Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa
File:                     74d9292f-0232-361d-a896-b4096e43e2d4.roa (raw, json)
Hash identifier:          3DsqW+XKuWy2QeVQguPWev/h+qYM02iJJkQ6cBSqrmA=
Subject key identifier:   58:A7:1D:43:73:E1:2B:31:86:D0:98:D9:B9:38:EE:D0:72:1E:84:39
Certificate issuer:       /CN=6515379e-337a-4a35-ab2d-5403f98d4c33
Certificate serial:       010D0C9F4328584917DC3324B266C46FB8E12AC0
Authority key identifier: 8E:B2:1D:FA:52:7E:5B:64:73:FE:C4:C5:F5:A7:BF:E2:FA:47:46:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     396443
IP address blocks:        2607:480::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:33:24:b2:66:c4:6f:b8:e1:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6515379e-337a-4a35-ab2d-5403f98d4c33
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=f3b4a678-d42d-4035-93e6-68dfce47904d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:89:4e:8b:5d:e0:ba:1a:c8:51:2b:24:ff:
                    13:e6:4f:6d:0b:28:47:50:53:df:2a:44:be:9d:47:
                    d7:ab:c1:d4:53:d7:87:7d:0a:2e:45:62:25:9b:6e:
                    8b:5e:20:93:8f:58:34:37:b2:87:38:74:0f:1f:36:
                    24:57:87:9b:fe:46:7c:36:f5:43:1d:40:73:e2:db:
                    91:e9:ef:f7:b1:18:f6:55:58:ad:70:05:aa:81:37:
                    c6:e7:e4:60:1b:e0:8d:98:1d:d2:ca:95:2f:8c:36:
                    12:71:5e:60:34:73:65:a9:82:12:8b:36:12:e7:0d:
                    2b:21:fe:9b:ee:26:65:57:64:8f:d7:78:1a:06:fb:
                    a9:c1:89:5a:78:1b:f9:f9:43:c4:32:f9:95:55:a5:
                    e0:b5:59:8f:e0:14:ca:07:b9:cd:6f:d7:95:ae:b5:
                    25:15:de:0a:8c:8f:f1:ea:0a:74:41:ad:bf:29:79:
                    05:5c:23:e0:30:fa:a0:47:45:2c:25:a3:74:12:95:
                    dc:e1:be:ed:58:45:3a:56:c9:8c:e7:0c:1f:eb:b3:
                    64:d9:a7:f8:92:4b:09:83:14:09:5e:7c:33:0e:2d:
                    5a:7a:f0:06:c9:7c:25:e7:3a:d6:8f:47:23:30:d2:
                    d7:15:b8:56:8c:12:17:76:59:f6:91:1c:72:72:47:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A7:1D:43:73:E1:2B:31:86:D0:98:D9:B9:38:EE:D0:72:1E:84:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.crl

            X509v3 Authority Key Identifier:
                keyid:8E:B2:1D:FA:52:7E:5B:64:73:FE:C4:C5:F5:A7:BF:E2:FA:47:46:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:98:13:98:8e:c0:13:6e:f9:c2:66:01:f4:fb:d1:c3:80:
         a3:4d:d3:3e:7d:49:65:af:27:f7:aa:73:08:0a:8c:94:41:c8:
         88:20:88:28:f1:49:0f:a9:b4:b8:a5:f8:b7:54:4f:86:a2:8d:
         c8:a1:f4:7f:51:8d:c5:5d:7e:11:99:55:b8:b3:bd:af:28:60:
         c4:10:93:64:78:59:28:b0:d2:1b:d1:b7:ac:4f:6a:c6:25:37:
         81:e3:1f:ef:ff:2f:d7:50:0d:ed:1e:da:18:fc:ec:a6:8a:1d:
         9a:6a:1e:b8:c9:6b:f7:fe:9d:6b:14:fa:5c:07:6c:c9:c0:0a:
         f3:f1:3e:53:59:73:09:53:e7:70:5e:5f:84:57:0b:28:9f:69:
         11:6f:1e:7b:10:27:5d:70:71:a4:48:60:4a:eb:5b:83:76:b1:
         a2:46:75:74:d3:84:89:a5:ae:7f:36:bf:3f:99:87:2c:60:f1:
         aa:03:6d:d1:c9:d5:81:c0:7a:40:0c:8b:6a:57:86:36:ca:63:
         bd:44:13:5a:73:ad:4d:d3:b3:88:66:82:40:9e:bd:98:c8:70:
         d6:d6:fa:e5:aa:d7:ea:52:42:a8:74:ad:9e:9f:0c:ea:1b:80:
         a8:80:27:3f:4f:9b:18:3b:d2:e1:3a:32:2c:be:b3:e1:ba:6f:
         9c:3b:2f:fb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX3DMksmbEb7jhKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUxNTM3OWUtMzM3YS00YTM1LWFiMmQtNTQwM2Y5OGQ0
YzMzMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjNiNGE2NzgtZDQyZC00MDM1LTkzZTYtNjhkZmNlNDc5MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllyJTotd4LoayFErJP8T5k9tCyhHUFPfKkS+
nUfXq8HUU9eHfQouRWIlm26LXiCTj1g0N7KHOHQPHzYkV4eb/kZ8NvVDHUBz4tuR
6e/3sRj2VVitcAWqgTfG5+RgG+CNmB3SypUvjDYScV5gNHNlqYISizYS5w0rIf6b
7iZlV2SP13gaBvupwYlaeBv5+UPEMvmVVaXgtVmP4BTKB7nNb9eVrrUlFd4KjI/x
6gp0Qa2/KXkFXCPgMPqgR0UsJaN0EpXc4b7tWEU6VsmM5wwf67Nk2af4kksJgxQJ
XnwzDi1aevAGyXwl5zrWj0cjMNLXFbhWjBIXdln2kRxyckd/1QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFinHUNz4SsxhtCY2bk47tByHoQ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTE1
Mzc5ZS0zMzdhLTRhMzUtYWIyZC01NDAzZjk4ZDRjMzMvNzRkOTI5MmYtMDIzMi0z
NjFkLWE4OTYtYjQwOTZlNDNlMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjUxNTM3OWUtMzM3YS00YTM1LWFi
MmQtNTQwM2Y5OGQ0YzMzLzY1MTUzNzllLTMzN2EtNGEzNS1hYjJkLTU0MDNmOThk
NGMzMy5jcmwwHwYDVR0jBBgwFoAUjrId+lJ+W2Rz/sTF9ae/4vpHRiQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTE1Mzc5ZS0zMzdhLTRhMzUtYWIyZC01NDAz
Zjk4ZDRjMzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcEgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBfEZgTmI7AE275wmYB9PvRw4CjTdM+fUllryf3qnMICoyUQciIIIgo
8UkPqbS4pfi3VE+Goo3IofR/UY3FXX4RmVW4s72vKGDEEJNkeFkosNIb0besT2rG
JTeB4x/v/y/XUA3tHtoY/Oymih2aah64yWv3/p1rFPpcB2zJwArz8T5TWXMJU+dw
Xl+EVwson2kRbx57ECddcHGkSGBK61uDdrGiRnV004SJpa5/Nr8/mYcsYPGqA23R
ydWBwHpADItqV4Y2ymO9RBNac61N07OIZoJAnr2YyHDW1vrlqtfqUkKodK2enwzq
G4CogCc/T5sYO9LhOjIsvrPhum+cOy/7
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:48 2025 by rpki-client