Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
File:                     13ccc359-3db6-3e92-90e6-38596962acd9.roa (raw, json)
Hash identifier:          IWtLuZ1LAhmWhZ+rNrVn0+GThN/ukIiBCUpusOPgLE8=
Subject key identifier:   82:72:B6:CF:A9:8E:7F:55:B1:6C:A2:4F:39:CE:B0:99:5D:BD:15:94
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F432858497279ACCD9825C3DAADEC4BB0
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     46510
IP address blocks:        2001:504:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ac:cd:98:25:c3:da:ad:ec:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=6d30e9f6-fada-459f-989a-fec6fbc5c14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:26:68:03:55:c7:81:6c:1c:52:cc:95:ad:
                    71:c1:8c:a9:6e:3d:c1:76:c5:5b:bb:d1:29:73:72:
                    8f:8c:8a:09:8e:de:1f:bd:58:75:90:b1:d1:2d:0b:
                    de:fb:77:01:7e:02:d3:67:ef:99:62:45:91:6a:80:
                    e7:1d:96:42:40:80:34:6b:87:1c:e6:8d:46:96:9c:
                    9e:91:63:34:bb:51:3c:7e:5c:84:dd:bc:80:79:48:
                    c7:f9:1a:60:f3:b4:d1:dd:32:5b:10:9d:cb:b6:6d:
                    b2:ca:f8:cd:0f:59:d9:0a:e2:9b:ee:ba:7b:ed:6a:
                    ae:49:ac:35:65:6f:dc:38:e7:ff:38:89:9b:bc:3d:
                    b6:d5:a2:fa:64:9a:9b:19:3e:59:1b:50:dd:48:92:
                    da:4d:19:e5:45:29:ec:05:4e:9c:a1:f7:8b:98:78:
                    43:77:a2:95:2c:6e:01:0c:52:0f:97:32:98:40:d0:
                    e4:16:90:96:be:7f:9a:f8:3d:a2:55:2b:85:ad:6c:
                    ce:dd:3b:2e:07:b0:d2:88:52:88:06:c4:8c:07:8a:
                    35:81:37:d4:d6:c2:fd:24:7a:35:14:7b:7b:da:ae:
                    9b:35:4d:1e:63:a7:0d:f6:83:42:fe:88:89:9c:bb:
                    30:98:fc:1f:93:a2:ca:9c:f2:c5:e0:d4:b6:04:11:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:72:B6:CF:A9:8E:7F:55:B1:6C:A2:4F:39:CE:B0:99:5D:BD:15:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:114::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:98:bc:a6:83:ab:03:12:4e:71:bb:f7:3e:fa:f5:2a:d2:80:
         d5:3f:eb:06:40:4e:9e:c3:52:6b:f4:ac:1a:33:a0:85:aa:53:
         78:16:50:da:01:28:71:b6:e9:e2:f5:ff:a6:b8:3c:36:88:76:
         cc:3f:16:fc:bf:5f:81:85:2c:2a:82:ee:3a:d1:a7:6a:1b:84:
         81:cd:8b:0b:02:4d:e0:48:c9:e2:da:b1:a3:54:d8:ea:d9:8f:
         ec:73:b4:c2:16:e5:85:d0:80:87:59:53:10:23:fc:ec:1c:92:
         5f:fd:0a:28:92:80:81:a8:44:4f:85:b6:5b:ff:63:89:98:64:
         a3:89:27:3b:a8:01:07:cc:e9:c4:81:9a:0d:ed:eb:df:84:21:
         48:21:b4:b9:5b:4a:ce:70:62:d2:11:9b:aa:2f:a6:ad:17:b7:
         1b:2e:d7:b8:0b:2b:97:cd:0a:47:eb:67:15:7f:3f:8e:53:0f:
         04:0d:6a:ab:b6:2b:49:ce:30:7c:de:02:3a:51:e1:69:a7:4b:
         06:69:e9:ce:30:fd:72:83:38:7f:ed:1c:d5:ef:d2:6e:72:8b:
         d4:7c:65:56:07:81:95:66:1f:1d:b7:04:76:4a:e5:57:d9:79:
         24:8c:e2:ff:4c:d5:a9:10:1a:83:28:f5:d8:ad:50:08:26:e6:
         4f:dd:1a:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElyeazNmCXD2q3sS7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ1NTA0MzgtMTBlZi00NDRmLWI3ODUtZjdiYzZlYmEw
OGU3MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk
NmQzMGU5ZjYtZmFkYS00NTlmLTk4OWEtZmVjNmZiYzVjMTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YYmaANVx4FsHFLMla1xwYypbj3BdsVbu9Ep
c3KPjIoJjt4fvVh1kLHRLQve+3cBfgLTZ++ZYkWRaoDnHZZCQIA0a4cc5o1Glpye
kWM0u1E8flyE3byAeUjH+Rpg87TR3TJbEJ3Ltm2yyvjND1nZCuKb7rp77WquSaw1
ZW/cOOf/OImbvD221aL6ZJqbGT5ZG1DdSJLaTRnlRSnsBU6cofeLmHhDd6KVLG4B
DFIPlzKYQNDkFpCWvn+a+D2iVSuFrWzO3TsuB7DSiFKIBsSMB4o1gTfU1sL9JHo1
FHt72q6bNU0eY6cN9oNC/oiJnLswmPwfk6LKnPLF4NS2BBHZ6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIJyts+pjn9VsWyiTznOsJldvRWUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1
MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2JjNmViYTA4ZTcvMTNjY2MzNTktM2RiNi0z
ZTkyLTkwZTYtMzg1OTY5NjJhY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTQ1NTA0MzgtMTBlZi00NDRmLWI3
ODUtZjdiYzZlYmEwOGU3Lzk0NTUwNDM4LTEwZWYtNDQ0Zi1iNzg1LWY3YmM2ZWJh
MDhlNy5jcmwwHwYDVR0jBBgwFoAUNEc9kpg+08Ai8JvKEhCMPaHvPCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2Jj
NmViYTA4ZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAEU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC+YvKaDqwMSTnG79z769SrSgNU/6wZATp7DUmv0rBozoIWqU3gW
UNoBKHG26eL1/6a4PDaIdsw/Fvy/X4GFLCqC7jrRp2obhIHNiwsCTeBIyeLasaNU
2OrZj+xztMIW5YXQgIdZUxAj/Owckl/9CiiSgIGoRE+Ftlv/Y4mYZKOJJzuoAQfM
6cSBmg3t69+EIUghtLlbSs5wYtIRm6ovpq0Xtxsu17gLK5fNCkfrZxV/P45TDwQN
aqu2K0nOMHzeAjpR4WmnSwZp6c4w/XKDOH/tHNXv0m5yi9R8ZVYHgZVmHx23BHZK
5VfZeSSM4v9M1akQGoMo9ditUAgm5k/dGkY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:35 2025 by rpki-client