Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/711f4989-e100-395b-bab2-10d1aa959f39.roa
File:                     711f4989-e100-395b-bab2-10d1aa959f39.roa (raw, json)
Hash identifier:          9pmohe/MzD4HwW4zDdNFKbBr3IeDz8CMJ8n1MuJ99Us=
Subject key identifier:   22:D9:14:42:36:D7:DC:BC:FD:DC:AF:A9:7A:0B:66:34:03:F8:68:5E
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F432858487755DDBF6FA70BA50BABF0E0
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/711f4989-e100-395b-bab2-10d1aa959f39.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     14490
IP address blocks:        2602:fa70::/44 maxlen: 48
                          2602:fa70:10::/44 maxlen: 48
                          2602:fa70:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:dd:bf:6f:a7:0b:a5:0b:ab:f0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=82b2a25b-0393-44de-9ee0-c15b97f79c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:75:8e:7f:fd:ce:6b:d2:b0:91:d7:13:b6:
                    59:cb:fc:95:9f:af:e2:c1:b9:ff:e8:e2:86:b7:4c:
                    17:b6:c3:12:e3:ed:e8:cb:0f:bb:cc:8c:8f:7b:ba:
                    5b:4a:48:29:46:74:e4:8d:76:7c:f3:41:f0:10:73:
                    83:f4:48:74:0c:df:79:2d:64:9b:00:e5:06:22:21:
                    70:dd:93:b5:19:dd:f2:20:07:4a:7a:e3:1a:87:33:
                    32:ee:69:a3:4c:fb:9d:78:64:23:7a:71:40:73:2a:
                    ee:3e:c2:52:87:55:91:e4:23:c3:02:f7:05:32:ef:
                    6f:f1:e7:64:57:78:66:3e:6a:64:24:7a:34:76:19:
                    e1:87:dc:90:69:f7:e8:f8:21:11:aa:4a:0d:5a:16:
                    7d:40:2b:6e:8f:cb:a4:e2:54:50:0e:b2:6f:00:53:
                    76:89:0c:dc:e2:24:07:6b:82:0a:65:37:9a:16:66:
                    22:37:aa:6c:3c:dd:73:66:96:3d:eb:a3:88:fc:3c:
                    96:48:71:7c:f2:99:a5:11:cd:0a:6e:f1:32:eb:af:
                    9a:eb:64:9a:47:85:b2:b0:de:9b:fd:56:6a:27:78:
                    41:a0:73:f1:25:ba:be:01:4e:47:1f:48:eb:db:17:
                    f6:78:e9:8d:51:dd:85:b8:5d:58:59:bc:d0:61:49:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D9:14:42:36:D7:DC:BC:FD:DC:AF:A9:7A:0B:66:34:03:F8:68:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/711f4989-e100-395b-bab2-10d1aa959f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70::-2602:fa70:2f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0f:b5:4d:cc:c0:3b:10:d3:c4:94:cf:7d:bb:81:aa:57:6e:
         93:76:1a:72:90:15:d9:ea:08:27:9f:57:82:91:82:6a:02:45:
         64:47:71:bf:7a:8f:fd:f5:1b:48:3c:b3:98:24:6a:46:25:19:
         08:24:f4:12:7a:b7:70:73:88:61:f1:df:01:36:f1:fd:95:a6:
         40:82:6f:75:66:ef:31:63:ad:dc:47:66:5c:78:76:38:38:ef:
         d8:e1:c0:b1:59:a7:1c:f0:43:74:9b:02:72:41:5c:2f:26:6d:
         d5:d4:8f:07:ef:00:57:43:48:e2:86:26:f9:26:da:ef:08:c6:
         02:b4:8d:78:ef:27:a2:b5:04:ee:98:50:69:f7:0f:5c:0e:e1:
         73:8a:b4:9f:9b:b8:58:79:8d:b4:10:6d:0e:58:db:4b:7c:29:
         5a:4d:bf:56:d7:a8:b2:9b:75:ba:10:65:2e:71:81:15:af:4b:
         09:03:e7:58:46:c8:2a:cf:d7:8f:5d:01:10:ae:d8:e3:1f:af:
         66:7b:cb:93:f5:cb:9e:ab:f2:7f:d9:ce:fa:ad:66:c2:b2:c6:
         56:8c:56:08:0d:c5:84:fd:05:72:7d:e6:0e:79:16:e3:35:f9:
         34:82:65:d7:21:81:25:65:36:0d:3c:5f:57:dc:f9:f2:a4:ff:
         d1:d5:b9:f8
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEh3Vd2/b6cLpQur8OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm
ZGJkMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
ODJiMmEyNWItMDM5My00NGRlLTllZTAtYzE1Yjk3Zjc5YzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKF1jn/9zmvSsJHXE7ZZy/yVn6/iwbn/6OKG
t0wXtsMS4+3oyw+7zIyPe7pbSkgpRnTkjXZ880HwEHOD9Eh0DN95LWSbAOUGIiFw
3ZO1Gd3yIAdKeuMahzMy7mmjTPudeGQjenFAcyruPsJSh1WR5CPDAvcFMu9v8edk
V3hmPmpkJHo0dhnhh9yQaffo+CERqkoNWhZ9QCtuj8uk4lRQDrJvAFN2iQzc4iQH
a4IKZTeaFmYiN6psPN1zZpY966OI/DyWSHF88pmlEc0KbvEy66+a62SaR4WysN6b
/VZqJ3hBoHPxJbq+AU5HH0jr2xf2eOmNUd2FuF1YWbzQYUnetQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCLZFEI219y8/dyvqXoLZjQD+GheMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi
OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvNzExZjQ5ODktZTEwMC0z
OTViLWJhYjItMTBkMWFhOTU5ZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi
MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5
ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk
ODg4OWZkYmQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQQmAvpw
AwcEJgL6cAAgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGwPtU3MwDsQ08SUz327gapXbpN2GnKQFdnqCCef
V4KRgmoCRWRHcb96j/31G0g8s5gkakYlGQgk9BJ6t3BziGHx3wE28f2VpkCCb3Vm
7zFjrdxHZlx4djg479jhwLFZpxzwQ3SbAnJBXC8mbdXUjwfvAFdDSOKGJvkm2u8I
xgK0jXjvJ6K1BO6YUGn3D1wO4XOKtJ+buFh5jbQQbQ5Y20t8KVpNv1bXqLKbdboQ
ZS5xgRWvSwkD51hGyCrP149dARCu2OMfr2Z7y5P1y56r8n/ZzvqtZsKyxlaMVggN
xYT9BXJ95g55FuM1+TSCZdchgSVlNg08X1fc+fKk/9HVufg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:52 2025 by rpki-client