Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1fa04274-fc67-31d1-886c-53925e1ad307.roa
File:                     1fa04274-fc67-31d1-886c-53925e1ad307.roa (raw, json)
Hash identifier:          gBnNlt5r7W/Vr9/HPCftae70AM9XIYxSCGhlUE+Nv7I=
Subject key identifier:   DD:42:5A:72:C7:13:0C:94:04:F6:8D:33:C5:1C:56:38:C4:14:F5:38
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858492E13BA4C8312717939F24480
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1fa04274-fc67-31d1-886c-53925e1ad307.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     237
IP address blocks:        2001:468:26e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:ba:4c:83:12:71:79:39:f2:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=f6853a4f-bc33-445d-9df0-43967910a01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:79:29:03:ed:0f:c4:ce:53:39:23:26:c9:
                    cb:fe:d2:82:4c:0d:f3:ec:4e:94:19:b8:5a:85:79:
                    62:79:84:f2:8f:c6:df:fe:e9:ac:3d:c3:07:a8:fa:
                    c9:b3:c9:6e:45:94:16:a9:21:54:ed:67:61:71:66:
                    5d:5c:c2:55:db:14:fe:fc:19:e2:dc:d2:71:72:0a:
                    a6:bf:14:86:b6:b5:c3:b7:56:e8:b1:15:c9:4a:77:
                    3d:54:5f:70:00:4b:6c:4b:6d:11:2d:8b:d7:ac:37:
                    e4:e0:f5:a1:48:db:52:64:bb:47:b9:18:09:e0:e1:
                    7d:ef:9a:a9:48:13:96:5d:9f:90:9f:61:04:7e:4f:
                    1b:ac:74:37:b5:b4:98:09:96:8f:48:51:e6:1d:1e:
                    0c:41:c7:73:27:6f:99:8a:22:4e:aa:72:29:9d:48:
                    a2:db:79:55:42:bc:13:78:23:15:3c:0a:b1:9f:61:
                    65:28:53:fb:54:01:66:8a:1c:a3:a5:d6:7c:8e:7e:
                    c5:9f:6d:79:89:8b:48:9d:dc:76:d3:a6:13:4a:4e:
                    06:60:f9:87:59:44:26:3b:d8:8c:6b:bb:73:b6:1d:
                    af:9a:bf:6f:28:11:38:f5:c8:55:a5:57:ad:40:cd:
                    7f:f8:7f:31:b6:d8:90:5f:a4:7f:56:78:a0:89:4f:
                    f5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:42:5A:72:C7:13:0C:94:04:F6:8D:33:C5:1C:56:38:C4:14:F5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1fa04274-fc67-31d1-886c-53925e1ad307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:26e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:c8:89:1b:a7:d0:be:1d:e8:15:a8:0d:81:b0:f9:19:9d:
         22:4f:9f:7e:a9:6f:b4:0b:bc:b6:83:cf:91:59:04:f8:95:1e:
         bd:b8:91:05:b1:b5:87:62:c3:66:ac:85:ae:56:93:11:0a:29:
         65:ac:be:50:88:ff:45:76:c5:32:2a:6c:3f:a3:fb:ae:d3:9a:
         9f:70:31:e9:17:60:ec:fa:bd:6a:7a:55:81:26:fc:41:97:e7:
         9a:75:a4:aa:ba:6f:b7:3a:a6:25:e8:2d:e6:a6:21:28:43:af:
         cc:b0:cf:59:93:41:b2:ac:0d:b4:a9:e3:9c:e4:2d:33:b3:42:
         65:60:7b:4c:f6:aa:ed:20:c4:0a:20:65:30:1d:7e:b3:8f:f8:
         c9:94:58:b0:5a:bf:a2:8c:44:de:88:9e:53:10:64:45:ab:35:
         1f:59:64:3f:ef:e9:7a:9e:14:92:30:77:57:78:d8:91:74:cd:
         8d:38:1c:33:bb:ca:f4:e7:47:6a:9d:6a:e7:73:b0:73:12:2c:
         55:7d:19:56:3b:12:08:d7:75:36:6c:60:8a:46:f9:9b:16:5c:
         ef:d7:ed:a7:9a:f3:49:66:de:1d:d0:2b:a4:c8:3f:c3:31:80:
         18:a5:22:81:05:05:4f:b3:89:86:49:24:5c:65:11:17:25:fb:
         c5:c6:0a:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkuE7pMgxJxeTnyRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZjY4NTNhNGYtYmMzMy00NDVkLTlkZjAtNDM5Njc5MTBhMDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygF5KQPtD8TOUzkjJsnL/tKCTA3z7E6UGbha
hXlieYTyj8bf/umsPcMHqPrJs8luRZQWqSFU7WdhcWZdXMJV2xT+/Bni3NJxcgqm
vxSGtrXDt1bosRXJSnc9VF9wAEtsS20RLYvXrDfk4PWhSNtSZLtHuRgJ4OF975qp
SBOWXZ+Qn2EEfk8brHQ3tbSYCZaPSFHmHR4MQcdzJ2+ZiiJOqnIpnUii23lVQrwT
eCMVPAqxn2FlKFP7VAFmihyjpdZ8jn7Fn215iYtIndx206YTSk4GYPmHWUQmO9iM
a7tzth2vmr9vKBE49chVpVetQM1/+H8xttiQX6R/VnigiU/14wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN1CWnLHEwyUBPaNM8UcVjjEFPU4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMWZhMDQyNzQtZmM2Ny0z
MWQxLTg4NmMtNTM5MjVlMWFkMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCbh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGzAyIkbp9C+HegVqA2BsPkZnSJPn36pb7QLvLaDz5FZBPiVHr24
kQWxtYdiw2asha5WkxEKKWWsvlCI/0V2xTIqbD+j+67Tmp9wMekXYOz6vWp6VYEm
/EGX55p1pKq6b7c6piXoLeamIShDr8ywz1mTQbKsDbSp45zkLTOzQmVge0z2qu0g
xAogZTAdfrOP+MmUWLBav6KMRN6InlMQZEWrNR9ZZD/v6XqeFJIwd1d42JF0zY04
HDO7yvTnR2qdaudzsHMSLFV9GVY7EgjXdTZsYIpG+ZsWXO/X7aea80lm3h3QK6TI
P8MxgBilIoEFBU+ziYZJJFxlERcl+8XGCu8=
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:15:14 2025 by rpki-client