Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa
File:                     3021d954-9e02-3628-92f3-31f119119e7a.roa (raw, json)
Hash identifier:          Psno5vDlYJUNhdKtld6Sp8Dom7++y7GaIZ25FrkBzPk=
Subject key identifier:   5F:77:58:46:9F:11:4F:0A:99:47:E5:B2:60:75:2A:71:2E:E8:DF:21
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584855D59ADB7C6D10F9C67B73A0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9a:db:7c:6d:10:f9:c6:7b:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=b8112d62-9299-4797-87f3-f7c8f6cdcd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:89:1c:a3:4a:cb:b5:79:6b:5b:7f:fb:3c:
                    c5:48:42:8f:0d:a8:cb:25:dd:41:1b:41:81:46:52:
                    35:84:39:8c:80:65:05:58:56:87:db:cf:fe:ad:a0:
                    e6:90:59:01:e9:a8:8f:51:68:09:66:7d:dd:ab:ef:
                    ca:c7:0d:f6:10:23:6d:ab:51:74:e9:9c:bd:84:9f:
                    87:2c:ad:4f:c0:c7:1c:74:67:9d:23:27:97:22:1d:
                    b8:47:35:20:56:fd:17:a1:be:0f:ca:7c:13:f3:25:
                    c4:cc:09:ef:5a:93:8d:8e:76:8b:86:10:e7:8d:65:
                    ae:a9:0d:2f:9c:dd:55:97:c5:d3:38:c9:c6:48:02:
                    ce:cf:30:27:81:1b:0e:96:b4:45:f6:8a:d7:49:82:
                    85:3b:f4:a4:c5:2b:9d:22:be:68:f9:77:d1:5c:3b:
                    c0:83:a0:0f:e4:37:3a:f6:c6:ab:7f:90:93:b6:90:
                    df:a7:14:2e:a8:30:67:71:a3:38:25:0f:e1:c7:35:
                    74:c3:25:53:fe:83:51:52:7b:a4:c8:82:8d:74:b9:
                    d5:0e:b4:8a:10:d3:66:65:5a:f9:f9:52:2c:d6:70:
                    95:d8:2a:c8:d4:fe:9d:cc:54:8e:4e:f1:77:68:94:
                    ea:92:f2:ec:db:e7:4b:c2:45:6a:0d:8b:ae:3e:a0:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:77:58:46:9F:11:4F:0A:99:47:E5:B2:60:75:2A:71:2E:E8:DF:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:00:26:c8:b3:b3:3d:cf:46:98:9b:83:ae:1d:d4:1f:71:2d:
         61:06:24:2f:f7:53:cb:3e:9d:36:a2:13:ef:67:f6:4b:32:26:
         4b:c4:2d:da:19:9d:7c:ee:2a:a6:29:bd:8e:2c:24:26:ce:bd:
         45:7f:3c:32:72:02:7f:f3:74:c0:79:15:9a:36:a4:ec:b0:db:
         0f:63:7c:02:e9:de:3f:5b:25:24:52:b2:ef:ac:13:d4:0d:fd:
         c8:fa:5b:2f:f5:f9:b2:1c:7a:47:4e:13:7e:fe:46:b2:43:55:
         50:33:67:c2:c5:97:db:77:c4:1e:85:29:7a:ca:dc:ec:96:7a:
         66:f3:ca:d3:a7:98:8c:64:2b:b8:26:3e:ab:a2:35:0f:62:44:
         29:7c:ec:d3:05:e4:34:95:29:ad:1a:7c:b9:c0:94:7a:db:ab:
         ad:b7:8a:dd:f4:07:0d:50:6b:73:4d:e5:35:89:de:2a:af:2e:
         df:7e:cb:52:f2:d2:ff:62:5b:02:ce:23:5f:6f:d3:d7:52:fa:
         43:ed:39:fd:84:39:b7:a9:1a:07:ea:37:51:64:8c:fb:ab:d2:
         5f:4f:45:5e:f1:12:9e:6f:56:d1:f2:29:5e:8e:fd:e4:59:6e:
         d0:c2:90:08:34:0f:08:1c:9e:e9:56:9b:79:e6:ce:00:6d:08:
         10:6b:6a:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhV1ZrbfG0Q+cZ7c6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
YjgxMTJkNjItOTI5OS00Nzk3LTg3ZjMtZjdjOGY2Y2RjZDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/+JHKNKy7V5a1t/+zzFSEKPDajLJd1BG0GB
RlI1hDmMgGUFWFaH28/+raDmkFkB6aiPUWgJZn3dq+/Kxw32ECNtq1F06Zy9hJ+H
LK1PwMccdGedIyeXIh24RzUgVv0Xob4PynwT8yXEzAnvWpONjnaLhhDnjWWuqQ0v
nN1Vl8XTOMnGSALOzzAngRsOlrRF9orXSYKFO/SkxSudIr5o+XfRXDvAg6AP5Dc6
9sarf5CTtpDfpxQuqDBncaM4JQ/hxzV0wyVT/oNRUnukyIKNdLnVDrSKENNmZVr5
+VIs1nCV2CrI1P6dzFSOTvF3aJTqkvLs2+dLwkVqDYuuPqAnCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF93WEafEU8KmUflsmB1KnEu6N8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMzAyMWQ5NTQtOWUwMi0z
NjI4LTkyZjMtMzFmMTE5MTE5ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGMAJsizsz3PRpibg64d1B9xLWEGJC/3U8s+nTaiE+9n9ksyJkvE
LdoZnXzuKqYpvY4sJCbOvUV/PDJyAn/zdMB5FZo2pOyw2w9jfALp3j9bJSRSsu+s
E9QN/cj6Wy/1+bIcekdOE37+RrJDVVAzZ8LFl9t3xB6FKXrK3OyWembzytOnmIxk
K7gmPquiNQ9iRCl87NMF5DSVKa0afLnAlHrbq623it30Bw1Qa3NN5TWJ3iqvLt9+
y1Ly0v9iWwLOI19v09dS+kPtOf2EObepGgfqN1FkjPur0l9PRV7xEp5vVtHyKV6O
/eRZbtDCkAg0DwgcnulWm3nmzgBtCBBrasY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:52 2025 by rpki-client