Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
File:                     f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa (raw, json)
Hash identifier:          mZQwBusBDNyU/4hM0cNyQYZ1Ou9reQHHHnVxFMJDDME=
Subject key identifier:   AF:00:EF:2D:A7:92:D7:CA:2B:92:75:07:08:CE:7B:DD:FF:0F:1A:7A
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584913AC384A7CC98AD12500AA80
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     46455
IP address blocks:        2604:c880::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:38:4a:7c:c9:8a:d1:25:00:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=a5ad38b7-6254-4812-816f-4db960270d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:f3:fe:d2:6d:61:8a:10:f4:b6:51:7b:f1:
                    b6:4a:56:68:2d:a1:02:f5:a4:09:4f:f4:f0:fb:b6:
                    ed:4c:42:d9:23:04:55:35:97:db:24:e6:43:ad:32:
                    85:e2:17:1c:02:11:00:64:1d:ba:1b:9c:af:0c:f0:
                    1b:22:93:eb:04:aa:98:cc:c8:b2:4a:c0:e2:f0:a4:
                    77:59:e0:5f:b3:85:24:e2:4b:dd:ff:67:aa:7e:9c:
                    d8:a3:34:5a:8c:6b:e3:e7:8f:6c:25:0c:d9:6c:24:
                    23:09:68:bd:a6:77:d4:54:8e:52:22:2a:b1:77:33:
                    94:34:6e:df:80:9b:36:da:0a:e0:08:17:ee:d1:41:
                    4f:51:9e:13:5c:08:da:79:ee:95:4d:c4:39:53:b4:
                    ad:88:0e:60:87:35:fa:99:d4:7a:6d:25:b0:2d:51:
                    a1:47:6e:6b:7c:4e:23:e1:63:0a:3d:e0:4d:63:3c:
                    6c:f4:38:55:0f:2d:f0:1f:89:2b:75:c4:79:ac:72:
                    db:13:56:a6:3f:3f:5a:d4:23:df:de:b9:4f:7e:fd:
                    b2:12:12:45:9d:a0:8f:84:66:ac:d3:6f:8b:39:d6:
                    74:10:0b:87:02:c2:21:a8:d2:6e:8e:34:0e:a1:51:
                    ff:23:bb:44:d0:78:02:58:99:c3:c6:2f:d3:e5:10:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:00:EF:2D:A7:92:D7:CA:2B:92:75:07:08:CE:7B:DD:FF:0F:1A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6c:1d:ce:22:a6:17:7f:8e:d5:7c:a5:7f:d4:8e:c7:61:49:
         a7:29:6b:9f:2c:b5:27:e5:38:da:e5:c2:ec:71:86:8a:e6:2b:
         4d:04:6a:c6:fe:78:c9:33:54:b2:50:c0:b2:31:26:9a:da:29:
         cd:69:64:de:34:37:f7:69:ba:cd:84:9c:f0:20:03:a7:6c:2a:
         63:88:99:a7:2b:a7:f6:22:a3:9f:83:bf:db:86:e2:3f:d5:5f:
         79:81:b3:88:42:96:83:0b:a8:3e:39:3c:c2:51:4d:54:2f:c1:
         0e:a0:b8:06:7d:c3:8a:9d:b4:f3:00:ef:72:e3:1e:6c:14:08:
         b2:47:d9:ea:76:6e:64:13:e9:14:fc:f5:29:33:13:3a:e9:95:
         cc:c3:ec:ed:56:f6:88:60:b6:cb:d0:80:e6:3d:52:08:f5:ce:
         7e:75:69:e5:6d:65:d3:7f:9b:9f:f0:ea:e2:c7:c6:4a:18:dd:
         92:2c:f7:4b:80:35:e0:6d:76:b4:3e:1b:83:15:28:5a:63:05:
         a2:a2:ff:10:2c:a5:49:b4:4f:17:b1:6a:78:3b:28:08:1f:20:
         d2:9f:eb:be:db:73:5d:3c:21:1c:cc:e6:53:5a:0d:e9:dd:a9:
         70:50:f1:d6:d9:c5:1e:3a:d2:99:7e:94:9f:46:c0:ec:64:7a:
         5c:b2:17:5e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkTrDhKfMmK0SUAqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw
MTE0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YTVhZDM4YjctNjI1NC00ODEyLTgxNmYtNGRiOTYwMjcwZDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Tz/tJtYYoQ9LZRe/G2SlZoLaEC9aQJT/Tw
+7btTELZIwRVNZfbJOZDrTKF4hccAhEAZB26G5yvDPAbIpPrBKqYzMiySsDi8KR3
WeBfs4Uk4kvd/2eqfpzYozRajGvj549sJQzZbCQjCWi9pnfUVI5SIiqxdzOUNG7f
gJs22grgCBfu0UFPUZ4TXAjaee6VTcQ5U7StiA5ghzX6mdR6bSWwLVGhR25rfE4j
4WMKPeBNYzxs9DhVDy3wH4krdcR5rHLbE1amPz9a1CPf3rlPfv2yEhJFnaCPhGas
02+LOdZ0EAuHAsIhqNJujjQOoVH/I7tE0HgCWJnDxi/T5RCvOwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK8A7y2nktfKK5J1BwjOe93/Dxp6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1
OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvZjVhZDI4Y2UtOWFlNS0z
ZWI1LWFlMTItZDBhNzFmOGFjMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk
MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk
MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4
N2E3ZDAxMTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQArbB3OIqYXf47VfKV/1I7HYUmnKWufLLUn5Tja5cLscYaK5itNBGrG
/njJM1SyUMCyMSaa2inNaWTeNDf3abrNhJzwIAOnbCpjiJmnK6f2IqOfg7/bhuI/
1V95gbOIQpaDC6g+OTzCUU1UL8EOoLgGfcOKnbTzAO9y4x5sFAiyR9nqdm5kE+kU
/PUpMxM66ZXMw+ztVvaIYLbL0IDmPVII9c5+dWnlbWXTf5uf8Orix8ZKGN2SLPdL
gDXgbXa0PhuDFShaYwWiov8QLKVJtE8XsWp4OygIHyDSn+u+23NdPCEczOZTWg3p
3alwUPHW2cUeOtKZfpSfRsDsZHpcshde
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:13 2025 by rpki-client