Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa
File:                     c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa (raw, json)
Hash identifier:          ZhO/JK+wGvlZNl3QTgxtKko8T9ZYeVpV/M7WZajwJbQ=
Subject key identifier:   57:15:80:BD:AE:3A:04:22:24:22:E7:4A:60:5B:F4:B2:FF:D5:40:7C
Certificate issuer:       /CN=058a49b1-635c-42be-b1a3-1465228f2130
Certificate serial:       010D0C9F43285848D4DB93C35974A6A072C7AE00
Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     26682
IP address blocks:        2602:f795::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:93:c3:59:74:a6:a0:72:c7:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=f220b076-2fc7-4f65-9353-3e21201b0241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:f3:54:28:a1:cd:5b:68:b8:1f:06:7c:85:
                    81:a2:24:07:cf:b0:6b:90:59:de:33:85:02:fc:67:
                    f4:9c:db:94:77:a9:ea:ac:7c:15:cd:e7:80:43:c8:
                    24:11:76:56:b7:10:5b:de:e1:1c:cc:18:40:8d:4a:
                    09:03:53:b7:e1:0a:98:97:0c:dd:13:bf:b8:f8:9b:
                    52:73:13:5d:e3:d1:0e:4a:92:ea:f7:74:78:0f:36:
                    5e:37:6f:29:27:6e:d7:99:6e:d3:c5:b7:bc:f2:73:
                    ae:f9:24:90:6f:9d:52:88:49:8f:53:c8:b1:e0:16:
                    cd:08:52:c1:1e:bd:76:44:54:6b:56:f3:38:87:07:
                    cf:2a:37:6f:2c:8b:b8:07:7e:5f:d0:da:3f:03:52:
                    8a:71:ce:ee:31:56:a4:71:3a:fc:d9:d3:ae:e1:46:
                    95:0b:fe:85:8a:e5:43:58:45:35:71:95:44:50:c2:
                    1b:18:ef:94:5f:18:be:c1:4e:b2:7a:53:4f:ef:0e:
                    2b:0f:93:9a:0f:65:7a:91:56:3f:18:8c:ee:44:6c:
                    6b:74:be:69:64:c9:b4:f7:65:ef:6d:ea:66:ce:fa:
                    35:2f:2c:00:57:5b:b3:a2:89:7f:10:b6:ed:66:05:
                    00:1b:07:8e:8a:2a:1f:64:1f:1d:eb:97:89:cc:bc:
                    9c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:15:80:BD:AE:3A:04:22:24:22:E7:4A:60:5B:F4:B2:FF:D5:40:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl

            X509v3 Authority Key Identifier:
                keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f795::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:a1:bd:23:55:c6:4c:7f:97:85:86:37:24:cf:69:e1:68:1c:
         3e:24:7f:a3:3e:ea:4b:63:1f:6f:89:ee:4c:aa:57:bd:69:a3:
         f7:16:6e:98:fd:2a:4d:7f:56:28:ae:75:39:00:81:67:a2:84:
         77:dc:b7:2a:5d:fd:95:7b:2a:57:34:6c:7c:9f:89:a1:ae:5f:
         ef:6f:65:92:36:c6:18:e2:23:ee:6c:3b:30:09:fa:72:0a:71:
         3a:39:39:cf:62:5a:46:30:f3:82:be:da:57:c6:05:21:8f:68:
         ae:26:69:e0:18:66:be:d1:e1:43:92:55:3f:7d:1d:9a:51:eb:
         89:64:14:f7:a5:2c:9a:d8:15:17:2d:4b:4b:be:81:be:07:36:
         a3:91:4e:94:af:83:1a:d2:bb:f8:7a:bb:98:f1:5f:25:37:69:
         08:3c:5a:ba:f5:78:7a:60:0c:40:6b:94:da:88:98:6f:d1:3b:
         3f:f3:28:fa:cd:8e:78:2e:8e:f1:5e:5d:67:31:55:1d:4e:cd:
         0d:0b:e6:c1:15:ce:2e:b5:4a:06:2d:c2:45:33:50:5f:4d:d7:
         e7:45:bc:d4:8b:8f:ea:7c:de:7f:4f:2f:80:ed:df:e4:f3:68:
         e1:99:2f:af:3c:35:3d:98:7a:7e:96:d5:f6:c9:9b:1f:29:39:
         e5:41:0b:f2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjU25PDWXSmoHLHrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy
MTMwMB4XDTI1MDIxMDAyMDAzOFoXDTI1MDUxMTAxMDAzOFowLzEtMCsGA1UEAxMk
ZjIyMGIwNzYtMmZjNy00ZjY1LTkzNTMtM2UyMTIwMWIwMjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsPzVCihzVtouB8GfIWBoiQHz7BrkFneM4UC
/Gf0nNuUd6nqrHwVzeeAQ8gkEXZWtxBb3uEczBhAjUoJA1O34QqYlwzdE7+4+JtS
cxNd49EOSpLq93R4DzZeN28pJ27XmW7Txbe88nOu+SSQb51SiEmPU8ix4BbNCFLB
Hr12RFRrVvM4hwfPKjdvLIu4B35f0No/A1KKcc7uMVakcTr82dOu4UaVC/6FiuVD
WEU1cZVEUMIbGO+UXxi+wU6yelNP7w4rD5OaD2V6kVY/GIzuRGxrdL5pZMm092Xv
bepmzvo1LywAV1uzool/ELbtZgUAGweOiiofZB8d65eJzLycgQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFcVgL2uOgQiJCLnSmBb9LL/1UB8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh
NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvYzVmM2Y0NjYtM2I3Yi0z
Yjc4LWFhODktNDMxMDJkZTRiOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx
YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm
MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1
MjI4ZjIxMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3lQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAtaG9I1XGTH+XhYY3JM9p4WgcPiR/oz7qS2Mfb4nuTKpXvWmj9xZu
mP0qTX9WKK51OQCBZ6KEd9y3Kl39lXsqVzRsfJ+Joa5f729lkjbGGOIj7mw7MAn6
cgpxOjk5z2JaRjDzgr7aV8YFIY9oriZp4BhmvtHhQ5JVP30dmlHriWQU96UsmtgV
Fy1LS76Bvgc2o5FOlK+DGtK7+Hq7mPFfJTdpCDxauvV4emAMQGuU2oiYb9E7P/Mo
+s2OeC6O8V5dZzFVHU7NDQvmwRXOLrVKBi3CRTNQX03X50W81IuP6nzef08vgO3f
5PNo4Zkvrzw1PZh6fpbV9smbHyk55UEL8g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:36 2025 by rpki-client