Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa
File:                     f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa (raw, json)
Hash identifier:          HfuTEUEeJRo2la34YHvSEdWqJft5iehDXPkPXxmVWIM=
Subject key identifier:   A5:3D:DE:BB:C7:FC:23:83:23:99:9F:F0:BA:33:E6:4B:5B:AC:A6:DA
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F43285848EC969932B90D56143F328780
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     23470
IP address blocks:        2602:fc2f:f01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:99:32:b9:0d:56:14:3f:32:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=6d7e27d0-77fc-4ed8-8455-bd4ba9cabb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:4f:e4:cb:ba:64:3a:b9:0d:8c:73:15:6c:
                    03:3a:a5:c7:d3:1b:4a:77:04:e2:67:00:7d:b4:e6:
                    09:ac:e7:41:7a:d9:00:d0:0c:6b:10:da:5e:6b:11:
                    9f:39:57:52:84:c6:74:14:10:66:13:2f:6f:f6:18:
                    62:7d:49:c9:ed:33:33:7b:80:63:5b:b5:1c:71:f7:
                    87:58:01:fe:66:34:b0:a1:38:6a:08:9b:7f:8b:54:
                    0d:aa:d6:c4:30:33:0c:05:ff:18:49:97:18:ab:b4:
                    4b:bb:c8:8c:2f:39:7d:1f:dd:20:af:33:98:01:ee:
                    37:a1:0e:dd:5e:7e:b3:2d:bb:e6:aa:42:7f:81:46:
                    45:e8:c8:61:47:c1:93:9a:3e:ff:5e:50:9e:61:2a:
                    f2:bc:6b:00:55:d8:f7:af:3a:ad:d2:89:e2:23:b3:
                    2f:73:97:bc:ff:57:57:0d:24:46:03:86:f9:69:ad:
                    d7:30:ae:82:b9:d8:7b:7c:7b:6d:c6:75:63:7a:40:
                    18:b0:89:29:af:a8:01:ee:12:1b:a2:d3:31:fd:9f:
                    64:01:ed:10:1a:bf:7a:af:d1:de:b3:5a:da:57:81:
                    35:a7:3f:1b:8f:4c:85:c6:cb:9c:5f:19:8f:9b:e6:
                    b3:86:0b:b4:75:b9:c6:93:36:35:f0:6e:69:ba:23:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3D:DE:BB:C7:FC:23:83:23:99:9F:F0:BA:33:E6:4B:5B:AC:A6:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2f:f01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:69:91:9d:cb:c6:90:a1:f8:00:9b:fa:24:c8:79:f9:65:a0:
         61:9f:aa:6d:bf:78:e2:e8:32:09:cf:1e:88:64:89:f1:04:70:
         9c:30:f0:33:f2:59:fb:08:99:6f:12:8d:0a:a9:c5:ba:95:d9:
         1e:6c:11:81:8a:13:d1:32:10:9d:f0:9b:1b:ad:af:9a:1b:6a:
         c8:01:cf:26:79:65:06:ed:ba:b3:63:f8:d3:f5:f4:08:ae:19:
         d6:ac:83:75:aa:b8:cc:98:19:4f:68:bf:46:d5:51:db:f0:a8:
         02:99:1d:a9:60:02:06:d6:ba:8f:cc:28:a3:c3:ed:24:7e:a6:
         1d:b2:7e:26:fe:3b:56:6b:3a:43:d8:8f:ff:eb:6a:f8:67:8a:
         91:5f:05:6b:e6:fb:bb:6c:4c:96:4c:d0:8e:c5:68:1a:39:cc:
         15:b6:64:7a:8f:ca:a4:92:6f:52:28:1f:70:fc:c6:15:b5:4c:
         3e:96:4d:01:99:ee:71:30:26:cf:dc:b1:6e:10:f1:8f:9c:bb:
         e9:8a:da:21:67:a7:9f:82:56:1b:2b:e9:74:c0:89:d2:3c:e9:
         35:5b:7d:c4:d2:55:b9:22:be:c6:26:4d:e8:2f:bc:62:2d:26:
         ec:33:fb:74:10:2d:68:2e:b0:60:bc:76:41:ec:ec:7c:f6:2e:
         eb:40:a4:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjslpkyuQ1WFD8yh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4NDhlMTYtYjQyOS00NTA1LTkyMzQtZjZkODg5ZmQx
NDM4MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NmQ3ZTI3ZDAtNzdmYy00ZWQ4LTg0NTUtYmQ0YmE5Y2FiYjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/1P5Mu6ZDq5DYxzFWwDOqXH0xtKdwTiZwB9
tOYJrOdBetkA0AxrENpeaxGfOVdShMZ0FBBmEy9v9hhifUnJ7TMze4BjW7UccfeH
WAH+ZjSwoThqCJt/i1QNqtbEMDMMBf8YSZcYq7RLu8iMLzl9H90grzOYAe43oQ7d
Xn6zLbvmqkJ/gUZF6MhhR8GTmj7/XlCeYSryvGsAVdj3rzqt0oniI7Mvc5e8/1dX
DSRGA4b5aa3XMK6Cudh7fHttxnVjekAYsIkpr6gB7hIbotMx/Z9kAe0QGr96r9He
s1raV4E1pz8bj0yFxsucXxmPm+azhgu0dbnGkzY18G5puiP96QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKU93rvH/CODI5mf8Loz5ktbrKbaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0
OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlmZDE0MzgvZjk0MDAwMDQtNDhhZS0z
YzdjLWFjMWItM2UzOGZhMjliMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4NDhlMTYtYjQyOS00NTA1LTky
MzQtZjZkODg5ZmQxNDM4L2RlODQ4ZTE2LWI0MjktNDUwNS05MjM0LWY2ZDg4OWZk
MTQzOC5jcmwwHwYDVR0jBBgwFoAUHsnQl1NrlIorg8DaKChlnetiZ+QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4
ODlmZDE0MzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8Lw8B
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEdpkZ3LxpCh+ACb+iTIeflloGGfqm2/eOLoMgnPHohkifEEcJww
8DPyWfsImW8SjQqpxbqV2R5sEYGKE9EyEJ3wmxutr5obasgBzyZ5ZQbturNj+NP1
9AiuGdasg3WquMyYGU9ov0bVUdvwqAKZHalgAgbWuo/MKKPD7SR+ph2yfib+O1Zr
OkPYj//ravhnipFfBWvm+7tsTJZM0I7FaBo5zBW2ZHqPyqSSb1IoH3D8xhW1TD6W
TQGZ7nEwJs/csW4Q8Y+cu+mK2iFnp5+CVhsr6XTAidI86TVbfcTSVbkivsYmTegv
vGItJuwz+3QQLWgusGC8dkHs7Hz2LutApCM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:45 2025 by rpki-client