Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7ea1845e-735f-3299-8e6e-ffffcb0c3965.roa
File:                     7ea1845e-735f-3299-8e6e-ffffcb0c3965.roa (raw, json)
Hash identifier:          ursjLvG83zG49esPdc+EqC57ZQvfF49kj49qUWYt9xY=
Subject key identifier:   6C:2D:DB:5E:3C:EE:84:3E:EC:8A:6E:1C:7D:E7:30:70:5B:87:30:68
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584871C06F5ECB1EA17188D9F500
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7ea1845e-735f-3299-8e6e-ffffcb0c3965.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2602:fdeb:20::/48 maxlen: 48
                          2602:fdeb:21::/48 maxlen: 48
                          2602:fdeb:22::/48 maxlen: 48
                          2602:fdeb:23::/48 maxlen: 48
                          2602:fdeb:24::/48 maxlen: 48
                          2602:fdeb:25::/48 maxlen: 48
                          2602:fdeb:26::/48 maxlen: 48
                          2602:fdeb:27::/48 maxlen: 48
                          2602:fdeb:28::/48 maxlen: 48
                          2602:fdeb:29::/48 maxlen: 48
                          2602:fdeb:30::/48 maxlen: 48
                          2602:fdeb:31::/48 maxlen: 48
                          2602:fdeb:32::/48 maxlen: 48
                          2602:fdeb:33::/48 maxlen: 48
                          2602:fdeb:34::/48 maxlen: 48
                          2602:fdeb:35::/48 maxlen: 48
                          2602:fdeb:36::/48 maxlen: 48
                          2602:fdeb:37::/48 maxlen: 48
                          2602:fdeb:38::/48 maxlen: 48
                          2602:fdeb:39::/48 maxlen: 48
                          2602:fdeb:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6f:5e:cb:1e:a1:71:88:d9:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=7bd7a229-1d75-4759-ae71-36c8a663f2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:aa:dc:30:db:33:91:f5:52:93:f3:8b:50:
                    c7:9e:9d:65:eb:c9:1b:0d:45:05:ed:9d:88:ec:e8:
                    79:fa:b5:9a:3b:a1:31:15:fe:2b:f4:9c:13:53:ea:
                    8c:5c:95:fa:d3:69:79:a5:2a:4c:08:00:b0:f1:dc:
                    22:33:75:7a:49:8f:e4:78:d5:b2:57:90:a0:c0:0e:
                    2b:6b:41:86:8c:14:c1:a2:c1:48:58:c7:67:34:ea:
                    e2:7e:bb:cd:c5:1a:b7:8e:c1:06:ce:ea:40:42:64:
                    2c:58:65:2f:90:bf:05:80:fd:54:96:3f:04:4e:a8:
                    1d:fa:e4:54:a0:20:7f:5c:af:4b:90:0e:b5:42:de:
                    13:7b:96:d1:2d:ff:0d:00:b5:36:b4:c9:51:32:7e:
                    61:6b:e5:92:29:6a:05:c4:1f:5a:90:43:d3:0f:71:
                    51:74:80:78:77:fa:68:66:97:08:0c:6d:9f:70:26:
                    cd:c1:bb:03:cf:c1:7f:55:c8:fa:9f:1c:ec:9e:6c:
                    8b:d9:a0:12:73:0b:b9:7b:3d:87:1c:d5:5a:25:b0:
                    84:ba:79:95:c7:b3:db:f9:04:f0:5f:4e:90:88:6b:
                    92:a2:fd:dd:33:2f:92:db:8f:4e:30:47:38:b9:ab:
                    b3:31:ac:2a:18:0f:79:95:7d:fa:55:d0:3c:05:e2:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2D:DB:5E:3C:EE:84:3E:EC:8A:6E:1C:7D:E7:30:70:5B:87:30:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7ea1845e-735f-3299-8e6e-ffffcb0c3965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:20::-2602:fdeb:29:ffff:ffff:ffff:ffff:ffff
                  2602:fdeb:30::-2602:fdeb:39:ffff:ffff:ffff:ffff:ffff
                  2602:fdeb:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:44:8c:72:d6:cd:6d:9d:e0:d7:a8:43:43:86:85:51:3b:58:
         37:3a:43:da:98:1c:00:4d:bd:af:df:e9:c5:57:64:11:f8:eb:
         d8:d8:66:5e:fe:29:db:62:07:6f:4d:c2:0f:2c:3a:7f:7d:d3:
         29:95:8e:77:1c:f3:60:36:38:d9:51:a3:fc:19:0a:d4:2c:1b:
         a9:83:4a:01:99:81:93:e7:cc:38:14:57:b1:27:b5:9f:65:8e:
         6a:4e:43:9f:e4:6f:ca:86:4d:9a:9f:17:e3:44:16:b4:45:c8:
         67:6c:ea:83:d8:61:8a:a9:a2:85:96:84:54:66:0a:10:cb:87:
         bc:a1:14:e4:bb:1a:a9:91:37:37:72:66:6c:3b:04:d2:e6:79:
         e7:e9:3b:49:77:1c:79:f1:de:f4:cf:d9:60:3a:5e:71:06:82:
         ba:ea:a0:ba:b4:fd:0b:df:52:9e:83:93:ce:8d:ca:85:38:e6:
         cc:e3:0e:e3:df:02:ed:6c:a4:08:4b:ea:ad:07:fe:61:66:92:
         c5:34:d4:33:15:66:3d:d9:bd:4c:81:4a:b5:fe:28:df:95:f7:
         79:df:03:37:be:93:27:ec:e7:7c:8d:7a:81:03:4b:b9:e2:2f:
         5f:d3:60:28:fb:63:dc:87:99:a8:b8:22:1c:56:d3:c6:8e:c7:
         a7:9e:18:05
-----BEGIN CERTIFICATE-----
MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWEhxwG9eyx6hcYjZ9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2
NTI1MB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
N2JkN2EyMjktMWQ3NS00NzU5LWFlNzEtMzZjOGE2NjNmMmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjumq3DDbM5H1UpPzi1DHnp1l68kbDUUF7Z2I
7Oh5+rWaO6ExFf4r9JwTU+qMXJX602l5pSpMCACw8dwiM3V6SY/keNWyV5CgwA4r
a0GGjBTBosFIWMdnNOrifrvNxRq3jsEGzupAQmQsWGUvkL8FgP1Ulj8ETqgd+uRU
oCB/XK9LkA61Qt4Te5bRLf8NALU2tMlRMn5ha+WSKWoFxB9akEPTD3FRdIB4d/po
ZpcIDG2fcCbNwbsDz8F/Vcj6nxzsnmyL2aAScwu5ez2HHNVaJbCEunmVx7Pb+QTw
X06QiGuSov3dMy+S249OMEc4uauzMawqGA95lX36VdA8BeJ68wIDAQABo4IDgDCC
A3wwHQYDVR0OBBYEFGwt21487oQ+7IpuHH3nMHBbhzBoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5
MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvN2VhMTg0NWUtNzM1Zi0z
Mjk5LThlNmUtZmZmZmNiMGMzOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3
ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz
NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk
NjU0MzY1MjUuY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxMBIDBwUmAv3r
ACADBwEmAv3rACgwEgMHBCYC/esAMAMHASYC/esAOAMHACYC/esAQDBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQBxRIxy1s1tneDXqENDhoVRO1g3OkPamBwATb2v3+nFV2QR+OvY2GZe/inbYgdv
TcIPLDp/fdMplY53HPNgNjjZUaP8GQrULBupg0oBmYGT58w4FFexJ7WfZY5qTkOf
5G/Khk2anxfjRBa0RchnbOqD2GGKqaKFloRUZgoQy4e8oRTkuxqpkTc3cmZsOwTS
5nnn6TtJdxx58d70z9lgOl5xBoK66qC6tP0L31Keg5POjcqFOObM4w7j3wLtbKQI
S+qtB/5hZpLFNNQzFWY92b1MgUq1/ijflfd53wM3vpMn7Od8jXqBA0u54i9f02Ao
+2Pch5mouCIcVtPGjsennhgF
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:58 2025 by rpki-client