Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa
File:                     46e2c153-590d-39ff-8e1c-3e16eabe188f.roa (raw, json)
Hash identifier:          TttD+X4175mZbf907GBwFGjFXvxj6i4CldDRgyIN0NQ=
Subject key identifier:   6A:6B:D2:BF:A3:CD:CF:39:CC:6C:56:47:ED:20:D5:C2:6F:47:EE:1A
Certificate issuer:       /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial:       010D0C9F4328584902EC0F42725DABE0FC21E700
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     394177
IP address blocks:        2607:29c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:0f:42:72:5d:ab:e0:fc:21:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=77571e74-5a3e-43a8-813b-7b0c7d019a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:64:77:f0:b5:bb:ed:45:ee:c8:e6:27:55:
                    15:7e:82:5d:b3:ec:96:ad:0c:fe:1d:2d:96:b1:fa:
                    2d:17:f8:9b:20:3b:dd:5b:02:b4:ff:ee:2f:bf:83:
                    bc:d1:3b:62:d1:f0:6c:dd:24:e8:9e:f6:62:d7:a0:
                    f5:23:5d:16:e7:97:1e:3d:4e:ed:b8:cb:93:0b:ac:
                    ee:a6:4b:1c:6f:58:10:e0:9d:9d:0e:40:13:e9:84:
                    3e:f1:8a:c0:02:5b:80:43:23:d0:98:1c:1a:1d:7c:
                    d1:37:e0:ee:66:68:be:02:ad:99:ae:9f:c8:97:03:
                    3a:07:34:d7:f2:ca:9c:69:87:b0:db:7b:86:41:e5:
                    cd:d3:30:11:76:38:c1:b7:a1:ff:af:9c:ef:8d:64:
                    a6:1c:ce:f4:10:67:75:3d:4d:89:3b:07:ac:c8:e4:
                    07:3f:89:da:c4:47:b4:16:7f:6e:db:fb:b1:54:5a:
                    19:44:5f:62:5c:4a:85:41:4a:64:2d:30:e9:4d:2f:
                    a5:71:e8:30:76:db:fd:09:e0:23:30:54:6c:ef:95:
                    12:23:6d:af:07:38:3e:e9:46:7e:58:7a:b8:f9:7b:
                    45:bb:66:a0:5e:01:be:eb:be:d9:55:08:8d:90:b7:
                    1e:1b:01:32:c6:b1:2d:d7:02:f0:db:9f:f3:ae:35:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6B:D2:BF:A3:CD:CF:39:CC:6C:56:47:ED:20:D5:C2:6F:47:EE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl

            X509v3 Authority Key Identifier:
                keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:29c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:c8:37:61:ec:fe:15:63:67:65:2e:b7:e3:82:56:91:54:
         68:c8:51:7d:1d:c7:9b:04:32:82:71:26:de:43:02:e2:ef:14:
         37:98:ac:99:29:dc:28:bd:a3:8a:c1:63:b5:26:aa:d4:52:33:
         3b:84:71:8f:7b:87:63:74:46:d5:e3:35:1e:03:ca:d5:75:e9:
         4e:c7:3b:e9:d5:1b:a1:64:ff:f7:18:8b:af:fa:29:79:0e:ad:
         bc:42:65:95:3d:cf:37:e3:1a:84:c0:12:7e:74:bb:4c:45:90:
         c8:ae:59:34:7c:ba:66:a4:d4:7c:d2:45:7f:7c:10:12:62:25:
         e1:81:2a:a6:63:33:47:13:d9:de:83:8b:6f:4a:94:68:c0:c6:
         db:ef:33:1c:9e:04:6a:77:03:53:d3:2d:06:de:60:bc:59:f5:
         27:30:ae:54:99:77:82:79:a0:ef:e9:68:65:f7:23:44:f6:28:
         98:b1:90:58:a5:b8:ce:0b:34:48:c5:af:10:1e:16:5f:bb:d6:
         f4:33:88:8f:07:64:a8:53:16:04:33:00:bc:e4:4e:ac:10:b2:
         a8:03:b4:23:58:ad:e2:29:7c:ba:53:3f:40:3e:ad:8c:5f:e7:
         75:4c:bb:40:e5:60:23:82:b7:d8:a3:c0:44:5d:ed:f3:07:77:
         31:12:8f:0a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkC7A9Ccl2r4Pwh5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRiYmJjYTAtMDFmNS00YzcyLTk1OGYtOWU1ZWUyYzk5
ZTJhMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
Nzc1NzFlNzQtNWEzZS00M2E4LTgxM2ItN2IwYzdkMDE5YTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn19kd/C1u+1F7sjmJ1UVfoJds+yWrQz+HS2W
sfotF/ibIDvdWwK0/+4vv4O80Tti0fBs3STonvZi16D1I10W55cePU7tuMuTC6zu
pkscb1gQ4J2dDkAT6YQ+8YrAAluAQyPQmBwaHXzRN+DuZmi+Aq2Zrp/IlwM6BzTX
8sqcaYew23uGQeXN0zARdjjBt6H/r5zvjWSmHM70EGd1PU2JOwesyOQHP4naxEe0
Fn9u2/uxVFoZRF9iXEqFQUpkLTDpTS+lcegwdtv9CeAjMFRs75USI22vBzg+6UZ+
WHq4+XtFu2agXgG+677ZVQiNkLceGwEyxrEt1wLw25/zrjXgSwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGpr0r+jzc85zGxWR+0g1cJvR+4aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGJi
YmNhMC0wMWY1LTRjNzItOTU4Zi05ZTVlZTJjOTllMmEvNDZlMmMxNTMtNTkwZC0z
OWZmLThlMWMtM2UxNmVhYmUxODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWRiYmJjYTAtMDFmNS00YzcyLTk1
OGYtOWU1ZWUyYzk5ZTJhLzFkYmJiY2EwLTAxZjUtNGM3Mi05NThmLTllNWVlMmM5
OWUyYS5jcmwwHwYDVR0jBBgwFoAUQXx7qDTtgQOChu7Zl/pwHFtvJwAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGJiYmNhMC0wMWY1LTRjNzItOTU4Zi05ZTVl
ZTJjOTllMmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcpwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA7Vsg3Yez+FWNnZS6344JWkVRoyFF9HcebBDKCcSbeQwLi7xQ3mKyZ
KdwovaOKwWO1JqrUUjM7hHGPe4djdEbV4zUeA8rVdelOxzvp1RuhZP/3GIuv+il5
Dq28QmWVPc834xqEwBJ+dLtMRZDIrlk0fLpmpNR80kV/fBASYiXhgSqmYzNHE9ne
g4tvSpRowMbb7zMcngRqdwNT0y0G3mC8WfUnMK5UmXeCeaDv6Whl9yNE9iiYsZBY
pbjOCzRIxa8QHhZfu9b0M4iPB2SoUxYEMwC85E6sELKoA7QjWK3iKXy6Uz9APq2M
X+d1TLtA5WAjgrfYo8BEXe3zB3cxEo8K
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:37 2025 by rpki-client