Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e46c6c76-58d3-3dfc-85b0-47308468a90d.roa
File:                     e46c6c76-58d3-3dfc-85b0-47308468a90d.roa (raw, json)
Hash identifier:          Ae8k3nLMXpjcgQEXhFaw5UzhnUgXHNFxnd0nAzSuvig=
Subject key identifier:   88:75:9B:86:C8:E9:0B:B4:EC:79:36:F5:D4:FA:D8:FC:3E:23:82:43
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470E5BA6DC89DA377C5240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e46c6c76-58d3-3dfc-85b0-47308468a90d.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397216
IP address blocks:        2001:503:e239::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:0e:5b:a6:dc:89:da:37:7c:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=49d85ecb-84b2-4e30-9e1d-34202fabc1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:6f:9e:55:e0:16:a1:2e:38:1b:2b:55:6b:
                    94:72:a2:18:4b:a6:2e:c6:00:d6:76:78:b5:d5:6b:
                    79:e0:f6:cb:0c:53:bc:50:09:84:11:20:a2:6e:eb:
                    cc:de:91:df:48:ec:f5:52:bf:ee:96:2e:c1:7e:e6:
                    11:15:79:38:f2:0a:5b:67:18:5c:f0:e7:e3:cd:9a:
                    ba:1a:89:38:e1:f8:1b:e8:68:ca:ff:b5:07:e9:f8:
                    92:b6:28:9f:16:a8:e7:88:54:ea:65:a9:ac:ec:bd:
                    d2:54:1e:c3:ce:52:21:67:a5:7f:fb:f2:7e:52:a0:
                    38:2e:fd:b0:ec:ac:f6:ee:38:9a:e7:6d:0c:11:db:
                    ef:d6:d7:99:2d:2e:eb:84:40:78:97:52:8f:fb:e2:
                    f9:f0:8f:27:a0:f3:97:0a:f4:1c:af:71:a4:6d:5e:
                    98:99:08:c7:ae:12:d7:d6:11:15:01:62:9b:82:6b:
                    dc:53:89:05:79:40:9a:d9:f6:75:49:3a:3d:7d:86:
                    fe:12:0a:a0:eb:8e:b9:22:ab:e6:72:4a:d9:91:a9:
                    b6:cb:c4:73:af:9f:94:e3:11:ab:24:e8:7e:76:40:
                    ed:c5:32:72:70:be:b5:cf:04:35:0a:5c:40:34:1e:
                    e6:bc:d7:30:ee:92:b0:93:d7:51:6e:53:1f:be:bd:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:75:9B:86:C8:E9:0B:B4:EC:79:36:F5:D4:FA:D8:FC:3E:23:82:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e46c6c76-58d3-3dfc-85b0-47308468a90d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:22:59:46:45:d5:14:a0:ad:22:1a:2e:7c:f3:6a:7e:25:a6:
         fe:19:97:56:92:bb:9d:2b:d2:9a:e2:68:d3:c9:8b:01:2c:d2:
         5c:89:f8:1d:b9:aa:25:f6:91:ed:96:80:61:7c:b0:58:7a:4f:
         04:d2:a4:36:89:88:be:a5:6b:9c:69:5d:e3:7b:b5:40:b9:0e:
         88:7c:f7:13:8e:5d:e9:25:ac:21:b5:44:b6:e1:b3:0a:b6:ae:
         b7:5a:09:ef:21:1c:71:ec:b6:54:a2:15:e8:4c:bc:06:d2:c0:
         76:f4:67:c1:dc:2d:47:7d:b6:42:a8:85:77:bd:f1:39:ea:8b:
         6a:c6:28:61:9d:64:58:c7:6e:77:c2:91:58:1b:04:14:f9:b3:
         85:2f:47:1b:76:f6:cb:8f:68:9c:52:3c:db:1a:7e:d2:65:26:
         d1:a0:ed:58:95:c0:ae:a6:03:92:73:05:6d:40:f9:82:fc:44:
         b0:5a:f8:fb:a2:e3:e6:19:6d:f7:42:c8:d8:a1:4d:7c:a9:7a:
         cf:e5:ca:0f:bf:94:3d:c1:4e:d6:5c:97:cf:66:1d:e6:aa:ea:
         c3:c3:35:68:8d:7c:17:40:05:09:1c:3f:b2:51:4b:d7:97:b1:
         c9:f5:68:f8:a8:b3:9d:ff:ab:14:8a:97:b9:5b:89:14:4b:83:
         0c:e2:90:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRw5bptyJ2jd8UkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NDlkODVlY2ItODRiMi00ZTMwLTllMWQtMzQyMDJmYWJjMWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHRvnlXgFqEuOBsrVWuUcqIYS6YuxgDWdni1
1Wt54PbLDFO8UAmEESCibuvM3pHfSOz1Ur/uli7BfuYRFXk48gpbZxhc8OfjzZq6
Gok44fgb6GjK/7UH6fiStiifFqjniFTqZams7L3SVB7DzlIhZ6V/+/J+UqA4Lv2w
7Kz27jia520MEdvv1teZLS7rhEB4l1KP++L58I8noPOXCvQcr3GkbV6YmQjHrhLX
1hEVAWKbgmvcU4kFeUCa2fZ1STo9fYb+Egqg6465IqvmckrZkam2y8Rzr5+U4xGr
JOh+dkDtxTJycL61zwQ1ClxANB7mvNcw7pKwk9dRblMfvr2snwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIh1m4bI6Qu07Hk29dT62Pw+I4JDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTQ2YzZjNzYtNThkMy0z
ZGZjLTg1YjAtNDczMDg0NjhhOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEwiWUZF1RSgrSIaLnzzan4lpv4Zl1aSu50r0priaNPJiwEs0lyJ
+B25qiX2ke2WgGF8sFh6TwTSpDaJiL6la5xpXeN7tUC5Doh89xOOXeklrCG1RLbh
swq2rrdaCe8hHHHstlSiFehMvAbSwHb0Z8HcLUd9tkKohXe98Tnqi2rGKGGdZFjH
bnfCkVgbBBT5s4UvRxt29suPaJxSPNsaftJlJtGg7ViVwK6mA5JzBW1A+YL8RLBa
+Pui4+YZbfdCyNihTXypes/lyg+/lD3BTtZcl89mHeaq6sPDNWiNfBdABQkcP7JR
S9eXscn1aPios53/qxSKl7lbiRRLgwzikLI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:31 2025 by rpki-client