Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3fc463fc-d5e1-32eb-b082-f277fc3f26ff.roa
File:                     3fc463fc-d5e1-32eb-b082-f277fc3f26ff.roa (raw, json)
Hash identifier:          uC0Seu19vOz3cRLG5nqUFcTq5IoS0J197VH+u3rXj0I=
Subject key identifier:   BE:0F:0E:1C:F0:FC:82:3E:7C:E2:7A:B3:2A:9E:BB:61:4B:8B:F6:AB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E59BCA7D316844FB41CCBD00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3fc463fc-d5e1-32eb-b082-f277fc3f26ff.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     10796
IP address blocks:        2603:90b0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:ca:7d:31:68:44:fb:41:cc:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=792271a3-b404-4bc7-8756-3f7a96bdf8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:38:f7:48:6f:92:08:91:82:e8:db:7a:74:
                    b4:de:d3:d4:b5:a1:5b:ad:5c:df:be:30:91:6d:c0:
                    36:9e:b7:db:b4:35:7a:f2:b8:64:6d:3a:71:12:f7:
                    41:f6:d7:0a:99:47:a2:fa:d7:f0:a3:60:9e:fe:82:
                    c3:be:3d:8f:6e:d0:59:82:df:ba:92:4a:ee:d7:10:
                    03:6b:5c:88:b9:00:e3:73:60:4f:e6:60:61:bf:00:
                    fe:7e:6a:4e:49:7a:14:fb:91:9c:da:dd:40:1d:bd:
                    00:5d:0a:61:c3:29:d1:f2:91:ff:72:b2:65:d7:b1:
                    6e:99:00:a9:a5:28:e8:07:26:46:b7:b0:68:30:7b:
                    1e:7d:20:b1:fe:b5:9e:01:ad:97:9b:a3:ab:51:90:
                    af:fe:d0:a4:f0:e8:f9:ab:b0:93:91:a2:ee:2e:8f:
                    d8:3f:ee:31:83:b1:ca:de:51:c4:81:4c:a0:4b:f9:
                    1c:a9:cf:cd:c0:62:34:f3:10:42:3e:c2:01:36:59:
                    ed:1f:bf:ef:d9:9c:17:8e:74:c4:d8:ea:cf:42:cf:
                    90:25:8f:6a:02:f8:44:52:f1:60:13:79:2b:17:90:
                    be:13:c1:75:d3:ab:9c:19:c7:0e:d4:90:dd:4a:c8:
                    9e:a4:f3:2a:62:bc:c9:1b:2b:82:0a:a7:68:a6:c6:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0F:0E:1C:F0:FC:82:3E:7C:E2:7A:B3:2A:9E:BB:61:4B:8B:F6:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3fc463fc-d5e1-32eb-b082-f277fc3f26ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90b0:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:fa:66:f8:6a:16:ed:74:16:e5:91:7a:04:6f:2f:ad:68:
         9f:0a:54:63:8b:d1:61:cd:88:10:e8:12:b0:c4:dd:58:af:5d:
         26:f6:dc:98:2a:1a:86:f9:aa:53:33:90:87:2a:5d:bc:5f:04:
         2a:75:de:49:8e:27:8e:b4:35:f3:8b:d7:79:56:ac:8a:45:23:
         12:b3:10:1b:e3:fb:2c:90:c5:1a:1b:a6:9c:f4:ff:a0:a1:94:
         79:3b:a9:14:52:ee:4d:c0:a9:21:6e:5b:64:27:3d:f8:17:cc:
         81:ba:6b:e0:6e:99:8b:ab:d9:33:a9:72:03:9d:1b:3c:08:69:
         13:c9:73:d3:da:6b:19:0e:2c:36:a2:1c:15:99:2e:5c:5d:16:
         e6:42:e0:9f:1c:6d:98:d6:20:4f:98:8b:de:07:d3:76:dd:37:
         3d:6e:17:a4:6c:26:cb:67:ee:b1:fc:a3:ba:f7:e2:9e:dd:0c:
         4c:ad:90:41:f6:78:e2:f5:dc:af:c3:59:8d:4f:8e:75:42:f5:
         9e:53:75:43:9e:10:17:9d:12:1b:43:11:f7:7e:1d:29:91:a9:
         91:a9:46:98:d0:5e:08:24:27:0c:72:5f:4d:97:46:33:80:6c:
         36:40:d9:3f:1a:2a:1a:82:6a:47:a6:d5:2e:af:40:27:b5:58:
         ce:13:7a:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjlm8p9MWhE+0HMvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
NzkyMjcxYTMtYjQwNC00YmM3LTg3NTYtM2Y3YTk2YmRmOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdA490hvkgiRgujbenS03tPUtaFbrVzfvjCR
bcA2nrfbtDV68rhkbTpxEvdB9tcKmUei+tfwo2Ce/oLDvj2PbtBZgt+6kkru1xAD
a1yIuQDjc2BP5mBhvwD+fmpOSXoU+5Gc2t1AHb0AXQphwynR8pH/crJl17FumQCp
pSjoByZGt7BoMHsefSCx/rWeAa2Xm6OrUZCv/tCk8Oj5q7CTkaLuLo/YP+4xg7HK
3lHEgUygS/kcqc/NwGI08xBCPsIBNlntH7/v2ZwXjnTE2OrPQs+QJY9qAvhEUvFg
E3krF5C+E8F106ucGccO1JDdSsiepPMqYrzJGyuCCqdopsYgDQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL4PDhzw/II+fOJ6syqeu2FLi/arMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2ZjNDYzZmMtZDVlMS0z
MmViLWIwODItZjI3N2ZjM2YyNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgOQsIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcvD6ZvhqFu10FuWRegRvL61onwpUY4vRYc2IEOgSsMTdWK9dJvbc
mCoahvmqUzOQhypdvF8EKnXeSY4njrQ184vXeVasikUjErMQG+P7LJDFGhumnPT/
oKGUeTupFFLuTcCpIW5bZCc9+BfMgbpr4G6Zi6vZM6lyA50bPAhpE8lz09prGQ4s
NqIcFZkuXF0W5kLgnxxtmNYgT5iL3gfTdt03PW4XpGwmy2fusfyjuvfint0MTK2Q
QfZ44vXcr8NZjU+OdUL1nlN1Q54QF50SG0MR934dKZGpkalGmNBeCCQnDHJfTZdG
M4BsNkDZPxoqGoJqR6bVLq9AJ7VYzhN6Fw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:17 2025 by rpki-client