Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/75ab6681-db4e-3521-b442-8f7c8395cbea.roa
File:                     75ab6681-db4e-3521-b442-8f7c8395cbea.roa (raw, json)
Hash identifier:          XqI8LYQ8ZiSvbRPJl7aqvn19hSa2nguv8SdYcNligAA=
Subject key identifier:   7B:98:40:8C:3C:B8:28:E4:E8:42:E2:B9:2C:9C:F5:98:AC:7B:B7:8E
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A315D14CFC0862A9BC1AC680
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/75ab6681-db4e-3521-b442-8f7c8395cbea.roa
Signing time:             Thu 23 Jan 2025 06:07:36 +0000
ROA not before:           Thu 23 Jan 2025 06:07:36 +0000
ROA not after:            Wed 23 Apr 2025 05:07:36 +0000
asID:                     19165
IP address blocks:        2604:5500:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:15:d1:4c:fc:08:62:a9:bc:1a:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 23 06:07:36 2025 GMT
            Not After : Apr 23 05:07:36 2025 GMT
        Subject: CN=af909dfe-0726-4729-92d7-aea771a219b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:ad:2c:ce:06:f5:2a:bd:25:f7:71:f5:16:
                    f9:15:16:a0:55:9b:0a:8c:35:40:bb:e4:1f:32:6a:
                    37:36:03:68:71:7e:e8:82:e0:ad:88:4b:55:4f:c0:
                    93:7d:5a:3b:8d:d6:ee:96:23:74:44:53:e2:64:00:
                    52:d2:4c:b8:5f:52:30:5a:63:4d:a4:a2:d6:5f:04:
                    c2:c1:0d:aa:bd:c5:71:0e:1d:99:dc:ba:63:08:9c:
                    77:6b:68:0a:e9:ad:3b:01:ce:51:2c:ac:d8:09:46:
                    60:40:79:b6:0f:57:d4:09:bb:a8:34:cb:44:39:f6:
                    a1:35:b8:98:71:99:5a:25:ab:3a:da:16:e5:9b:c6:
                    e1:11:6e:e7:fa:6b:f0:8c:52:30:8a:c3:51:95:99:
                    90:00:ee:55:ed:02:82:48:b1:33:7c:90:54:20:fc:
                    5e:78:c0:9a:49:25:a8:64:7d:0c:d8:71:8f:0f:bf:
                    93:6f:a6:19:ec:07:01:42:95:f5:78:21:b5:82:3a:
                    80:4d:6e:40:ce:0b:f6:67:63:45:f2:62:d7:9a:c0:
                    73:91:43:c8:62:a8:eb:fb:55:93:18:53:f9:2b:60:
                    dd:8e:3e:16:e6:e5:b2:12:91:40:7d:8d:8f:5d:60:
                    3e:a7:c4:d3:f1:e0:17:27:d5:20:d4:4f:ff:c0:d9:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:98:40:8C:3C:B8:28:E4:E8:42:E2:B9:2C:9C:F5:98:AC:7B:B7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/75ab6681-db4e-3521-b442-8f7c8395cbea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:12:0f:fa:5f:4a:42:6c:d9:05:1c:59:b4:8b:60:1a:ff:c4:
         3b:67:8b:a1:f9:80:ec:f6:03:cb:6a:6d:f1:67:3b:4f:7a:d5:
         c0:b2:01:a4:d6:40:ec:1c:d1:86:75:3c:24:8c:7f:07:b6:13:
         d2:48:61:d1:80:03:c9:d7:38:b0:df:72:2f:d7:44:d1:0c:7f:
         c6:46:6b:46:7d:15:c4:13:90:45:21:fc:2e:b2:68:32:48:69:
         2d:bd:ae:28:77:69:4c:61:19:bc:a3:fe:f2:79:8d:b5:6c:ad:
         33:cd:35:0f:89:60:e1:8d:e0:00:31:5a:ea:5f:e9:e4:e8:4c:
         ba:f1:09:92:4c:23:ad:d7:74:0c:8f:77:61:2e:40:a9:33:9c:
         6a:51:21:70:84:b9:df:a4:2f:4b:df:8e:3a:71:37:02:c5:fe:
         91:5e:b9:1c:c8:4e:ba:79:1f:f6:5a:2d:a3:d1:10:03:5a:07:
         83:73:3c:ff:5a:0d:9a:6e:cd:7d:13:2f:95:6d:c5:2d:53:73:
         b8:5c:39:4c:b8:4a:4d:37:10:89:60:59:32:69:0b:5b:a4:e3:
         b0:e5:8c:78:2a:9c:77:d1:a2:03:a8:ad:97:a8:26:39:c7:ed:
         9c:65:52:59:dd:c2:b7:01:8d:0e:69:49:21:a5:6a:89:b7:40:
         64:cc:cb:cf
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEijFdFM/AhiqbwaxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2
NDA0MB4XDTI1MDEyMzA2MDczNloXDTI1MDQyMzA1MDczNlowLzEtMCsGA1UEAxMk
YWY5MDlkZmUtMDcyNi00NzI5LTkyZDctYWVhNzcxYTIxOWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+StLM4G9Sq9Jfdx9Rb5FRagVZsKjDVAu+Qf
Mmo3NgNocX7oguCtiEtVT8CTfVo7jdbuliN0RFPiZABS0ky4X1IwWmNNpKLWXwTC
wQ2qvcVxDh2Z3LpjCJx3a2gK6a07Ac5RLKzYCUZgQHm2D1fUCbuoNMtEOfahNbiY
cZlaJas62hblm8bhEW7n+mvwjFIwisNRlZmQAO5V7QKCSLEzfJBUIPxeeMCaSSWo
ZH0M2HGPD7+Tb6YZ7AcBQpX1eCG1gjqATW5Azgv2Z2NF8mLXmsBzkUPIYqjr+1WT
GFP5K2Ddjj4W5uWyEpFAfY2PXWA+p8TT8eAXJ9Ug1E//wNlmiQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHuYQIw8uCjk6ELiuSyc9Zise7eOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz
YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNzVhYjY2ODEtZGI0ZS0z
NTIxLWI0NDItOGY3YzgzOTVjYmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm
NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl
NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz
ZjY1ZTY0MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgRVACgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjxIP+l9KQmzZBRxZtItgGv/EO2eLofmA7PYDy2pt8Wc7T3rVwLIB
pNZA7BzRhnU8JIx/B7YT0khh0YADydc4sN9yL9dE0Qx/xkZrRn0VxBOQRSH8LrJo
MkhpLb2uKHdpTGEZvKP+8nmNtWytM801D4lg4Y3gADFa6l/p5OhMuvEJkkwjrdd0
DI93YS5AqTOcalEhcIS536QvS9+OOnE3AsX+kV65HMhOunkf9loto9EQA1oHg3M8
/1oNmm7NfRMvlW3FLVNzuFw5TLhKTTcQiWBZMmkLW6TjsOWMeCqcd9GiA6itl6gm
OcftnGVSWd3CtwGNDmlJIaVqibdAZMzLzw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:23 2025 by rpki-client