Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/116ee9cd-5376-3e6b-8f87-bea8b18dc602.roa
File:                     116ee9cd-5376-3e6b-8f87-bea8b18dc602.roa (raw, json)
Hash identifier:          f29odlT+UQgZqoukGP7epeT5W1lFUpALcAaHUoFOJd0=
Subject key identifier:   2D:DD:65:D0:1D:ED:82:75:41:F2:17:55:BE:10:4A:4F:AE:EC:A2:AB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0066CEB267B7AF8EC6ACC00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/116ee9cd-5376-3e6b-8f87-bea8b18dc602.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8149::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:6c:eb:26:7b:7a:f8:ec:6a:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f7b25da9-5907-403f-a0f6-3ae108fc5c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:db:8f:45:05:16:34:72:cb:dd:cd:25:5e:
                    30:bc:6f:b0:77:cf:72:f6:a2:ab:e1:23:c1:5a:11:
                    7d:96:55:b8:a6:7b:7d:11:12:a5:71:df:ed:f0:b2:
                    aa:3a:bc:c9:ab:7e:fa:0c:51:8a:54:6f:73:13:94:
                    98:39:dd:f3:43:a8:da:7e:ee:93:8c:d9:23:56:0d:
                    2b:2a:21:f8:c4:a4:d2:ba:52:12:23:56:ef:17:70:
                    5b:52:b0:29:45:15:9b:ca:ea:18:29:73:ef:13:65:
                    0e:e2:93:06:14:ad:42:16:5e:08:ed:4a:f6:97:f9:
                    50:94:05:76:a0:3a:eb:7b:37:be:48:94:61:e7:1b:
                    cb:ca:c0:6e:d7:19:2f:cd:08:76:00:93:7f:a5:3e:
                    56:b6:53:68:d1:41:0a:c1:b1:c0:ac:3e:e4:9b:14:
                    fb:c3:f2:dc:72:c8:27:a9:4f:ee:b4:b3:9d:6c:1f:
                    9a:d1:52:b7:f5:56:50:b9:3f:73:a5:86:f6:3b:91:
                    26:a8:29:d0:98:c3:4a:cf:8b:fb:21:68:58:ca:77:
                    69:2b:57:43:99:50:63:d1:66:a0:fd:83:2b:fb:01:
                    43:87:90:33:b5:8a:9d:8e:8a:7d:4f:42:4d:6d:b4:
                    3d:3d:34:cd:0c:8f:51:bd:31:7a:03:78:76:65:5c:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DD:65:D0:1D:ED:82:75:41:F2:17:55:BE:10:4A:4F:AE:EC:A2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/116ee9cd-5376-3e6b-8f87-bea8b18dc602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a0:67:81:8e:6f:7a:b6:6b:fb:a5:be:db:27:aa:e7:be:1b:
         4a:2b:a5:8f:e8:97:1c:18:a4:2c:30:fa:67:ae:d8:eb:a4:1d:
         b6:53:1f:45:20:a4:bb:5e:73:d1:3f:9b:0c:a4:c8:46:f6:3b:
         ad:e4:9b:77:1d:3a:9c:1d:1e:8e:7f:5b:b2:e9:68:8e:1f:5d:
         98:94:1f:cd:ed:bb:56:f6:d4:be:9b:1e:9a:9a:97:fc:e0:13:
         b4:23:24:6d:02:4e:fd:bf:d0:6c:9f:32:67:01:d8:b2:e5:9c:
         ba:7a:79:02:98:39:99:ff:cf:68:73:1e:39:14:3e:ed:b2:15:
         07:cf:a3:96:5c:b2:9c:25:7d:82:55:27:4f:ac:88:79:c3:75:
         53:fb:72:e2:90:b1:89:78:68:60:fe:bc:d7:3f:c7:12:b6:e3:
         55:2c:58:f0:8d:ee:d1:cf:ea:18:22:d4:99:4c:39:01:ab:e2:
         4f:78:9a:40:eb:ff:ba:7b:a6:f4:d4:5a:00:59:dc:4a:4f:48:
         e1:85:d0:0d:1d:63:34:7e:35:2e:e5:85:41:8e:b4:a3:f8:62:
         b0:17:71:a6:f7:49:6e:16:d1:bf:dc:4d:18:50:bb:b5:7a:f5:
         d0:0d:17:c7:31:05:73:d2:8c:08:b1:0a:8f:46:c5:4d:21:7f:
         2e:26:a5:b9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBmzrJnt6+OxqzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjdiMjVkYTktNTkwNy00MDNmLWEwZjYtM2FlMTA4ZmM1Yzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBjbj0UFFjRyy93NJV4wvG+wd89y9qKr4SPB
WhF9llW4pnt9ERKlcd/t8LKqOrzJq376DFGKVG9zE5SYOd3zQ6jafu6TjNkjVg0r
KiH4xKTSulISI1bvF3BbUrApRRWbyuoYKXPvE2UO4pMGFK1CFl4I7Ur2l/lQlAV2
oDrreze+SJRh5xvLysBu1xkvzQh2AJN/pT5WtlNo0UEKwbHArD7kmxT7w/Lccsgn
qU/utLOdbB+a0VK39VZQuT9zpYb2O5EmqCnQmMNKz4v7IWhYyndpK1dDmVBj0Wag
/YMr+wFDh5AztYqdjop9T0JNbbQ9PTTNDI9RvTF6A3h2ZVxnQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC3dZdAd7YJ1QfIXVb4QSk+u7KKrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTE2ZWU5Y2QtNTM3Ni0z
ZTZiLThmODctYmVhOGIxOGRjNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYFJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACegZ4GOb3q2a/ulvtsnque+G0orpY/olxwYpCww+meu2OukHbZT
H0UgpLtec9E/mwykyEb2O63km3cdOpwdHo5/W7LpaI4fXZiUH83tu1b21L6bHpqa
l/zgE7QjJG0CTv2/0GyfMmcB2LLlnLp6eQKYOZn/z2hzHjkUPu2yFQfPo5Zcspwl
fYJVJ0+siHnDdVP7cuKQsYl4aGD+vNc/xxK241UsWPCN7tHP6hgi1JlMOQGr4k94
mkDr/7p7pvTUWgBZ3EpPSOGF0A0dYzR+NS7lhUGOtKP4YrAXcab3SW4W0b/cTRhQ
u7V69dANF8cxBXPSjAixCo9GxU0hfy4mpbk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:33 2025 by rpki-client