Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa
File:                     b942c035-e349-3f7f-8401-b63ec58d3356.roa (raw, json)
Hash identifier:          O5A4iRMqcGxQBurzO0b6/iuBxp7hXV2h09YkTpSCw9M=
Subject key identifier:   9F:2F:78:6B:D3:B1:A6:9D:5E:9E:9D:09:B5:07:91:96:97:40:C6:40
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858491AA6CF75346DC501434E3C2A
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     63023
IP address blocks:        2607:a140:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cf:75:34:6d:c5:01:43:4e:3c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=54e42099-488a-4d22-9f62-76aa5b368a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9c:af:b5:ff:0b:dc:85:b7:f4:4d:5b:4e:c2:
                    3b:5c:79:3e:35:7d:29:f0:30:65:9a:79:4b:0d:64:
                    07:0e:d4:c6:51:a2:bf:12:f8:81:66:0c:87:cc:34:
                    f2:d7:0b:3f:2d:05:38:a6:20:01:2f:73:20:b9:23:
                    e2:8d:d6:ae:7f:a9:88:0e:57:88:c7:3a:ac:20:bc:
                    46:4a:9a:18:85:93:2d:74:b8:65:13:64:f8:9a:d7:
                    eb:36:85:a7:30:9e:5c:7d:af:ee:1e:61:7f:c9:f3:
                    e5:7c:3b:cb:41:ad:e9:d3:d8:d5:bb:27:df:c7:b6:
                    b5:2d:a8:5c:56:9c:71:2a:15:74:1f:2e:a9:d7:2f:
                    50:1e:17:76:4e:89:33:a1:90:bb:c4:9b:5f:60:9d:
                    03:99:40:df:2e:c2:ca:9d:fb:d3:75:06:e9:6f:e5:
                    17:eb:39:83:e8:63:b9:6b:2d:72:f6:96:3f:e5:b6:
                    85:c5:d5:ca:23:90:9f:76:d1:02:02:ec:28:7b:b4:
                    29:bf:e5:49:7a:b9:65:f1:d4:9f:70:ba:ce:8e:7c:
                    3c:5c:1e:60:40:8c:87:16:7c:d5:7a:fb:d1:b3:29:
                    d0:08:8e:80:0b:db:df:b2:05:44:00:10:b2:4c:bd:
                    12:26:fa:df:74:f6:73:a7:9a:59:f2:ae:45:cf:73:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:78:6B:D3:B1:A6:9D:5E:9E:9D:09:B5:07:91:96:97:40:C6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a4:e8:b7:2a:47:ab:11:e9:17:a4:ff:03:9b:7d:55:46:e4:
         f8:8b:66:79:8a:66:d4:a5:65:82:28:96:1e:5d:77:aa:b1:85:
         a7:9c:62:d7:77:27:52:ac:be:8e:f5:f3:14:02:8f:fc:47:2f:
         6c:84:40:8b:0b:f3:b5:1f:2b:ef:f2:34:f2:21:6d:27:17:d5:
         59:d2:5f:69:05:95:04:8d:d8:52:39:e3:5c:64:8a:5b:04:2c:
         60:32:38:a6:90:74:4d:dc:e2:46:80:ea:4a:14:8a:78:21:0b:
         2c:a6:1a:73:ef:1c:47:41:e1:1a:b5:23:81:2d:c3:49:f7:35:
         49:46:3a:f7:d5:53:9d:7e:0d:1c:b4:65:56:c6:1a:ef:25:e3:
         b7:6a:f7:cc:95:04:ab:21:e0:07:c3:eb:eb:92:65:b2:61:a4:
         e8:32:4d:99:25:cc:1b:bb:a2:ca:85:2e:c1:bf:0c:fa:1b:4b:
         30:83:9c:e9:f0:a3:cc:6e:18:2e:86:38:d3:8d:17:9a:45:de:
         bf:f1:2d:11:3c:19:7e:4e:2c:c2:91:bf:59:e1:ce:9f:31:d2:
         90:0f:c7:b1:e2:8d:1c:aa:6a:18:d8:c6:ad:46:90:33:37:fa:
         22:79:e6:fc:1f:ce:ce:db:50:94:63:e8:47:7d:cd:4a:26:87:
         39:1f:1c:5b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkaps91NG3FAUNOPCowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxOTZmODEtYzI2ZS00NjkwLThiYjgtYmFiNGQ2NTQx
NjMyMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
NTRlNDIwOTktNDg4YS00ZDIyLTlmNjItNzZhYTViMzY4YTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5yvtf8L3IW39E1bTsI7XHk+NX0p8DBlmnlL
DWQHDtTGUaK/EviBZgyHzDTy1ws/LQU4piABL3MguSPijdauf6mIDleIxzqsILxG
SpoYhZMtdLhlE2T4mtfrNoWnMJ5cfa/uHmF/yfPlfDvLQa3p09jVuyffx7a1Lahc
VpxxKhV0Hy6p1y9QHhd2TokzoZC7xJtfYJ0DmUDfLsLKnfvTdQbpb+UX6zmD6GO5
ay1y9pY/5baFxdXKI5CfdtECAuwoe7Qpv+VJerll8dSfcLrOjnw8XB5gQIyHFnzV
evvRsynQCI6AC9vfsgVEABCyTL0SJvrfdPZzp5pZ8q5Fz3OzjQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ8veGvTsaadXp6dCbUHkZaXQMZAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOTE5
NmY4MS1jMjZlLTQ2OTAtOGJiOC1iYWI0ZDY1NDE2MzIvYjk0MmMwMzUtZTM0OS0z
ZjdmLTg0MDEtYjYzZWM1OGQzMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjkxOTZmODEtYzI2ZS00NjkwLThi
YjgtYmFiNGQ2NTQxNjMyLzI5MTk2ZjgxLWMyNmUtNDY5MC04YmI4LWJhYjRkNjU0
MTYzMi5jcmwwHwYDVR0jBBgwFoAU+813SzdHY5Dw69CRgJFkZaTuvgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOTE5NmY4MS1jMjZlLTQ2OTAtOGJiOC1iYWI0
ZDY1NDE2MzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgehQA8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEqTotypHqxHpF6T/A5t9VUbk+ItmeYpm1KVlgiiWHl13qrGFp5xi
13cnUqy+jvXzFAKP/EcvbIRAiwvztR8r7/I08iFtJxfVWdJfaQWVBI3YUjnjXGSK
WwQsYDI4ppB0TdziRoDqShSKeCELLKYac+8cR0HhGrUjgS3DSfc1SUY699VTnX4N
HLRlVsYa7yXjt2r3zJUEqyHgB8Pr65JlsmGk6DJNmSXMG7uiyoUuwb8M+htLMIOc
6fCjzG4YLoY4040XmkXev/EtETwZfk4swpG/WeHOnzHSkA/HseKNHKpqGNjGrUaQ
Mzf6Innm/B/OzttQlGPoR33NSiaHOR8cWw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:13 2025 by rpki-client