Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
File:                     4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa (raw, json)
Hash identifier:          zW7E6VwoOv1FUbnjEiy1oTd4/0SPKKD/cPYUNh3tHPg=
Subject key identifier:   CB:6C:27:8F:99:2A:D4:DA:00:F4:D1:58:78:3B:1A:03:24:A7:77:ED
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285848E0065F21015083D7654AE900
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     38047
IP address blocks:        2602:f83b:54::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:5f:21:01:50:83:d7:65:4a:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=42b4c5cc-002c-4b94-a884-b81247bf0f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:98:d1:e5:d8:c7:76:85:9e:49:09:10:26:
                    ab:9d:02:71:83:89:5f:f7:85:65:2e:d7:ff:c9:f3:
                    58:27:59:5d:46:20:11:b8:0e:50:29:d8:39:92:25:
                    58:a2:ad:fa:b0:83:fd:54:12:51:af:ce:d2:2e:87:
                    97:6e:cb:1c:fb:76:87:47:46:6f:e5:2e:75:75:3f:
                    87:e1:38:f2:0d:6e:d0:cd:9b:30:78:66:2b:63:97:
                    37:6d:df:dc:93:ac:c7:d2:37:82:2e:0f:b5:c6:91:
                    fa:25:83:43:41:a1:5f:4a:ab:9c:21:4b:d6:a4:32:
                    dc:f3:0c:82:82:a4:6b:17:b9:bf:5c:4f:4b:96:48:
                    44:6b:e8:b2:84:32:92:d5:71:ae:53:ee:b1:00:c8:
                    d7:08:0b:66:7c:d7:ad:80:c5:79:f6:b3:a4:c5:e2:
                    98:49:43:9c:73:df:2c:5b:84:6d:fc:52:15:18:bc:
                    42:22:a2:41:d0:4e:68:9c:81:cf:db:f2:85:7c:75:
                    67:84:e8:ff:f4:d8:58:b8:b8:77:8f:db:20:56:a8:
                    00:68:bf:0d:38:40:36:b2:0c:6e:33:53:0f:7b:15:
                    e5:1c:fe:5a:88:b4:a7:a4:60:8e:8f:82:01:00:19:
                    cd:96:ed:11:33:fa:d7:8d:eb:3b:42:2f:dd:74:37:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:27:8F:99:2A:D4:DA:00:F4:D1:58:78:3B:1A:03:24:A7:77:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5c:4c:d8:b5:38:60:d9:88:eb:5c:ea:ad:73:d0:70:35:8f:
         dc:f8:65:0c:85:96:d1:be:1c:5d:0e:38:df:9e:7f:bd:e6:f7:
         72:6c:5d:95:5e:18:17:42:da:20:a3:f0:6b:c0:c3:a9:b9:f1:
         04:e5:5f:6e:88:53:10:16:3c:54:1e:b2:34:16:f3:06:72:ec:
         c1:2f:fc:03:dc:34:7c:67:a7:55:4c:74:b5:13:a7:4b:d8:c4:
         18:0d:da:67:1a:b0:e6:bf:e7:5b:a2:ec:0e:25:d9:74:27:37:
         42:65:3e:0b:06:e9:25:16:2f:60:ad:df:50:45:63:b0:0b:03:
         8c:11:5e:64:09:41:48:0e:ce:8a:75:ec:9c:7c:cb:4e:5e:53:
         85:48:ab:d1:af:04:f0:b1:bc:22:da:bf:0e:5c:41:57:d1:47:
         88:fc:12:9e:49:7b:a6:04:1e:b0:8a:a1:0c:fe:c0:e1:73:e0:
         d0:70:f5:4e:c4:2d:89:09:ad:3b:5c:ca:15:23:e1:d6:bf:99:
         c2:a2:88:e6:b0:32:3b:f9:47:d9:8e:2f:22:d8:6f:e4:20:e6:
         84:8b:7f:18:44:81:1a:ce:8b:a5:50:c8:35:14:ce:ba:8f:e7:
         05:c0:e1:30:b0:61:6c:24:85:e0:1e:83:cd:41:9d:a6:8e:ed:
         7a:ed:59:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBl8hAVCD12VK6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
NDJiNGM1Y2MtMDAyYy00Yjk0LWE4ODQtYjgxMjQ3YmYwZjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIGY0eXYx3aFnkkJECarnQJxg4lf94VlLtf/
yfNYJ1ldRiARuA5QKdg5kiVYoq36sIP9VBJRr87SLoeXbssc+3aHR0Zv5S51dT+H
4TjyDW7QzZsweGYrY5c3bd/ck6zH0jeCLg+1xpH6JYNDQaFfSqucIUvWpDLc8wyC
gqRrF7m/XE9LlkhEa+iyhDKS1XGuU+6xAMjXCAtmfNetgMV59rOkxeKYSUOcc98s
W4Rt/FIVGLxCIqJB0E5onIHP2/KFfHVnhOj/9NhYuLh3j9sgVqgAaL8NOEA2sgxu
M1MPexXlHP5aiLSnpGCOj4IBABnNlu0RM/rXjes7Qi/ddDfGYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMtsJ4+ZKtTaAPTRWHg7GgMkp3ftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNGE2YjY0NTEtODQ0NS0z
Y2JkLTg3NjctYzEwYWIwN2M5ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OwBU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB9cTNi1OGDZiOtc6q1z0HA1j9z4ZQyFltG+HF0OON+ef73m93Js
XZVeGBdC2iCj8GvAw6m58QTlX26IUxAWPFQesjQW8wZy7MEv/APcNHxnp1VMdLUT
p0vYxBgN2mcasOa/51ui7A4l2XQnN0JlPgsG6SUWL2Ct31BFY7ALA4wRXmQJQUgO
zop17Jx8y05eU4VIq9GvBPCxvCLavw5cQVfRR4j8Ep5Je6YEHrCKoQz+wOFz4NBw
9U7ELYkJrTtcyhUj4da/mcKiiOawMjv5R9mOLyLYb+Qg5oSLfxhEgRrOi6VQyDUU
zrqP5wXA4TCwYWwkheAeg81BnaaO7XrtWdw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:42:14 2025 by rpki-client