Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa
File:                     e38f6ec9-0bc5-3381-991e-d21407696e1e.roa (raw, json)
Hash identifier:          XbdnC7qtQ0yfO7Dv7oj5yqf2EaHUU0uzCVSgtg+MnNM=
Subject key identifier:   5F:4A:F0:43:80:22:7B:A7:37:44:95:43:2F:22:AF:10:B3:E6:34:E8
Certificate issuer:       /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
Certificate serial:       010D0C9F432858491AA6B357BEA2D89699C11D80
Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     203690
IP address blocks:        2602:fc42:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b3:57:be:a2:d8:96:99:c1:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=23b7a294-874a-4daa-baa7-e37615be15b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:4b:3c:11:9a:20:3a:a5:99:72:8c:34:e6:
                    b8:05:75:49:15:28:12:03:71:8f:04:43:1b:f4:51:
                    d7:ad:b7:01:54:5a:b5:c9:96:35:9b:5d:8d:aa:b7:
                    46:34:e0:59:eb:f3:9e:fc:e3:eb:b6:d9:90:c5:33:
                    ff:d7:a9:13:0c:5b:a6:97:d4:e4:ec:bd:ab:38:a1:
                    27:cd:0b:be:78:6a:be:e6:a9:41:95:5e:0d:0f:f0:
                    ba:33:8e:f7:6d:40:81:06:83:37:96:a5:99:d5:c4:
                    25:03:8d:99:6b:cb:e0:e1:38:2a:82:a9:1e:b4:2a:
                    2a:0a:d3:1a:36:a9:97:5f:99:d4:7d:ca:5b:40:95:
                    43:85:c0:1d:f9:0b:cd:35:62:8d:1b:be:7a:1c:c7:
                    ba:8e:f9:ba:15:fe:9c:ed:12:fa:97:d3:52:ca:fb:
                    31:de:24:70:8b:23:55:ea:96:c3:cd:0e:1c:7a:8c:
                    11:84:7a:c8:ce:70:60:33:91:03:d7:40:5d:7f:d5:
                    1a:65:85:82:86:62:ab:d0:62:3c:b4:02:49:c5:c1:
                    d3:a3:f7:52:e8:fe:18:cb:8c:24:a5:74:e1:bf:f8:
                    d4:38:68:dc:42:31:b7:63:03:93:67:b7:a6:14:f0:
                    19:9b:45:36:9c:32:a9:5b:9b:1e:2f:61:e8:8c:38:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:F0:43:80:22:7B:A7:37:44:95:43:2F:22:AF:10:B3:E6:34:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc42:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:79:1e:4f:bf:2e:5c:51:d9:f6:8b:8c:43:3b:1c:34:3b:42:
         26:b4:07:5c:c0:ef:ac:56:1c:4e:06:20:6b:53:ed:e0:f2:24:
         06:47:a2:57:b1:70:11:10:95:94:5e:fe:b5:95:6f:61:be:3a:
         2f:b6:85:f1:73:eb:a2:c7:2e:39:01:1f:92:2a:d7:53:27:5d:
         3f:92:7f:40:60:15:df:db:c6:a7:96:6f:12:af:82:6b:81:93:
         48:66:42:29:02:26:97:37:47:7c:55:63:71:69:b3:2c:00:08:
         23:46:86:75:5a:25:05:1d:bb:f0:11:36:41:66:81:8c:0c:9a:
         35:23:9d:6c:b9:85:bd:e8:8b:f2:26:1b:78:d9:86:77:4b:c3:
         80:c7:88:d8:05:b0:b5:cf:58:88:9d:23:4e:1a:9e:72:eb:48:
         df:c0:24:ab:12:b4:24:9f:ad:5f:9e:22:f3:50:eb:b2:4f:75:
         c9:9a:35:5d:38:a1:90:5b:10:70:a0:0f:00:ac:d8:7e:08:37:
         bf:6e:89:06:af:f2:a4:a4:fd:fd:5a:a0:5b:be:cb:43:bb:25:
         38:ab:9b:5c:5b:79:89:9e:3f:5f:ec:9b:b5:61:be:b4:5a:d9:
         0d:e9:68:b9:ee:c7:de:a2:2b:70:53:53:1c:c6:fe:60:fa:56:
         99:b2:95:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkaprNXvqLYlpnBHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI4NDc3NDctOGQ0Ni00ZGEyLWJiOWUtNGM3Mjg2MGU3
YmNkMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
MjNiN2EyOTQtODc0YS00ZGFhLWJhYTctZTM3NjE1YmUxNWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rhLPBGaIDqlmXKMNOa4BXVJFSgSA3GPBEMb
9FHXrbcBVFq1yZY1m12NqrdGNOBZ6/Oe/OPrttmQxTP/16kTDFuml9Tk7L2rOKEn
zQu+eGq+5qlBlV4ND/C6M473bUCBBoM3lqWZ1cQlA42Za8vg4TgqgqketCoqCtMa
NqmXX5nUfcpbQJVDhcAd+QvNNWKNG756HMe6jvm6Ff6c7RL6l9NSyvsx3iRwiyNV
6pbDzQ4ceowRhHrIznBgM5ED10Bdf9UaZYWChmKr0GI8tAJJxcHTo/dS6P4Yy4wk
pXThv/jUOGjcQjG3YwOTZ7emFPAZm0U2nDKpW5seL2HojDhdVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF9K8EOAInunN0SVQy8irxCz5jToMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0
Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00YzcyODYwZTdiY2QvZTM4ZjZlYzktMGJjNS0z
MzgxLTk5MWUtZDIxNDA3Njk2ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTI4NDc3NDctOGQ0Ni00ZGEyLWJi
OWUtNGM3Mjg2MGU3YmNkL2EyODQ3NzQ3LThkNDYtNGRhMi1iYjllLTRjNzI4NjBl
N2JjZC5jcmwwHwYDVR0jBBgwFoAUzCE+WHT05+QXOfuLkf55uqkzjOwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00Yzcy
ODYwZTdiY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8QgAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADd5Hk+/LlxR2faLjEM7HDQ7Qia0B1zA76xWHE4GIGtT7eDyJAZH
olexcBEQlZRe/rWVb2G+Oi+2hfFz66LHLjkBH5Iq11MnXT+Sf0BgFd/bxqeWbxKv
gmuBk0hmQikCJpc3R3xVY3FpsywACCNGhnVaJQUdu/ARNkFmgYwMmjUjnWy5hb3o
i/ImG3jZhndLw4DHiNgFsLXPWIidI04annLrSN/AJKsStCSfrV+eIvNQ67JPdcma
NV04oZBbEHCgDwCs2H4IN79uiQav8qSk/f1aoFu+y0O7JTirm1xbeYmeP1/sm7Vh
vrRa2Q3paLnux96iK3BTUxzG/mD6VpmylZc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:31:58 2025 by rpki-client