Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa
File:                     9226ae08-c759-3a7a-b17b-4d72f55ed057.roa (raw, json)
Hash identifier:          QQMd0cZ42jrVUXPGtG/RSivJ+a4afhfEZx9qc1azcA0=
Subject key identifier:   7E:54:71:A3:44:40:05:7D:08:D6:F2:AB:12:D8:C8:74:3E:65:E1:ED
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584917DC3551FCF347DBD5D30780
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     1225
IP address blocks:        2001:418:1456:b15::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:35:51:fc:f3:47:db:d5:d3:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=a9917d60-563b-474b-87b7-e976b550c364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:f0:e6:4e:16:1f:09:4c:ff:3a:00:f4:e8:
                    e8:ed:70:29:f2:fe:d6:5c:74:94:28:6c:41:44:b1:
                    6d:61:15:07:9e:2c:c7:6a:72:fb:ca:56:b6:a7:c0:
                    d6:3f:4a:43:f6:f7:13:9c:d6:62:00:55:59:e4:b7:
                    8c:1f:ab:70:18:3a:a4:d9:73:5c:a2:74:44:74:9c:
                    02:32:e1:10:e5:13:2c:54:81:ff:e1:ec:1e:d8:3d:
                    b4:25:b1:5c:dd:3b:27:9d:8c:40:86:bb:53:85:d7:
                    ef:05:84:52:0e:8d:e3:fc:3f:21:38:a0:54:4c:78:
                    c0:2c:e0:f3:ed:80:a5:c9:b4:50:6c:4c:78:8d:13:
                    ae:b1:03:35:1a:50:9b:92:03:21:51:04:65:09:b4:
                    f3:b2:56:f1:b5:d9:78:f4:f6:6f:5d:95:66:ef:22:
                    41:eb:6b:dd:26:93:87:58:fc:8f:7a:e5:42:94:e7:
                    da:ff:26:d4:ef:71:9f:08:06:bd:c9:1a:5f:e9:5f:
                    66:02:93:e8:c6:1a:86:ad:e5:fb:13:b0:eb:2a:ee:
                    75:a9:ed:3b:66:52:b6:17:19:26:30:fc:b6:ba:d0:
                    61:05:c2:12:ca:67:be:02:a4:ee:04:96:5a:4a:0e:
                    94:69:82:51:04:bf:21:38:b6:52:cd:56:71:2d:ae:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:54:71:A3:44:40:05:7D:08:D6:F2:AB:12:D8:C8:74:3E:65:E1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b15::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:66:c7:95:d4:ae:76:9d:cc:ba:d6:14:dd:8f:97:62:d2:bc:
         69:aa:99:dd:a8:d9:83:8b:fd:d3:bf:1d:b5:a2:f6:9f:54:e2:
         38:55:cd:7a:5f:f0:9e:e0:09:64:62:30:d9:e2:06:e8:10:be:
         82:05:72:35:70:e2:0b:13:a8:60:83:a8:f6:82:c2:ba:de:54:
         bd:46:5d:a3:11:f1:67:5c:1f:22:2e:03:af:48:e6:42:27:9f:
         ec:39:b1:32:ff:1c:a7:d6:74:80:65:95:c2:c9:42:24:bf:cc:
         ba:09:e5:7c:75:76:ee:45:c5:71:41:d3:5e:71:d2:91:20:b0:
         61:66:b0:01:d0:e4:f7:bb:c8:88:85:0e:ee:1f:81:99:49:c3:
         c8:23:aa:65:84:c3:f4:67:b5:32:21:70:c3:0f:aa:7a:a1:b8:
         88:e5:4f:45:62:a2:fb:d1:a9:5b:17:64:7f:48:76:b3:9f:7e:
         6e:35:23:d8:24:bb:9e:36:67:c3:f2:ab:a9:7f:75:2d:12:3c:
         90:ba:f0:8c:58:3c:3b:a5:c0:7d:74:f7:26:a6:d3:95:a8:7c:
         46:d9:00:19:94:01:04:f3:2e:c3:cc:1d:03:64:57:6b:2d:19:
         83:ec:6b:f2:2a:c2:c5:8c:b0:8b:d5:81:28:33:7f:fe:60:83:
         14:7f:bd:f4
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEkX3DVR/PNH29XTB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YTk5MTdkNjAtNTYzYi00NzRiLTg3YjctZTk3NmI1NTBjMzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIbw5k4WHwlM/zoA9Ojo7XAp8v7WXHSUKGxB
RLFtYRUHnizHanL7yla2p8DWP0pD9vcTnNZiAFVZ5LeMH6twGDqk2XNconREdJwC
MuEQ5RMsVIH/4ewe2D20JbFc3TsnnYxAhrtThdfvBYRSDo3j/D8hOKBUTHjALODz
7YClybRQbEx4jROusQM1GlCbkgMhUQRlCbTzslbxtdl49PZvXZVm7yJB62vdJpOH
WPyPeuVClOfa/ybU73GfCAa9yRpf6V9mApPoxhqGreX7E7DrKu51qe07ZlK2Fxkm
MPy2utBhBcISyme+AqTuBJZaSg6UaYJRBL8hOLZSzVZxLa61aQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFH5UcaNEQAV9CNbyqxLYyHQ+ZeHtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTIyNmFlMDgtYzc1OS0z
YTdhLWIxN2ItNGQ3MmY1NWVkMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW
CxUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAZGbHldSudp3MutYU3Y+XYtK8aaqZ3ajZg4v9078dtaL2n1Ti
OFXNel/wnuAJZGIw2eIG6BC+ggVyNXDiCxOoYIOo9oLCut5UvUZdoxHxZ1wfIi4D
r0jmQief7DmxMv8cp9Z0gGWVwslCJL/MugnlfHV27kXFcUHTXnHSkSCwYWawAdDk
97vIiIUO7h+BmUnDyCOqZYTD9Ge1MiFwww+qeqG4iOVPRWKi+9GpWxdkf0h2s59+
bjUj2CS7njZnw/KrqX91LRI8kLrwjFg8O6XAfXT3JqbTlah8RtkAGZQBBPMuw8wd
A2RXay0Zg+xr8irCxYywi9WBKDN//mCDFH+99A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:23:49 2025 by rpki-client