Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa
File:                     a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa (raw, json)
Hash identifier:          4/vzm/iGTjorVfc8YSCWphJIByiQMrZsmYdswsS6Tzg=
Subject key identifier:   3D:18:B3:87:33:09:D3:3D:D0:5B:C1:7F:35:6B:3E:32:5F:76:CD:60
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848424ADD7BF62280FBE1517100
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:f1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:dd:7b:f6:22:80:fb:e1:51:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=f3de522a-cb9c-49fd-8615-7ee2b1e2706e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f1:f1:79:26:17:47:43:23:01:47:b1:30:b0:
                    ac:3e:d8:7c:33:f5:64:68:b1:37:08:b6:b3:ca:33:
                    bc:65:8b:df:2d:db:27:86:e4:c7:9f:68:59:93:8c:
                    ec:b2:5d:b2:6d:0e:66:c2:99:98:7b:38:0a:0e:02:
                    2d:45:8b:41:c1:80:d3:cc:d2:b3:db:c6:02:83:7a:
                    1e:b4:8b:aa:f0:72:d3:26:46:8f:85:d1:6e:a8:97:
                    e4:24:82:ec:bb:9f:98:a4:ee:a1:7a:23:bf:89:53:
                    6d:28:ba:9d:34:89:42:e9:45:68:8c:0b:21:79:63:
                    df:ae:79:cc:73:7f:44:d4:a8:e7:43:37:96:63:71:
                    28:26:e8:1a:23:4b:aa:c2:64:fe:af:0c:53:f7:72:
                    79:57:21:75:55:61:5b:9e:2f:18:4c:c4:73:c7:e4:
                    f6:4c:c5:b5:fb:22:6b:97:26:7b:0e:b4:c2:bc:9d:
                    64:9b:19:b1:c8:5b:c8:31:72:99:f0:42:4f:36:c0:
                    b2:82:60:da:94:b6:81:79:d4:53:bf:3f:61:d5:4b:
                    a8:30:af:63:5e:48:c7:71:cb:30:a7:a0:11:21:ac:
                    4d:32:c9:8b:88:ec:7c:d4:d3:ff:bc:cd:49:37:56:
                    4a:87:51:4d:3b:be:d2:7b:c4:23:04:93:74:26:ab:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:B3:87:33:09:D3:3D:D0:5B:C1:7F:35:6B:3E:32:5F:76:CD:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1c:7c:ea:2b:17:6a:ca:c1:1e:2c:81:b1:75:5a:8d:87:76:
         bf:30:b4:8b:72:53:ab:62:93:67:37:1e:89:2e:de:f0:59:40:
         13:f3:b3:6d:76:16:93:68:70:b7:50:6a:96:0d:ad:4c:7b:32:
         d3:e9:03:91:b0:75:67:c2:0b:fc:f7:25:01:a5:37:c8:f9:15:
         3e:cb:6e:d9:a6:46:72:ce:16:5d:68:67:ec:e2:2f:f2:a4:83:
         2f:14:7f:90:fd:e9:61:58:61:dc:18:b4:3e:df:0b:ee:28:52:
         0f:e8:2d:b0:05:d5:8d:76:ba:e1:66:d7:12:c3:64:35:4a:ef:
         f9:30:0b:0c:b3:b3:fa:01:96:7a:85:be:8e:e0:5d:ce:41:dc:
         f6:bf:eb:04:0d:73:ee:c1:78:7b:c3:dc:c9:c5:1b:bf:be:d8:
         dd:c5:c0:83:59:78:df:72:f8:ea:3f:7e:b8:e2:f9:73:42:10:
         65:62:2d:af:aa:7d:38:d5:c4:af:71:5f:09:e0:e6:6b:07:ff:
         ba:a8:dd:13:c8:b3:b5:73:ec:09:43:1c:4b:df:99:7f:63:c6:
         38:7a:be:bd:9f:25:42:ec:ea:02:dc:71:84:c4:42:d0:13:84:
         03:73:97:e7:eb:cb:2f:7b:16:7c:db:67:a7:89:04:c7:92:b9:
         df:99:1b:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhCSt179iKA++FRcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjNkZTUyMmEtY2I5Yy00OWZkLTg2MTUtN2VlMmIxZTI3MDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPHxeSYXR0MjAUexMLCsPth8M/VkaLE3CLaz
yjO8ZYvfLdsnhuTHn2hZk4zssl2ybQ5mwpmYezgKDgItRYtBwYDTzNKz28YCg3oe
tIuq8HLTJkaPhdFuqJfkJILsu5+YpO6heiO/iVNtKLqdNIlC6UVojAsheWPfrnnM
c39E1KjnQzeWY3EoJugaI0uqwmT+rwxT93J5VyF1VWFbni8YTMRzx+T2TMW1+yJr
lyZ7DrTCvJ1kmxmxyFvIMXKZ8EJPNsCygmDalLaBedRTvz9h1UuoMK9jXkjHccsw
p6ARIaxNMsmLiOx81NP/vM1JN1ZKh1FNO77Se8QjBJN0JqugSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD0Ys4czCdM90FvBfzVrPjJfds1gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvYTQ0ZmRlM2UtODZjMi0z
NTA0LWI5MTQtYmM0NGE3ZWFjN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8f
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAQcfOorF2rKwR4sgbF1Wo2Hdr8wtItyU6tik2c3Hoku3vBZQBPz
s212FpNocLdQapYNrUx7MtPpA5GwdWfCC/z3JQGlN8j5FT7LbtmmRnLOFl1oZ+zi
L/Kkgy8Uf5D96WFYYdwYtD7fC+4oUg/oLbAF1Y12uuFm1xLDZDVK7/kwCwyzs/oB
lnqFvo7gXc5B3Pa/6wQNc+7BeHvD3MnFG7++2N3FwINZeN9y+Oo/frji+XNCEGVi
La+qfTjVxK9xXwng5msH/7qo3RPIs7Vz7AlDHEvfmX9jxjh6vr2fJULs6gLccYTE
QtAThANzl+fryy97FnzbZ6eJBMeSud+ZG8Y=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:29 2025 by rpki-client