Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/80762117-ed23-3b54-9568-947551e440f6.roa
File:                     80762117-ed23-3b54-9568-947551e440f6.roa (raw, json)
Hash identifier:          Lhgobp6BBJelM6v0EfzEYiz8ubipLbZQpyyhndHyCi8=
Subject key identifier:   BD:7C:F3:85:47:F4:1D:9B:AD:65:58:6F:2E:31:04:CE:A5:8D:E9:66
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F43285848D7A65119F52799E3DB974100
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/80762117-ed23-3b54-9568-947551e440f6.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     32771
IP address blocks:        2620:111:800c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:51:19:f5:27:99:e3:db:97:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=fc598741-2f94-457f-9146-b157daa47cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:a7:1a:8c:6d:7c:5d:95:70:fc:78:5c:df:
                    3a:11:2b:24:44:03:d5:0e:e4:03:9f:79:f0:fc:56:
                    3c:ae:2f:50:1b:0e:50:e6:51:91:74:38:d7:d5:f2:
                    d4:ab:54:36:39:7a:19:e1:56:a8:85:24:59:4f:03:
                    7a:ca:7e:d9:35:86:3d:82:ac:c4:7b:4c:73:a7:df:
                    d6:d5:2a:5b:c7:86:ae:3c:65:8a:09:a7:4b:b7:77:
                    6f:d1:70:bf:75:fd:f9:52:4f:7a:83:92:c8:0a:6d:
                    b6:88:b6:ba:4d:78:de:45:62:0f:71:0e:24:bc:89:
                    44:d1:9a:5f:21:40:1a:d8:de:95:d5:4a:53:ac:62:
                    f6:f7:03:81:2a:33:de:8e:25:36:69:76:cc:55:80:
                    79:ae:64:2a:4b:92:6c:a2:e2:54:99:c7:e2:0c:4f:
                    16:08:23:be:97:9b:c3:48:4c:61:a9:d3:50:b4:2a:
                    ad:d3:79:99:ce:4c:32:7e:a6:e9:ad:76:f5:02:d0:
                    89:c9:cf:48:ee:7f:0e:0d:33:71:d8:c5:c7:be:b0:
                    96:9f:99:98:26:7d:2a:56:7b:ce:41:0d:6a:86:f5:
                    94:ea:2d:b0:9a:07:aa:16:82:f3:f5:bf:46:d4:75:
                    91:44:39:4c:d8:e7:d3:47:cf:b6:d7:4e:75:81:12:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7C:F3:85:47:F4:1D:9B:AD:65:58:6F:2E:31:04:CE:A5:8D:E9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/80762117-ed23-3b54-9568-947551e440f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:800c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f4:f3:48:cc:c4:ad:2b:40:a7:e6:89:43:bf:49:f5:01:a2:
         17:6f:38:a8:d1:0f:73:6c:79:96:8b:34:c3:62:c2:3a:eb:64:
         a0:d9:0a:b0:2c:cb:0f:60:fe:66:be:86:8d:c5:4c:28:a9:63:
         53:7c:d9:26:3e:4c:c4:00:aa:a1:72:65:d7:25:39:3c:d9:c1:
         13:f1:d6:16:73:88:94:63:b7:c1:91:3f:be:f9:e3:49:29:06:
         3a:79:50:cb:6a:20:49:b6:ea:15:63:91:ab:47:00:b4:34:53:
         71:82:52:2a:3a:3e:f7:7e:a3:eb:36:4f:ef:34:50:51:3d:bd:
         99:66:2f:0b:85:91:ca:6b:9f:32:45:3b:40:57:ce:ad:37:2c:
         2a:99:7e:2f:db:c0:6b:c6:2d:c4:a0:30:87:42:7c:60:bc:3e:
         98:8d:c8:d6:25:55:d8:79:03:f0:21:62:72:49:f6:6e:ba:f1:
         39:94:c1:2c:1b:10:d9:c8:bf:01:7d:62:3f:1c:ce:1d:99:70:
         07:aa:26:26:ca:bb:2d:f3:0f:35:3a:9e:86:81:c3:62:85:22:
         28:5b:a3:ff:9f:c9:ef:85:9a:cc:9f:73:f9:a1:94:4b:c4:b9:
         f0:55:39:09:63:20:e0:c4:2d:04:2a:79:6c:e4:52:66:40:fd:
         bc:7a:8f:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXplEZ9SeZ49uXQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl
OTVjMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZmM1OTg3NDEtMmY5NC00NTdmLTkxNDYtYjE1N2RhYTQ3Y2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn06nGoxtfF2VcPx4XN86ESskRAPVDuQDn3nw
/FY8ri9QGw5Q5lGRdDjX1fLUq1Q2OXoZ4VaohSRZTwN6yn7ZNYY9gqzEe0xzp9/W
1Spbx4auPGWKCadLt3dv0XC/df35Uk96g5LICm22iLa6TXjeRWIPcQ4kvIlE0Zpf
IUAa2N6V1UpTrGL29wOBKjPejiU2aXbMVYB5rmQqS5JsouJUmcfiDE8WCCO+l5vD
SExhqdNQtCqt03mZzkwyfqbprXb1AtCJyc9I7n8ODTNx2MXHvrCWn5mYJn0qVnvO
QQ1qhvWU6i2wmgeqFoLz9b9G1HWRRDlM2OfTR8+21051gRJmlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL1884VH9B2brWVYby4xBM6ljelmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5
OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvODA3NjIxMTctZWQyMy0z
YjU0LTk1NjgtOTQ3NTUxZTQ0MGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4
ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0
ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh
YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAj080jMxK0rQKfmiUO/SfUBohdvOKjRD3NseZaLNMNiwjrrZKDZ
CrAsyw9g/ma+ho3FTCipY1N82SY+TMQAqqFyZdclOTzZwRPx1hZziJRjt8GRP775
40kpBjp5UMtqIEm26hVjkatHALQ0U3GCUio6Pvd+o+s2T+80UFE9vZlmLwuFkcpr
nzJFO0BXzq03LCqZfi/bwGvGLcSgMIdCfGC8PpiNyNYlVdh5A/AhYnJJ9m668TmU
wSwbENnIvwF9Yj8czh2ZcAeqJibKuy3zDzU6noaBw2KFIihbo/+fye+Fmsyfc/mh
lEvEufBVOQljIODELQQqeWzkUmZA/bx6j0A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:06 2025 by rpki-client