Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa
File:                     12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa (raw, json)
Hash identifier:          0O7fi5KyNmv2kNggASqgFWmplTjIGKE6Gu5QUBm8IOI=
Subject key identifier:   C1:78:48:29:39:D6:65:69:92:FA:6A:9F:34:0E:E8:BD:E3:7F:E4:0E
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584902EC24075A775280A5C5B100
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     30097
IP address blocks:        2604:3c00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:24:07:5a:77:52:80:a5:c5:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=17a10b43-49a7-4e15-a6ab-ccee2d799d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:41:63:b7:6e:5b:3c:a3:8a:15:8f:de:b4:
                    5e:fa:c0:d4:bc:da:d2:ca:68:82:d3:2e:83:fc:51:
                    3b:4b:86:8e:f9:6c:b2:88:15:a5:56:3b:f7:68:c4:
                    17:08:d8:61:8b:95:72:b4:e9:f8:c9:c7:21:d9:17:
                    be:5e:05:61:21:f2:2d:f6:fc:1e:79:1c:1f:4d:1b:
                    93:2f:b5:2c:36:f2:85:58:12:f0:d1:46:9c:9e:44:
                    54:25:49:d3:9f:30:45:50:4e:48:d0:fa:c1:49:e8:
                    a9:21:4b:58:f0:94:95:a6:78:75:cc:f4:9c:d6:dc:
                    24:82:06:09:9e:d9:b1:23:87:dc:6e:f0:0d:dc:bc:
                    03:6e:5d:9a:80:bb:a9:0c:74:e3:af:ac:e0:0d:9f:
                    f4:c9:2d:e9:a8:fb:8a:e4:5a:43:d0:0c:4e:9f:bc:
                    46:05:e7:4c:d0:cb:b5:db:7d:4f:25:53:5c:13:4e:
                    70:bf:70:b7:73:1c:e4:d5:99:97:fc:96:75:da:07:
                    27:9b:26:79:27:8e:87:a6:61:2a:34:7b:e3:19:e0:
                    36:f4:de:a1:f4:10:e3:3a:28:8b:ba:6b:10:56:ab:
                    ff:eb:68:dd:ab:1e:a0:36:0d:08:50:97:d4:9c:fc:
                    3e:ee:34:9c:b0:73:a8:be:ea:23:e3:34:35:6a:41:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:78:48:29:39:D6:65:69:92:FA:6A:9F:34:0E:E8:BD:E3:7F:E4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:30:61:98:56:5e:78:c7:eb:a3:11:56:28:ba:8b:8c:ba:7e:
         fd:03:f9:40:ed:ca:dd:ac:92:bd:78:b3:54:cc:21:4d:04:19:
         b8:e2:3d:6b:4e:07:69:cc:85:e9:08:bd:14:99:8b:46:7b:b7:
         14:40:4b:fc:19:c5:f9:96:d7:9c:f4:40:b5:dc:01:3a:8b:2d:
         eb:01:7d:aa:4b:77:90:2f:2c:4a:69:78:7b:f0:53:b9:19:d2:
         a8:3d:76:28:43:15:fa:20:36:0c:17:1a:f4:b1:55:c3:35:55:
         8c:54:48:b4:ca:97:a9:78:9a:88:e7:e2:ff:26:dc:77:e1:c9:
         06:06:ec:5d:72:7d:0d:e7:42:3f:da:ce:66:28:75:92:df:f7:
         d3:d6:91:4b:94:53:f1:60:e8:7b:98:1f:38:f1:8f:19:91:87:
         8d:7a:83:d0:a8:5f:dd:ff:75:56:7a:ec:11:91:45:e6:1e:42:
         33:76:d2:a0:72:97:54:ac:cb:1a:27:4e:45:f9:52:f1:15:6d:
         11:56:cc:09:ff:66:ef:5f:8c:72:75:f8:60:a5:92:83:a0:40:
         a4:61:08:fd:1c:4a:c7:2a:51:de:a5:c2:04:dc:74:70:ae:ee:
         58:06:2c:e7:cb:d7:d8:9b:08:af:06:40:c4:58:af:02:c4:26:
         2c:c4:7d:9a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkC7CQHWndSgKXFsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj
ZmUyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MTdhMTBiNDMtNDlhNy00ZTE1LWE2YWItY2NlZTJkNzk5ZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyhBY7duWzyjihWP3rRe+sDUvNrSymiC0y6D
/FE7S4aO+WyyiBWlVjv3aMQXCNhhi5VytOn4ycch2Re+XgVhIfIt9vweeRwfTRuT
L7UsNvKFWBLw0UacnkRUJUnTnzBFUE5I0PrBSeipIUtY8JSVpnh1zPSc1twkggYJ
ntmxI4fcbvAN3LwDbl2agLupDHTjr6zgDZ/0yS3pqPuK5FpD0AxOn7xGBedM0Mu1
231PJVNcE05wv3C3cxzk1ZmX/JZ12gcnmyZ5J46HpmEqNHvjGeA29N6h9BDjOiiL
umsQVqv/62jdqx6gNg0IUJfUnPw+7jScsHOovuoj4zQ1akHsewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMF4SCk51mVpkvpqnzQO6L3jf+QOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw
ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvMTJmMTIxNjQtYWRjYy0z
YjlmLWE3ZDgtNmRhMmU4NmJhYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk
YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx
Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi
YTAzMWNmZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ8ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA8MGGYVl54x+ujEVYououMun79A/lA7crdrJK9eLNUzCFNBBm44j1r
TgdpzIXpCL0UmYtGe7cUQEv8GcX5ltec9EC13AE6iy3rAX2qS3eQLyxKaXh78FO5
GdKoPXYoQxX6IDYMFxr0sVXDNVWMVEi0ypepeJqI5+L/Jtx34ckGBuxdcn0N50I/
2s5mKHWS3/fT1pFLlFPxYOh7mB848Y8ZkYeNeoPQqF/d/3VWeuwRkUXmHkIzdtKg
cpdUrMsaJ05F+VLxFW0RVswJ/2bvX4xydfhgpZKDoECkYQj9HErHKlHepcIE3HRw
ru5YBizny9fYmwivBkDEWK8CxCYsxH2a
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:42 2025 by rpki-client