Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa
File:                     bae8e28d-e4a2-3286-91f3-d55570d1925e.roa (raw, json)
Hash identifier:          gAyKy0SmgC4ZfJXas7cnAj/9eUIK5UBc+u4DlEh5nGw=
Subject key identifier:   21:BC:A0:96:1D:5B:06:3C:8C:65:EB:79:F2:20:51:2E:33:BE:04:FB
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584832F03512B3385BF421F78780
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     16904
IP address blocks:        2600:a00::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:35:12:b3:38:5b:f4:21:f7:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=9712d41b-7319-4316-b6c5-40d6a95301d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:68:2a:be:de:ca:99:36:75:62:4f:7f:6a:
                    ef:f3:14:3a:c1:3a:45:a2:89:0b:ea:0a:c8:94:d4:
                    29:4a:e2:3a:e5:af:d5:9b:d5:f4:b0:24:86:cf:ea:
                    92:58:fd:80:6c:9f:06:93:60:ce:46:67:27:4f:c8:
                    c0:89:ce:99:9c:90:a7:c1:0a:1c:51:94:98:b2:b5:
                    73:9c:7c:16:b3:07:ec:a7:3f:07:f7:8c:41:e7:1c:
                    76:a2:0f:2b:51:76:91:36:b3:b8:1a:94:f1:90:f6:
                    0b:1f:e7:9d:bf:7d:2b:f6:a4:b0:e3:b0:0b:c7:db:
                    82:22:61:b3:c4:c4:a0:a1:aa:ff:f4:2a:fa:8a:0b:
                    b8:14:d6:95:22:d7:65:70:81:5c:ad:8b:5d:5e:4f:
                    6c:65:7f:95:08:9a:72:c7:86:13:1b:f8:b4:3e:fe:
                    cc:a5:aa:40:d5:c2:01:bf:42:ef:54:ec:02:a4:d1:
                    0c:4a:fd:96:34:de:95:1d:0b:50:51:93:ea:05:e9:
                    25:50:4e:f1:2a:01:10:a8:5a:48:cc:bc:26:27:cb:
                    81:6e:79:9d:81:55:7a:4c:c5:bd:ab:b7:3d:35:2f:
                    5c:d5:64:47:cd:e2:7a:bc:30:40:fe:8c:65:a3:e8:
                    c3:61:30:fe:d1:c4:36:40:36:be:1e:3d:f8:c8:01:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BC:A0:96:1D:5B:06:3C:8C:65:EB:79:F2:20:51:2E:33:BE:04:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:95:1f:33:c0:e6:9a:c2:99:73:85:c9:b3:8d:92:45:5f:
         7a:d6:b2:c2:50:40:2c:4e:5d:bb:a7:c6:b7:5c:fa:3e:bc:85:
         8e:05:e4:d9:92:4e:b9:27:51:b4:b8:f9:1f:8e:8b:dd:66:e2:
         21:7d:bb:b2:40:b1:53:49:40:96:60:2a:e4:0b:41:e9:32:c8:
         1d:24:39:d4:ae:d3:8e:ab:b1:33:f9:a5:0f:23:74:3d:57:d4:
         ea:0b:73:c9:0f:b6:79:49:6c:5b:84:52:0d:dc:b8:7c:83:b2:
         63:fe:71:1c:8d:3f:25:b4:84:4a:8a:f9:2a:12:0f:c2:68:78:
         ed:f0:1e:a2:ba:b1:25:2c:9e:0c:a4:f6:03:5b:3a:94:7e:88:
         ad:22:68:98:ed:e2:3c:4b:2c:4b:bb:7f:5d:e8:8f:2b:66:35:
         db:e7:41:a7:15:a1:04:7a:a3:b4:75:39:fc:06:d4:d9:09:cf:
         0e:03:98:88:06:be:20:69:4d:4c:82:e9:77:d6:87:de:c9:2a:
         0e:37:5a:d1:e7:3b:ed:86:27:72:5b:07:f3:d5:37:6b:07:b9:
         59:32:ed:e1:4f:c1:95:5d:6c:a3:52:84:b6:c5:db:01:c5:4d:
         59:a0:f8:41:0a:5d:12:e0:76:76:18:68:3e:01:dc:e1:a1:6e:
         b4:00:27:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgy8DUSszhb9CH3h4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTcxMmQ0MWItNzMxOS00MzE2LWI2YzUtNDBkNmE5NTMwMWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn9oKr7eypk2dWJPf2rv8xQ6wTpFookL6grI
lNQpSuI65a/Vm9X0sCSGz+qSWP2AbJ8Gk2DORmcnT8jAic6ZnJCnwQocUZSYsrVz
nHwWswfspz8H94xB5xx2og8rUXaRNrO4GpTxkPYLH+edv30r9qSw47ALx9uCImGz
xMSgoar/9Cr6igu4FNaVItdlcIFcrYtdXk9sZX+VCJpyx4YTG/i0Pv7MpapA1cIB
v0LvVOwCpNEMSv2WNN6VHQtQUZPqBeklUE7xKgEQqFpIzLwmJ8uBbnmdgVV6TMW9
q7c9NS9c1WRHzeJ6vDBA/oxlo+jDYTD+0cQ2QDa+Hj34yAH+VwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCG8oJYdWwY8jGXrefIgUS4zvgT7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYmFlOGUyOGQtZTRhMi0z
Mjg2LTkxZjMtZDU1NTcwZDE5MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAKADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBYpJUfM8DmmsKZc4XJs42SRV961rLCUEAsTl27p8a3XPo+vIWOBeTZ
kk65J1G0uPkfjovdZuIhfbuyQLFTSUCWYCrkC0HpMsgdJDnUrtOOq7Ez+aUPI3Q9
V9TqC3PJD7Z5SWxbhFIN3Lh8g7Jj/nEcjT8ltIRKivkqEg/CaHjt8B6iurElLJ4M
pPYDWzqUfoitImiY7eI8SyxLu39d6I8rZjXb50GnFaEEeqO0dTn8BtTZCc8OA5iI
Br4gaU1Mgul31ofeySoON1rR5zvthidyWwfz1TdrB7lZMu3hT8GVXWyjUoS2xdsB
xU1ZoPhBCl0S4HZ2GGg+AdzhoW60ACff
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:17 2025 by rpki-client