Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa
File:                     f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa (raw, json)
Hash identifier:          6QNJ9cz9C07nJMczqtiyX228KNDYEF55SZ0wgAuWcDo=
Subject key identifier:   67:19:1E:28:3A:B4:EE:2C:50:61:66:AE:D2:5C:96:75:DF:DB:E1:29
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F432858490F7BFE5D394C6FDBDCDD4580
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     376
IP address blocks:        2001:510:302::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:fe:5d:39:4c:6f:db:dc:dd:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=e59ce1c0-b98b-4c10-9fe7-74693d6a9ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:dc:75:5f:98:49:0e:1f:47:60:8c:3a:9e:
                    23:dd:76:24:df:b4:af:cc:f9:f3:78:b8:f9:4f:4b:
                    e0:1c:83:bb:c0:e4:b4:12:b6:30:36:4e:fb:9a:40:
                    ce:4e:8d:49:3c:21:cc:bf:5e:3e:da:b2:a6:af:e8:
                    f7:5a:1c:dc:ef:8e:5b:55:17:f8:57:e9:a7:4d:de:
                    5f:e2:a4:84:85:db:cd:a3:1b:37:10:a5:ba:a6:a0:
                    18:8c:c5:1c:5c:c6:db:92:fc:9d:65:36:1d:1f:19:
                    84:45:01:a3:57:db:91:19:8d:c9:af:3a:3a:58:97:
                    b8:9f:9b:c3:6b:84:b8:4e:8a:ae:20:ca:80:7c:06:
                    aa:36:5a:fc:c4:b9:d3:08:d5:d7:fd:79:a1:b1:3d:
                    3f:e0:46:93:d9:f5:1d:34:fa:f0:14:86:c8:ae:3d:
                    98:e0:65:c1:47:a9:d1:42:70:f9:19:65:6e:99:97:
                    fb:61:00:d6:eb:50:a1:67:e6:5d:81:53:0c:ee:79:
                    73:1d:d3:53:06:02:85:d9:b3:7a:d7:2a:8d:44:e0:
                    13:57:87:62:4d:8b:d2:2c:f5:7c:fe:d5:1f:b3:ae:
                    0a:4f:c6:8e:b4:32:32:9c:85:85:18:d0:e9:a5:9d:
                    69:66:6e:57:29:be:cb:70:59:db:5b:da:f8:9f:fc:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:19:1E:28:3A:B4:EE:2C:50:61:66:AE:D2:5C:96:75:DF:DB:E1:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:302::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:cb:d2:0a:e2:c3:44:41:c7:74:75:08:51:fe:5c:32:63:85:
         23:51:d9:b9:66:0e:06:c2:5b:f6:02:39:02:78:3b:7d:a7:f5:
         90:8e:54:d5:33:7e:c2:33:c6:7b:bb:93:e7:04:43:1a:ee:44:
         f6:b5:6d:0f:43:a5:fe:50:97:de:71:a8:34:b0:e4:fd:10:b8:
         3c:17:98:00:91:c9:cc:ad:e7:e5:89:06:55:53:de:7f:7d:b2:
         2d:37:b1:c7:2b:01:ae:43:2b:cc:b4:9f:38:7e:d6:a7:13:01:
         5b:04:4a:cd:23:f4:e5:03:51:11:09:cd:17:65:d4:25:a7:45:
         ea:26:66:2e:40:8b:60:f4:6e:d1:30:13:a7:df:74:0d:cd:3f:
         8e:b1:ae:7d:b1:c7:19:7e:ea:dc:9c:f0:f8:e0:d5:9d:87:b7:
         03:d1:ec:6b:7f:18:9e:1e:f8:c3:e4:eb:ca:5d:1b:fb:e0:09:
         96:33:16:8e:d4:9c:f0:90:b0:68:e2:9f:86:ed:da:f0:e8:e6:
         fc:fc:51:58:8b:22:6a:64:1d:0a:87:f8:59:5f:44:ec:0f:7b:
         e4:d1:93:24:f6:2a:81:70:9a:a6:79:da:1c:86:74:23:2b:d1:
         d8:71:3b:0f:b6:ec:11:a3:12:23:8c:ca:9b:0d:5c:10:14:22:
         bc:74:5c:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkPe/5dOUxv29zdRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0OWZlYmUtNzg4NS00YTNhLTgyOTAtMzcxMGIzZjM0
OTA1MB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZTU5Y2UxYzAtYjk4Yi00YzEwLTlmZTctNzQ2OTNkNmE5YWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSHcdV+YSQ4fR2CMOp4j3XYk37SvzPnzeLj5
T0vgHIO7wOS0ErYwNk77mkDOTo1JPCHMv14+2rKmr+j3Whzc745bVRf4V+mnTd5f
4qSEhdvNoxs3EKW6pqAYjMUcXMbbkvydZTYdHxmERQGjV9uRGY3Jrzo6WJe4n5vD
a4S4ToquIMqAfAaqNlr8xLnTCNXX/XmhsT0/4EaT2fUdNPrwFIbIrj2Y4GXBR6nR
QnD5GWVumZf7YQDW61ChZ+ZdgVMM7nlzHdNTBgKF2bN61yqNROATV4diTYvSLPV8
/tUfs64KT8aOtDIynIWFGNDppZ1pZm5XKb7LcFnbW9r4n/w1SwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGcZHig6tO4sUGFmrtJclnXf2+EpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5
ZmViZS03ODg1LTRhM2EtODI5MC0zNzEwYjNmMzQ5MDUvZjU5MGRkMmQtNjNiMS0z
ZTBiLTllN2YtZTRhZjk1ZDU1Mzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2I0OWZlYmUtNzg4NS00YTNhLTgy
OTAtMzcxMGIzZjM0OTA1L2NiNDlmZWJlLTc4ODUtNGEzYS04MjkwLTM3MTBiM2Yz
NDkwNS5jcmwwHwYDVR0jBBgwFoAUvOGzZkw5m0aMDRmG67KX3JfQGd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYjQ5ZmViZS03ODg1LTRhM2EtODI5MC0zNzEw
YjNmMzQ5MDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFEAMC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGPL0griw0RBx3R1CFH+XDJjhSNR2blmDgbCW/YCOQJ4O32n9ZCO
VNUzfsIzxnu7k+cEQxruRPa1bQ9Dpf5Ql95xqDSw5P0QuDwXmACRycyt5+WJBlVT
3n99si03sccrAa5DK8y0nzh+1qcTAVsESs0j9OUDUREJzRdl1CWnReomZi5Ai2D0
btEwE6ffdA3NP46xrn2xxxl+6tyc8Pjg1Z2HtwPR7Gt/GJ4e+MPk68pdG/vgCZYz
Fo7UnPCQsGjin4bt2vDo5vz8UViLImpkHQqH+FlfROwPe+TRkyT2KoFwmqZ52hyG
dCMr0dhxOw+27BGjEiOMypsNXBAUIrx0XEw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:34 2025 by rpki-client