Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa
File:                     af19f07a-7d1c-34b4-afbe-2f477f28969f.roa (raw, json)
Hash identifier:          lN+qvJON7OZ/g4Fu0mAAFM8ll5SvLdfuZzD0XLJmR/8=
Subject key identifier:   91:E2:5D:2E:95:6D:97:11:6C:76:F2:FC:55:FD:0A:D7:2F:8A:00:A3
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F92680B580B0BCC28E98F080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     399033
IP address blocks:        2001:438:4a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:80:b5:80:b0:bc:c2:8e:98:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=822e7293-314e-4139-bfff-28900499859e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:77:99:fa:76:b5:f3:5e:58:05:29:9a:3a:
                    a1:a4:52:82:2b:2c:db:1e:f7:cd:a9:4e:97:09:f7:
                    1a:c8:84:bc:8a:78:47:ef:be:2f:c3:32:9b:bc:36:
                    5f:14:52:c5:bf:73:06:5b:f9:85:24:68:99:39:f5:
                    90:4e:72:92:db:23:0b:b1:8f:42:c8:9b:99:a9:3f:
                    85:05:6c:99:4b:3a:c7:1e:9d:28:65:b8:9c:be:bf:
                    a2:3a:92:0b:0f:40:29:de:bc:76:bb:a7:69:b3:17:
                    75:9f:85:94:81:dd:7a:d0:98:59:3d:33:6d:b9:c8:
                    76:c5:12:8d:f1:47:c1:d4:cf:c8:3b:5a:33:05:55:
                    45:d6:62:66:69:d0:ba:39:e0:0a:49:74:4a:de:42:
                    af:34:1f:ce:60:e5:d4:7e:3e:76:e7:f6:79:c0:5a:
                    c0:e0:43:96:24:88:d8:bc:60:28:1f:07:81:fa:88:
                    f5:0f:1b:1b:f1:62:f2:a0:dd:c8:46:23:b7:a3:2a:
                    ba:b3:7a:92:d6:17:8d:4f:3b:5f:0a:6e:78:cd:4b:
                    5c:57:2c:7c:d8:d3:00:6c:46:3e:fe:28:29:bd:47:
                    3c:7f:e9:4e:0c:dd:45:2f:09:e7:24:b8:2e:97:16:
                    70:b3:be:dd:3c:f8:01:59:e3:97:c2:b7:bd:2b:a6:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E2:5D:2E:95:6D:97:11:6C:76:F2:FC:55:FD:0A:D7:2F:8A:00:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:4a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:a9:57:d4:f5:9e:36:ee:04:88:c4:dc:f4:c5:3b:f3:71:
         65:06:95:59:89:3d:dd:53:ef:06:cb:56:69:7e:7d:80:9a:bd:
         d9:97:4f:52:1e:c8:5a:b6:5e:fd:3a:88:ed:51:74:53:b0:60:
         83:5b:1e:fc:54:2c:82:33:a5:23:dd:e5:31:34:ce:14:a6:09:
         3b:d6:b4:fe:0c:51:4a:bb:4a:21:15:a7:d1:5d:18:f4:89:fe:
         75:42:06:de:a3:30:d9:30:1c:b6:ab:1c:ae:27:b7:75:2a:b2:
         73:eb:51:63:ac:65:84:4c:c8:84:13:61:d9:a4:7f:0c:a6:e5:
         7d:b3:9b:e6:71:90:89:e7:68:2a:cf:92:0b:70:b2:f0:48:1e:
         16:71:cf:92:4d:a4:4a:9d:5e:46:de:c0:49:62:fc:53:ac:6f:
         ef:29:23:d5:0d:c3:a4:cd:af:90:69:3c:7e:7e:5b:63:94:a7:
         23:a9:9e:63:42:c5:dd:c8:61:67:7e:86:61:3d:ff:34:19:0f:
         3e:1d:34:75:de:27:a1:bb:74:d5:81:cc:d4:a0:94:a8:e3:91:
         8f:e6:39:84:d0:bd:ea:d0:fe:99:05:82:4d:06:1e:21:07:43:
         2d:32:5c:eb:95:ef:c3:4f:7a:fa:64:1d:31:97:1a:5e:0a:38:
         9f:a4:bd:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JoC1gLC8wo6Y8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ODIyZTcyOTMtMzE0ZS00MTM5LWJmZmYtMjg5MDA0OTk4NTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9R3mfp2tfNeWAUpmjqhpFKCKyzbHvfNqU6X
CfcayIS8inhH774vwzKbvDZfFFLFv3MGW/mFJGiZOfWQTnKS2yMLsY9CyJuZqT+F
BWyZSzrHHp0oZbicvr+iOpILD0Ap3rx2u6dpsxd1n4WUgd160JhZPTNtuch2xRKN
8UfB1M/IO1ozBVVF1mJmadC6OeAKSXRK3kKvNB/OYOXUfj525/Z5wFrA4EOWJIjY
vGAoHweB+oj1Dxsb8WLyoN3IRiO3oyq6s3qS1heNTztfCm54zUtcVyx82NMAbEY+
/igpvUc8f+lODN1FLwnnJLgulxZws77dPPgBWeOXwre9K6axjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJHiXS6VbZcRbHby/FX9CtcvigCjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYWYxOWYwN2EtN2QxYy0z
NGI0LWFmYmUtMmY0NzdmMjg5NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEOABK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHz4qVfU9Z427gSIxNz0xTvzcWUGlVmJPd1T7wbLVml+fYCavdmX
T1IeyFq2Xv06iO1RdFOwYINbHvxULIIzpSPd5TE0zhSmCTvWtP4MUUq7SiEVp9Fd
GPSJ/nVCBt6jMNkwHLarHK4nt3UqsnPrUWOsZYRMyIQTYdmkfwym5X2zm+ZxkInn
aCrPkgtwsvBIHhZxz5JNpEqdXkbewEli/FOsb+8pI9UNw6TNr5BpPH5+W2OUpyOp
nmNCxd3IYWd+hmE9/zQZDz4dNHXeJ6G7dNWBzNSglKjjkY/mOYTQverQ/pkFgk0G
HiEHQy0yXOuV78NPevpkHTGXGl4KOJ+kvWU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:59 2025 by rpki-client