Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
File:                     b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa (raw, json)
Hash identifier:          yN2AUZMi5FUW3lisbHis/ka/AA8KH8xqhNoKobmplaY=
Subject key identifier:   D3:8A:CC:18:F1:F2:32:CB:25:92:3A:64:9A:09:28:FD:A9:31:C6:40
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F43285848C580F07A0373073B9EEAEC80
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     21538
IP address blocks:        2602:fc30:a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f0:7a:03:73:07:3b:9e:ea:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=712c8453-32d1-4ad2-95a5-9f10f6c1f2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:ce:c6:b1:c7:43:6b:c1:c4:ab:09:17:b7:
                    d7:9a:90:63:b3:8e:52:15:81:f8:eb:c4:98:9d:94:
                    30:b5:55:a4:7e:9a:bd:ff:08:fc:59:25:0a:d0:1e:
                    eb:2c:54:53:70:42:94:f1:68:a5:31:35:ad:67:3a:
                    27:cb:e8:cd:e3:ba:10:41:1c:aa:50:a5:94:94:dd:
                    13:1d:41:59:eb:af:fd:39:43:73:36:81:6a:6b:43:
                    db:de:99:b0:cb:a6:97:b6:45:3b:1e:fa:9e:9b:77:
                    c1:c0:a2:de:e6:a0:8b:5a:aa:40:09:95:fe:65:f3:
                    5d:99:0f:52:67:9d:ce:69:a3:cd:49:fb:71:0a:5d:
                    86:13:f7:0f:ef:9b:d8:71:5f:63:2f:39:a3:55:80:
                    23:45:0f:4e:e2:4a:fd:af:ad:23:61:a2:96:54:40:
                    cc:34:3b:bb:80:c3:9b:64:f1:50:2b:7c:0a:45:0a:
                    29:9d:46:45:3b:c3:cf:36:49:61:ab:6b:97:d5:dc:
                    f1:f2:a2:71:0a:44:f8:36:44:08:4f:6e:80:32:f6:
                    ea:0e:72:1d:01:64:49:3d:97:66:bc:bd:06:73:af:
                    97:07:61:82:d4:6e:e9:27:06:dc:d4:78:e6:12:ff:
                    48:46:9a:70:10:ed:9a:d9:c1:31:06:54:6e:39:9e:
                    4e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8A:CC:18:F1:F2:32:CB:25:92:3A:64:9A:09:28:FD:A9:31:C6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc30:a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:91:d3:df:24:d7:43:7a:ab:15:bd:d9:f5:38:46:cd:36:
         6b:8e:f4:3f:fe:49:ab:bb:e8:92:f4:58:8e:57:2e:45:9b:e4:
         df:46:5c:21:46:6e:9e:9d:d5:8b:62:16:e8:b5:a4:02:00:c0:
         b7:e1:39:87:9e:33:a4:21:f8:8d:eb:d1:5e:94:fc:c9:57:99:
         4f:6b:f2:24:bd:97:00:97:14:4a:5a:b8:45:c5:1e:22:70:56:
         e2:3a:34:2d:ff:b8:26:70:9a:0e:89:47:2d:72:5f:61:ec:36:
         48:34:c3:fa:8c:14:72:09:db:ff:1f:b3:e0:c1:f4:0b:58:4a:
         e3:3a:f2:2f:7b:ec:cc:72:ab:a2:d0:d6:6e:77:6f:36:b1:52:
         fb:1c:56:e0:e7:a1:27:9c:0b:4a:5f:9d:68:2d:82:1e:ed:3f:
         da:70:44:ac:83:30:ca:af:67:12:02:ce:40:7e:cb:8e:b6:ea:
         19:57:f0:4c:57:ab:60:85:96:2a:79:c0:11:9d:b7:7e:52:8b:
         d1:51:d8:d9:af:27:2e:f0:22:9f:b0:3c:15:e3:e0:ab:99:4d:
         07:60:fa:37:4e:5b:84:8e:16:17:64:b2:12:fd:74:2e:3a:19:
         65:c5:cb:eb:ad:ee:eb:87:d2:f0:93:b2:0d:65:75:8b:ef:9d:
         92:32:9d:2d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgPB6A3MHO57q7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEw
MzczMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzEyYzg0NTMtMzJkMS00YWQyLTk1YTUtOWYxMGY2YzFmMmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAHOxrHHQ2vBxKsJF7fXmpBjs45SFYH468SY
nZQwtVWkfpq9/wj8WSUK0B7rLFRTcEKU8WilMTWtZzony+jN47oQQRyqUKWUlN0T
HUFZ66/9OUNzNoFqa0Pb3pmwy6aXtkU7Hvqem3fBwKLe5qCLWqpACZX+ZfNdmQ9S
Z53OaaPNSftxCl2GE/cP75vYcV9jLzmjVYAjRQ9O4kr9r60jYaKWVEDMNDu7gMOb
ZPFQK3wKRQopnUZFO8PPNklhq2uX1dzx8qJxCkT4NkQIT26AMvbqDnIdAWRJPZdm
vL0Gc6+XB2GC1G7pJwbc1HjmEv9IRppwEO2a2cExBlRuOZ5OwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNOKzBjx8jLLJZI6ZJoJKP2pMcZAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdk
YTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvYjhlZjM5YmEtOGEzMS0z
ODlhLWEyZTgtNWM1ZWIzYmRkM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk3ZGE3NzgtYTFmNi00ZGFkLTlk
MGEtZDNhMDcwMDEwMzczL2U5N2RhNzc4LWExZjYtNGRhZC05ZDBhLWQzYTA3MDAx
MDM3My5jcmwwHwYDVR0jBBgwFoAUMuC2ppBpQiEgQL1KkOWS4I8ee6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2Ew
NzAwMTAzNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8MACk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJDCkdPfJNdDeqsVvdn1OEbNNmuO9D/+Sau76JL0WI5XLkWb5N9G
XCFGbp6d1YtiFui1pAIAwLfhOYeeM6Qh+I3r0V6U/MlXmU9r8iS9lwCXFEpauEXF
HiJwVuI6NC3/uCZwmg6JRy1yX2HsNkg0w/qMFHIJ2/8fs+DB9AtYSuM68i977Mxy
q6LQ1m53bzaxUvscVuDnoSecC0pfnWgtgh7tP9pwRKyDMMqvZxICzkB+y4626hlX
8ExXq2CFlip5wBGdt35Si9FR2NmvJy7wIp+wPBXj4KuZTQdg+jdOW4SOFhdkshL9
dC46GWXFy+ut7uuH0vCTsg1ldYvvnZIynS0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:43 2025 by rpki-client