Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa
File:                     9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa (raw, json)
Hash identifier:          E0hBsGNP/4Ms6Dn2rAf4Jhr/FU3w2FUvd0jMS36R3/U=
Subject key identifier:   EA:B5:59:83:13:E1:D2:62:0B:9C:77:89:92:E0:1D:6C:1A:48:AB:EC
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584917DC2E491DCA56BDC1F6C2C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     1225
IP address blocks:        2001:418:3801::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:2e:49:1d:ca:56:bd:c1:f6:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=1619f7b1-e12a-4276-899a-c84a725325f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:c3:8f:5b:bd:99:53:0f:b5:4e:8a:b1:91:
                    c6:da:e1:68:d6:5e:67:84:ba:1b:36:e1:28:9b:87:
                    2f:7f:db:cd:b3:04:f3:45:64:d0:65:5a:c0:35:14:
                    42:b1:e3:83:23:3f:3b:01:b4:41:9d:8c:88:97:c8:
                    5b:25:ce:bb:58:84:7c:c6:bb:79:35:92:dd:c6:85:
                    7c:57:ad:9d:a5:a3:2f:98:59:53:a2:d5:a2:ab:dc:
                    9e:63:5d:95:f1:c5:7a:2d:dd:30:6b:a1:c6:69:42:
                    29:97:4a:16:d3:04:ec:1a:bc:3e:e1:43:0b:22:a7:
                    3d:59:99:55:9f:d0:40:80:b9:a6:88:a7:ab:64:d1:
                    8d:2d:a0:72:b9:19:95:bb:e9:5f:2c:6f:55:71:f7:
                    7b:55:a4:b2:e2:be:95:f6:15:0d:d2:45:9a:eb:2e:
                    26:57:9e:44:98:f7:40:a8:90:2a:2b:99:36:b6:6e:
                    20:09:3b:ff:fb:f0:de:92:37:a3:09:3b:2c:26:7f:
                    19:94:e3:a7:65:74:49:9c:88:4b:11:7d:da:8f:ce:
                    d8:76:8c:ac:a7:73:66:12:8d:0a:72:54:0f:1d:94:
                    da:ff:7e:fc:34:01:88:4b:6b:4a:e3:6c:96:1c:11:
                    0a:2f:98:ab:19:64:64:00:47:d8:21:55:12:2f:ad:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B5:59:83:13:E1:D2:62:0B:9C:77:89:92:E0:1D:6C:1A:48:AB:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3801::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ea:f3:c6:0c:38:62:fe:11:56:10:a8:ee:fd:63:41:31:27:
         b4:f1:6a:97:45:b1:43:9f:74:0f:cb:cd:72:d9:d2:6c:1c:fd:
         a5:e0:19:5b:6c:d3:20:f6:80:18:a7:0d:6a:36:39:96:60:40:
         61:7d:03:bf:03:fb:bb:ae:99:f1:cd:2a:58:c1:0b:db:38:ba:
         64:2b:b6:30:43:a9:f8:46:e7:cd:6b:42:2b:e7:c4:06:ce:27:
         25:a6:e7:a2:30:cd:d8:c7:96:7e:ed:ae:0b:32:c0:c0:0c:2d:
         3e:fb:a2:73:55:8f:12:f3:5b:43:43:6a:04:c6:21:f3:27:cc:
         71:d4:9a:9a:ed:d2:ee:bc:cf:b3:8d:4e:3f:94:79:00:ae:2e:
         65:d7:bc:98:b5:7d:86:d3:97:e9:9a:c1:96:59:0a:4d:b1:36:
         64:dd:bf:a4:a5:e1:1d:a1:f1:86:42:40:87:cc:08:d8:a5:a6:
         87:45:6e:8e:ea:13:01:57:01:27:ea:d9:25:8b:fd:8d:b0:d8:
         21:72:0a:ea:45:3f:62:37:32:1b:cc:aa:0c:bb:97:2b:be:50:
         d8:86:fa:a8:3f:47:b3:ef:77:1f:c8:ab:0e:86:ef:a1:ef:89:
         4b:18:00:ec:fb:24:f6:c1:df:95:27:d7:1b:59:8b:42:6f:a9:
         4e:34:c5:2a
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEkX3C5JHcpWvcH2wsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTYxOWY3YjEtZTEyYS00Mjc2LTg5OWEtYzg0YTcyNTMyNWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJzDj1u9mVMPtU6KsZHG2uFo1l5nhLobNuEo
m4cvf9vNswTzRWTQZVrANRRCseODIz87AbRBnYyIl8hbJc67WIR8xrt5NZLdxoV8
V62dpaMvmFlTotWiq9yeY12V8cV6Ld0wa6HGaUIpl0oW0wTsGrw+4UMLIqc9WZlV
n9BAgLmmiKerZNGNLaByuRmVu+lfLG9Vcfd7VaSy4r6V9hUN0kWa6y4mV55EmPdA
qJAqK5k2tm4gCTv/+/DekjejCTssJn8ZlOOnZXRJnIhLEX3aj87Ydoysp3NmEo0K
clQPHZTa/378NAGIS2tK42yWHBEKL5irGWRkAEfYIVUSL634pwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFOq1WYMT4dJiC5x3iZLgHWwaSKvsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOWE4MWRiOWQtOGQzNC0z
MmQyLWIxZDItODI5NWJjZDU3OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGDgB
AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAWOrzxgw4Yv4RVhCo7v1jQTEntPFql0WxQ590D8vNctnSbBz9
peAZW2zTIPaAGKcNajY5lmBAYX0DvwP7u66Z8c0qWMEL2zi6ZCu2MEOp+EbnzWtC
K+fEBs4nJabnojDN2MeWfu2uCzLAwAwtPvuic1WPEvNbQ0NqBMYh8yfMcdSamu3S
7rzPs41OP5R5AK4uZde8mLV9htOX6ZrBllkKTbE2ZN2/pKXhHaHxhkJAh8wI2KWm
h0VujuoTAVcBJ+rZJYv9jbDYIXIK6kU/YjcyG8yqDLuXK75Q2Ib6qD9Hs+93H8ir
Dobvoe+JSxgA7Psk9sHflSfXG1mLQm+pTjTFKg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:26:28 2025 by rpki-client