Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adafd859-2c7a-3dd5-b702-96b8e17e0bd9.roa
File:                     adafd859-2c7a-3dd5-b702-96b8e17e0bd9.roa (raw, json)
Hash identifier:          IqRs95LZkcpkCaW67431kpZ46hGH0AW3d7Y2hpctmrE=
Subject key identifier:   BA:40:1C:21:3F:11:9F:A7:12:B7:E1:73:4E:9B:89:98:64:70:8D:2C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D2110B3B25340E2180632D80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adafd859-2c7a-3dd5-b702-96b8e17e0bd9.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     396615
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:0b:3b:25:34:0e:21:80:63:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=f9a9acf2-6511-49d8-a5dc-f1c8bbeb8d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:9b:e2:13:7a:4a:c7:25:eb:1f:0c:73:18:
                    6d:7a:be:d6:95:a9:9c:87:e3:b1:e1:50:99:f6:52:
                    ad:8b:10:41:db:70:37:a9:88:74:b6:6d:b6:4e:fc:
                    25:b0:95:e5:3e:80:7e:5f:31:d9:72:72:a9:57:c2:
                    55:a7:84:40:47:bc:94:b4:07:7d:5d:b8:ef:60:e1:
                    e1:58:ca:a6:be:48:bb:64:9b:2d:14:83:59:42:52:
                    0f:3a:65:67:e8:8d:a2:42:ed:98:f5:26:8b:ad:c4:
                    aa:30:62:1b:38:d9:f1:95:33:c7:d3:f8:95:c4:0d:
                    9d:59:98:5e:bf:7c:d1:1e:67:7d:ea:e6:67:e4:3c:
                    7a:9e:bb:f5:bd:86:d0:3f:35:eb:47:7b:0b:35:08:
                    70:5e:d9:48:bc:b2:70:72:e7:01:19:44:90:16:09:
                    d9:87:ff:a6:dc:3c:86:b0:d7:2e:80:0f:13:45:27:
                    6c:32:78:69:89:9d:3f:b3:69:9c:d0:d6:59:95:9a:
                    ff:b4:9d:d2:2b:f1:35:90:6f:2b:12:47:8e:fd:ef:
                    9b:d0:50:d1:42:4f:ec:a3:86:b0:fc:7a:1b:f4:52:
                    b0:fe:70:d4:63:b8:ef:cf:ad:91:16:23:c3:97:6c:
                    43:01:44:bb:39:3e:bc:e8:07:44:84:86:79:46:e0:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:40:1C:21:3F:11:9F:A7:12:B7:E1:73:4E:9B:89:98:64:70:8D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adafd859-2c7a-3dd5-b702-96b8e17e0bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4c:dc:24:de:0f:b6:a8:31:8d:dd:86:fc:13:1b:c1:ac:af:
         db:2b:b7:14:83:d2:fe:06:89:73:8f:b7:84:fb:5f:2e:5e:7d:
         0d:fe:1b:ed:37:d8:3d:4f:7a:de:ac:23:71:f9:77:6b:ee:c6:
         1c:7c:9f:a9:fa:a0:2f:e4:17:9f:4f:45:6b:16:81:52:39:3c:
         a2:25:5c:00:aa:63:22:2e:e6:bc:84:f5:c9:2d:63:23:f7:f2:
         4a:a7:34:90:8f:dc:93:76:b4:a0:4b:e9:38:aa:48:1e:28:fe:
         30:bb:c8:6e:5b:3f:b4:29:51:e0:d6:c2:e2:d8:55:82:bd:90:
         54:09:cb:c2:07:96:70:33:74:25:79:7e:e1:66:26:e8:67:c4:
         a7:f7:36:b1:c7:38:6b:b1:b1:fc:6e:24:d3:7c:96:ef:38:85:
         c5:c3:5d:c3:f8:b9:c6:49:d3:ef:4f:21:21:6c:2b:e7:c7:dc:
         fd:8c:69:78:07:45:45:c8:be:d7:cb:46:ba:b8:69:bb:b4:0c:
         d4:e0:20:65:74:d4:3e:16:ff:c9:85:76:fd:13:66:85:af:80:
         c0:6a:69:8b:21:b9:4a:ba:0b:08:fa:7b:64:d2:23:8b:62:96:
         96:3f:93:db:48:7f:2a:9a:78:d9:73:22:6d:59:56:92:99:72:
         2d:8b:c3:88
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQs7JTQOIYBjLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjlhOWFjZjItNjUxMS00OWQ4LWE1ZGMtZjFjOGJiZWI4ZDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhyb4hN6Sscl6x8Mcxhter7Wlamch+Ox4VCZ
9lKtixBB23A3qYh0tm22TvwlsJXlPoB+XzHZcnKpV8JVp4RAR7yUtAd9XbjvYOHh
WMqmvki7ZJstFINZQlIPOmVn6I2iQu2Y9SaLrcSqMGIbONnxlTPH0/iVxA2dWZhe
v3zRHmd96uZn5Dx6nrv1vYbQPzXrR3sLNQhwXtlIvLJwcucBGUSQFgnZh/+m3DyG
sNcugA8TRSdsMnhpiZ0/s2mc0NZZlZr/tJ3SK/E1kG8rEkeO/e+b0FDRQk/so4aw
/Hob9FKw/nDUY7jvz62RFiPDl2xDAUS7OT686AdEhIZ5RuAQUwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLpAHCE/EZ+nErfhc06biZhkcI0sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWRhZmQ4NTktMmM3YS0z
ZGQ1LWI3MDItOTZiOGUxN2UwYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAPTNwk3g+2qDGN3Yb8ExvBrK/bK7cUg9L+Bolz
j7eE+18uXn0N/hvtN9g9T3rerCNx+Xdr7sYcfJ+p+qAv5BefT0VrFoFSOTyiJVwA
qmMiLua8hPXJLWMj9/JKpzSQj9yTdrSgS+k4qkgeKP4wu8huWz+0KVHg1sLi2FWC
vZBUCcvCB5ZwM3QleX7hZiboZ8Sn9zaxxzhrsbH8biTTfJbvOIXFw13D+LnGSdPv
TyEhbCvnx9z9jGl4B0VFyL7Xy0a6uGm7tAzU4CBldNQ+Fv/JhXb9E2aFr4DAammL
IblKugsI+ntk0iOLYpaWP5PbSH8qmnjZcyJtWVaSmXIti8OI
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:09 2025 by rpki-client