Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa
File:                     e8f13100-d644-3a83-b082-19ac1aaf66a9.roa (raw, json)
Hash identifier:          5WUN3MNw/O60HleplkgO7pftkifK99b0lp9S7agL9Bk=
Subject key identifier:   B6:3E:16:2C:07:AC:8B:B7:7E:A9:F5:39:6F:64:D9:75:BE:C5:54:BC
Certificate issuer:       /CN=25b98849-0471-48f0-9db6-e4f6b59aa178
Certificate serial:       010D0C9F43285848AF2B87DD2730992C7CC8FB80
Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     40081
IP address blocks:        2602:f948::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:87:dd:27:30:99:2c:7c:c8:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=dcc8aaa1-36b8-453b-bd8b-175ba04687ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:9b:56:ed:65:5d:34:f9:57:18:50:ed:ae:
                    30:39:e4:ff:63:0a:b5:d2:5b:ec:15:c2:63:c3:c6:
                    3c:38:20:68:e1:f7:67:8b:b6:5e:60:c2:a5:cc:23:
                    73:2f:a9:b5:ee:f7:6c:4e:f3:34:11:e1:93:31:34:
                    6f:3d:70:0e:76:0f:0e:cf:b6:ac:65:ca:98:b5:b6:
                    05:6e:ea:0a:62:c0:21:2d:06:13:58:98:ae:d9:f1:
                    07:7c:8c:c9:85:db:3e:7b:c6:b6:cc:78:b2:9f:cc:
                    a7:5f:b4:c3:a4:37:99:b6:43:c3:f5:8c:94:ee:03:
                    f4:64:74:c8:7b:12:bd:4b:10:86:3a:e7:08:14:d2:
                    a8:f2:e9:db:2d:c6:79:b6:9a:c9:61:54:0a:fc:b0:
                    a9:1c:9e:ec:9f:32:6a:81:31:af:b2:ca:8d:90:ff:
                    75:fc:22:b3:b5:e2:4f:ee:32:0f:09:ce:d1:b0:3c:
                    d6:c9:b5:6a:b4:c4:ed:ac:75:b9:4d:00:d3:0b:55:
                    4d:74:34:56:8e:80:b8:fc:c9:75:92:43:64:5b:65:
                    f6:b5:b9:c9:56:c3:64:47:ff:2d:fe:59:b7:fc:fd:
                    27:0f:e0:67:ca:50:a2:d0:d5:0a:f2:d3:2e:31:d2:
                    ab:5d:89:5d:05:7f:80:8d:1a:26:8a:c9:c9:e6:7a:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3E:16:2C:07:AC:8B:B7:7E:A9:F5:39:6F:64:D9:75:BE:C5:54:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl

            X509v3 Authority Key Identifier:
                keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f948::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:20:9d:b2:0d:cb:b4:f8:ea:19:25:8e:45:d9:20:7a:22:45:
         81:44:71:dd:7f:2e:05:f3:f0:9a:0a:5d:35:dc:c9:89:3b:2b:
         c9:eb:53:11:59:ec:59:0c:41:b5:40:1c:f7:92:95:3b:24:4d:
         2d:30:b8:a4:71:12:9b:49:1f:24:01:a2:08:ef:33:e3:6f:42:
         de:27:14:f5:46:89:fb:a5:36:f6:e3:b3:fd:01:1a:42:23:f7:
         34:58:e0:07:25:77:19:0e:55:fd:c7:ad:b8:95:20:8c:30:20:
         30:73:af:43:1c:ee:dc:19:ab:a5:37:99:5e:7b:54:f3:e0:4f:
         6a:b6:13:2e:b3:d4:a7:61:ab:65:fc:24:72:41:9b:08:5b:3a:
         67:2a:7e:4d:cc:39:49:a4:3f:be:b1:96:47:f4:f2:1f:60:86:
         c7:21:2d:0f:cf:ef:52:36:3e:3d:81:84:d2:f5:92:24:f3:8a:
         2c:00:7b:bc:b2:fc:dd:ce:2c:e7:a1:8a:ba:88:db:32:6b:ed:
         9e:37:d2:76:24:68:6a:56:a5:42:c7:5e:24:7c:2e:f8:b7:c4:
         8f:8a:35:96:c0:9d:dd:bb:e9:1e:36:ef:6e:32:d8:ec:66:4d:
         d9:28:6a:7a:75:73:df:65:8a:45:6f:44:2b:06:8e:9d:84:11:
         89:a8:52:06
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEivK4fdJzCZLHzI+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjViOTg4NDktMDQ3MS00OGYwLTlkYjYtZTRmNmI1OWFh
MTc4MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZGNjOGFhYTEtMzZiOC00NTNiLWJkOGItMTc1YmEwNDY4N2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskybVu1lXTT5VxhQ7a4wOeT/Ywq10lvsFcJj
w8Y8OCBo4fdni7ZeYMKlzCNzL6m17vdsTvM0EeGTMTRvPXAOdg8Oz7asZcqYtbYF
buoKYsAhLQYTWJiu2fEHfIzJhds+e8a2zHiyn8ynX7TDpDeZtkPD9YyU7gP0ZHTI
exK9SxCGOucIFNKo8unbLcZ5tprJYVQK/LCpHJ7snzJqgTGvssqNkP91/CKzteJP
7jIPCc7RsDzWybVqtMTtrHW5TQDTC1VNdDRWjoC4/Ml1kkNkW2X2tbnJVsNkR/8t
/lm3/P0nD+BnylCi0NUK8tMuMdKrXYldBX+AjRomisnJ5nrDbQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLY+FiwHrIu3fqn1OW9k2XW+xVS8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI5
ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2YjU5YWExNzgvZThmMTMxMDAtZDY0NC0z
YTgzLWIwODItMTlhYzFhYWY2NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViOTg4NDktMDQ3MS00OGYwLTlk
YjYtZTRmNmI1OWFhMTc4LzI1Yjk4ODQ5LTA0NzEtNDhmMC05ZGI2LWU0ZjZiNTlh
YTE3OC5jcmwwHwYDVR0jBBgwFoAUuVoZEj/jAA8cFH9jh4DbyoMaZVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yNWI5ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2
YjU5YWExNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5SAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOSCdsg3LtPjqGSWORdkgeiJFgURx3X8uBfPwmgpdNdzJiTsryetT
EVnsWQxBtUAc95KVOyRNLTC4pHESm0kfJAGiCO8z429C3icU9UaJ+6U29uOz/QEa
QiP3NFjgByV3GQ5V/cetuJUgjDAgMHOvQxzu3BmrpTeZXntU8+BParYTLrPUp2Gr
ZfwkckGbCFs6Zyp+Tcw5SaQ/vrGWR/TyH2CGxyEtD8/vUjY+PYGE0vWSJPOKLAB7
vLL83c4s56GKuojbMmvtnjfSdiRoalalQsdeJHwu+LfEj4o1lsCd3bvpHjbvbjLY
7GZN2ShqenVz32WKRW9EKwaOnYQRiahSBg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:32 2025 by rpki-client