Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa
File:                     6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa (raw, json)
Hash identifier:          imbuSCvhOxKO7ZzgP/MpbOX5/jvrr74ct1XH3N7143o=
Subject key identifier:   E3:DE:D4:95:C4:CA:AC:0C:E7:FC:2C:C9:A1:67:D5:71:D9:60:20:CD
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858480BDA636EF7457A51FBDE4FC0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     4181
IP address blocks:        2600:3400::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:63:6e:f7:45:7a:51:fb:de:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=a2b67b1a-5bdd-4cae-94b7-c69f52ee2968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:3f:1c:a2:49:b6:44:68:3b:1f:71:41:c0:
                    c0:46:ba:7e:b1:34:4d:9b:5c:f2:c8:61:c2:a1:62:
                    87:a5:55:04:9d:97:9b:a3:d3:fd:dd:ed:c6:66:43:
                    63:57:79:34:27:87:69:d6:f1:44:bb:ad:15:a9:f1:
                    14:41:78:79:89:92:d9:fd:af:8c:4d:32:13:f4:29:
                    3c:8a:a1:7f:5a:17:0f:ae:61:01:b5:c8:86:ee:a5:
                    84:f1:25:84:37:7a:82:02:67:aa:e2:a0:6f:2c:51:
                    ca:d2:5e:52:8e:e2:55:95:43:77:61:fc:66:d2:57:
                    06:85:f9:9e:ea:20:cc:12:39:b2:79:70:42:77:05:
                    99:31:1c:2f:eb:31:98:f5:62:ba:07:74:2f:27:bb:
                    67:78:83:85:47:f8:a1:81:02:ef:dc:19:8c:dd:89:
                    b7:6c:a5:f4:6d:8a:c7:82:b3:e8:2b:eb:10:9e:56:
                    1b:08:bf:55:7a:ee:8e:c3:70:32:57:ae:58:38:78:
                    1d:57:c8:22:75:02:2d:e8:e8:5a:3e:22:14:58:2d:
                    0a:4c:04:d2:13:29:78:98:fc:96:8e:4d:3f:1f:08:
                    b2:53:34:ef:87:7a:6b:37:24:f5:67:45:ff:27:6e:
                    c7:e7:03:50:23:0a:67:72:dd:99:f6:70:76:8a:56:
                    d2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:D4:95:C4:CA:AC:0C:E7:FC:2C:C9:A1:67:D5:71:D9:60:20:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3400::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a5:7f:21:4c:48:e7:bb:f9:ed:b4:ca:73:c9:39:5e:c8:25:
         3b:9b:3f:fe:f4:93:c0:4f:75:e9:ec:f9:aa:eb:03:0e:29:e6:
         03:3e:2c:ac:04:75:35:b4:e8:b4:64:66:aa:3b:08:a9:dc:74:
         b2:03:e1:cf:f0:42:21:06:1e:ca:49:ac:88:8e:e4:9e:6f:34:
         93:04:70:f8:f5:f8:51:b8:f4:e6:f5:fd:c3:2a:ef:2d:79:08:
         e3:e1:c7:4c:ca:c1:25:96:bd:a8:12:d3:70:ec:2d:43:8e:50:
         87:2f:39:d9:5a:a3:58:49:6a:a8:ed:23:1a:61:d1:d1:5b:35:
         50:9f:01:89:8c:4a:82:e9:84:1b:61:d5:00:46:b8:da:56:f1:
         f4:00:e5:5c:26:83:5f:0a:78:aa:73:00:a0:78:06:4d:e4:c0:
         01:5f:ae:b6:e0:67:eb:3d:51:4a:c6:36:fc:f7:c7:54:44:67:
         df:ce:68:a0:9f:27:55:c0:91:f9:3b:49:5c:6d:c0:e5:c0:4d:
         35:22:ae:f3:8d:da:e4:18:77:44:5d:30:25:ae:64:4c:1d:ab:
         5d:62:bb:55:1a:02:81:2c:29:e5:cd:66:fe:0d:51:49:71:7c:
         9f:a7:f4:fd:05:d8:88:3d:7a:ab:99:6f:e1:e5:63:a0:4c:f8:
         8a:b1:0f:d8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgL2mNu90V6UfveT8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
YTJiNjdiMWEtNWJkZC00Y2FlLTk0YjctYzY5ZjUyZWUyOTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKY/HKJJtkRoOx9xQcDARrp+sTRNm1zyyGHC
oWKHpVUEnZebo9P93e3GZkNjV3k0J4dp1vFEu60VqfEUQXh5iZLZ/a+MTTIT9Ck8
iqF/WhcPrmEBtciG7qWE8SWEN3qCAmeq4qBvLFHK0l5SjuJVlUN3Yfxm0lcGhfme
6iDMEjmyeXBCdwWZMRwv6zGY9WK6B3QvJ7tneIOFR/ihgQLv3BmM3Ym3bKX0bYrH
grPoK+sQnlYbCL9Veu6Ow3AyV65YOHgdV8gidQIt6OhaPiIUWC0KTATSEyl4mPyW
jk0/HwiyUzTvh3prNyT1Z0X/J27H5wNQIwpnct2Z9nB2ilbSKwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOPe1JXEyqwM5/wsyaFn1XHZYCDNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvNmZiMTJhM2QtOTQ5Zi0z
YWIxLWJjM2EtZjRhNjk4ZmFhOGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgA0ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5pX8hTEjnu/nttMpzyTleyCU7mz/+9JPAT3Xp7Pmq6wMOKeYDPiys
BHU1tOi0ZGaqOwip3HSyA+HP8EIhBh7KSayIjuSebzSTBHD49fhRuPTm9f3DKu8t
eQjj4cdMysEllr2oEtNw7C1DjlCHLznZWqNYSWqo7SMaYdHRWzVQnwGJjEqC6YQb
YdUARrjaVvH0AOVcJoNfCniqcwCgeAZN5MABX6624GfrPVFKxjb898dURGffzmig
nydVwJH5O0lcbcDlwE01Iq7zjdrkGHdEXTAlrmRMHatdYrtVGgKBLCnlzWb+DVFJ
cXyfp/T9BdiIPXqrmW/h5WOgTPiKsQ/Y
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:18 2025 by rpki-client