Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa
File:                     7be0dac1-55ee-31d6-a934-19a3cbc26463.roa (raw, json)
Hash identifier:          /KdXFqQZnLWtqYVDJwtnVd6YFSSFwJwXwR1GfRdFmGs=
Subject key identifier:   0E:31:AC:51:A9:4E:E2:0F:27:C1:B6:9F:0B:3B:E6:DB:5F:4C:B7:B7
Certificate issuer:       /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
Certificate serial:       010D0C9F43285848E16BE73964C52F3157FC6C40
Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     26457
IP address blocks:        2620:135:5002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e7:39:64:c5:2f:31:57:fc:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=fe89634a-fb1e-4eb4-a923-84af6d40c769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:80:21:58:dd:a2:f2:d6:a8:b5:d0:57:f7:01:
                    75:05:ea:50:04:6b:b2:98:23:b9:92:74:3d:d9:bc:
                    e4:9b:59:e3:8e:b8:ee:22:70:e0:56:d2:85:9b:89:
                    cc:3a:71:42:55:cd:55:e4:e4:2c:48:2e:af:97:4c:
                    8b:62:c9:b2:e2:91:8a:8f:b7:fd:91:c6:9b:b7:6b:
                    ea:06:61:a7:83:f4:ea:6b:59:bb:be:47:8e:e2:e9:
                    96:f2:38:61:c0:c5:ff:bd:2a:1b:02:a7:00:8f:ca:
                    dc:d3:13:fd:a9:18:d9:cb:9b:6f:96:51:47:94:e3:
                    bf:db:6e:81:40:7e:cc:35:af:2b:81:3c:ff:f5:65:
                    3c:c0:2a:b2:7b:03:9f:ab:57:4e:a2:d1:c1:44:ed:
                    5b:cd:c8:c0:6e:1d:5d:d6:6c:23:5a:ab:50:c8:d5:
                    54:9f:53:f2:85:66:e3:13:27:a9:e3:2e:cd:74:4e:
                    d5:7e:f8:37:da:2e:77:91:8e:d8:dd:54:2a:bc:1e:
                    b6:e7:ae:2e:86:1b:43:70:c1:ad:6f:e8:09:1c:0b:
                    d5:0c:b8:b5:5d:19:68:13:e3:23:8e:8d:70:d7:97:
                    a7:b3:d4:47:ed:18:e8:24:b1:1f:0b:0b:c7:b9:60:
                    18:c7:1c:09:b6:ed:75:5a:76:85:69:c3:bf:b2:d8:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:AC:51:A9:4E:E2:0F:27:C1:B6:9F:0B:3B:E6:DB:5F:4C:B7:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:49:4c:ba:e4:61:f4:16:54:08:e2:2f:10:1e:44:5a:3b:
         d2:9f:e5:3a:0b:19:f1:08:9f:69:d1:5a:84:b7:34:9e:4e:fd:
         ed:f9:06:51:e5:2d:86:6f:23:cf:aa:3b:83:c3:c1:87:6c:00:
         9f:9c:a5:a6:eb:04:f2:e3:f5:51:4f:d7:3f:8a:a3:77:b8:a1:
         07:e4:0c:7d:52:0a:a0:9d:2a:c7:c5:2a:22:4e:67:b4:c5:b9:
         6a:92:6f:9c:1d:92:7f:3d:56:7a:88:e0:f8:ac:ef:75:63:71:
         ea:9a:ab:b2:8b:2e:2e:88:b1:7e:c9:db:49:3a:6d:b2:21:b5:
         0f:61:54:42:ac:0c:9c:d9:b4:40:64:e8:b2:62:e6:60:31:0b:
         a4:c0:2c:fb:b6:a3:70:32:25:c6:58:da:b9:2a:89:27:0f:57:
         a9:85:9d:81:0b:3f:9b:40:33:cd:29:7b:43:3a:49:ab:f0:7a:
         25:fb:af:15:e9:30:fc:aa:5f:5d:c0:c2:a8:b5:ef:28:1d:53:
         ef:36:6e:c7:d8:5e:9d:23:a9:fb:0c:6f:29:31:03:e1:3f:4e:
         53:04:9c:dd:a9:11:3a:14:50:84:db:9c:84:52:9b:c8:62:f8:
         c4:80:e8:41:e5:fe:b2:fa:cc:24:fb:22:c5:e9:72:d1:08:16:
         79:11:2c:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjha+c5ZMUvMVf8bEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0
NjJmMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmU4OTYzNGEtZmIxZS00ZWI0LWE5MjMtODRhZjZkNDBjNzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIAhWN2i8taotdBX9wF1BepQBGuymCO5knQ9
2bzkm1njjrjuInDgVtKFm4nMOnFCVc1V5OQsSC6vl0yLYsmy4pGKj7f9kcabt2vq
BmGng/Tqa1m7vkeO4umW8jhhwMX/vSobAqcAj8rc0xP9qRjZy5tvllFHlOO/226B
QH7MNa8rgTz/9WU8wCqyewOfq1dOotHBRO1bzcjAbh1d1mwjWqtQyNVUn1PyhWbj
Eyep4y7NdE7Vfvg32i53kY7Y3VQqvB62564uhhtDcMGtb+gJHAvVDLi1XRloE+Mj
jo1w15ens9RH7RjoJLEfCwvHuWAYxxwJtu11WnaFacO/stg9pwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA4xrFGpTuIPJ8G2nws75ttfTLe3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk
ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvN2JlMGRhYzEtNTVlZS0z
MWQ2LWE5MzQtMTlhM2NiYzI2NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk
NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm
NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx
YTYzZjQ2MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNVAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHHJSUy65GH0FlQI4i8QHkRaO9Kf5ToLGfEIn2nRWoS3NJ5O/e35
BlHlLYZvI8+qO4PDwYdsAJ+cpabrBPLj9VFP1z+Ko3e4oQfkDH1SCqCdKsfFKiJO
Z7TFuWqSb5wdkn89VnqI4Pis73Vjceqaq7KLLi6IsX7J20k6bbIhtQ9hVEKsDJzZ
tEBk6LJi5mAxC6TALPu2o3AyJcZY2rkqiScPV6mFnYELP5tAM80pe0M6SavweiX7
rxXpMPyqX13Awqi17ygdU+82bsfYXp0jqfsMbykxA+E/TlMEnN2pEToUUITbnIRS
m8hi+MSA6EHl/rL6zCT7IsXpctEIFnkRLOI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:32 2025 by rpki-client