Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa
File:                     5d151199-3d68-39d0-bfa4-f996a0d268c2.roa (raw, json)
Hash identifier:          p09qJsUGh1N4qLNn+JwiB961LRMzOKh5VtWyLXbeQBM=
Subject key identifier:   DA:34:16:4F:99:90:4E:31:11:12:24:FC:7B:1A:47:ED:BA:BE:D3:FC
Certificate issuer:       /CN=5b1072af-9cbd-4f62-8155-d5c95177bece
Certificate serial:       010D0C9F4328584906C9469623FA22CE2025EB00
Authority key identifier: 91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa
Signing time:             Thu 27 Feb 2025 23:14:13 +0000
ROA not before:           Thu 27 Feb 2025 23:14:13 +0000
ROA not after:            Wed 28 May 2025 22:14:13 +0000
asID:                     29802
IP address blocks:        2605:e240:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:06:c9:46:96:23:fa:22:ce:20:25:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1072af-9cbd-4f62-8155-d5c95177bece
        Validity
            Not Before: Feb 27 23:14:13 2025 GMT
            Not After : May 28 22:14:13 2025 GMT
        Subject: CN=424208f5-2208-46ee-a914-4b2d0f6a08b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:47:f0:bc:f8:19:2a:7e:cc:a5:c7:7d:6f:
                    0a:fa:1e:99:eb:94:9b:82:64:4c:d7:7f:65:db:bc:
                    21:4b:c2:8b:d1:98:54:c6:95:d1:7c:23:1b:46:bf:
                    e9:74:54:b3:a2:87:48:b7:6b:03:10:33:d9:d7:ed:
                    70:6c:21:02:c8:08:1b:10:b1:01:1a:06:d5:17:1e:
                    16:a6:a8:52:54:42:22:fb:04:dd:ce:b3:62:0c:53:
                    88:62:32:10:91:a7:5d:e4:5a:75:33:47:31:79:2b:
                    8a:2e:e0:fb:a0:42:0d:bc:c9:05:79:3a:b4:71:44:
                    b0:b6:b8:28:6a:76:9d:92:e9:89:67:fd:f2:b7:59:
                    63:8a:a8:a3:03:32:35:49:70:b7:3c:d1:67:51:66:
                    c7:22:e1:e5:3f:7e:43:9c:3c:cd:5b:e9:d1:a1:4f:
                    53:47:12:c3:82:da:48:40:a8:ab:c8:f9:da:86:af:
                    0e:7d:de:76:5f:67:81:82:29:e3:03:d9:0e:32:27:
                    2e:f7:22:45:28:90:8c:3b:e7:0b:63:cd:65:22:b9:
                    a2:20:91:35:42:3a:cc:3f:44:a0:cb:c3:7a:53:b8:
                    bb:db:5e:b2:60:8e:2c:ea:0a:56:08:c7:f5:8c:41:
                    ec:c8:2f:7a:7e:9a:5c:2b:09:c5:e9:f2:44:47:61:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:16:4F:99:90:4E:31:11:12:24:FC:7B:1A:47:ED:BA:BE:D3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.crl

            X509v3 Authority Key Identifier:
                keyid:91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e240:ff00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b8:5f:10:f8:30:5f:81:38:57:3c:54:31:6b:55:08:a7:de:
         e4:97:8f:29:62:a2:fb:84:f7:f1:0e:c2:55:a3:44:09:50:9a:
         c9:50:8e:09:57:b9:4e:e9:7c:87:2d:d9:d2:f7:b9:78:9e:ef:
         1e:03:f1:71:48:4e:e7:dd:5e:a0:52:f7:e9:d0:a0:df:3f:eb:
         06:8f:35:86:31:fc:88:b0:ac:99:06:e4:01:84:49:e8:1c:e6:
         4e:cf:d0:76:17:a2:e7:a3:65:af:24:4a:af:e4:f6:4e:88:7b:
         e5:55:11:d2:4b:d5:ba:55:42:93:27:1a:83:fe:e6:e8:dd:7e:
         25:78:2b:d0:8b:86:49:05:ab:2a:69:4b:de:89:77:c1:45:31:
         ca:3e:ff:78:00:ff:f3:30:81:6c:ff:6d:86:74:9a:34:37:ff:
         16:5e:46:a2:d6:45:09:08:6c:d3:ec:65:54:6b:ce:84:6e:25:
         d0:00:26:e5:32:56:5f:43:96:e6:d1:87:2c:56:18:e6:99:01:
         cc:85:3b:6d:9c:d0:14:fa:9c:07:fe:bb:7c:73:58:29:3d:1d:
         71:c9:de:59:04:c4:ac:84:46:53:62:e7:f5:c1:41:ba:bd:58:
         3d:e2:bb:11:d3:e5:b7:0d:86:2f:9c:2f:c4:3c:bc:c9:17:77:
         1c:ec:a4:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkGyUaWI/oiziAl6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWIxMDcyYWYtOWNiZC00ZjYyLTgxNTUtZDVjOTUxNzdi
ZWNlMB4XDTI1MDIyNzIzMTQxM1oXDTI1MDUyODIyMTQxM1owLzEtMCsGA1UEAxMk
NDI0MjA4ZjUtMjIwOC00NmVlLWE5MTQtNGIyZDBmNmEwOGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLlH8Lz4GSp+zKXHfW8K+h6Z65SbgmRM139l
27whS8KL0ZhUxpXRfCMbRr/pdFSzoodIt2sDEDPZ1+1wbCECyAgbELEBGgbVFx4W
pqhSVEIi+wTdzrNiDFOIYjIQkadd5Fp1M0cxeSuKLuD7oEINvMkFeTq0cUSwtrgo
anadkumJZ/3yt1ljiqijAzI1SXC3PNFnUWbHIuHlP35DnDzNW+nRoU9TRxLDgtpI
QKiryPnahq8Ofd52X2eBginjA9kOMicu9yJFKJCMO+cLY81lIrmiIJE1QjrMP0Sg
y8N6U7i7216yYI4s6gpWCMf1jEHsyC96fppcKwnF6fJER2FkkQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNo0Fk+ZkE4xERIk/HsaR+26vtP8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YjEw
NzJhZi05Y2JkLTRmNjItODE1NS1kNWM5NTE3N2JlY2UvNWQxNTExOTktM2Q2OC0z
OWQwLWJmYTQtZjk5NmEwZDI2OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWIxMDcyYWYtOWNiZC00ZjYyLTgx
NTUtZDVjOTUxNzdiZWNlLzViMTA3MmFmLTljYmQtNGY2Mi04MTU1LWQ1Yzk1MTc3
YmVjZS5jcmwwHwYDVR0jBBgwFoAUkVCIzQQNXzjlEcCClshNIm+zQvowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81YjEwNzJhZi05Y2JkLTRmNjItODE1NS1kNWM5
NTE3N2JlY2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgXiQP8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATrhfEPgwX4E4VzxUMWtVCKfe5JePKWKi+4T38Q7CVaNECVCayVCO
CVe5Tul8hy3Z0ve5eJ7vHgPxcUhO591eoFL36dCg3z/rBo81hjH8iLCsmQbkAYRJ
6BzmTs/Qdhei56NlryRKr+T2Toh75VUR0kvVulVCkycag/7m6N1+JXgr0IuGSQWr
KmlL3ol3wUUxyj7/eAD/8zCBbP9thnSaNDf/Fl5GotZFCQhs0+xlVGvOhG4l0AAm
5TJWX0OW5tGHLFYY5pkBzIU7bZzQFPqcB/67fHNYKT0dccneWQTErIRGU2Ln9cFB
ur1YPeK7EdPltw2GL5wvxDy8yRd3HOykrQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 15:50:13 2025 by rpki-client