Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/fc5b7c2b-5172-3f4d-b5d3-31f1b086c282.roa
File:                     fc5b7c2b-5172-3f4d-b5d3-31f1b086c282.roa (raw, json)
Hash identifier:          dqzSXh01wBi60KyBkvij/ayyFpDbX+8xAGO0v9ZQ7y0=
Subject key identifier:   1E:72:FB:6B:57:8F:24:93:4C:38:D8:33:C7:2F:FE:60:FE:3F:A2:81
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F43285848E16BE4815CDAED0070F3FF00
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/fc5b7c2b-5172-3f4d-b5d3-31f1b086c282.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     53334
IP address blocks:        2606:3380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e4:81:5c:da:ed:00:70:f3:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=76f0d492-74a9-4c30-b230-2a8adf6b96a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:54:c8:0d:84:6d:85:24:ce:cf:02:4e:ad:52:
                    b0:57:3b:ea:a0:86:5a:c3:a6:fe:9b:16:ee:4c:76:
                    45:a3:b2:e6:56:50:db:d5:7c:22:94:ff:b5:31:19:
                    b1:06:24:52:4b:bc:a1:ce:18:d9:db:04:21:9f:e4:
                    b3:ec:c3:ea:b8:c0:87:78:3f:33:aa:34:c9:64:fe:
                    de:de:fc:7d:d7:47:ad:3b:08:94:a8:b7:43:91:63:
                    2b:54:33:7c:fa:bc:24:75:e1:62:22:e5:54:6b:9c:
                    e6:38:10:fd:3b:97:d6:4a:77:1f:aa:4d:e5:79:26:
                    70:7c:6c:4a:12:35:68:48:68:c4:65:f2:27:6d:64:
                    61:cd:1a:5d:2d:a0:87:97:59:88:9f:27:f8:28:12:
                    8f:a7:5b:b7:74:9f:e9:83:d5:3c:87:11:5b:49:0d:
                    1a:0c:0c:f9:a9:64:69:98:86:01:51:64:8d:33:dc:
                    1e:95:ee:e7:1f:75:08:68:dd:c3:5b:4f:92:7a:b8:
                    bf:77:2f:ac:bd:c0:18:27:f4:23:49:78:40:ad:e1:
                    96:fd:37:80:7a:5e:c3:07:f7:54:9e:bb:a7:cd:62:
                    ba:b6:66:b1:d8:57:66:cb:a4:cb:af:4e:90:c5:60:
                    8c:63:a8:f9:b1:ac:6b:ff:c9:09:e1:07:59:5b:4a:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:72:FB:6B:57:8F:24:93:4C:38:D8:33:C7:2F:FE:60:FE:3F:A2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/fc5b7c2b-5172-3f4d-b5d3-31f1b086c282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:7b:18:73:a7:76:76:3e:fe:88:1e:0b:b1:5b:69:26:44:
         da:0d:83:63:31:e6:e4:0f:36:e1:4c:6d:c8:e8:66:b8:eb:01:
         2f:88:9c:37:b0:29:71:0a:62:bf:97:9d:d0:b7:9e:5b:17:5d:
         c3:c0:df:f8:14:3b:7a:9c:50:10:94:c3:99:d7:09:29:eb:05:
         b6:57:46:9b:65:94:5f:23:ce:9f:a2:f8:cb:a3:50:30:12:f2:
         ff:43:47:2e:0e:2c:d3:b6:a3:7b:82:1d:a0:23:10:ae:6a:e1:
         71:cb:3c:3f:a1:2f:e5:77:8b:6b:08:7e:d3:cd:95:60:76:e2:
         92:b2:5f:69:30:98:79:c6:99:c3:eb:6b:2c:08:87:e8:8e:ba:
         ed:37:58:5e:73:a3:c2:fd:0f:ff:18:71:ff:bc:95:d7:10:a4:
         21:e9:e0:d4:b6:a8:27:00:d8:5f:0c:5c:bd:1b:31:7a:12:93:
         37:be:d2:20:32:f4:8f:05:87:8b:64:b4:a1:73:e7:f9:4c:f4:
         63:65:1a:0f:55:d5:18:8c:f4:6b:4a:02:5d:28:15:22:f4:dc:
         ac:b8:ef:e8:68:b6:d9:2d:a6:1a:90:7e:36:83:fd:08:95:99:
         98:33:05:c8:53:b6:eb:28:a3:13:4b:86:95:13:95:ac:3f:32:
         b9:32:8d:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha+SBXNrtAHDz/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj
OGQ0MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzZmMGQ0OTItNzRhOS00YzMwLWIyMzAtMmE4YWRmNmI5NmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVTIDYRthSTOzwJOrVKwVzvqoIZaw6b+mxbu
THZFo7LmVlDb1XwilP+1MRmxBiRSS7yhzhjZ2wQhn+Sz7MPquMCHeD8zqjTJZP7e
3vx910etOwiUqLdDkWMrVDN8+rwkdeFiIuVUa5zmOBD9O5fWSncfqk3leSZwfGxK
EjVoSGjEZfInbWRhzRpdLaCHl1mInyf4KBKPp1u3dJ/pg9U8hxFbSQ0aDAz5qWRp
mIYBUWSNM9wele7nH3UIaN3DW0+Seri/dy+svcAYJ/QjSXhAreGW/TeAel7DB/dU
nrunzWK6tmax2Fdmy6TLr06QxWCMY6j5saxr/8kJ4QdZW0qMQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFB5y+2tXjySTTDjYM8cv/mD+P6KBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi
YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvZmM1YjdjMmItNTE3Mi0z
ZjRkLWI1ZDMtMzFmMWIwODZjMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy
OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4
YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0
NGZmOGM4ZDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYzgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBuxnsYc6d2dj7+iB4LsVtpJkTaDYNjMebkDzbhTG3I6Ga46wEviJw3
sClxCmK/l53Qt55bF13DwN/4FDt6nFAQlMOZ1wkp6wW2V0abZZRfI86fovjLo1Aw
EvL/Q0cuDizTtqN7gh2gIxCuauFxyzw/oS/ld4trCH7TzZVgduKSsl9pMJh5xpnD
62ssCIfojrrtN1hec6PC/Q//GHH/vJXXEKQh6eDUtqgnANhfDFy9GzF6EpM3vtIg
MvSPBYeLZLShc+f5TPRjZRoPVdUYjPRrSgJdKBUi9NysuO/oaLbZLaYakH42g/0I
lZmYMwXIU7brKKMTS4aVE5WsPzK5Mo0Z
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:06:00 2025 by rpki-client