Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/5e178d5c-5fd0-3322-af7b-247ac5aa3e52.roa
File:                     5e178d5c-5fd0-3322-af7b-247ac5aa3e52.roa (raw, json)
Hash identifier:          3G21RP5mA+2J2IXj6i/u1orWrqrDyENnVosnSap/7rI=
Subject key identifier:   85:D7:96:5C:0E:11:EB:B4:19:6D:7B:E1:67:DC:3F:D9:F9:0D:9C:4B
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F43285849203C15E3B2535340BBF22590
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/5e178d5c-5fd0-3322-af7b-247ac5aa3e52.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     30094
IP address blocks:        2607:bc40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:15:e3:b2:53:53:40:bb:f2:25:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=aa07f0ea-ee7c-4ebf-900f-230e084a9c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6c:52:4e:1d:ea:90:a3:2f:35:12:f0:ad:87:
                    9b:57:d4:7a:15:bd:d2:45:cb:ed:30:dc:6e:69:8c:
                    bc:ac:36:3b:0a:a6:a8:b1:12:90:1d:ee:8b:47:8f:
                    5e:29:ee:f6:15:1e:ea:97:d2:95:e0:b3:21:af:d5:
                    82:96:72:1e:de:83:30:bf:32:a6:bf:71:c6:62:be:
                    8c:ce:b2:0b:b8:13:33:40:b3:b9:0d:c0:d5:f6:44:
                    1f:24:64:3c:36:a1:69:b5:ab:a8:57:ff:6c:32:32:
                    e8:87:d1:f9:76:55:dd:5d:00:09:be:08:b2:fb:6e:
                    2e:ef:b3:90:dc:9b:e7:4f:a4:ff:82:7c:88:62:78:
                    fc:0a:d6:75:96:33:20:2b:c6:dd:89:74:e7:e3:76:
                    59:30:ff:f6:7f:ef:2c:45:39:92:cb:58:25:49:9b:
                    ca:ff:77:88:b5:28:18:0f:bc:6a:60:95:59:7d:56:
                    4b:3c:7b:1d:08:9e:49:4d:01:53:05:ad:46:e1:da:
                    c1:b8:d6:b3:54:02:fe:72:8a:73:ab:62:e5:59:e2:
                    cf:ed:dc:9c:11:04:a2:ba:2a:de:0f:48:a0:ea:03:
                    55:67:b5:71:d5:c7:f6:31:cc:bc:28:c5:95:02:48:
                    e6:99:62:64:08:3a:57:90:4a:12:af:32:57:99:23:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D7:96:5C:0E:11:EB:B4:19:6D:7B:E1:67:DC:3F:D9:F9:0D:9C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/5e178d5c-5fd0-3322-af7b-247ac5aa3e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:77:d9:a2:8d:cf:53:f3:88:4d:fa:bb:ef:be:8c:d2:71:
         34:0d:37:e5:96:e9:b1:4e:f0:78:ce:0a:c5:73:77:d9:2c:c6:
         ba:33:55:74:33:6c:8e:44:a9:8a:d7:d2:ee:e4:ac:1e:5c:6f:
         8b:fb:b2:2b:84:e6:12:81:44:d3:4b:ef:5f:f1:91:1b:91:a0:
         79:08:0b:98:ae:65:97:a2:be:61:0d:ad:01:b7:b8:db:08:5d:
         ca:bf:8d:ee:8e:72:77:df:3b:73:91:64:16:75:c4:5f:ad:90:
         dc:8b:1e:7d:08:85:1d:5a:5c:a4:e7:2a:b6:94:7b:02:f3:ae:
         24:57:b1:ad:d1:f1:39:ba:80:dc:43:bb:f9:b2:f3:2e:5f:bb:
         ac:42:2c:34:06:2b:bf:f3:bc:04:20:b8:ae:f9:d2:97:dc:53:
         87:ad:52:83:9f:e8:0d:fe:ab:e1:22:d4:4e:7c:e9:d3:f0:ad:
         9d:41:ac:83:d6:20:2e:47:1e:42:6d:4b:44:34:a8:d9:d8:a3:
         e4:c5:7b:e4:16:4d:88:bb:48:0c:96:2c:05:4a:11:06:ce:63:
         3e:7e:2d:5e:d5:62:6c:a8:2b:ad:e5:56:96:85:ab:d7:aa:6c:
         94:5d:ff:89:cf:54:40:db:56:8a:fc:77:89:91:fd:93:aa:40:
         83:32:88:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkgPBXjslNTQLvyJZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEzZjkwNDQtYzE4NS00MDYyLThkYWQtMjQwYjMyYjEx
MzQ4MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
YWEwN2YwZWEtZWU3Yy00ZWJmLTkwMGYtMjMwZTA4NGE5YzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWxSTh3qkKMvNRLwrYebV9R6Fb3SRcvtMNxu
aYy8rDY7CqaosRKQHe6LR49eKe72FR7ql9KV4LMhr9WClnIe3oMwvzKmv3HGYr6M
zrILuBMzQLO5DcDV9kQfJGQ8NqFptauoV/9sMjLoh9H5dlXdXQAJvgiy+24u77OQ
3JvnT6T/gnyIYnj8CtZ1ljMgK8bdiXTn43ZZMP/2f+8sRTmSy1glSZvK/3eItSgY
D7xqYJVZfVZLPHsdCJ5JTQFTBa1G4drBuNazVAL+copzq2LlWeLP7dycEQSiuire
D0ig6gNVZ7Vx1cf2Mcy8KMWVAkjmmWJkCDpXkEoSrzJXmSPQkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIXXllwOEeu0GW174WfcP9n5DZxLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYTNm
OTA0NC1jMTg1LTQwNjItOGRhZC0yNDBiMzJiMTEzNDgvNWUxNzhkNWMtNWZkMC0z
MzIyLWFmN2ItMjQ3YWM1YWEzZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWEzZjkwNDQtYzE4NS00MDYyLThk
YWQtMjQwYjMyYjExMzQ4L2VhM2Y5MDQ0LWMxODUtNDA2Mi04ZGFkLTI0MGIzMmIx
MTM0OC5jcmwwHwYDVR0jBBgwFoAU/qCdkBIn9seDsTYB8Pa28gt/KOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYTNmOTA0NC1jMTg1LTQwNjItOGRhZC0yNDBi
MzJiMTEzNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJge8QAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG4kd9mijc9T84hN+rvvvozScTQNN+WW6bFO8HjOCsVzd9ksxroz
VXQzbI5EqYrX0u7krB5cb4v7siuE5hKBRNNL71/xkRuRoHkIC5iuZZeivmENrQG3
uNsIXcq/je6OcnffO3ORZBZ1xF+tkNyLHn0IhR1aXKTnKraUewLzriRXsa3R8Tm6
gNxDu/my8y5fu6xCLDQGK7/zvAQguK750pfcU4etUoOf6A3+q+Ei1E586dPwrZ1B
rIPWIC5HHkJtS0Q0qNnYo+TFe+QWTYi7SAyWLAVKEQbOYz5+LV7VYmyoK63lVpaF
q9eqbJRd/4nPVEDbVor8d4mR/ZOqQIMyiNs=
-----END CERTIFICATE-----
Generated at Fri Mar 14 07:30:17 2025 by rpki-client