Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b64f934a-eaaf-38eb-92d1-a200e28f5524.roa
File:                     b64f934a-eaaf-38eb-92d1-a200e28f5524.roa (raw, json)
Hash identifier:          r9pgFK/GiAOhBkmQDd0XHi81j9tT8G74cWIs5Ww6xyQ=
Subject key identifier:   1F:40:62:37:8A:3F:3A:D5:93:C8:65:D8:05:5A:6D:5B:4B:AC:47:BF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491247081684CE08812C6AA480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b64f934a-eaaf-38eb-92d1-a200e28f5524.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397238
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:08:16:84:ce:08:81:2c:6a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=22ddf3d8-1644-40c7-853b-c391cd647c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:80:bc:82:a1:43:cb:a5:b3:8d:27:39:16:
                    d7:67:73:3f:8e:51:30:42:29:a0:7f:5c:84:b4:83:
                    12:58:c8:0e:b0:a6:a7:c7:fd:ea:27:86:6d:73:83:
                    a6:43:5d:45:a7:6f:cb:1c:03:dc:eb:87:74:11:bc:
                    d9:fb:bf:32:17:9b:40:77:25:c1:57:5d:13:6a:dd:
                    9f:1b:11:ee:00:e0:91:89:e9:c6:ec:4c:2a:59:12:
                    4a:03:1c:07:7d:be:6c:7e:35:c0:b7:63:c6:5d:4f:
                    0e:1b:e5:47:58:ff:1c:c7:e1:08:7c:44:a5:b4:eb:
                    da:cb:6a:ab:7d:3d:3b:ed:9d:38:ad:9a:08:f2:2c:
                    e7:46:6d:aa:78:06:0d:53:99:89:a4:a4:97:a5:e0:
                    78:d1:b8:76:04:32:48:61:73:7b:df:3a:78:cb:22:
                    4d:ce:7b:20:af:06:70:0d:80:fb:b0:1a:dd:5d:8c:
                    91:4c:8d:ff:6d:12:6e:63:00:c5:aa:e2:b7:bc:74:
                    25:3b:6f:67:36:1e:10:bf:12:4f:05:07:23:ac:00:
                    97:ee:ed:03:78:73:61:c9:79:7e:8a:4d:9a:de:ab:
                    0b:db:44:56:95:4e:0f:56:b6:8f:11:51:e5:0e:e3:
                    6c:5b:ba:04:9e:9b:4d:6c:0b:e3:45:7c:b1:9c:25:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:40:62:37:8A:3F:3A:D5:93:C8:65:D8:05:5A:6D:5B:4B:AC:47:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b64f934a-eaaf-38eb-92d1-a200e28f5524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:02:e7:0e:97:2b:22:ac:2c:2a:07:51:12:dd:f3:ae:2f:
         6a:36:64:e8:bd:c6:29:5c:dd:80:70:33:1f:6b:c2:51:9e:2e:
         5b:e3:37:68:05:61:8f:98:c3:b7:39:77:0c:09:eb:25:bc:42:
         9f:55:d7:ea:cd:1c:6c:1e:02:34:f0:3a:29:6d:37:a5:04:4d:
         bd:2e:e5:fe:6f:7a:b0:9d:e5:b2:29:ed:b7:4a:ff:83:42:c6:
         26:01:57:ed:90:79:ab:e3:9b:17:90:d7:49:b4:1b:8c:fc:b8:
         23:18:8b:ac:6f:72:4b:13:2e:72:0d:91:1e:4e:ba:48:4c:ca:
         b5:a9:76:77:92:4b:e0:6f:c3:3e:21:29:24:17:03:06:e7:a8:
         28:82:c4:a2:de:ba:c5:cb:99:0d:c3:c9:d1:47:f9:da:53:30:
         27:ad:7a:f6:93:28:84:8b:f5:64:85:7e:4c:1b:58:a7:d7:7c:
         ef:b7:33:dc:6c:a0:e7:37:ee:90:e2:ce:71:5a:5d:81:f2:26:
         4d:1d:36:cf:45:05:fa:bd:1f:3f:47:0c:f7:18:7b:de:d5:31:
         bd:e7:9a:03:68:b0:c2:96:ed:c5:82:9d:0e:71:ee:80:24:fd:
         6a:d8:12:ed:93:7d:e0:d2:fe:c5:f1:0b:db:00:d8:aa:7a:f8:
         17:c7:5f:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwgWhM4IgSxqpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MjJkZGYzZDgtMTY0NC00MGM3LTg1M2ItYzM5MWNkNjQ3YzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi46AvIKhQ8uls40nORbXZ3M/jlEwQimgf1yE
tIMSWMgOsKanx/3qJ4Ztc4OmQ11Fp2/LHAPc64d0EbzZ+78yF5tAdyXBV10Tat2f
GxHuAOCRienG7EwqWRJKAxwHfb5sfjXAt2PGXU8OG+VHWP8cx+EIfESltOvay2qr
fT077Z04rZoI8iznRm2qeAYNU5mJpKSXpeB40bh2BDJIYXN73zp4yyJNznsgrwZw
DYD7sBrdXYyRTI3/bRJuYwDFquK3vHQlO29nNh4QvxJPBQcjrACX7u0DeHNhyXl+
ik2a3qsL20RWlU4PVraPEVHlDuNsW7oEnptNbAvjRXyxnCU1RwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB9AYjeKPzrVk8hl2AVabVtLrEe/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjY0ZjkzNGEtZWFhZi0z
OGViLTkyZDEtYTIwMGUyOGY1NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFj+AucOlysirCwqB1ES3fOuL2o2ZOi9xilc3YBwMx9rwlGeLlvj
N2gFYY+Yw7c5dwwJ6yW8Qp9V1+rNHGweAjTwOiltN6UETb0u5f5verCd5bIp7bdK
/4NCxiYBV+2QeavjmxeQ10m0G4z8uCMYi6xvcksTLnINkR5OukhMyrWpdneSS+Bv
wz4hKSQXAwbnqCiCxKLeusXLmQ3DydFH+dpTMCetevaTKISL9WSFfkwbWKfXfO+3
M9xsoOc37pDiznFaXYHyJk0dNs9FBfq9Hz9HDPcYe97VMb3nmgNosMKW7cWCnQ5x
7oAk/WrYEu2TfeDS/sXxC9sA2Kp6+BfHX8w=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:43 2025 by rpki-client