Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa
File:                     aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa (raw, json)
Hash identifier:          MXup2tMmBs+7NB/8QubpeHqMUMiDXrSKjCZWhDVFKck=
Subject key identifier:   94:56:8E:95:62:74:58:4E:31:37:08:53:1A:C6:E4:E0:DF:23:07:06
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F43285848F926A7DBE0D5078CB111F080
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     30690
IP address blocks:        2602:f99b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a7:db:e0:d5:07:8c:b1:11:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=79cfa7e0-65a9-472c-b523-bcc1ca371044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a7:e0:65:cf:5b:98:9d:85:3d:8d:18:99:92:
                    c2:f2:df:4f:84:15:b7:1d:a3:cb:e0:5c:59:5f:68:
                    f0:b7:06:e9:37:a5:25:74:75:67:3f:bb:af:ba:9b:
                    27:1c:56:30:b7:8d:c7:af:cb:18:d3:45:8f:5c:b3:
                    19:71:c1:3b:b3:ec:f9:b6:bd:4c:7d:cc:ef:a3:89:
                    45:80:05:56:f4:9d:2e:e6:e2:c8:01:77:22:85:45:
                    cc:e3:42:d3:e2:94:e4:95:44:fc:3d:b2:16:07:3a:
                    11:bd:3e:09:05:0c:10:29:09:8b:c1:cd:c0:43:99:
                    a8:84:e9:a3:93:37:5f:fb:6c:36:a5:42:4a:b5:7e:
                    54:a7:f8:06:4e:3a:b4:16:c6:b2:13:04:28:18:6c:
                    0c:d9:ca:57:6f:ce:0d:be:be:51:19:3f:40:be:48:
                    e9:dc:16:4f:da:98:ca:01:71:25:60:3e:44:a0:05:
                    5f:48:f6:17:97:ee:7d:64:b1:14:c6:db:ac:fd:a8:
                    e0:f6:67:4e:3c:27:eb:91:f9:28:69:3b:e0:9c:d9:
                    c3:b1:96:ed:2a:57:12:b8:71:2b:87:ab:02:01:42:
                    bc:94:45:a6:1a:2e:fa:ef:79:8b:e9:19:8b:46:de:
                    8b:99:3b:f8:ff:0d:87:ef:5a:9e:5d:83:24:3d:bc:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:56:8E:95:62:74:58:4E:31:37:08:53:1A:C6:E4:E0:DF:23:07:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:be:8b:77:66:35:45:28:77:fd:04:a2:a4:cf:bb:98:61:19:
         2e:7d:db:7f:07:ab:a1:11:8a:b8:5a:cc:f7:64:cf:af:d0:57:
         78:97:60:a8:69:3a:f5:78:cc:3d:77:31:e3:d5:da:35:ac:c3:
         88:6b:c1:b5:78:13:27:c3:9d:cc:0f:fd:98:8e:8a:10:a0:2d:
         f8:de:d5:f0:b9:dd:32:80:12:ec:69:eb:0d:e9:7b:db:4f:e6:
         48:57:5d:2e:47:08:9c:1d:62:d4:e5:7a:53:8a:d4:da:26:f7:
         f3:6f:39:dc:da:e8:76:11:97:37:37:6d:59:0a:32:53:01:62:
         ee:67:35:e7:12:2a:00:87:36:72:ba:a8:55:25:3c:c4:48:1f:
         3c:64:8e:f0:14:58:82:5f:2e:56:7d:0f:4b:87:19:d8:20:08:
         1e:14:44:92:16:3c:d6:fd:83:30:25:96:f6:b6:1b:a3:3a:31:
         a5:14:e8:9c:54:be:96:c6:3a:4b:42:43:f9:b9:b1:d2:b8:f2:
         69:7a:0e:55:7c:17:82:97:06:d4:6f:24:0a:8d:8d:ac:32:ac:
         0c:85:9c:4a:f7:75:77:b6:59:1b:ce:e5:85:36:6b:4d:05:af:
         ba:49:c6:fd:ec:7d:27:2f:60:e3:21:69:2e:a0:64:52:7a:b1:
         60:07:66:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jqfb4NUHjLER8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi
NmY3MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzljZmE3ZTAtNjVhOS00NzJjLWI1MjMtYmNjMWNhMzcxMDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6fgZc9bmJ2FPY0YmZLC8t9PhBW3HaPL4FxZ
X2jwtwbpN6UldHVnP7uvupsnHFYwt43Hr8sY00WPXLMZccE7s+z5tr1Mfczvo4lF
gAVW9J0u5uLIAXcihUXM40LT4pTklUT8PbIWBzoRvT4JBQwQKQmLwc3AQ5mohOmj
kzdf+2w2pUJKtX5Up/gGTjq0FsayEwQoGGwM2cpXb84Nvr5RGT9Avkjp3BZP2pjK
AXElYD5EoAVfSPYXl+59ZLEUxtus/ajg9mdOPCfrkfkoaTvgnNnDsZbtKlcSuHEr
h6sCAUK8lEWmGi7673mL6RmLRt6LmTv4/w2H71qeXYMkPbzYCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJRWjpVidFhOMTcIUxrG5ODfIwcGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm
YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvYWViZGY1NTYtMmY2YS0z
MjUxLWIxYzItNWI5ZTIwYzUyN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy
NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz
YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi
MDk2M2I2ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5mwAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGa+i3dmNUUod/0EoqTPu5hhGS59238Hq6ERirhazPdkz6/QV3iX
YKhpOvV4zD13MePV2jWsw4hrwbV4EyfDncwP/ZiOihCgLfje1fC53TKAEuxp6w3p
e9tP5khXXS5HCJwdYtTlelOK1Nom9/NvOdza6HYRlzc3bVkKMlMBYu5nNecSKgCH
NnK6qFUlPMRIHzxkjvAUWIJfLlZ9D0uHGdggCB4URJIWPNb9gzAllva2G6M6MaUU
6JxUvpbGOktCQ/m5sdK48ml6DlV8F4KXBtRvJAqNjawyrAyFnEr3dXe2WRvO5YU2
a00Fr7pJxv3sfScvYOMhaS6gZFJ6sWAHZiw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:22:17 2025 by rpki-client