Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          ZFNvEMYIBb1CrUvCbtFIM//aXlx+OoqJN156HGZlBaw=
Subject key identifier:   E5:CC:74:CE:6D:5F:94:0B:30:FB:63:4C:27:0C:5D:2A:51:8F:0A:E3
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       5267FD36891624AC7F98C1D1F9E6FA4A8DA04D88
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Thu 06 Mar 2025 17:58:53 +0000
ROA not before:           Thu 06 Mar 2025 17:53:53 +0000
ROA not after:            Thu 05 Mar 2026 17:58:53 +0000
asID:                     10103
IP address blocks:        2607:74c0:110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:67:fd:36:89:16:24:ac:7f:98:c1:d1:f9:e6:fa:4a:8d:a0:4d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Mar  6 17:53:53 2025 GMT
            Not After : Mar  5 17:58:53 2026 GMT
        Subject: CN=E5CC74CE6D5F940B30FB634C270C5D2A518F0AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:c8:5e:f9:08:53:4c:e1:29:60:60:12:09:
                    70:7c:c0:32:62:59:08:f6:64:35:d7:ff:e3:fa:e8:
                    91:85:48:0a:07:55:b5:8d:b4:52:e4:37:23:ec:ae:
                    b1:ca:24:c4:73:ec:ca:11:a5:3f:4f:b9:11:e1:22:
                    3b:80:58:29:ea:63:8b:d6:d5:71:2d:bf:e6:82:c9:
                    8c:f8:81:94:b7:01:e5:cc:d8:e6:41:27:1f:79:da:
                    37:e0:d3:69:12:d2:d6:60:6b:fb:84:0a:fc:4c:bb:
                    1c:80:28:d6:6e:f6:83:c7:9c:aa:b2:47:dc:f2:e8:
                    fa:65:30:b7:81:1a:db:80:c8:93:b1:3a:2e:6a:b1:
                    07:df:b1:7d:88:74:ce:cd:73:b9:4a:3f:c9:f2:b2:
                    78:9c:f8:94:c2:ce:fe:e7:24:53:cf:d8:b3:fa:be:
                    3d:ac:83:8a:0e:5f:02:96:d9:ba:6a:9a:0c:77:30:
                    c0:ee:e6:ac:5b:8d:f2:ce:4c:b2:7d:dd:f4:eb:96:
                    dc:dc:e6:f0:9b:ad:3c:64:8f:93:1b:28:47:b3:ff:
                    24:0a:46:b4:76:3a:ac:b3:c1:4c:9c:8d:0e:6e:f4:
                    21:84:67:e3:0e:36:60:1a:b1:7b:07:1b:67:d2:05:
                    fb:87:99:62:79:75:a9:72:c9:0f:14:d3:1d:b9:e9:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CC:74:CE:6D:5F:94:0B:30:FB:63:4C:27:0C:5D:2A:51:8F:0A:E3
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3131303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:83:34:33:04:f5:35:93:33:2b:5b:b6:64:af:a3:9b:be:0a:
         de:65:2d:57:5d:a4:55:3e:01:cb:cb:7b:d8:57:27:88:70:6b:
         4a:8e:7a:cb:6c:8e:fa:8d:9a:ad:0e:b7:f5:53:1d:2f:a2:63:
         9d:5d:fe:7b:e0:da:2a:46:78:19:d9:a6:69:35:5a:e9:00:d0:
         d0:e2:91:1b:0b:f5:fd:00:dc:71:02:34:13:42:c4:a2:e8:bd:
         9b:f8:0e:b4:07:0a:a3:66:02:33:34:c6:44:96:db:11:7a:98:
         67:89:19:f2:ee:6b:7f:1b:c6:50:ef:91:0d:27:6b:2b:63:87:
         e6:ad:84:5c:31:ca:f0:30:dc:6a:0f:24:98:bf:bc:e1:84:17:
         d0:3d:30:22:f8:e1:ca:ee:9d:9d:70:62:fc:be:d9:10:18:00:
         6c:75:97:dd:c2:2e:8e:e8:01:dd:df:80:13:3b:9f:d4:72:5a:
         97:a2:ca:7b:ca:45:fd:b6:9d:91:bb:1d:05:34:c2:df:9e:8c:
         95:d7:eb:0a:6d:de:3a:23:b1:d9:ad:6a:15:f3:80:ee:b4:26:
         28:61:4f:65:00:fc:23:dd:7b:69:40:05:fd:49:0b:65:eb:69:
         1a:08:74:e7:50:71:33:d0:14:cb:8c:41:f3:19:3a:9e:59:0d:
         ce:8e:26:20
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUUmf9NokWJKx/mMHR+eb6So2gTYgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGVkY2IyZjdjMDNhNGI2ZjQ5MzNkODA1NDZkYTQwYTQ0
MTM1NGY4NWY3ZTg4NTY3N2YwHhcNMjUwMzA2MTc1MzUzWhcNMjYwMzA1MTc1ODUz
WjAzMTEwLwYDVQQDEyhFNUNDNzRDRTZENUY5NDBCMzBGQjYzNEMyNzBDNUQyQTUx
OEYwQUUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIbIXvkIU0zh
KWBgEglwfMAyYlkI9mQ11//j+uiRhUgKB1W1jbRS5Dcj7K6xyiTEc+zKEaU/T7kR
4SI7gFgp6mOL1tVxLb/mgsmM+IGUtwHlzNjmQScfedo34NNpEtLWYGv7hAr8TLsc
gCjWbvaDx5yqskfc8uj6ZTC3gRrbgMiTsTouarEH37F9iHTOzXO5Sj/J8rJ4nPiU
ws7+5yRTz9iz+r49rIOKDl8Cltm6apoMdzDA7uasW43yzkyyfd3065bc3Obwm608
ZI+TGyhHs/8kCka0djqss8FMnI0ObvQhhGfjDjZgGrF7Bxtn0gX7h5lieXWpcskP
FNMduelDzQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFOXMdM5tX5QLMPtjTCcMXSpR
jwrjMB8GA1UdIwQYMBaAFMzrmr7lO6iU07zAkwYfbd5xtw5qMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgyMWVlZjdlMDYwMzQ1ZTRiZTU2OWNkMzQ3Y2NiZTM2LzAv
Q0NFQjlBQkVFNTNCQTg5NEQzQkNDMDkzMDYxRjZEREU3MUI3MEU2QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzI3OWMxNGE3LWM2ZGEtNDE1NS1iODc1LTg1ZDc1MDc4ZWIzNi9kZWRj
YjJmN2MwM2E0YjZmNDkzM2Q4MDU0NmRhNDBhNDQxMzU0Zjg1ZjdlODg1Njc3Zi5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MjFlZWY3ZTA2MDM0NWU0YmU1Njlj
ZDM0N2NjYmUzNi8wLzMyMzYzMDM3M2EzNzM0NjMzMDNhMzEzMTMwM2EzYTJmMzQz
NDJkMzQzNDIwM2QzZTIwMzEzMDMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYHdMABEDANBgkq
hkiG9w0BAQsFAAOCAQEAY4M0MwT1NZMzK1u2ZK+jm74K3mUtV12kVT4By8t72Fcn
iHBrSo56y2yO+o2arQ639VMdL6JjnV3+e+DaKkZ4GdmmaTVa6QDQ0OKRGwv1/QDc
cQI0E0LEoui9m/gOtAcKo2YCMzTGRJbbEXqYZ4kZ8u5rfxvGUO+RDSdrK2OH5q2E
XDHK8DDcag8kmL+84YQX0D0wIvjhyu6dnXBi/L7ZEBgAbHWX3cIujugB3d+AEzuf
1HJal6LKe8pF/badkbsdBTTC356MldfrCm3eOiOx2a1qFfOA7rQmKGFPZQD8I917
aUAF/UkLZetpGgh051BxM9AUy4xB8xk6nlkNzo4mIA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:25 2025 by rpki-client