Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa
File:                     c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa (raw, json)
Hash identifier:          MHkFIvmFhVwEeNeRjBbOnT87P1LFso1QIkI6ovKKbDI=
Subject key identifier:   C8:FD:14:36:7C:BA:29:B6:8B:96:C8:EB:36:0F:AA:EB:F5:12:3D:CF
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F43285848E16BEB8E05FC5AA8D6328780
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     14490
IP address blocks:        2602:fa70::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:eb:8e:05:fc:5a:a8:d6:32:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=6d48b5d4-cee1-4839-a112-e9da4b01cee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cc:5f:ff:35:33:5c:9d:22:97:39:90:d2:60:
                    27:a1:31:00:83:eb:7d:d8:c0:ce:90:5d:c0:67:88:
                    7e:aa:39:a6:d7:87:05:e6:29:c2:67:b9:75:87:65:
                    f0:88:33:f0:32:a9:69:57:0a:38:42:47:68:ca:34:
                    01:9a:84:d0:76:86:dc:12:69:65:75:24:1a:49:51:
                    89:67:f9:32:72:5b:56:5a:fb:40:a9:ba:d0:d3:48:
                    54:65:c1:c9:28:87:29:a8:25:9f:89:38:af:1a:24:
                    7a:af:6b:9e:e3:50:20:0d:c0:4a:ec:fb:58:59:2c:
                    99:57:04:3a:cc:b8:6c:f9:3d:a7:d7:9d:51:68:aa:
                    53:12:a3:4e:f9:43:c2:78:fc:d1:6a:eb:a1:1f:c4:
                    83:f1:d8:d1:52:84:ac:26:f6:b0:f2:7f:05:be:be:
                    67:fd:b2:a2:da:05:67:1b:5d:e9:c5:dc:66:b1:5e:
                    f2:73:e0:4a:8d:5f:f4:91:1a:68:ed:cd:3d:1e:fc:
                    b4:c5:d5:a6:59:fa:66:ab:b2:24:23:70:14:99:a7:
                    f6:19:a0:53:7e:fd:80:de:91:38:02:32:9d:0b:08:
                    39:ab:81:bb:c2:0e:43:23:5d:52:1f:d8:12:66:d4:
                    e6:11:3c:20:fd:80:22:4d:56:e2:5f:c3:95:84:8a:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:14:36:7C:BA:29:B6:8B:96:C8:EB:36:0F:AA:EB:F5:12:3D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:41:d6:b4:9d:96:97:23:19:97:d0:30:bb:ad:87:eb:79:ac:
         aa:5c:cb:62:16:46:89:df:4e:53:2f:5c:18:7a:c2:6e:3d:18:
         fd:34:51:09:91:bd:93:68:1c:c3:a1:65:ef:ae:4a:51:9c:0c:
         3f:a8:e8:15:b6:05:79:d0:b0:3e:aa:68:01:88:c7:4f:66:42:
         72:c3:55:9c:95:ad:8e:a8:15:a1:16:13:fc:2f:3e:31:df:e8:
         b2:ba:6e:2d:1c:97:e2:e3:49:cc:6f:ad:75:e7:be:9b:54:47:
         9c:41:4a:9a:c9:49:f3:c8:2f:cc:b7:49:d2:98:67:29:32:4c:
         72:88:88:1a:79:3b:26:72:e7:af:63:55:e6:4e:d3:35:ed:40:
         2b:d6:db:fd:ab:dd:3e:e5:a5:31:f1:55:87:39:b7:ac:f5:f6:
         66:d0:75:ac:f3:07:24:d7:69:6d:89:56:a8:aa:99:0a:36:f1:
         63:b0:e4:6d:49:4c:9a:5f:2d:ef:f1:68:fa:5a:68:f1:52:12:
         7f:ed:a4:99:09:d1:24:da:cc:1e:36:11:ce:49:45:09:c5:a5:
         78:92:13:35:af:0e:f5:d2:90:ec:01:22:e5:c5:4e:79:05:50:
         75:56:48:d6:9a:b3:24:dd:06:94:13:ac:f4:78:24:6d:43:d9:
         0e:3b:e2:24
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjha+uOBfxaqNYyh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm
ZGJkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmQ0OGI1ZDQtY2VlMS00ODM5LWExMTItZTlkYTRiMDFjZWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMxf/zUzXJ0ilzmQ0mAnoTEAg+t92MDOkF3A
Z4h+qjmm14cF5inCZ7l1h2XwiDPwMqlpVwo4QkdoyjQBmoTQdobcEmlldSQaSVGJ
Z/kycltWWvtAqbrQ00hUZcHJKIcpqCWfiTivGiR6r2ue41AgDcBK7PtYWSyZVwQ6
zLhs+T2n151RaKpTEqNO+UPCePzRauuhH8SD8djRUoSsJvaw8n8Fvr5n/bKi2gVn
G13pxdxmsV7yc+BKjV/0kRpo7c09Hvy0xdWmWfpmq7IkI3AUmaf2GaBTfv2A3pE4
AjKdCwg5q4G7wg5DI11SH9gSZtTmETwg/YAiTVbiX8OVhIqMywIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMj9FDZ8uim2i5bI6zYPquv1Ej3PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi
OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvYzY4M2M2ZmUtOGYyMC0z
MGEzLTlkZmUtNzQxZjc0ZTBhYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi
MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5
ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk
ODg4OWZkYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6cAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFEHWtJ2WlyMZl9Awu62H63msqlzLYhZGid9OUy9cGHrCbj0Y/TRR
CZG9k2gcw6Fl765KUZwMP6joFbYFedCwPqpoAYjHT2ZCcsNVnJWtjqgVoRYT/C8+
Md/osrpuLRyX4uNJzG+tdee+m1RHnEFKmslJ88gvzLdJ0phnKTJMcoiIGnk7JnLn
r2NV5k7TNe1AK9bb/avdPuWlMfFVhzm3rPX2ZtB1rPMHJNdpbYlWqKqZCjbxY7Dk
bUlMml8t7/Fo+lpo8VISf+2kmQnRJNrMHjYRzklFCcWleJITNa8O9dKQ7AEi5cVO
eQVQdVZI1pqzJN0GlBOs9HgkbUPZDjviJA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:02 2025 by rpki-client