Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
File:                     17c97364-2d34-322a-90a6-f80a73c7f5ac.roa (raw, json)
Hash identifier:          uiEbzO/3/Mr/UrXfnqlNG8el4rXKZ33WAEV4oGSHNsY=
Subject key identifier:   F9:58:94:6A:D5:C8:90:6D:04:3C:59:1E:09:57:7E:DC:D2:55:5E:B9
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F432858495EEEEC88FFD8014B8BF14A80
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     397423
IP address blocks:        2602:f94c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ec:88:ff:d8:01:4b:8b:f1:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=08ac4b5e-32a1-4c16-8643-b9215af26677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:13:69:72:55:29:41:91:11:99:13:f0:3e:10:
                    b4:90:54:70:82:93:d8:9b:c3:34:34:ae:a1:9e:d4:
                    d1:d1:cf:aa:9e:9c:1e:79:8b:d5:1a:14:ee:65:b5:
                    cb:df:1c:38:94:41:45:97:c1:dc:49:ad:97:72:82:
                    e2:1e:51:e9:f1:ce:a0:6e:2d:56:57:06:5d:f3:3a:
                    ee:10:85:f6:7a:43:2b:dc:62:7d:f9:07:fd:9a:87:
                    1a:89:bf:e7:5d:59:a8:c7:8e:f7:7c:80:45:9f:66:
                    43:0e:7e:bf:2f:6e:d2:ff:8d:cb:5c:5b:23:72:d5:
                    63:3f:c1:d9:53:55:b6:fb:cc:88:b4:d6:1a:75:22:
                    cd:a6:fd:9f:64:e2:4a:8a:52:24:23:72:81:a0:7e:
                    4d:d1:6e:dc:c9:8a:a1:4d:16:3e:84:a4:bf:0f:39:
                    27:99:ad:33:cb:92:7f:83:be:30:51:93:55:02:dc:
                    6b:3c:e5:6f:4e:7f:ee:d8:be:8d:b8:c7:08:3f:80:
                    e4:5f:7a:d0:b2:a4:d4:bf:cd:3d:0e:8c:18:05:56:
                    be:7b:0a:a6:50:6e:de:3b:64:17:8c:d6:52:75:61:
                    cf:fd:82:d2:5c:0c:a6:9f:13:2a:b6:8c:bd:0b:80:
                    20:c5:2a:df:fc:c2:80:b2:77:49:cd:42:83:9c:7f:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:94:6A:D5:C8:90:6D:04:3C:59:1E:09:57:7E:DC:D2:55:5E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f94c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:70:04:83:25:96:ea:e0:14:ae:89:b9:3c:75:79:ff:07:
         8a:7b:09:1d:c6:f0:28:af:72:3c:f5:c3:29:99:47:ea:be:5b:
         12:3a:46:b8:ae:25:68:7f:82:86:b3:d1:ce:0f:a6:6b:4d:ee:
         0f:79:62:a7:16:57:19:76:33:e6:e0:7f:93:75:40:21:a6:10:
         64:4b:2f:a9:59:84:1c:90:ef:60:dc:71:53:ba:ab:5b:99:20:
         86:e0:93:03:45:f8:fb:6f:9f:40:77:1c:24:a4:cc:f9:8d:eb:
         80:80:c5:6e:f3:89:85:cc:72:06:75:02:ce:c5:d8:c4:30:9c:
         91:73:ec:21:1a:ff:42:9e:f3:98:97:77:f4:1d:fa:87:1a:e3:
         4b:3a:75:69:c5:8d:dd:75:83:cf:4d:61:05:cc:60:a5:36:6f:
         b4:31:1b:9b:8c:e0:99:4d:3f:4e:b0:d3:72:13:21:78:5c:f4:
         1e:aa:5b:f7:e1:23:58:c4:2e:1f:c7:cb:ad:f0:69:c6:de:43:
         95:ac:b6:6e:50:15:31:d7:ea:bb:12:70:cb:12:0b:51:ec:52:
         35:f1:b8:4b:64:5b:27:a1:57:43:26:f7:e3:14:89:fb:a5:29:
         07:b0:e0:23:dc:a3:4a:9a:2f:c6:43:33:5b:1a:b3:23:03:d0:
         71:aa:2f:07
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEle7uyI/9gBS4vxSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDg0NWJhM2ItOWZjMi00MGZiLWI3NGMtNDQ1YWNlOGI0
MTgyMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
MDhhYzRiNWUtMzJhMS00YzE2LTg2NDMtYjkyMTVhZjI2Njc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhNpclUpQZERmRPwPhC0kFRwgpPYm8M0NK6h
ntTR0c+qnpweeYvVGhTuZbXL3xw4lEFFl8HcSa2XcoLiHlHp8c6gbi1WVwZd8zru
EIX2ekMr3GJ9+Qf9mocaib/nXVmox473fIBFn2ZDDn6/L27S/43LXFsjctVjP8HZ
U1W2+8yItNYadSLNpv2fZOJKilIkI3KBoH5N0W7cyYqhTRY+hKS/Dzknma0zy5J/
g74wUZNVAtxrPOVvTn/u2L6NuMcIP4DkX3rQsqTUv809DowYBVa+ewqmUG7eO2QX
jNZSdWHP/YLSXAymnxMqtoy9C4AgxSrf/MKAsndJzUKDnH+4bwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPlYlGrVyJBtBDxZHglXftzSVV65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODQ1
YmEzYi05ZmMyLTQwZmItYjc0Yy00NDVhY2U4YjQxODIvMTdjOTczNjQtMmQzNC0z
MjJhLTkwYTYtZjgwYTczYzdmNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg0NWJhM2ItOWZjMi00MGZiLWI3
NGMtNDQ1YWNlOGI0MTgyLzA4NDViYTNiLTlmYzItNDBmYi1iNzRjLTQ0NWFjZThi
NDE4Mi5jcmwwHwYDVR0jBBgwFoAUa4RCaddw3SaK97NTFvSuFhxj8L0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wODQ1YmEzYi05ZmMyLTQwZmItYjc0Yy00NDVh
Y2U4YjQxODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5TAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAp7hwBIMllurgFK6JuTx1ef8HinsJHcbwKK9yPPXDKZlH6r5bEjpG
uK4laH+ChrPRzg+ma03uD3lipxZXGXYz5uB/k3VAIaYQZEsvqVmEHJDvYNxxU7qr
W5kghuCTA0X4+2+fQHccJKTM+Y3rgIDFbvOJhcxyBnUCzsXYxDCckXPsIRr/Qp7z
mJd39B36hxrjSzp1acWN3XWDz01hBcxgpTZvtDEbm4zgmU0/TrDTchMheFz0Hqpb
9+EjWMQuH8fLrfBpxt5Dlay2blAVMdfquxJwyxILUexSNfG4S2RbJ6FXQyb34xSJ
+6UpB7DgI9yjSpovxkMzWxqzIwPQcaovBw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:35 2025 by rpki-client