Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa
File:                     168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa (raw, json)
Hash identifier:          XulDV9cdVRo44+Ue4GdpqB5okV6j9E1Jk2WHWWkLrI0=
Subject key identifier:   A0:BA:F6:6C:7A:91:5F:2E:03:74:43:88:F2:91:96:B1:D1:A7:30:17
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F432858494F93EC6F51C8E87280BBA5FC
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     53727
IP address blocks:        2602:f982:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:ec:6f:51:c8:e8:72:80:bb:a5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=428505f5-0c9e-4185-b713-47c034ffb846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fb:6c:04:7c:a8:b6:cc:0b:17:de:ba:8a:2b:
                    f2:b7:48:db:63:79:10:8e:52:f0:76:de:cd:96:c9:
                    a3:cb:ba:45:ac:b4:34:c9:66:ca:11:67:5d:0b:e3:
                    45:04:c6:0a:d9:fa:0c:9d:78:ec:75:d6:6a:77:9f:
                    9f:e6:3b:1f:f9:06:a1:4b:63:a1:39:30:f5:f8:5a:
                    ff:a1:c5:2b:67:c0:61:9b:63:05:ba:59:f1:f0:1a:
                    9b:b8:9a:fc:7f:c0:f3:93:77:ef:98:24:81:71:18:
                    7a:c3:3b:16:1c:4c:20:cb:44:2e:84:88:6a:c9:27:
                    cd:b4:76:24:02:63:56:8a:48:10:3e:f4:e8:4e:9b:
                    3e:85:05:63:37:cc:e7:72:1e:28:4f:88:07:6e:e5:
                    a3:db:82:63:cc:bf:6b:c9:e5:dc:21:91:0c:8f:b9:
                    15:50:b4:5c:f6:4a:19:2f:ad:b9:2e:40:9d:65:52:
                    7c:4d:64:d2:a5:77:ba:a8:6c:28:01:63:73:8f:64:
                    f0:df:d5:72:27:ea:b3:d4:13:ea:04:bc:f5:ed:90:
                    03:d3:58:85:7f:af:07:3b:d7:c0:81:96:96:05:b8:
                    3e:bf:67:ee:c4:1c:fa:b4:1c:6c:c8:b8:7d:1c:27:
                    4f:12:6f:95:ac:14:65:94:5a:b5:b4:da:67:b6:ec:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BA:F6:6C:7A:91:5F:2E:03:74:43:88:F2:91:96:B1:D1:A7:30:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e6:d8:06:5b:8f:d4:2a:f3:52:90:ec:cb:61:e7:de:e7:b5:
         e7:21:b9:05:0c:63:d3:f8:46:57:07:d5:aa:8f:f6:95:eb:a8:
         1c:96:87:e9:5e:9f:e3:18:98:47:d2:26:39:00:0c:25:32:b4:
         1a:91:44:f8:2d:bf:51:e4:f0:a3:a9:ed:8e:39:33:45:11:28:
         14:cf:8b:b2:86:27:00:03:81:e3:6a:91:b7:9b:08:3d:8a:b7:
         34:b9:62:e6:89:19:e4:9f:38:a8:fe:e4:bb:86:40:45:de:58:
         17:e6:ae:d9:10:25:ff:83:58:9d:4a:f5:c5:d8:7b:49:44:c1:
         68:10:4e:90:2a:11:1a:0c:d2:68:5e:4b:1f:16:1a:2d:87:48:
         db:1f:3e:88:88:61:6b:27:80:b3:5a:da:52:fa:11:92:1b:87:
         d3:56:36:82:88:c9:e9:a4:8d:18:73:86:b3:41:1f:f0:ed:96:
         f2:e8:68:90:9e:57:93:99:24:33:25:82:d1:30:b1:45:dd:19:
         0d:bb:f4:99:4d:30:49:4f:9d:54:c5:d3:c3:f1:20:cd:fa:60:
         a5:41:83:d9:eb:14:a0:5a:9c:2c:4b:f6:3e:92:18:12:e6:30:
         e6:27:05:ac:71:42:34:9d:29:c2:4d:2a:1a:2a:24:14:9b:d3:
         46:36:54:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElPk+xvUcjocoC7pfwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3
MmYzMB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk
NDI4NTA1ZjUtMGM5ZS00MTg1LWI3MTMtNDdjMDM0ZmZiODQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ftsBHyotswLF966iivyt0jbY3kQjlLwdt7N
lsmjy7pFrLQ0yWbKEWddC+NFBMYK2foMnXjsddZqd5+f5jsf+QahS2OhOTD1+Fr/
ocUrZ8Bhm2MFulnx8BqbuJr8f8Dzk3fvmCSBcRh6wzsWHEwgy0QuhIhqySfNtHYk
AmNWikgQPvToTps+hQVjN8znch4oT4gHbuWj24JjzL9ryeXcIZEMj7kVULRc9koZ
L625LkCdZVJ8TWTSpXe6qGwoAWNzj2Tw39VyJ+qz1BPqBLz17ZAD01iFf68HO9fA
gZaWBbg+v2fuxBz6tBxsyLh9HCdPEm+VrBRllFq1tNpntuxiNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKC69mx6kV8uA3RDiPKRlrHRpzAXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj
ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvMTY4YTYyZmItNmYxZS0z
NGJiLWE1MzEtYTZjMGFjMjhmNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz
MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4
NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh
ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ggEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABnm2AZbj9Qq81KQ7Mth597ntechuQUMY9P4RlcH1aqP9pXrqByW
h+len+MYmEfSJjkADCUytBqRRPgtv1Hk8KOp7Y45M0URKBTPi7KGJwADgeNqkbeb
CD2KtzS5YuaJGeSfOKj+5LuGQEXeWBfmrtkQJf+DWJ1K9cXYe0lEwWgQTpAqERoM
0mheSx8WGi2HSNsfPoiIYWsngLNa2lL6EZIbh9NWNoKIyemkjRhzhrNBH/DtlvLo
aJCeV5OZJDMlgtEwsUXdGQ279JlNMElPnVTF08PxIM36YKVBg9nrFKBanCxL9j6S
GBLmMOYnBaxxQjSdKcJNKhoqJBSb00Y2VOI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:29 2025 by rpki-client