Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80a94ce3-a84e-30a1-92fb-8f22642cd478.roa
File:                     80a94ce3-a84e-30a1-92fb-8f22642cd478.roa (raw, json)
Hash identifier:          8CXoJfXHx66Z2e9piV2XE5Ba12GqhO0s/Ol+/JOFwBI=
Subject key identifier:   63:04:2E:E7:EF:C2:48:7D:75:BF:9B:88:9F:FF:C6:79:1E:87:90:9C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584925B3B7E36D5E001C23B9DC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80a94ce3-a84e-30a1-92fb-8f22642cd478.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     397237
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:b7:e3:6d:5e:00:1c:23:b9:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=de733c5b-0c94-4270-a960-d20327fc5426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:bb:dd:df:46:69:94:56:0f:07:19:ae:90:
                    0f:eb:dd:72:ab:59:62:c5:1b:72:f7:e6:8f:8e:6d:
                    a6:87:79:83:b6:1e:0f:ca:a0:5e:b7:4d:61:c9:ad:
                    52:74:c0:24:e6:79:75:79:b3:00:bc:cf:43:98:88:
                    5e:49:b8:b1:68:18:87:f4:e4:12:8a:d4:a4:5e:f3:
                    50:47:4d:40:6f:d3:93:62:5f:83:62:80:e3:31:7f:
                    60:6a:13:9c:33:68:f6:74:a3:b7:ed:19:f0:92:c0:
                    af:88:bf:98:28:4a:77:1a:91:2d:5c:e7:f6:a0:d0:
                    3f:21:6a:1b:e5:17:a7:a6:5f:7e:8c:9c:11:e9:b4:
                    49:d8:b6:0d:da:49:74:78:e3:2b:9d:85:8e:e4:29:
                    de:f2:30:46:d0:bd:9f:c6:5d:a2:1d:1b:50:76:f1:
                    5c:19:7e:75:89:2a:e3:35:08:25:5d:44:18:ae:f3:
                    81:06:48:0f:bc:dc:02:53:9c:ce:8b:dd:b6:71:07:
                    6c:db:a4:32:01:44:59:9c:99:de:c2:ef:c8:cb:7f:
                    71:15:dc:57:aa:1f:8c:15:05:b7:17:9a:c6:30:57:
                    60:82:02:06:a1:09:7e:57:8f:bb:7a:98:83:76:0a:
                    3e:28:90:5c:d5:33:f6:95:64:78:d9:ec:5e:fb:5a:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:04:2E:E7:EF:C2:48:7D:75:BF:9B:88:9F:FF:C6:79:1E:87:90:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80a94ce3-a84e-30a1-92fb-8f22642cd478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8e:1d:4e:39:60:54:61:e2:d6:e8:a9:2e:62:56:60:fc:e7:
         b8:25:ff:fd:32:95:4f:a4:e6:99:72:30:3d:ad:bc:ad:34:6d:
         d0:11:8d:d1:03:47:cb:ce:fe:df:c3:63:10:c9:75:e7:70:92:
         c7:03:78:f9:a0:27:60:c8:50:65:38:4b:b0:47:7c:b2:0f:17:
         cd:be:44:e5:eb:c5:8d:b7:8c:68:2c:67:c8:3c:55:22:f0:34:
         c6:25:27:9f:91:17:2a:e7:31:0e:68:b4:9c:c3:0f:5d:5b:2c:
         ce:41:eb:3a:b7:f4:62:4d:9c:67:7d:30:0e:39:67:01:5d:17:
         8b:67:8a:02:33:60:ae:8a:5d:a6:0f:9e:45:7a:5f:f0:59:93:
         55:38:ff:d7:f4:75:66:55:c0:be:fe:f5:68:a0:a8:3c:df:01:
         1b:26:70:ba:b5:9f:68:fb:f6:6a:be:d2:31:5d:77:88:43:e4:
         fd:52:a0:38:bf:6d:2f:e3:d6:fe:bc:45:7f:e1:f6:bb:fd:4a:
         1f:39:2f:84:9b:78:43:36:13:14:03:f5:71:84:bc:a1:a4:8b:
         00:47:00:17:b6:22:0d:c1:1f:d0:a0:e9:c7:93:8c:06:c6:6d:
         a4:a0:36:47:b7:08:50:75:98:54:36:8a:51:95:c5:0c:e1:19:
         31:00:8d:90
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkls7fjbV4AHCO53AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk
ZGU3MzNjNWItMGM5NC00MjcwLWE5NjAtZDIwMzI3ZmM1NDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibe73d9GaZRWDwcZrpAP691yq1lixRty9+aP
jm2mh3mDth4PyqBet01hya1SdMAk5nl1ebMAvM9DmIheSbixaBiH9OQSitSkXvNQ
R01Ab9OTYl+DYoDjMX9gahOcM2j2dKO37RnwksCviL+YKEp3GpEtXOf2oNA/IWob
5Renpl9+jJwR6bRJ2LYN2kl0eOMrnYWO5Cne8jBG0L2fxl2iHRtQdvFcGX51iSrj
NQglXUQYrvOBBkgPvNwCU5zOi922cQds26QyAURZnJnewu/Iy39xFdxXqh+MFQW3
F5rGMFdgggIGoQl+V4+7epiDdgo+KJBc1TP2lWR42exe+1pFBQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGMELufvwkh9db+biJ//xnkeh5CcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODBhOTRjZTMtYTg0ZS0z
MGExLTkyZmItOGYyMjY0MmNkNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVY4dTjlgVGHi1uipLmJWYPznuCX//TKVT6TmmXIwPa28rTRt0BGN
0QNHy87+38NjEMl153CSxwN4+aAnYMhQZThLsEd8sg8Xzb5E5evFjbeMaCxnyDxV
IvA0xiUnn5EXKucxDmi0nMMPXVsszkHrOrf0Yk2cZ30wDjlnAV0Xi2eKAjNgropd
pg+eRXpf8FmTVTj/1/R1ZlXAvv71aKCoPN8BGyZwurWfaPv2ar7SMV13iEPk/VKg
OL9tL+PW/rxFf+H2u/1KHzkvhJt4QzYTFAP1cYS8oaSLAEcAF7YiDcEf0KDpx5OM
BsZtpKA2R7cIUHWYVDaKUZXFDOEZMQCNkA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:22 2025 by rpki-client