Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa
File:                     bc97280e-58ac-34bd-b6b0-31818047edb3.roa (raw, json)
Hash identifier:          IBLc2SwRBpccviDbF0YR3frIZAV3shzyJdyCDRBF/hM=
Subject key identifier:   6D:79:A8:75:8B:20:99:AB:3C:B5:4E:C8:D3:BE:C7:CE:E7:51:0E:96
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F432858494F93EC928FDD8C86DD3FEBB0
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     53727
IP address blocks:        2602:f982:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:ec:92:8f:dd:8c:86:dd:3f:eb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=450d7a4b-27ae-4333-ae00-bc0cee7a6e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:89:bd:d4:08:24:49:92:7f:cb:63:e2:9d:
                    b8:a1:32:c6:d2:f9:5b:b7:16:51:14:73:9d:08:cb:
                    33:e2:3c:5e:b9:74:25:6c:6d:98:64:d1:12:32:e9:
                    57:3c:80:d9:c6:a2:ff:7d:4c:47:cd:91:58:23:6f:
                    89:21:6a:af:64:d9:fc:0f:a3:86:63:73:8d:42:7a:
                    d1:30:4a:4d:bd:33:00:32:bc:da:24:0c:d5:cd:47:
                    ce:5c:91:d6:8c:f8:37:49:46:1c:8d:cd:26:e6:5a:
                    11:3f:96:12:84:b6:95:45:5f:0e:22:9a:29:35:3f:
                    b6:7c:74:3d:5f:f1:c4:f6:51:bb:55:2a:d1:da:09:
                    1e:b0:47:0e:52:52:12:d5:91:87:8f:19:87:ce:0e:
                    bd:2f:f4:07:59:70:8b:d0:24:79:73:6e:3a:42:54:
                    68:c7:3b:08:f1:51:25:a2:4a:1d:b5:c1:cd:9a:5f:
                    44:a9:e0:36:ca:aa:6e:57:49:67:a9:7c:46:96:a5:
                    d0:85:ba:a1:45:e9:4b:4a:5d:2d:ee:42:60:66:5d:
                    ba:dc:25:b1:5c:aa:5f:cc:9c:42:88:4b:92:06:10:
                    5d:8a:33:fc:e7:b0:4c:c6:4d:27:7e:63:d1:ca:db:
                    9f:43:8a:be:89:36:65:d0:3c:bf:1f:a0:c1:d1:1f:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:79:A8:75:8B:20:99:AB:3C:B5:4E:C8:D3:BE:C7:CE:E7:51:0E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/bc97280e-58ac-34bd-b6b0-31818047edb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:49:cf:23:56:94:9f:e9:8c:dd:0e:b9:34:c5:c5:00:86:a7:
         ec:41:f9:30:9e:f6:ac:60:c3:9a:e2:37:af:91:89:d3:9a:9f:
         1e:a7:06:1f:99:20:a6:b9:5a:15:b2:b7:b4:b4:00:72:01:03:
         a3:9f:a3:bd:37:10:31:45:a5:cb:d9:6e:7c:ee:2a:1a:62:0f:
         9e:db:bb:b2:08:cc:09:47:b4:1d:22:16:6a:1a:6e:60:50:9e:
         07:45:e1:17:4d:a3:5a:44:1c:6e:83:75:ff:a2:d6:55:61:15:
         cb:74:7c:38:aa:cc:8b:50:a5:70:76:c3:34:00:b7:65:25:a2:
         e3:c2:fe:46:c3:bf:52:13:0a:18:c1:cb:fb:ac:92:e5:0c:a2:
         c3:1f:65:78:c3:38:2b:83:6a:31:a6:d6:5b:36:e1:1b:16:76:
         0c:a4:15:7f:e1:31:1f:b5:82:12:ee:5a:64:47:7c:4b:e9:c4:
         64:f2:37:44:39:39:d0:27:46:55:2d:66:34:ea:28:bd:63:0d:
         76:94:fa:1f:45:f6:9a:54:4c:7e:7e:d6:c1:6b:b5:17:fe:4c:
         c7:09:0f:1a:c7:30:83:06:53:97:af:5d:4a:6e:18:6b:5b:cf:
         bf:66:b0:c4:44:6b:97:c2:cd:e2:9f:72:80:7c:70:0a:a5:ba:
         9a:00:9e:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElPk+ySj92Mht0/67AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3
MmYzMB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk
NDUwZDdhNGItMjdhZS00MzMzLWFlMDAtYmMwY2VlN2E2ZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzmJvdQIJEmSf8tj4p24oTLG0vlbtxZRFHOd
CMsz4jxeuXQlbG2YZNESMulXPIDZxqL/fUxHzZFYI2+JIWqvZNn8D6OGY3ONQnrR
MEpNvTMAMrzaJAzVzUfOXJHWjPg3SUYcjc0m5loRP5YShLaVRV8OIpopNT+2fHQ9
X/HE9lG7VSrR2gkesEcOUlIS1ZGHjxmHzg69L/QHWXCL0CR5c246QlRoxzsI8VEl
okodtcHNml9EqeA2yqpuV0lnqXxGlqXQhbqhRelLSl0t7kJgZl263CWxXKpfzJxC
iEuSBhBdijP857BMxk0nfmPRytufQ4q+iTZl0Dy/H6DB0R+XXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG15qHWLIJmrPLVOyNO+x87nUQ6WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj
ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvYmM5NzI4MGUtNThhYy0z
NGJkLWI2YjAtMzE4MTgwNDdlZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz
MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4
NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh
ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ggIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIJJzyNWlJ/pjN0OuTTFxQCGp+xB+TCe9qxgw5riN6+RidOanx6n
Bh+ZIKa5WhWyt7S0AHIBA6Ofo703EDFFpcvZbnzuKhpiD57bu7IIzAlHtB0iFmoa
bmBQngdF4RdNo1pEHG6Ddf+i1lVhFct0fDiqzItQpXB2wzQAt2UlouPC/kbDv1IT
ChjBy/uskuUMosMfZXjDOCuDajGm1ls24RsWdgykFX/hMR+1ghLuWmRHfEvpxGTy
N0Q5OdAnRlUtZjTqKL1jDXaU+h9F9ppUTH5+1sFrtRf+TMcJDxrHMIMGU5evXUpu
GGtbz79msMREa5fCzeKfcoB8cAqlupoAnnw=
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:34:43 2025 by rpki-client