Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4e3cf748-d048-3443-aad3-d9c01581e1f2.roa
File:                     4e3cf748-d048-3443-aad3-d9c01581e1f2.roa (raw, json)
Hash identifier:          hfkA3CQ6iSgI8NlDDg9EcdjpITVeK2Tm/p6TL4KVGFg=
Subject key identifier:   78:8F:B6:F2:CB:58:C0:66:D0:CD:59:7D:DD:08:C0:DE:A7:09:03:20
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD73D60304BDC3BFC9080
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4e3cf748-d048-3443-aad3-d9c01581e1f2.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:1023::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d7:3d:60:30:4b:dc:3b:fc:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=414dee3e-cd8a-44dc-ad7f-eba82e660a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:2a:fb:1b:46:cd:3b:83:b1:dc:23:19:cd:
                    a4:28:04:57:36:fc:15:4d:80:4d:52:ec:06:9e:a2:
                    24:56:45:55:da:65:9e:f0:c0:f8:17:57:0a:88:00:
                    35:0f:10:5d:58:eb:20:3d:3b:b3:f0:72:82:5f:77:
                    e3:c8:37:d1:25:3a:a1:27:af:4d:24:3a:82:4c:7d:
                    5a:29:3f:cc:15:17:d4:3b:07:4c:96:32:4d:c1:f7:
                    b9:60:0c:97:18:c7:39:70:d7:5b:67:bd:ec:08:e9:
                    c8:b2:97:43:6f:33:d7:ae:50:28:98:bb:b7:d9:60:
                    02:91:96:66:3f:76:a0:d3:94:3f:32:41:ab:77:d5:
                    90:09:7f:1f:15:71:29:22:ec:90:49:06:2e:84:f4:
                    51:0c:5a:ec:7f:a3:81:44:7c:e7:19:c4:1a:c1:0d:
                    d7:33:77:8a:63:6a:59:f5:0a:a6:63:70:a4:70:63:
                    d5:66:bd:ca:96:31:47:f3:9c:6e:f8:d0:f3:52:28:
                    1f:bf:16:cd:ad:6b:48:4d:cc:ae:a8:ff:fa:69:0f:
                    10:7b:ff:d2:39:e0:6f:7c:03:7c:f9:cd:72:38:f5:
                    18:57:c2:75:2b:f4:ad:ca:78:4e:64:2d:0c:c2:ce:
                    ac:58:76:d5:e9:b2:f6:b9:62:96:1a:44:10:0e:f0:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8F:B6:F2:CB:58:C0:66:D0:CD:59:7D:DD:08:C0:DE:A7:09:03:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4e3cf748-d048-3443-aad3-d9c01581e1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1023::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9a:a9:27:9f:b0:67:74:25:ef:67:65:27:6e:6b:15:39:3a:
         ba:be:c8:07:4c:cf:90:14:e7:df:bb:9b:fc:0e:be:2e:fb:19:
         73:27:86:26:85:19:13:c6:cb:98:98:c3:39:6d:e1:e9:39:1b:
         61:01:94:48:49:5c:82:73:74:54:71:a0:8a:d4:4f:67:2b:49:
         0f:06:ae:1f:97:69:b2:51:3e:a1:b5:51:05:aa:ee:00:06:58:
         30:49:a6:7b:25:89:6a:14:24:b0:7a:17:44:36:d6:dc:12:1e:
         c9:c3:c3:2c:3c:f3:fa:0e:f8:3c:ac:08:15:bc:02:5f:8c:0b:
         f6:45:a6:34:5e:d4:03:55:ee:36:99:55:06:a7:33:3e:fd:82:
         13:ea:87:0f:26:07:33:7e:4d:90:ce:91:ff:ea:fe:9d:97:93:
         76:9d:6e:b9:e3:76:dd:f9:38:5f:23:1c:ae:85:1d:c3:45:f0:
         ce:c7:29:49:77:2e:ba:ac:fa:57:4c:3a:bb:16:b3:6a:22:74:
         6a:60:8a:cc:43:f7:15:d9:a0:f5:2e:62:ba:b5:c2:b0:74:03:
         41:94:2b:6a:b4:a1:0d:e8:0f:24:22:c8:0a:73:61:b6:08:4e:
         98:ef:ff:d0:57:6a:86:03:ba:82:12:b5:3c:f1:50:18:df:3d:
         53:d2:fe:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn539c9YDBL3Dv8kIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
NDE0ZGVlM2UtY2Q4YS00NGRjLWFkN2YtZWJhODJlNjYwYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoYq+xtGzTuDsdwjGc2kKARXNvwVTYBNUuwG
nqIkVkVV2mWe8MD4F1cKiAA1DxBdWOsgPTuz8HKCX3fjyDfRJTqhJ69NJDqCTH1a
KT/MFRfUOwdMljJNwfe5YAyXGMc5cNdbZ73sCOnIspdDbzPXrlAomLu32WACkZZm
P3ag05Q/MkGrd9WQCX8fFXEpIuyQSQYuhPRRDFrsf6OBRHznGcQawQ3XM3eKY2pZ
9QqmY3CkcGPVZr3KljFH85xu+NDzUigfvxbNrWtITcyuqP/6aQ8Qe//SOeBvfAN8
+c1yOPUYV8J1K/StynhOZC0Mws6sWHbV6bL2uWKWGkQQDvASIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHiPtvLLWMBm0M1Zfd0IwN6nCQMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNGUzY2Y3NDgtZDA0OC0z
NDQzLWFhZDMtZDljMDE1ODFlMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBAj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABeaqSefsGd0Je9nZSduaxU5Orq+yAdMz5AU59+7m/wOvi77GXMn
hiaFGRPGy5iYwzlt4ek5G2EBlEhJXIJzdFRxoIrUT2crSQ8Grh+XabJRPqG1UQWq
7gAGWDBJpnsliWoUJLB6F0Q21twSHsnDwyw88/oO+DysCBW8Al+MC/ZFpjRe1ANV
7jaZVQanMz79ghPqhw8mBzN+TZDOkf/q/p2Xk3adbrnjdt35OF8jHK6FHcNF8M7H
KUl3Lrqs+ldMOrsWs2oidGpgisxD9xXZoPUuYrq1wrB0A0GUK2q0oQ3oDyQiyApz
YbYITpjv/9BXaoYDuoIStTzxUBjfPVPS/sk=
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:54 2025 by rpki-client