Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f3ac6833-be9f-34fe-8fd4-b3accc89f25e.roa
File:                     f3ac6833-be9f-34fe-8fd4-b3accc89f25e.roa (raw, json)
Hash identifier:          5GisIMbg0mQ3FqXk7UYhLlBNjlCSNPWDJTy02pcN+hE=
Subject key identifier:   4F:63:FB:C4:73:9F:D2:96:8F:39:EB:FD:A5:E7:28:26:DB:E9:D0:76
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E9E4F0F4333082383B880
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f3ac6833-be9f-34fe-8fd4-b3accc89f25e.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:2053::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9e:4f:0f:43:33:08:23:83:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=35675156-9605-47b1-a2be-97a9732000d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:9b:87:4f:da:43:7a:ab:c0:a6:17:4a:8e:
                    f6:9a:92:08:4d:d5:e2:f0:77:33:fa:d0:88:8f:89:
                    d1:67:18:f3:5a:dc:c5:14:0a:65:56:64:c3:17:d7:
                    46:ee:78:2d:dc:27:1a:f1:ed:1f:ee:71:77:62:22:
                    1d:84:c5:67:c0:45:47:f2:29:3e:da:90:21:6f:e2:
                    ce:54:a9:e9:4f:01:82:10:37:c1:53:52:83:e8:8b:
                    41:c4:9f:0c:da:b8:56:9a:7a:c7:72:35:a4:a0:60:
                    42:6c:37:af:ea:28:50:a5:24:b7:f1:7e:4a:bb:9d:
                    0f:3c:df:82:17:1f:4f:fd:6e:70:3e:40:12:99:4c:
                    42:b2:a1:0b:7a:ac:bd:68:d0:5e:18:14:1d:9d:c6:
                    db:c9:5c:71:84:e0:8f:6b:dd:84:66:ff:1e:7b:3d:
                    2e:4e:39:d5:4b:37:c2:12:7a:17:98:80:bd:9f:62:
                    ce:ce:21:f1:b2:5c:2f:ca:c2:7b:07:c2:53:ca:54:
                    78:e8:b5:5b:ab:e2:48:86:ea:c2:95:69:ab:99:10:
                    c0:63:9b:e1:20:49:bc:44:8a:82:de:ee:16:37:76:
                    d5:a9:50:68:c4:2b:74:66:70:8c:b2:41:10:90:65:
                    c8:da:e0:84:35:18:7e:3a:a0:33:28:a7:0f:34:46:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:FB:C4:73:9F:D2:96:8F:39:EB:FD:A5:E7:28:26:DB:E9:D0:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f3ac6833-be9f-34fe-8fd4-b3accc89f25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2053::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:54:ac:5c:86:8d:41:f2:af:79:60:d6:da:dc:b2:85:3b:e4:
         26:c0:ab:f2:fd:8f:78:92:48:5f:0b:88:01:3b:0f:ac:fb:0c:
         9e:b8:bd:07:b4:83:fa:1a:a5:ec:ca:99:a3:1b:c9:36:61:ce:
         f8:3e:f7:0b:49:db:f0:8f:4d:68:00:f7:7d:fa:eb:cb:86:48:
         ed:b0:dd:bb:d3:75:14:c4:0a:b1:4c:0c:23:33:8a:2b:40:c4:
         92:47:a2:28:fc:bd:bc:23:83:a7:63:d4:fe:9e:c2:83:6d:18:
         a2:8d:41:29:8b:e2:e5:27:cc:1b:d2:1c:0d:1c:ff:2c:cc:dd:
         bc:8d:9a:43:74:59:fe:c2:d8:3a:ec:4b:a8:1c:3a:2b:77:09:
         7e:8a:68:34:83:c1:2b:75:25:03:8f:23:3f:10:21:e3:96:99:
         75:fc:65:51:44:ca:fe:b7:e6:aa:2d:74:1a:f5:81:6d:d7:dc:
         82:d5:18:58:a7:b5:92:d6:f2:e6:49:70:f4:aa:db:6a:74:e4:
         02:40:fb:71:9d:d8:96:36:96:9b:a8:63:47:92:88:ab:55:58:
         92:e2:b1:fa:0a:cb:18:b9:29:82:54:9d:2f:48:f5:3d:fd:70:
         5e:4c:50:69:5f:ec:88:57:5a:6a:d0:91:15:3d:76:82:cb:1c:
         ac:87:3b:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1Dp5PD0MzCCODuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MzU2NzUxNTYtOTYwNS00N2IxLWEyYmUtOTdhOTczMjAwMGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTybh0/aQ3qrwKYXSo72mpIITdXi8Hcz+tCI
j4nRZxjzWtzFFAplVmTDF9dG7ngt3Cca8e0f7nF3YiIdhMVnwEVH8ik+2pAhb+LO
VKnpTwGCEDfBU1KD6ItBxJ8M2rhWmnrHcjWkoGBCbDev6ihQpSS38X5Ku50PPN+C
Fx9P/W5wPkASmUxCsqELeqy9aNBeGBQdncbbyVxxhOCPa92EZv8eez0uTjnVSzfC
EnoXmIC9n2LOziHxslwvysJ7B8JTylR46LVbq+JIhurClWmrmRDAY5vhIEm8RIqC
3u4WN3bVqVBoxCt0ZnCMskEQkGXI2uCENRh+OqAzKKcPNEbDRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE9j+8Rzn9KWjznr/aXnKCbb6dB2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZjNhYzY4MzMtYmU5Zi0z
NGZlLThmZDQtYjNhY2NjODlmMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCBT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEhUrFyGjUHyr3lg1trcsoU75CbAq/L9j3iSSF8LiAE7D6z7DJ64
vQe0g/oapezKmaMbyTZhzvg+9wtJ2/CPTWgA933668uGSO2w3bvTdRTECrFMDCMz
iitAxJJHoij8vbwjg6dj1P6ewoNtGKKNQSmL4uUnzBvSHA0c/yzM3byNmkN0Wf7C
2DrsS6gcOit3CX6KaDSDwSt1JQOPIz8QIeOWmXX8ZVFEyv635qotdBr1gW3X3ILV
GFintZLW8uZJcPSq22p05AJA+3Gd2JY2lpuoY0eSiKtVWJLisfoKyxi5KYJUnS9I
9T39cF5MUGlf7IhXWmrQkRU9doLLHKyHO2E=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:57:55 2025 by rpki-client