7b:a7:26:d7:30:ba:ff:88:cc:38:ca:7c:b9:0b:8a:21:9c:9a:
         b1:4f:a3:f4:9a:33:15:0a:de:27:30:35:da:7e:ea:74:e7:1f:
         bf:b2:0c:35:54:b4:ec:47:16:f3:c4:71:20:49:55:7e:e1:b4:
         21:d3:34:94:1b:5c:e6:08:0a:5a:7e:ec:61:20:0f:8e:6b:80:
         0b:07:b7:6b:39:a5:6e:11:77:4c:19:e7:8d:dd:53:fc:b6:7a:
         92:dc:db:4f:d8:02:73:4a:5d:5a:b7:cb:f4:24:f6:a9:46:56:
         19:26:f8:5f:e4:5a:c0:21:eb:06:b8:9c:b5:01:93:f9:6b:70:
         6d:1a:f6:14:30:3e:85:03:14:a4:88:8a:ab:35:a9:fc:9a:82:
         6b:ef:2d:34:86:ea:2c:e0:c8:a6:5e:86:cf:6b:75:5c:b9:41:
         9d:79:56:0c:75:48:d1:93:7e:50:5d:3b:54:42:c7:a3:c7:1b:
         65:0f:59:f0:4b:a8:9d:96:15:3f:14:a7:50:5c:4e:a9:bc:d5:
         09:1d:a6:8f:2b:ea:0a:74:cf:e7:0e:0b:d2:29:1f:39:17:b1:
         2a:14:63:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkssh9Vxida7IIOKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWRkMTlkNzktM2E0OC00OTVhLWFiYmEtM2VmNTQ3YzU5NmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstQHy0C3pW61T2ctjHhDnIe5wGs1XC1nsK6B
UbpsmfDWSRWGmBT6OGUPa80umMC+XUNx27biFM0OxwhlVmOjdD7ykM7f4jRZkZ2u
uSxvPU3XF0Ogzj4n1GnLDvnRBOH5JEtQFYhw1RggCZdk2UJ98e9FhyVK9soXUvWv
plg+qO79ick1avg597IsgIcjUy5FogA1UNtL7RBhzEhHwLnAQt9O7Hk6QM89CyX2
CPBrcaeXaBxKiNMjpbVADTKfKV//8uE/LGWXO7St+vCGRtKKjLqWaQjERP699Zgt
7aszMSw2kPu9FfWPb6GxTSXa86mpv27Gf7Yb6n65K7UL6OyslQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIFPwyiN/J3lRAL3kIu8YluqGJwmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvZjQ2NTc1YTEtYmIwOC0z
ZDRlLWI2MTQtMzNiNDNkMWRjYzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJbl9vmH5yFQDvqVGFUJQEAP1xT+LihHl4WzKLeM7rkpbXJ2RXun
Jtcwuv+IzDjKfLkLiiGcmrFPo/SaMxUK3icwNdp+6nTnH7+yDDVUtOxHFvPEcSBJ
VX7htCHTNJQbXOYIClp+7GEgD45rgAsHt2s5pW4Rd0wZ543dU/y2epLc20/YAnNK
XVq3y/Qk9qlGVhkm+F/kWsAh6wa4nLUBk/lrcG0a9hQwPoUDFKSIiqs1qfyagmvv
LTSG6izgyKZehs9rdVy5QZ15Vgx1SNGTflBdO1RCx6PHG2UPWfBLqJ2WFT8Up1Bc
Tqm81Qkdpo8r6gp0z+cOC9IpHzkXsSoUY8g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:36 2025 by rpki-client