Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b9babd9-31a6-3ec2-a007-adfbc228d46d.roa
File:                     0b9babd9-31a6-3ec2-a007-adfbc228d46d.roa (raw, json)
Hash identifier:          gWhAbhkP1DsjEu8r/Rt2Svo0YC0az2hXlhHAj1CnyZs=
Subject key identifier:   AE:5F:84:29:74:AF:C3:48:6C:EC:50:2C:27:C4:6D:EC:DB:89:1A:78
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C58232817DDFD4C60C2FC700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b9babd9-31a6-3ec2-a007-adfbc228d46d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        2600:1901:ffd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:32:81:7d:df:d4:c6:0c:2f:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=da097ce2-c9b2-473c-bebf-573643f63254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:a4:dc:e0:19:ca:bd:20:5e:86:5e:4b:36:
                    ef:56:35:db:4e:a8:55:dc:09:01:df:eb:f7:da:f4:
                    94:60:d2:ec:f7:0a:a7:94:41:81:0c:45:51:91:90:
                    20:c1:3c:8a:65:2a:00:d6:97:57:8e:6d:dc:e1:75:
                    74:f3:b9:aa:88:a9:07:93:79:01:d8:7a:b8:18:85:
                    ec:87:d0:a8:21:55:ce:84:ca:56:78:06:d3:da:66:
                    cb:58:ca:29:42:21:97:65:c8:9c:05:f6:99:13:63:
                    4b:64:00:9c:d0:24:9e:26:ae:e4:e9:f5:fb:83:67:
                    80:61:c4:57:a0:8d:e8:52:9c:6a:51:8e:1e:61:3c:
                    85:1f:e9:66:27:dd:67:bd:fa:9c:34:95:90:87:21:
                    13:bd:1d:9a:c3:98:61:1c:a8:b2:a9:48:c0:73:53:
                    17:3d:b0:51:d6:e4:03:fa:7f:38:f7:3d:39:83:6f:
                    96:7f:b2:c0:c5:88:36:e3:bf:9a:e7:aa:2c:ec:31:
                    1e:a0:19:e6:6d:3a:66:7b:9b:51:3c:78:fe:f8:24:
                    4e:2a:0d:37:49:3f:c6:4a:04:39:d9:c0:60:f7:e3:
                    5e:0e:d2:d4:33:83:cd:84:06:31:af:5c:c7:2e:c1:
                    03:7d:46:d3:4b:c4:02:64:7f:3e:ef:37:7b:c0:a8:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5F:84:29:74:AF:C3:48:6C:EC:50:2C:27:C4:6D:EC:DB:89:1A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b9babd9-31a6-3ec2-a007-adfbc228d46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901:ffd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:94:62:76:57:ba:9d:2a:98:3a:97:47:f4:a5:98:7a:c0:
         5a:d3:e1:19:e7:72:bd:2c:18:5d:ac:d1:96:91:b2:bb:82:32:
         68:84:93:ba:f7:e9:22:26:a2:4b:1f:25:cf:2e:f6:dc:a0:70:
         0e:68:5b:d6:5c:58:66:de:a7:86:f3:49:28:61:e3:ce:ff:dd:
         be:d2:b8:70:e9:25:04:62:24:44:07:35:0c:c1:87:de:86:86:
         39:b3:5b:79:02:86:13:e1:bf:d7:0d:7d:18:e1:14:ec:a8:9c:
         1f:bb:75:fc:7f:3b:bf:be:7f:98:9d:0d:8c:8f:b5:4a:91:4a:
         e6:15:ac:1a:c2:fb:ef:65:29:e3:b5:8d:77:6b:76:eb:88:ce:
         aa:33:eb:2d:95:b7:07:3e:2c:6a:a3:54:93:2a:8c:63:a9:1c:
         d7:df:29:6d:b8:91:da:f2:ca:f7:e2:17:e2:10:cf:95:ad:97:
         52:f8:e6:f0:60:d0:74:af:9a:ce:bf:e7:39:62:2a:23:ca:79:
         99:65:cb:8c:06:a7:f8:54:7d:87:56:00:c8:58:d6:a8:ff:90:
         2a:02:02:0a:3f:14:25:3b:96:82:0c:08:b2:3a:0e:be:0c:8d:
         46:c3:f0:d9:b3:45:2d:6d:35:60:a8:27:1b:39:e5:5b:ee:da:
         8d:a4:00:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjKBfd/UxgwvxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGEwOTdjZTItYzliMi00NzNjLWJlYmYtNTczNjQzZjYzMjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycqk3OAZyr0gXoZeSzbvVjXbTqhV3AkB3+v3
2vSUYNLs9wqnlEGBDEVRkZAgwTyKZSoA1pdXjm3c4XV087mqiKkHk3kB2Hq4GIXs
h9CoIVXOhMpWeAbT2mbLWMopQiGXZcicBfaZE2NLZACc0CSeJq7k6fX7g2eAYcRX
oI3oUpxqUY4eYTyFH+lmJ91nvfqcNJWQhyETvR2aw5hhHKiyqUjAc1MXPbBR1uQD
+n849z05g2+Wf7LAxYg247+a56os7DEeoBnmbTpme5tRPHj++CROKg03ST/GSgQ5
2cBg9+NeDtLUM4PNhAYxr1zHLsEDfUbTS8QCZH8+7zd7wKhfOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK5fhCl0r8NIbOxQLCfEbezbiRp4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGI5YmFiZDktMzFhNi0z
ZWMyLWEwMDctYWRmYmMyMjhkNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAf/Q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFiNlGJ2V7qdKpg6l0f0pZh6wFrT4Rnncr0sGF2s0ZaRsruCMmiE
k7r36SImoksfJc8u9tygcA5oW9ZcWGbep4bzSShh487/3b7SuHDpJQRiJEQHNQzB
h96GhjmzW3kChhPhv9cNfRjhFOyonB+7dfx/O7++f5idDYyPtUqRSuYVrBrC++9l
KeO1jXdrduuIzqoz6y2Vtwc+LGqjVJMqjGOpHNffKW24kdryyvfiF+IQz5Wtl1L4
5vBg0HSvms6/5zliKiPKeZlly4wGp/hUfYdWAMhY1qj/kCoCAgo/FCU7loIMCLI6
Dr4MjUbD8NmzRS1tNWCoJxs55Vvu2o2kABQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:34 2025 by rpki-client