Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1635ab9-439e-39e8-a9f2-1257fd59f9c8.roa
File:                     a1635ab9-439e-39e8-a9f2-1257fd59f9c8.roa (raw, json)
Hash identifier:          4np94nT2npxfsh0JCyMzcX0L/MSCYqSwR93nDn0IYeY=
Subject key identifier:   90:C1:A1:41:5F:D9:70:F9:48:69:93:3B:31:38:7C:F2:40:58:3D:F1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849124701190008EBDCC5865F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1635ab9-439e-39e8-a9f2-1257fd59f9c8.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397242
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:01:19:00:08:eb:dc:c5:86:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=3e2367e6-aa4a-4c50-b354-c4aa582f8e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:c6:24:9c:b8:a9:24:e5:94:c6:f5:13:5d:a9:
                    ba:10:b0:ca:e0:f9:9a:31:27:c7:9a:fc:36:84:2c:
                    82:e5:0c:93:7b:2e:61:25:a2:f8:a8:d4:fd:be:b4:
                    26:b3:ac:9a:a8:21:8a:5a:86:32:9e:8a:81:4e:47:
                    61:db:44:12:9c:1d:26:2c:1a:57:7f:4c:81:4a:07:
                    a2:2c:80:98:83:63:f3:37:86:11:98:78:f3:ea:e8:
                    81:bb:62:6f:9f:7b:f5:cb:89:25:33:4e:b3:8c:5b:
                    58:75:81:77:3c:53:c0:7f:6a:d3:4b:a2:20:e2:2d:
                    69:d5:f6:77:00:35:a8:fe:41:a6:84:6f:e5:58:65:
                    33:33:2d:fc:3b:fd:e4:36:a5:9b:f7:70:a1:1a:9b:
                    16:ed:38:b9:a1:85:90:c9:dd:29:da:9d:3c:9f:5b:
                    c5:55:81:02:30:9d:3e:23:93:78:e8:23:7a:ef:6b:
                    9d:0f:3a:08:9d:db:d3:0a:93:9a:cc:35:51:bb:01:
                    83:fe:3d:9d:82:3d:d5:12:97:60:c6:c3:25:2a:69:
                    19:10:ff:47:d4:40:55:6b:59:f3:31:5b:99:8a:f8:
                    ee:6d:fa:1e:a5:a8:4e:53:90:81:bb:c2:eb:7d:92:
                    04:fa:d5:0a:2d:29:70:da:fd:1e:24:09:61:15:a1:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C1:A1:41:5F:D9:70:F9:48:69:93:3B:31:38:7C:F2:40:58:3D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1635ab9-439e-39e8-a9f2-1257fd59f9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5e:1b:b1:06:78:be:66:0e:6f:89:3e:8e:67:d4:d0:46:11:
         0a:c5:db:43:47:0a:1f:31:4c:f7:9c:5c:a3:68:08:0c:28:a8:
         b5:22:09:47:a7:49:82:ad:ea:cb:0d:02:85:c8:a5:8c:b4:a9:
         f2:6f:7a:fd:f2:b5:bf:5e:0d:57:ae:f7:9b:96:2a:96:e4:8c:
         2f:d6:72:0e:34:91:4f:bd:4d:8d:db:69:f2:66:fa:12:23:75:
         a2:89:cb:47:c8:7e:47:57:c4:64:01:ba:15:cf:ec:9a:67:4f:
         d7:8d:22:68:fe:38:81:85:0d:e4:a3:f8:9f:b0:b5:c0:8a:5a:
         63:20:e5:22:32:07:ec:09:ea:78:4a:b0:7c:5c:eb:52:01:c0:
         1a:75:0c:a0:46:07:0c:39:12:5c:1e:7d:dd:ab:4a:6a:17:04:
         56:bf:9a:f3:a6:b3:e1:c0:0d:5c:8f:45:08:84:bc:d8:bd:9a:
         ea:8c:2f:e0:ce:46:89:09:cb:45:7f:cd:af:aa:c9:25:af:2a:
         4b:48:ea:ce:95:22:52:05:0a:93:36:38:9f:bf:c0:9b:b4:28:
         72:14:13:ea:f8:c1:db:0a:11:24:25:63:3a:a4:41:ca:bf:c6:
         80:44:12:3b:ca:e8:c7:30:17:87:40:75:09:ee:50:07:39:40:
         64:85:3b:e7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkSRwEZAAjr3MWGX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
M2UyMzY3ZTYtYWE0YS00YzUwLWIzNTQtYzRhYTU4MmY4ZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/cYknLipJOWUxvUTXam6ELDK4PmaMSfHmvw2
hCyC5QyTey5hJaL4qNT9vrQms6yaqCGKWoYynoqBTkdh20QSnB0mLBpXf0yBSgei
LICYg2PzN4YRmHjz6uiBu2Jvn3v1y4klM06zjFtYdYF3PFPAf2rTS6Ig4i1p1fZ3
ADWo/kGmhG/lWGUzMy38O/3kNqWb93ChGpsW7Ti5oYWQyd0p2p08n1vFVYECMJ0+
I5N46CN672udDzoIndvTCpOazDVRuwGD/j2dgj3VEpdgxsMlKmkZEP9H1EBVa1nz
MVuZivjubfoepahOU5CBu8LrfZIE+tUKLSlw2v0eJAlhFaGxuwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJDBoUFf2XD5SGmTOzE4fPJAWD3xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTE2MzVhYjktNDM5ZS0z
OWU4LWE5ZjItMTI1N2ZkNTlmOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATl4bsQZ4vmYOb4k+jmfU0EYRCsXbQ0cKHzFM95xco2gIDCiotSIJ
R6dJgq3qyw0ChciljLSp8m96/fK1v14NV673m5YqluSML9ZyDjSRT71Njdtp8mb6
EiN1oonLR8h+R1fEZAG6Fc/smmdP140iaP44gYUN5KP4n7C1wIpaYyDlIjIH7Anq
eEqwfFzrUgHAGnUMoEYHDDkSXB593atKahcEVr+a86az4cANXI9FCIS82L2a6owv
4M5GiQnLRX/Nr6rJJa8qS0jqzpUiUgUKkzY4n7/Am7QochQT6vjB2woRJCVjOqRB
yr/GgEQSO8roxzAXh0B1Ce5QBzlAZIU75w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:44 2025 by rpki-client