Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
File:                     13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa (raw, json)
Hash identifier:          UAtalb3YsCkZ50d4v0FDjozc3PyZ7ftQjeCl2Snc4rM=
Subject key identifier:   46:23:6C:4D:23:F8:54:F7:F9:3F:98:61:5B:1B:72:47:0A:09:33:0A
Certificate issuer:       /CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
Certificate serial:       010D0C9F43285848E16BE4F89FAA6882A68A7100
Authority key identifier: 00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     395460
IP address blocks:        2620:6:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e4:f8:9f:aa:68:82:a6:8a:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=117c4485-1605-4141-9195-db4846553de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:09:d1:80:a0:4e:19:79:dc:21:2c:2e:1c:9b:
                    04:1b:f3:56:81:09:0e:a5:b1:66:90:93:bf:55:bf:
                    1e:1e:12:c4:90:da:e5:62:81:f3:cb:76:36:f0:05:
                    26:a8:81:bc:34:1b:69:8d:ac:44:c6:66:2c:c7:33:
                    df:f9:25:15:0d:f9:36:96:6a:5d:7b:34:53:53:76:
                    e0:5d:75:e6:49:88:e5:fd:e7:f5:b0:4a:6e:5c:51:
                    27:1b:ce:f6:93:1d:df:6b:91:64:f2:b9:8b:0a:4e:
                    b5:8f:7e:c2:18:53:a9:47:54:5e:42:23:6b:97:88:
                    65:c5:1e:30:19:8c:77:f8:6b:c2:b7:79:72:04:03:
                    cd:f3:6e:8d:75:01:0a:dc:0f:e7:40:de:d8:bd:2d:
                    b5:86:cd:bc:ae:4d:09:87:89:82:d7:3c:9b:57:9c:
                    4a:e2:ab:ee:5e:e7:64:0b:a5:bd:4f:77:40:5a:9e:
                    4f:7b:46:28:d8:f5:77:27:0f:c8:c6:68:99:fb:e2:
                    30:5c:e5:2c:d5:dc:20:bf:f8:7a:f0:b9:57:7a:e0:
                    49:41:8a:03:3b:f3:28:b0:a2:dd:38:b2:16:15:2a:
                    6f:20:91:03:83:cb:c2:f7:44:78:15:fc:fa:7b:16:
                    6b:03:1b:e1:fe:6d:7a:c9:2e:09:b4:78:2e:f2:b0:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:23:6C:4D:23:F8:54:F7:F9:3F:98:61:5B:1B:72:47:0A:09:33:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:81:04:00:b5:0d:8c:8f:b0:7e:1a:6e:b8:2b:2e:b0:6b:
         8b:8e:65:54:50:b3:2e:77:8f:29:2f:31:02:43:8b:83:9e:2a:
         c6:06:a7:b4:f2:aa:82:4f:cc:2a:de:c9:89:83:fe:b1:6f:af:
         9b:0a:17:10:5a:3b:fc:2a:af:b7:ba:cc:8e:cb:09:11:58:42:
         9d:38:34:5e:38:b3:ca:cb:18:ed:8a:ea:25:7a:e4:32:fb:a1:
         6f:6c:8b:d9:4b:80:c2:b6:dd:fb:d5:5c:85:a2:ae:cb:ac:ec:
         12:54:19:e1:ff:dc:e8:9b:08:4b:26:45:ed:d2:c3:91:d0:42:
         7d:60:4f:27:73:92:75:5d:c9:89:d7:06:85:e8:ac:8e:8e:85:
         01:ab:5e:c4:92:ac:74:cc:b2:44:4c:a0:98:4e:f6:76:f7:02:
         38:39:25:e1:ac:75:33:f1:b3:b0:08:29:a2:8b:4b:f4:c7:3c:
         d8:cf:d6:67:d8:fe:1b:9c:7e:93:59:2a:04:0e:49:d7:3a:53:
         fe:23:ef:43:d5:5d:f4:f5:43:9d:39:8a:46:b2:45:a2:c3:37:
         b8:42:a8:f4:39:9d:ee:b6:56:9c:c0:a5:df:81:b0:c9:1a:31:
         a2:54:8b:bf:3d:ca:ac:8f:0f:16:46:ec:87:15:47:fb:41:d2:
         39:86:72:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjha+T4n6pogqaKcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzBkMTZhZDMtYzgyNi00ZTQyLTgwM2QtMWRlZDZiM2Yx
YTU5MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTE3YzQ0ODUtMTYwNS00MTQxLTkxOTUtZGI0ODQ2NTUzZGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQnRgKBOGXncISwuHJsEG/NWgQkOpbFmkJO/
Vb8eHhLEkNrlYoHzy3Y28AUmqIG8NBtpjaxExmYsxzPf+SUVDfk2lmpdezRTU3bg
XXXmSYjl/ef1sEpuXFEnG872kx3fa5Fk8rmLCk61j37CGFOpR1ReQiNrl4hlxR4w
GYx3+GvCt3lyBAPN826NdQEK3A/nQN7YvS21hs28rk0Jh4mC1zybV5xK4qvuXudk
C6W9T3dAWp5Pe0Yo2PV3Jw/IxmiZ++IwXOUs1dwgv/h68LlXeuBJQYoDO/MosKLd
OLIWFSpvIJEDg8vC90R4Ffz6exZrAxvh/m16yS4JtHgu8rBPlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEYjbE0j+FT3+T+YYVsbckcKCTMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMGQx
NmFkMy1jODI2LTRlNDItODAzZC0xZGVkNmIzZjFhNTkvMTNhZDM5ZTgtNmIyMS0z
YjMyLThhN2QtZGY3ZGFiNThiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzBkMTZhZDMtYzgyNi00ZTQyLTgw
M2QtMWRlZDZiM2YxYTU5LzMwZDE2YWQzLWM4MjYtNGU0Mi04MDNkLTFkZWQ2YjNm
MWE1OS5jcmwwHwYDVR0jBBgwFoAUANIYw9RvKTagT+dk2D+9oYNTBnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMGQxNmFkMy1jODI2LTRlNDItODAzZC0xZGVk
NmIzZjFhNTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAABiAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK03gQQAtQ2Mj7B+Gm64Ky6wa4uOZVRQsy53jykvMQJDi4OeKsYG
p7TyqoJPzCreyYmD/rFvr5sKFxBaO/wqr7e6zI7LCRFYQp04NF44s8rLGO2K6iV6
5DL7oW9si9lLgMK23fvVXIWirsus7BJUGeH/3OibCEsmRe3Sw5HQQn1gTydzknVd
yYnXBoXorI6OhQGrXsSSrHTMskRMoJhO9nb3Ajg5JeGsdTPxs7AIKaKLS/THPNjP
1mfY/hucfpNZKgQOSdc6U/4j70PVXfT1Q505ikayRaLDN7hCqPQ5ne62VpzApd+B
sMkaMaJUi789yqyPDxZG7IcVR/tB0jmGcv8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 15:01:17 2025 by rpki-client