Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa
File:                     b69de0d6-eab7-3ae4-930c-75753b86626f.roa (raw, json)
Hash identifier:          /0KeZjpQxI7KDRgiZofVCrhJvYyyUWH5lj8rcIgPBm4=
Subject key identifier:   00:75:99:81:71:F5:E5:13:C6:FD:E4:C3:3D:D2:84:DA:4D:5A:C1:04
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F43285848E16BDEC2A4AE5E3B209CD780
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     55091
IP address blocks:        2620:115:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:de:c2:a4:ae:5e:3b:20:9c:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=06c7cee1-1ddc-4862-ae33-30c48fd42ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:f5:12:56:ed:b8:53:1f:db:8c:97:55:30:
                    c0:64:9a:63:b0:2a:89:8f:9a:58:91:28:e7:ad:47:
                    c2:8d:7e:25:9b:f1:42:f2:81:35:14:d3:08:1a:02:
                    cf:dd:b7:0d:cb:21:34:c0:a0:5d:9f:d9:15:e5:32:
                    ee:ad:91:ec:bf:ab:7d:ae:63:7c:1b:3f:43:36:9a:
                    46:c4:5e:b5:f0:80:f4:57:eb:75:94:39:a1:bc:52:
                    a4:c3:cb:39:01:11:d1:8e:40:ef:0d:00:78:ac:94:
                    ec:5f:12:17:e8:68:a4:63:5f:d8:ea:d0:d8:72:a5:
                    06:a3:3c:75:4a:8d:b2:55:28:70:19:00:ce:8f:aa:
                    f4:a2:0a:7f:32:5d:57:67:2c:4c:2b:4f:8e:03:e7:
                    b7:88:08:66:79:08:93:66:e0:96:36:7f:68:ec:b5:
                    1b:41:91:02:51:33:3c:6a:7a:24:ba:cd:a9:aa:35:
                    4b:3e:93:2d:ed:15:5d:30:29:62:4d:fd:30:71:a3:
                    ae:cf:02:85:0c:39:b9:3f:02:76:e0:dd:fc:93:2b:
                    53:38:6b:4a:04:e0:7b:04:d5:2b:33:08:23:e9:d7:
                    60:91:66:3f:00:6d:64:a3:25:5f:6f:ef:1d:9b:f1:
                    70:4d:fb:eb:a8:51:da:60:b6:cf:72:3c:8e:de:3c:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:99:81:71:F5:E5:13:C6:FD:E4:C3:3D:D2:84:DA:4D:5A:C1:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:115:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d9:2d:fe:af:c8:e2:d3:ba:c3:27:68:0d:30:a8:2a:9e:3c:
         9f:ae:dd:2b:b1:78:cb:36:d8:58:f7:e7:cc:5d:86:f8:22:08:
         25:31:04:76:aa:2c:c0:bb:a7:4f:ed:67:2a:b5:93:cb:0d:ce:
         5c:ad:f9:1f:78:a2:9a:9a:90:1f:86:c2:25:b5:5d:d7:b7:cc:
         4c:49:46:57:d4:2d:e2:98:9c:49:30:69:18:3e:67:3d:5f:ba:
         c1:28:1e:99:37:7e:da:ce:91:ee:de:29:d3:e9:43:6e:63:c7:
         fb:a7:6c:ed:c6:22:ca:87:c8:79:97:4b:9f:ca:7b:93:8f:b8:
         aa:0c:04:29:93:37:4a:a1:df:bd:74:74:9b:6c:ff:2d:74:fc:
         b2:8d:1f:72:8d:c8:fd:29:ab:e4:63:10:ce:b9:15:ee:3c:22:
         3c:e0:e2:cb:7d:8a:f3:6a:a9:f9:e6:99:8d:31:0e:79:04:90:
         02:1a:b5:7a:25:3e:c4:9b:70:3e:d3:c3:54:43:13:82:f4:c4:
         bb:75:fe:42:d0:e1:84:9d:e4:cd:70:ce:fe:e2:23:c7:fc:fb:
         43:17:1b:8c:7f:95:81:7e:ee:0c:eb:9e:e6:6c:e7:b5:1f:5e:
         4e:99:5a:d3:3f:64:26:aa:72:db:05:1d:96:b0:8b:06:c3:6f:
         5b:ea:19:10
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjha97CpK5eOyCc14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhNzUyNjEtNGUyNy00NzhhLThmOWUtNzFhOTkxNWNl
OWI0MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDZjN2NlZTEtMWRkYy00ODYyLWFlMzMtMzBjNDhmZDQyYmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHH1ElbtuFMf24yXVTDAZJpjsCqJj5pYkSjn
rUfCjX4lm/FC8oE1FNMIGgLP3bcNyyE0wKBdn9kV5TLurZHsv6t9rmN8Gz9DNppG
xF618ID0V+t1lDmhvFKkw8s5ARHRjkDvDQB4rJTsXxIX6GikY1/Y6tDYcqUGozx1
So2yVShwGQDOj6r0ogp/Ml1XZyxMK0+OA+e3iAhmeQiTZuCWNn9o7LUbQZECUTM8
anokus2pqjVLPpMt7RVdMCliTf0wcaOuzwKFDDm5PwJ24N38kytTOGtKBOB7BNUr
Mwgj6ddgkWY/AG1koyVfb+8dm/FwTfvrqFHaYLbPcjyO3jzgaQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAB1mYFx9eUTxv3kwz3ShNpNWsEEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3
NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5OTE1Y2U5YjQvYjY5ZGUwZDYtZWFiNy0z
YWU0LTkzMGMtNzU3NTNiODY2MjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTZhNzUyNjEtNGUyNy00NzhhLThm
OWUtNzFhOTkxNWNlOWI0LzU2YTc1MjYxLTRlMjctNDc4YS04ZjllLTcxYTk5MTVj
ZTliNC5jcmwwHwYDVR0jBBgwFoAUpD4W+eX7d/UJhUBw50W6Yj2uG0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5
OTE1Y2U5YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABFXAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAStkt/q/I4tO6wydoDTCoKp48n67dK7F4yzbYWPfnzF2G+CIIJTEE
dqoswLunT+1nKrWTyw3OXK35H3iimpqQH4bCJbVd17fMTElGV9Qt4picSTBpGD5n
PV+6wSgemTd+2s6R7t4p0+lDbmPH+6ds7cYiyofIeZdLn8p7k4+4qgwEKZM3SqHf
vXR0m2z/LXT8so0fco3I/Smr5GMQzrkV7jwiPODiy32K82qp+eaZjTEOeQSQAhq1
eiU+xJtwPtPDVEMTgvTEu3X+QtDhhJ3kzXDO/uIjx/z7QxcbjH+VgX7uDOue5mzn
tR9eTpla0z9kJqpy2wUdlrCLBsNvW+oZEA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:59 2025 by rpki-client