Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e79abf10-8489-3735-a147-b4bc642d9efc.roa
File:                     e79abf10-8489-3735-a147-b4bc642d9efc.roa (raw, json)
Hash identifier:          Jvf55Gmdoa2kFBQgOzCbmAfr6YDGs+VeEoSvMjUhjiY=
Subject key identifier:   F8:EF:8B:A2:12:62:28:47:85:4F:11:77:8F:13:A2:1D:CD:CF:FD:8A
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848C41B808C97FA7F9553D51A80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e79abf10-8489-3735-a147-b4bc642d9efc.roa
Signing time:             Tue 04 Feb 2025 02:00:40 +0000
ROA not before:           Tue 04 Feb 2025 02:00:40 +0000
ROA not after:            Mon 05 May 2025 01:00:40 +0000
asID:                     2734
IP address blocks:        2605:6c00:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:1b:80:8c:97:fa:7f:95:53:d5:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb  4 02:00:40 2025 GMT
            Not After : May  5 01:00:40 2025 GMT
        Subject: CN=5d75c148-32f5-493b-9bc8-bcac5263c142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:38:a8:71:c0:ee:7e:44:a4:cd:f4:47:1d:
                    d9:6f:f5:fa:88:f0:0b:b3:9f:7e:2a:6c:40:75:72:
                    b2:53:53:a7:ab:57:a4:c9:c9:1c:09:a5:96:09:b1:
                    55:ea:a8:30:56:2d:05:cd:bf:78:4c:bb:9b:9b:19:
                    c0:1f:af:7d:ce:e9:8a:e1:f6:94:9b:6f:00:e8:77:
                    09:35:45:15:85:b4:b0:b7:c4:47:81:67:f9:7d:a8:
                    28:d6:1f:a6:45:1f:42:2a:47:8d:9d:4b:96:7a:90:
                    c2:51:20:dd:1d:54:81:b2:ce:55:1a:09:5f:46:96:
                    65:a1:6f:5c:f2:3f:5e:f3:3a:8a:19:2e:c7:86:3f:
                    05:5d:5b:b5:68:3c:9a:f3:e2:3e:f1:59:70:2d:d5:
                    d7:05:18:d6:c7:a6:50:dd:29:1b:41:80:09:dc:66:
                    23:fe:b4:5f:6a:10:b6:15:ca:28:b8:b9:17:df:fa:
                    41:90:30:c5:b6:39:d5:d2:90:5b:ea:9a:6f:c5:28:
                    0a:cf:74:57:a3:15:41:b9:56:2c:41:a9:52:3a:86:
                    fc:db:09:3a:e5:96:79:2a:5a:64:7f:55:06:62:e4:
                    84:70:93:68:08:d7:47:8c:84:9c:80:5f:ad:d6:62:
                    5d:19:c2:98:fd:7a:c7:e1:62:8a:84:b7:ba:1c:92:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EF:8B:A2:12:62:28:47:85:4F:11:77:8F:13:A2:1D:CD:CF:FD:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e79abf10-8489-3735-a147-b4bc642d9efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:08:81:6b:72:67:98:1e:39:53:92:d0:7d:f1:ac:e1:7c:e2:
         c3:5e:3e:8f:be:9e:79:bb:80:34:46:b6:71:ec:1b:e9:b1:d7:
         aa:92:d8:f6:6b:84:c9:00:c0:91:0d:93:da:72:f5:f8:e7:07:
         45:bb:c3:f0:fa:c6:2d:78:99:05:33:97:aa:0f:65:83:9e:b5:
         ae:d2:02:e1:eb:8d:58:9c:ca:e0:c1:a4:77:37:8d:31:65:b9:
         d9:50:53:14:e2:14:7e:10:f8:d0:9e:87:86:6c:52:89:dc:bd:
         a3:cc:cb:92:a5:b3:36:88:85:06:e9:7d:e2:c2:5f:73:6a:bb:
         89:9d:16:b9:95:d4:57:74:86:35:0d:d7:be:80:5d:63:09:cb:
         3f:7e:87:68:16:9c:08:fe:8d:f1:6c:71:e7:1d:ea:79:3f:42:
         9f:90:75:28:0e:39:0a:b5:b2:c9:1b:bf:d8:bf:b7:d3:e4:34:
         34:b6:5a:3c:3a:ce:ef:26:4c:c7:72:be:92:4d:8d:96:f5:87:
         59:26:0b:5d:db:d2:c1:4b:6b:6a:ee:7b:0c:e5:42:be:6c:df:
         e1:4b:22:53:ff:19:3e:2c:f4:37:38:b9:bb:31:05:3b:c3:ef:
         1f:b3:59:4b:6a:42:7a:d2:4b:bb:d8:80:31:c2:1a:44:60:b5:
         18:00:8e:4d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjEG4CMl/p/lVPVGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk
NWQ3NWMxNDgtMzJmNS00OTNiLTliYzgtYmNhYzUyNjNjMTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCA4qHHA7n5EpM30Rx3Zb/X6iPALs59+KmxA
dXKyU1Onq1ekyckcCaWWCbFV6qgwVi0Fzb94TLubmxnAH699zumK4faUm28A6HcJ
NUUVhbSwt8RHgWf5fago1h+mRR9CKkeNnUuWepDCUSDdHVSBss5VGglfRpZloW9c
8j9e8zqKGS7Hhj8FXVu1aDya8+I+8VlwLdXXBRjWx6ZQ3SkbQYAJ3GYj/rRfahC2
FcoouLkX3/pBkDDFtjnV0pBb6ppvxSgKz3RXoxVBuVYsQalSOob82wk65ZZ5Klpk
f1UGYuSEcJNoCNdHjIScgF+t1mJdGcKY/XrH4WKKhLe6HJKaGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPjvi6ISYihHhU8Rd48Toh3Nz/2KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvZTc5YWJmMTAtODQ4OS0z
NzM1LWExNDctYjRiYzY0MmQ5ZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVsAAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJUIgWtyZ5geOVOS0H3xrOF84sNePo++nnm7gDRGtnHsG+mx16qS
2PZrhMkAwJENk9py9fjnB0W7w/D6xi14mQUzl6oPZYOeta7SAuHrjVicyuDBpHc3
jTFludlQUxTiFH4Q+NCeh4ZsUoncvaPMy5KlszaIhQbpfeLCX3Nqu4mdFrmV1Fd0
hjUN176AXWMJyz9+h2gWnAj+jfFscecd6nk/Qp+QdSgOOQq1sskbv9i/t9PkNDS2
Wjw6zu8mTMdyvpJNjZb1h1kmC13b0sFLa2ruewzlQr5s3+FLIlP/GT4s9Dc4ubsx
BTvD7x+zWUtqQnrSS7vYgDHCGkRgtRgAjk0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:29 2025 by rpki-client