Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa
File:                     1df56742-c777-32ef-bcab-01b39d58ce20.roa (raw, json)
Hash identifier:          HRBUwVwbj5Nf1sq5+Qg3PDS3jmVLs70UmdUf2/+DRO0=
Subject key identifier:   28:DC:13:45:99:3E:DB:5F:FB:34:7F:35:ED:49:A8:F9:5D:53:8D:F8
Certificate issuer:       /CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
Certificate serial:       010D0C9F432858497DA46CF190FFE3C2F885E9C0
Authority key identifier: F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     401307
IP address blocks:        2620:118:c000::/42 maxlen: 48
                          2620:118:c080::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:6c:f1:90:ff:e3:c2:f8:85:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1e17a44f-b296-4eda-a478-c5d695e05d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:70:2b:f0:60:78:b4:c7:5a:a8:28:60:1b:dd:
                    4c:fb:2a:28:02:3e:58:22:f8:16:e4:7b:96:a2:d0:
                    77:80:62:b4:e8:d8:01:dc:1d:24:33:f6:24:ab:d3:
                    6d:62:73:34:64:c3:cf:e9:c8:de:23:54:4e:c9:b7:
                    ab:a2:40:bb:1c:9b:b6:c6:48:d9:33:e7:17:81:81:
                    b1:f4:da:93:a5:b2:d7:dc:62:1c:3e:89:61:2a:fd:
                    d1:ab:05:91:5f:cd:b0:f3:48:59:f5:10:19:a5:7c:
                    09:ee:a5:8e:90:9b:2b:20:68:ae:d3:70:39:bb:c1:
                    c9:7b:6e:17:3c:c8:72:7d:b5:69:5f:46:80:05:b2:
                    99:23:ed:da:01:bc:60:24:8d:1a:f2:71:19:ef:d7:
                    05:91:e0:0d:a3:7d:da:cf:3a:14:a4:da:cc:21:e0:
                    95:06:68:6f:08:da:00:19:5a:03:25:2a:2b:e5:4b:
                    f5:7a:f1:e5:b6:96:b7:b9:6f:50:ed:c5:73:af:d8:
                    86:7e:3b:63:3d:0b:5e:c9:f7:53:34:53:dd:43:a3:
                    90:ff:0d:41:b5:99:d5:68:31:fd:d2:17:9d:cb:04:
                    e9:17:08:83:06:62:5c:09:76:91:0f:29:8e:4b:08:
                    26:2f:40:6f:42:8b:ae:59:a3:32:c7:a2:da:d7:c1:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DC:13:45:99:3E:DB:5F:FB:34:7F:35:ED:49:A8:F9:5D:53:8D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/1df56742-c777-32ef-bcab-01b39d58ce20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl

            X509v3 Authority Key Identifier:
                keyid:F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:118:c000::/42
                  2620:118:c080::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:b6:1b:63:8a:b9:b7:6d:58:df:f0:7a:29:e0:26:d3:5e:
         83:ea:82:bc:b7:b3:0c:73:d9:24:df:ea:f8:cb:71:05:c7:a5:
         68:4a:dc:51:3d:ea:47:d1:ca:18:34:2a:fa:5a:85:86:25:57:
         32:ab:41:7a:4e:8c:c1:82:ef:05:8c:b1:28:e4:cd:ae:c7:1f:
         05:b5:b8:fc:63:d7:3f:71:4f:e9:1b:6a:7c:b3:21:ee:91:a0:
         dd:07:65:b6:b0:0d:43:0a:60:5e:74:d7:51:a7:c5:c3:55:f2:
         0c:65:b5:22:89:c4:9e:0e:fd:5c:93:56:6b:1a:b3:2f:fd:23:
         4a:f7:f0:f2:2b:90:47:81:1e:84:80:05:e8:cb:7e:dc:96:77:
         cc:b8:ee:bf:78:9b:0f:10:f3:db:52:8a:c3:22:66:c2:b0:86:
         90:41:f6:b2:b7:9d:64:8d:5d:ee:24:30:46:ec:04:6c:0f:39:
         d6:8d:71:c6:25:07:5b:ba:49:fa:6c:8b:2e:0d:86:59:2e:e9:
         70:f6:cf:7c:b5:fa:e5:52:c0:01:ee:0b:08:a6:dd:26:13:74:
         56:d1:fe:78:c6:df:ff:52:2a:12:71:94:16:c3:77:7c:84:b4:
         b6:11:3c:f7:9f:bb:a4:a7:46:86:77:82:c3:9d:8f:fc:2c:c7:
         67:97:95:af
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEl9pGzxkP/jwviF6cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwOTg5YjAtODY4Ny00ZDYwLTgzYjctZTk3MGQ2OWRm
MGJkMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MWUxN2E0NGYtYjI5Ni00ZWRhLWE0NzgtYzVkNjk1ZTA1ZDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHAr8GB4tMdaqChgG91M+yooAj5YIvgW5HuW
otB3gGK06NgB3B0kM/Ykq9NtYnM0ZMPP6cjeI1ROyberokC7HJu2xkjZM+cXgYGx
9NqTpbLX3GIcPolhKv3RqwWRX82w80hZ9RAZpXwJ7qWOkJsrIGiu03A5u8HJe24X
PMhyfbVpX0aABbKZI+3aAbxgJI0a8nEZ79cFkeANo33azzoUpNrMIeCVBmhvCNoA
GVoDJSor5Uv1evHltpa3uW9Q7cVzr9iGfjtjPQteyfdTNFPdQ6OQ/w1BtZnVaDH9
0hedywTpFwiDBmJcCXaRDymOSwgmL0BvQouuWaMyx6La18EogQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCjcE0WZPttf+zR/Ne1JqPldU434MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YTA5
ODliMC04Njg3LTRkNjAtODNiNy1lOTcwZDY5ZGYwYmQvMWRmNTY3NDItYzc3Ny0z
MmVmLWJjYWItMDFiMzlkNThjZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2EwOTg5YjAtODY4Ny00ZDYwLTgz
YjctZTk3MGQ2OWRmMGJkLzdhMDk4OWIwLTg2ODctNGQ2MC04M2I3LWU5NzBkNjlk
ZjBiZC5jcmwwHwYDVR0jBBgwFoAU+MqlrNv+GK7PDe07N2VAw429jMgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YTA5ODliMC04Njg3LTRkNjAtODNiNy1lOTcw
ZDY5ZGYwYmQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcGJiABGMAA
AwcGJiABGMCAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAE9mthtjirm3bVjf8Hop4CbTXoPqgry3swxz2STf
6vjLcQXHpWhK3FE96kfRyhg0KvpahYYlVzKrQXpOjMGC7wWMsSjkza7HHwW1uPxj
1z9xT+kbanyzIe6RoN0HZbawDUMKYF5011GnxcNV8gxltSKJxJ4O/VyTVmsasy/9
I0r38PIrkEeBHoSABejLftyWd8y47r94mw8Q89tSisMiZsKwhpBB9rK3nWSNXe4k
MEbsBGwPOdaNccYlB1u6Sfpsiy4Nhlku6XD2z3y1+uVSwAHuCwim3SYTdFbR/njG
3/9SKhJxlBbDd3yEtLYRPPefu6SnRoZ3gsOdj/wsx2eXla8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:26 2025 by rpki-client