Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
File:                     11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa (raw, json)
Hash identifier:          E+rDmMd0FT/vFnD8llAQCuw5cT6ZUpLN0iY+VPAELVU=
Subject key identifier:   0C:F4:24:4D:2B:B0:65:F6:C1:0B:66:95:C0:CC:82:6E:97:68:CB:BB
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F43285848D4DB95C39F57753933826CC0
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     397384
IP address blocks:        2602:fc53:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:95:c3:9f:57:75:39:33:82:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=d9948cea-9855-4ee9-ba39-1c68accd3202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:5a:8c:35:00:42:9d:dc:6e:1b:f6:1e:f7:
                    be:85:e6:70:58:46:af:ee:b1:21:91:34:c2:69:f6:
                    01:e3:88:96:41:df:6a:c3:89:be:b5:16:00:c4:92:
                    51:83:47:59:94:69:ad:a7:62:a3:43:7d:d5:31:ac:
                    9b:00:55:1b:af:7d:45:56:86:02:69:be:29:8f:6d:
                    a4:1d:1a:37:1b:fe:50:9a:c7:c6:f4:28:c6:51:d0:
                    6d:89:27:f1:55:70:3d:11:37:a1:1d:08:a4:58:ee:
                    de:55:64:f4:64:ba:42:02:79:40:f7:24:5f:24:8d:
                    76:8e:2a:1f:58:29:9c:fd:62:01:77:7f:af:6c:e8:
                    62:fd:cb:55:a2:65:b1:98:dd:a2:a5:0f:06:24:da:
                    5a:f8:a7:c8:4d:b7:35:ce:f3:ee:63:98:50:09:6e:
                    60:f6:9f:51:d5:b9:3e:08:a7:fd:d0:19:ca:61:83:
                    37:8d:d0:e5:bc:94:4a:82:c3:e0:73:8f:b9:59:15:
                    ee:0f:fa:09:25:d6:95:5e:e7:96:2e:55:4c:03:09:
                    02:d3:b8:fd:7f:b2:24:df:16:3c:e7:40:26:5b:34:
                    00:8f:79:53:8b:3c:d5:aa:8b:70:80:c5:04:01:e5:
                    b2:89:cf:48:b9:41:b5:b0:99:02:bd:56:a7:76:ed:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F4:24:4D:2B:B0:65:F6:C1:0B:66:95:C0:CC:82:6E:97:68:CB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc53:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:65:73:f3:a8:8e:31:c0:76:6a:65:80:d8:9d:e1:02:e8:03:
         07:9c:0a:6b:81:20:8b:25:73:20:11:27:de:d0:9c:c2:b9:00:
         7a:25:96:31:e5:db:9a:5c:66:3c:73:d5:f2:22:5a:8d:15:9a:
         d3:ac:99:3a:6b:de:93:ed:e6:be:c7:81:f5:c7:75:8d:43:d5:
         55:b5:f6:23:b5:3c:3e:73:22:42:25:09:6a:01:05:3f:7f:b6:
         c6:e0:4d:ee:a6:dd:a9:40:67:d0:31:e4:89:90:25:f8:a0:80:
         7b:12:ed:a5:db:d3:af:65:d4:34:a6:56:15:16:75:2f:5f:59:
         b6:c2:69:66:bb:57:4f:d9:1d:42:cd:97:95:cc:a6:08:1e:f9:
         c5:70:b0:05:38:9f:3f:c8:35:e3:e3:2b:ca:50:5e:80:17:27:
         be:a9:7c:14:bc:9f:8b:85:e5:f2:d5:b7:a6:cd:3a:c5:4d:fa:
         cd:fe:78:92:b7:bb:0d:26:b7:d4:29:8d:f2:fa:cf:79:e8:d9:
         30:7d:8b:1f:ec:c6:b3:94:e2:b2:62:b5:16:97:9f:54:5b:3a:
         a1:76:68:57:a7:f3:75:f4:15:1f:f8:57:c2:6f:88:22:36:4e:
         18:b9:5f:7a:1d:93:9a:e5:c3:3d:37:a1:5d:e1:ae:30:f7:27:
         c3:d8:62:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjU25XDn1d1OTOCbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc0MmRkZTMtODRhMy00NDg4LWEwMWMtNTI1NzM0YzRk
ODFiMB4XDTI1MDIxMDAyMDAzOFoXDTI1MDUxMTAxMDAzOFowLzEtMCsGA1UEAxMk
ZDk5NDhjZWEtOTg1NS00ZWU5LWJhMzktMWM2OGFjY2QzMjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodhajDUAQp3cbhv2Hve+heZwWEav7rEhkTTC
afYB44iWQd9qw4m+tRYAxJJRg0dZlGmtp2KjQ33VMaybAFUbr31FVoYCab4pj22k
HRo3G/5QmsfG9CjGUdBtiSfxVXA9ETehHQikWO7eVWT0ZLpCAnlA9yRfJI12jiof
WCmc/WIBd3+vbOhi/ctVomWxmN2ipQ8GJNpa+KfITbc1zvPuY5hQCW5g9p9R1bk+
CKf90BnKYYM3jdDlvJRKgsPgc4+5WRXuD/oJJdaVXueWLlVMAwkC07j9f7Ik3xY8
50AmWzQAj3lTizzVqotwgMUEAeWyic9IuUG1sJkCvVandu281QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAz0JE0rsGX2wQtmlcDMgm6XaMu7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzQy
ZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3MzRjNGQ4MWIvMTFkNDhiZWEtZGU2Yy0z
ZmQ2LTk4NDktZGZjZTJhZGYwM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTc0MmRkZTMtODRhMy00NDg4LWEw
MWMtNTI1NzM0YzRkODFiLzU3NDJkZGUzLTg0YTMtNDQ4OC1hMDFjLTUyNTczNGM0
ZDgxYi5jcmwwHwYDVR0jBBgwFoAUgPSvREXaX/pZzpyoT5aC/zlDxi8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzQyZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3
MzRjNGQ4MWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8UwA1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALhlc/OojjHAdmplgNid4QLoAwecCmuBIIslcyARJ97QnMK5AHol
ljHl25pcZjxz1fIiWo0VmtOsmTpr3pPt5r7HgfXHdY1D1VW19iO1PD5zIkIlCWoB
BT9/tsbgTe6m3alAZ9Ax5ImQJfiggHsS7aXb069l1DSmVhUWdS9fWbbCaWa7V0/Z
HULNl5XMpgge+cVwsAU4nz/INePjK8pQXoAXJ76pfBS8n4uF5fLVt6bNOsVN+s3+
eJK3uw0mt9QpjfL6z3no2TB9ix/sxrOU4rJitRaXn1RbOqF2aFen83X0FR/4V8Jv
iCI2Thi5X3odk5rlwz03oV3hrjD3J8PYYgA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:07:32 2025 by rpki-client