Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/375bdd25-c03f-3349-916a-57ac8467546e.roa
File:                     375bdd25-c03f-3349-916a-57ac8467546e.roa (raw, json)
Hash identifier:          OZ0sUVPoIBr7WjGtTc+x422Byn9HbrfDGx2kIglUPHo=
Subject key identifier:   E7:51:01:FD:85:77:66:92:A3:AB:8B:EA:4F:85:47:65:3E:89:B4:26
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246FECE76FCFD51AEE37600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/375bdd25-c03f-3349-916a-57ac8467546e.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397234
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:fe:ce:76:fc:fd:51:ae:e3:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=eea0e5c8-2731-44ef-b3bf-01d4b8dcf627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a4:e7:c1:d2:44:5d:91:6b:59:ab:62:70:e3:
                    1e:d3:93:e8:a5:65:d7:c1:e7:2e:f5:97:31:df:a8:
                    40:e4:f3:39:96:40:3f:f0:df:9e:a1:3e:ce:d7:d3:
                    31:a4:e8:21:c7:c5:f9:78:7f:c6:e5:36:73:7b:2a:
                    ba:0a:df:e1:1c:42:e0:9a:df:74:79:b3:6e:88:63:
                    3a:bf:29:b7:1b:da:4e:96:56:ea:14:72:90:46:e5:
                    0f:04:4d:f5:2d:d0:dc:cf:f5:3a:b6:6b:d3:70:bd:
                    92:44:87:7d:9c:11:a6:98:13:5b:d8:69:f9:05:24:
                    50:0f:41:77:b4:53:51:1a:0c:72:86:5b:6b:e3:09:
                    03:0d:a4:fd:22:03:00:c5:b5:a9:1d:2e:7c:42:9a:
                    62:01:9c:91:df:e5:38:93:44:65:23:9d:8d:6b:05:
                    05:82:f1:ef:58:fc:26:31:e6:6a:49:29:6c:95:81:
                    01:59:70:e9:4c:dd:20:06:cf:1f:c8:05:0f:32:cf:
                    12:1c:8a:fc:b0:5d:d1:79:01:f9:20:50:d3:ac:e8:
                    55:3f:64:dd:13:19:23:61:9a:43:f6:d4:c2:a7:3e:
                    ad:a9:27:80:84:8e:24:e7:41:7c:c5:ad:74:1d:93:
                    7a:80:b5:5c:cb:36:31:1a:ad:e8:a4:f2:59:cc:50:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:01:FD:85:77:66:92:A3:AB:8B:EA:4F:85:47:65:3E:89:B4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/375bdd25-c03f-3349-916a-57ac8467546e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:e6:ab:38:49:91:fc:30:24:aa:8a:76:92:03:03:b0:19:
         fc:6a:50:f5:b0:bd:c4:3b:a4:0f:35:62:3d:b3:3c:c9:2a:19:
         90:cb:2d:8f:0f:b1:43:3f:1a:a0:1b:9b:58:a3:e5:3f:cd:0f:
         d3:ec:cd:e4:ab:63:ec:ee:2c:00:08:67:f8:d8:be:93:3d:4f:
         6b:a6:0b:b7:82:86:ad:33:4a:75:08:5a:6b:0b:3c:93:21:ed:
         91:17:ed:c2:a7:a5:a5:21:65:4b:fc:1b:ad:e6:61:6c:25:66:
         a5:85:b4:05:a6:98:b4:6b:33:01:51:20:36:42:8d:ac:a1:90:
         89:a7:78:a7:2f:34:21:f8:c7:4e:06:24:bd:49:20:af:2c:c9:
         b9:94:a2:cd:4c:19:76:ab:61:a5:54:4f:33:d2:49:74:37:2a:
         cd:36:df:37:3a:8a:05:1a:83:bf:5f:83:bc:20:19:5d:fe:be:
         37:0c:d0:92:a0:86:50:9c:ed:6b:0b:69:22:26:63:a2:cf:f6:
         1e:d9:43:48:1f:35:87:9d:b6:2f:87:ff:06:36:57:91:c2:6d:
         eb:9b:6b:31:5a:7e:4f:00:56:82:1e:fb:e5:e6:5b:c1:94:55:
         b7:03:6d:d4:1d:54:8f:12:13:f0:7e:89:e4:b9:17:6e:8c:44:
         5f:ef:1e:82
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkSRv7Odvz9Ua7jdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
ZWVhMGU1YzgtMjczMS00NGVmLWIzYmYtMDFkNGI4ZGNmNjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86TnwdJEXZFrWaticOMe05PopWXXwecu9Zcx
36hA5PM5lkA/8N+eoT7O19MxpOghx8X5eH/G5TZzeyq6Ct/hHELgmt90ebNuiGM6
vym3G9pOllbqFHKQRuUPBE31LdDcz/U6tmvTcL2SRId9nBGmmBNb2Gn5BSRQD0F3
tFNRGgxyhltr4wkDDaT9IgMAxbWpHS58QppiAZyR3+U4k0RlI52NawUFgvHvWPwm
MeZqSSlslYEBWXDpTN0gBs8fyAUPMs8SHIr8sF3ReQH5IFDTrOhVP2TdExkjYZpD
9tTCpz6tqSeAhI4k50F8xa10HZN6gLVcyzYxGq3opPJZzFAH8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOdRAf2Fd2aSo6uL6k+FR2U+ibQmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzc1YmRkMjUtYzAzZi0z
MzQ5LTkxNmEtNTdhYzg0Njc1NDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABbfmqzhJkfwwJKqKdpIDA7AZ/GpQ9bC9xDukDzViPbM8ySoZkMst
jw+xQz8aoBubWKPlP80P0+zN5Ktj7O4sAAhn+Ni+kz1Pa6YLt4KGrTNKdQhaaws8
kyHtkRftwqelpSFlS/wbreZhbCVmpYW0BaaYtGszAVEgNkKNrKGQiad4py80IfjH
TgYkvUkgryzJuZSizUwZdqthpVRPM9JJdDcqzTbfNzqKBRqDv1+DvCAZXf6+NwzQ
kqCGUJztawtpIiZjos/2HtlDSB81h522L4f/BjZXkcJt65trMVp+TwBWgh775eZb
wZRVtwNt1B1UjxIT8H6J5LkXboxEX+8egg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:26 2025 by rpki-client