Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
File:                     a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa (raw, json)
Hash identifier:          wXIaikaoDzVDP0d4swms9wTXdlpsW60WIxKe62M91AA=
Subject key identifier:   EF:EE:9A:6E:DB:35:A9:F1:88:C2:EA:59:61:91:DC:86:27:35:61:FD
Certificate issuer:       /CN=cc16c3db-6181-4312-8911-054e81ccea5f
Certificate serial:       010D0C9F43285848D6410A8CA7CBAC4BFF3BCA80
Authority key identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     5719
IP address blocks:        2620:101::/46 maxlen: 46
                          2620:10d:1000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0a:8c:a7:cb:ac:4b:ff:3b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc16c3db-6181-4312-8911-054e81ccea5f
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=55cb6bb6-05ad-4ad4-8f6b-bccb0684b3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:be:f9:f7:2a:16:cb:bc:77:cd:c4:8d:ce:
                    e4:bf:b4:2d:98:a8:11:43:93:98:82:ba:f7:66:74:
                    f3:70:1f:1e:f4:66:a1:c0:26:df:0c:2c:2e:3f:03:
                    cb:a5:31:25:7d:26:c9:67:64:ed:dc:e4:56:c7:4a:
                    f6:d9:ab:05:c2:62:9e:36:3b:18:38:0d:35:d6:53:
                    df:81:f8:84:2d:55:d9:01:59:81:e4:4d:44:c9:0e:
                    7c:22:44:fa:32:65:4f:48:55:64:4c:58:67:12:af:
                    ec:8e:5f:c9:77:69:20:d0:fe:15:58:11:75:d3:9b:
                    32:4e:a3:a5:4b:11:35:c3:6e:8d:65:e5:0e:b1:a0:
                    2e:a4:d7:34:70:38:fc:39:33:54:c9:3e:d2:e2:0c:
                    28:48:43:17:c8:1f:f4:0c:80:63:d3:3c:15:01:a7:
                    80:63:58:da:ac:40:cd:55:3c:0a:00:19:ad:8f:cd:
                    6a:10:da:97:e7:0a:53:64:6e:dc:d3:64:40:b0:0f:
                    c7:78:34:1d:10:dc:18:aa:9b:1b:17:e8:a6:df:e5:
                    62:b7:47:c3:db:40:83:3e:0d:62:96:d1:27:5b:ba:
                    b2:cf:67:05:45:a0:a0:1e:18:8f:ec:8a:a1:7b:7c:
                    71:96:8b:25:e5:89:40:0d:35:33:f9:a4:80:9a:da:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EE:9A:6E:DB:35:A9:F1:88:C2:EA:59:61:91:DC:86:27:35:61:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101::/46
                  2620:10d:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:46:96:44:b3:e1:c6:19:06:be:bf:a8:90:5f:2c:cf:10:
         5d:23:2e:f3:b7:4a:f1:c7:d6:8c:55:9c:b9:cb:fc:3c:db:57:
         9a:e4:5d:1b:5e:1b:44:3b:0e:df:fd:e2:28:5a:30:82:31:e5:
         f8:7c:9c:75:ab:a4:25:35:e3:df:80:c0:d9:39:e4:f8:48:72:
         bd:28:ff:48:f5:f8:7f:e8:e1:f5:0b:9f:d7:c7:83:e0:24:a6:
         13:13:cd:c5:31:74:d1:90:46:8c:0f:b7:0d:7d:79:86:3f:91:
         dd:b1:9d:17:77:99:16:a9:c9:80:4d:d0:08:51:8e:36:1e:3b:
         8d:e6:78:26:a8:e0:be:10:52:57:26:41:97:f6:3b:b6:34:3c:
         66:42:dd:ca:26:14:3e:fa:44:32:43:95:1a:06:77:79:7d:b1:
         f8:70:c2:da:dc:95:30:68:a0:3e:31:70:91:c7:e5:f7:02:e7:
         64:cf:0c:23:06:14:3b:5e:09:c2:a4:eb:d5:55:97:5f:d9:8b:
         7a:2c:4e:a1:fd:13:84:e7:87:3a:78:a6:b3:bb:4d:e3:87:16:
         19:c4:6b:a7:15:df:cd:46:78:39:59:db:9c:71:ee:63:cf:df:
         63:53:77:3f:02:b0:ad:36:66:7c:f0:d8:26:cf:8d:f1:2b:b7:
         bb:49:1e:89
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjWQQqMp8usS/87yoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MxNmMzZGItNjE4MS00MzEyLTg5MTEtMDU0ZTgxY2Nl
YTVmMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NTVjYjZiYjYtMDVhZC00YWQ0LThmNmItYmNjYjA2ODRiM2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02W++fcqFsu8d83Ejc7kv7QtmKgRQ5OYgrr3
ZnTzcB8e9GahwCbfDCwuPwPLpTElfSbJZ2Tt3ORWx0r22asFwmKeNjsYOA011lPf
gfiELVXZAVmB5E1EyQ58IkT6MmVPSFVkTFhnEq/sjl/Jd2kg0P4VWBF105syTqOl
SxE1w26NZeUOsaAupNc0cDj8OTNUyT7S4gwoSEMXyB/0DIBj0zwVAaeAY1jarEDN
VTwKABmtj81qENqX5wpTZG7c02RAsA/HeDQdENwYqpsbF+im3+Vit0fD20CDPg1i
ltEnW7qyz2cFRaCgHhiP7Iqhe3xxlosl5YlADTUz+aSAmtr85wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFO/umm7bNanxiMLqWWGR3IYnNWH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzE2
YzNkYi02MTgxLTQzMTItODkxMS0wNTRlODFjY2VhNWYvYThiY2ZiOTQtYTFmNC0z
MTMzLWJmNjQtMzQ0YzI3YmNhNmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MxNmMzZGItNjE4MS00MzEyLTg5
MTEtMDU0ZTgxY2NlYTVmL2NjMTZjM2RiLTYxODEtNDMxMi04OTExLTA1NGU4MWNj
ZWE1Zi5jcmwwHwYDVR0jBBgwFoAU2HFU/lpZOIGrG0w3oP0hlzzpLUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzE2YzNkYi02MTgxLTQzMTItODkxMS0wNTRl
ODFjY2VhNWYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcCJiABAQAA
AwcEJiABDRAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGqURpZEs+HGGQa+v6iQXyzPEF0jLvO3SvHH1oxV
nLnL/DzbV5rkXRteG0Q7Dt/94ihaMIIx5fh8nHWrpCU149+AwNk55PhIcr0o/0j1
+H/o4fULn9fHg+AkphMTzcUxdNGQRowPtw19eYY/kd2xnRd3mRapyYBN0AhRjjYe
O43meCao4L4QUlcmQZf2O7Y0PGZC3comFD76RDJDlRoGd3l9sfhwwtrclTBooD4x
cJHH5fcC52TPDCMGFDteCcKk69VVl1/Zi3osTqH9E4Tnhzp4prO7TeOHFhnEa6cV
381GeDlZ25xx7mPP32NTdz8CsK02Znzw2CbPjfErt7tJHok=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:33 2025 by rpki-client