Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/af201be3-22aa-3480-8edc-6124ccf74926.roa
File:                     af201be3-22aa-3480-8edc-6124ccf74926.roa (raw, json)
Hash identifier:          eDfXF96ZoShx0nHbjL+gspTb9PWBzBmBpAUpBhi/Zgg=
Subject key identifier:   7B:5F:26:21:C6:99:9F:28:E1:7B:3F:D8:9D:8D:BF:E5:C7:FE:A9:5B
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584940397B14C087C6B3C126EC80
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/af201be3-22aa-3480-8edc-6124ccf74926.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     25804
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7b:14:c0:87:c6:b3:c1:26:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=cb78c223-ff8d-47ad-abce-8db5dfa40be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:0f:ce:44:96:be:5c:85:1e:76:72:f1:99:
                    38:0f:dc:a5:cb:96:96:a6:e5:20:f6:d0:85:0f:41:
                    af:b3:22:da:f3:1b:23:4b:b8:b3:ad:e9:12:5d:b6:
                    5a:f2:3f:5c:78:92:63:7d:64:73:e0:ae:83:60:4e:
                    8e:db:89:e7:3b:4c:cb:15:9f:e7:80:e9:74:d4:46:
                    93:e1:31:35:cc:fc:a3:59:ee:6f:04:37:29:91:a8:
                    f7:0f:ce:55:de:f4:95:07:6b:3a:cd:f5:d2:df:5b:
                    6a:34:bc:7e:98:ce:2d:22:91:0e:d3:dd:23:14:29:
                    5b:c8:f4:9c:15:64:c5:f4:e8:41:3a:17:fa:98:78:
                    94:f7:91:1d:71:6b:0d:b0:59:50:13:69:20:04:07:
                    96:4f:2b:c8:4f:e5:f1:87:7c:27:29:58:4d:18:6d:
                    59:24:63:c4:a5:c4:bd:d6:70:56:02:16:a5:80:72:
                    32:40:9a:3c:4f:28:b9:bf:61:d1:cd:5c:d4:ad:6d:
                    73:01:f3:98:be:d7:33:11:44:63:73:88:3f:fe:fe:
                    b3:80:6b:12:97:dd:78:50:b7:62:55:01:8b:e7:b6:
                    01:b7:d0:d5:f7:28:c1:5a:77:55:21:d2:7c:f7:d0:
                    39:36:cb:f0:21:ed:e6:da:a8:45:e2:04:fb:6a:89:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5F:26:21:C6:99:9F:28:E1:7B:3F:D8:9D:8D:BF:E5:C7:FE:A9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/af201be3-22aa-3480-8edc-6124ccf74926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1b:1d:62:5b:ff:5f:e6:88:e0:f7:6f:73:cd:22:b1:5f:34:
         74:9a:4d:16:9c:09:33:9a:f4:3e:c1:9a:73:19:be:07:5e:5c:
         d7:14:75:b8:d2:51:e0:1c:09:1f:cd:5b:67:d9:cd:1f:8f:30:
         29:5b:bf:4c:52:76:02:0d:f0:52:a5:0e:c0:dd:0e:ad:c1:86:
         be:c8:11:f3:b1:35:40:76:4b:75:8b:4f:cd:dc:a1:04:61:29:
         e9:83:f7:71:66:23:75:4e:6d:8f:91:9c:59:20:93:d4:dd:b4:
         4b:95:b8:5e:ba:84:ea:c8:b2:32:ed:5a:6c:74:9d:a6:61:46:
         70:1e:ca:b8:3c:57:53:a7:84:9a:dc:26:27:d6:e7:8d:e1:fb:
         1d:0e:00:7a:4d:67:d9:d0:84:38:42:f6:3a:07:6a:25:55:81:
         63:7c:d2:c8:ba:43:1c:1a:14:d9:34:dd:37:89:35:6e:d0:d7:
         eb:4d:70:08:58:6d:63:c2:0e:72:94:30:fd:f3:43:c9:1a:6f:
         86:01:2f:f8:83:9b:01:97:4f:89:18:b1:8d:24:b9:38:31:78:
         9b:3f:8f:ae:71:84:c6:9d:c1:cc:96:dd:84:42:1b:59:9e:aa:
         12:b4:91:ea:4f:1a:61:d6:de:5f:fc:1d:3e:6b:ed:aa:67:2d:
         87:8c:32:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOXsUwIfGs8Em7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
Y2I3OGMyMjMtZmY4ZC00N2FkLWFiY2UtOGRiNWRmYTQwYmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGoPzkSWvlyFHnZy8Zk4D9yly5aWpuUg9tCF
D0GvsyLa8xsjS7izrekSXbZa8j9ceJJjfWRz4K6DYE6O24nnO0zLFZ/ngOl01EaT
4TE1zPyjWe5vBDcpkaj3D85V3vSVB2s6zfXS31tqNLx+mM4tIpEO090jFClbyPSc
FWTF9OhBOhf6mHiU95EdcWsNsFlQE2kgBAeWTyvIT+Xxh3wnKVhNGG1ZJGPEpcS9
1nBWAhalgHIyQJo8Tyi5v2HRzVzUrW1zAfOYvtczEURjc4g//v6zgGsSl914ULdi
VQGL57YBt9DV9yjBWndVIdJ899A5NsvwIe3m2qhF4gT7aon25QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHtfJiHGmZ8o4Xs/2J2Nv+XH/qlbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvYWYyMDFiZTMtMjJhYS0z
NDgwLThlZGMtNjEyNGNjZjc0OTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf06ArC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEYbHWJb/1/miOD3b3PNIrFfNHSaTRacCTOa9D7BmnMZvgdeXNcU
dbjSUeAcCR/NW2fZzR+PMClbv0xSdgIN8FKlDsDdDq3Bhr7IEfOxNUB2S3WLT83c
oQRhKemD93FmI3VObY+RnFkgk9TdtEuVuF66hOrIsjLtWmx0naZhRnAeyrg8V1On
hJrcJifW543h+x0OAHpNZ9nQhDhC9joHaiVVgWN80si6QxwaFNk03TeJNW7Q1+tN
cAhYbWPCDnKUMP3zQ8kab4YBL/iDmwGXT4kYsY0kuTgxeJs/j65xhMadwcyW3YRC
G1meqhK0kepPGmHW3l/8HT5r7apnLYeMMrU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:06 2025 by rpki-client