Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/bd7e00c6-921e-3100-a0fa-7a4cbb4fb440.roa
File:                     bd7e00c6-921e-3100-a0fa-7a4cbb4fb440.roa (raw, json)
Hash identifier:          s+nHo6aTiXExss8ZigiOcV+fQEp/tpBj25iXbP4mADk=
Subject key identifier:   32:18:47:17:AA:74:61:2F:6F:AD:19:20:C2:B2:B2:69:FE:9B:FB:1D
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F43285848B1F62D693E122DEA465A1F40
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/bd7e00c6-921e-3100-a0fa-7a4cbb4fb440.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     19740
IP address blocks:        2606:1b40:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:2d:69:3e:12:2d:ea:46:5a:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=be3d5868-bba8-4a25-854e-e2158be14014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:9b:a0:2a:67:af:8a:47:d7:2b:31:cd:6c:
                    62:6a:6b:84:60:2b:9b:6c:f0:39:42:98:e2:93:66:
                    f1:e4:81:a8:a8:48:c9:1e:df:c7:fa:e5:d4:07:b0:
                    13:36:94:94:f5:f9:a1:97:23:ee:35:e1:1e:14:6e:
                    fe:b9:cc:ce:78:aa:33:da:2a:47:38:05:1e:39:58:
                    b2:d4:2e:87:59:72:a3:2f:07:0e:b5:4d:8b:2e:aa:
                    dd:8e:2f:1b:f0:5c:70:54:5a:f7:ab:d8:9c:ed:e5:
                    7b:b9:ba:97:72:b8:28:60:b4:8a:1b:e5:da:9e:5d:
                    d0:27:86:c4:0a:42:21:0d:c8:22:a8:a4:25:16:7e:
                    55:1e:ec:19:c6:49:3e:aa:62:0d:ca:8b:a8:9d:51:
                    29:b8:ad:b5:2c:5f:84:1a:46:a8:c6:08:12:8d:d8:
                    5c:e0:3c:1e:38:5e:7b:48:73:c9:f9:47:9e:45:23:
                    60:fa:e6:1e:28:b0:20:67:40:41:39:2e:5a:94:1f:
                    e8:7e:1b:c0:86:76:01:d0:84:21:01:4c:42:e5:bd:
                    b8:e5:6a:a3:2c:0f:e6:f7:3f:ab:30:c7:c4:d8:3f:
                    d5:63:1b:e8:a5:34:93:37:79:31:78:fa:a2:6d:f2:
                    e5:5d:76:55:cc:ab:a1:eb:2d:f7:2f:23:79:c6:79:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:18:47:17:AA:74:61:2F:6F:AD:19:20:C2:B2:B2:69:FE:9B:FB:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/bd7e00c6-921e-3100-a0fa-7a4cbb4fb440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1b40:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:b4:22:c4:a5:e1:3d:29:b0:eb:62:3d:e8:9d:76:ba:d2:
         1e:68:c5:b0:a0:c8:9a:f2:e2:da:3d:0d:90:b1:b4:3d:c1:25:
         99:db:76:33:03:65:58:50:7f:6c:66:75:6d:4a:20:ed:b6:43:
         e5:b6:97:7f:3c:61:63:50:ee:96:5a:5d:61:8d:83:da:08:f5:
         9f:f7:87:7c:ea:a0:3d:18:9c:2e:04:6a:e5:17:31:b5:3c:f5:
         0e:2b:d3:f1:b5:e8:cf:10:b2:5b:b5:98:3b:d1:6d:16:fc:c6:
         a7:87:c4:f6:c1:58:0b:08:b9:59:97:64:f9:98:05:2c:32:d9:
         1d:61:cd:0b:b4:40:55:c2:83:61:cd:a5:57:51:65:5a:f2:cd:
         2e:af:57:a3:fe:ee:92:53:8c:08:88:7a:f0:39:2c:be:bd:0f:
         b2:89:8d:f2:24:4b:38:8c:ae:a3:41:97:6f:6a:1f:9e:c6:24:
         1e:69:2a:e4:07:a1:31:1d:83:bc:62:85:1c:0d:74:80:1e:8e:
         09:57:01:e8:6c:1b:5c:a4:91:c9:c1:58:22:09:f9:0e:00:26:
         48:20:c6:7a:66:94:cc:82:30:74:62:db:13:b7:83:5a:33:ae:
         04:aa:d5:be:c8:5a:4d:cd:f2:32:ea:a0:b4:a6:e1:fd:f4:1f:
         fb:82:0e:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEix9i1pPhIt6kZaH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE2YjRkMzQtMzg4MC00YjcyLWI3ODYtMzY1ZmJkZWM4
YmEwMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
YmUzZDU4NjgtYmJhOC00YTI1LTg1NGUtZTIxNThiZTE0MDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlOboCpnr4pH1ysxzWxiamuEYCubbPA5Qpji
k2bx5IGoqEjJHt/H+uXUB7ATNpSU9fmhlyPuNeEeFG7+uczOeKoz2ipHOAUeOViy
1C6HWXKjLwcOtU2LLqrdji8b8FxwVFr3q9ic7eV7ubqXcrgoYLSKG+Xanl3QJ4bE
CkIhDcgiqKQlFn5VHuwZxkk+qmINyouonVEpuK21LF+EGkaoxggSjdhc4DweOF57
SHPJ+UeeRSNg+uYeKLAgZ0BBOS5alB/ofhvAhnYB0IQhAUxC5b245WqjLA/m9z+r
MMfE2D/VYxvopTSTN3kxePqibfLlXXZVzKuh6y33LyN5xnncSQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDIYRxeqdGEvb60ZIMKysmn+m/sdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84MTZi
NGQzNC0zODgwLTRiNzItYjc4Ni0zNjVmYmRlYzhiYTAvYmQ3ZTAwYzYtOTIxZS0z
MTAwLWEwZmEtN2E0Y2JiNGZiNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODE2YjRkMzQtMzg4MC00YjcyLWI3
ODYtMzY1ZmJkZWM4YmEwLzgxNmI0ZDM0LTM4ODAtNGI3Mi1iNzg2LTM2NWZiZGVj
OGJhMC5jcmwwHwYDVR0jBBgwFoAUnyi16wc4cor/+ST8DFEWGFjVQBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84MTZiNGQzNC0zODgwLTRiNzItYjc4Ni0zNjVm
YmRlYzhiYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgYbQAYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdn20IsSl4T0psOtiPeiddrrSHmjFsKDImvLi2j0NkLG0PcElmdt2
MwNlWFB/bGZ1bUog7bZD5baXfzxhY1DullpdYY2D2gj1n/eHfOqgPRicLgRq5Rcx
tTz1DivT8bXozxCyW7WYO9FtFvzGp4fE9sFYCwi5WZdk+ZgFLDLZHWHNC7RAVcKD
Yc2lV1FlWvLNLq9Xo/7uklOMCIh68Dksvr0PsomN8iRLOIyuo0GXb2ofnsYkHmkq
5AehMR2DvGKFHA10gB6OCVcB6GwbXKSRycFYIgn5DgAmSCDGemaUzIIwdGLbE7eD
WjOuBKrVvshaTc3yMuqgtKbh/fQf+4IO9A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:38:53 2025 by rpki-client