Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa
File:                     8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa (raw, json)
Hash identifier:          vvCFS3eb7uoage3RXq53vjgep0sipvcbZhC5HCDTsX0=
Subject key identifier:   8C:87:00:6D:63:64:4B:D6:93:84:71:12:2F:93:FD:82:CD:EB:6E:20
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584905B6B1C97702721574FBA720
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     398427
IP address blocks:        2602:fd35::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b1:c9:77:02:72:15:74:fb:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=98b0d8bf-a7a2-426c-81a5-b8689491ec5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:e9:33:c1:f7:6f:1e:d4:fb:43:9b:65:85:
                    60:6f:37:e9:46:cc:74:ea:22:d8:53:08:8e:26:97:
                    ac:70:20:30:83:9c:e7:8a:04:da:8a:1a:b0:22:bf:
                    ea:7a:d6:33:c6:58:31:dc:15:74:bd:6c:96:1e:0a:
                    ae:25:73:04:a4:b9:90:e8:70:46:fa:9d:8a:2a:6d:
                    c2:cb:16:88:74:02:ed:63:52:c0:21:79:b6:93:75:
                    77:c8:03:cd:f6:1c:87:ad:5f:eb:22:e8:db:2b:a4:
                    3b:38:1e:77:39:b1:e7:8f:b7:20:1d:9f:b0:a0:5b:
                    d5:d2:19:5e:67:59:2f:26:79:1a:cf:b4:d7:e9:ad:
                    6d:f7:b0:22:ee:9d:b9:02:0d:ae:19:75:cd:19:00:
                    ac:66:75:3f:04:96:16:49:43:5c:41:5a:ee:84:33:
                    8f:8c:48:5d:95:d5:97:71:48:7a:df:26:ef:5c:e4:
                    83:53:82:99:f0:71:9d:16:a3:72:47:d7:8c:89:88:
                    d2:60:2b:bf:81:4e:cf:51:92:bd:ed:07:be:56:87:
                    4a:a3:46:00:da:16:d8:dc:d3:fd:2d:35:a0:db:f1:
                    f8:0d:6c:a8:a8:60:49:4c:76:5a:c1:84:1d:2e:49:
                    3f:4d:f7:2e:e8:54:61:21:7c:a2:fd:07:c0:b0:77:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:87:00:6D:63:64:4B:D6:93:84:71:12:2F:93:FD:82:CD:EB:6E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/8378ad3f-f5c5-3d0e-bf47-e33619b955bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd35::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:68:3c:a6:7b:b5:97:eb:9e:62:f2:b6:2a:26:7f:50:8d:
         f0:96:24:17:b3:bc:1b:95:de:45:9a:03:eb:65:32:14:b4:75:
         d9:83:cb:15:d2:53:e8:9e:60:fa:f5:d6:fc:20:05:5a:62:e3:
         d8:72:e5:bb:4b:57:1a:cf:1b:6f:4c:10:64:ba:d1:a2:e4:78:
         c1:06:35:d4:f7:15:b5:3d:b9:21:4a:7b:e1:11:0d:a3:f3:86:
         10:cb:6f:90:76:2c:8d:6d:61:4f:9b:3e:49:8b:0e:60:cb:cf:
         de:36:60:88:91:9a:50:80:32:f7:74:4f:43:ac:ca:49:21:05:
         83:d6:b5:5a:a5:2f:f4:fd:a8:3b:2f:0c:60:f3:d4:a2:37:18:
         b4:ad:27:f2:37:d9:c9:ea:92:ea:30:1d:0c:f0:65:2c:fe:29:
         26:58:6e:29:4d:89:c0:46:91:29:fe:d3:57:5a:3c:7e:fd:09:
         e0:46:f0:fe:64:e3:ff:4f:6d:93:08:74:6b:e6:c3:c3:9a:3f:
         e4:99:87:20:f9:8b:cc:d4:eb:20:73:d1:d6:ed:0f:6a:84:3c:
         46:e5:99:c7:d6:3d:95:98:bf:64:c1:1e:81:ab:07:a2:0c:04:
         16:39:b8:7c:7e:f3:63:31:05:0c:dc:3c:34:41:f9:0c:27:76:
         bf:a2:6d:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkFtrHJdwJyFXT7pyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5
OTVkMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
OThiMGQ4YmYtYTdhMi00MjZjLTgxYTUtYjg2ODk0OTFlYzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0fpM8H3bx7U+0ObZYVgbzfpRsx06iLYUwiO
JpescCAwg5znigTaihqwIr/qetYzxlgx3BV0vWyWHgquJXMEpLmQ6HBG+p2KKm3C
yxaIdALtY1LAIXm2k3V3yAPN9hyHrV/rIujbK6Q7OB53ObHnj7cgHZ+woFvV0hle
Z1kvJnkaz7TX6a1t97Ai7p25Ag2uGXXNGQCsZnU/BJYWSUNcQVruhDOPjEhdldWX
cUh63ybvXOSDU4KZ8HGdFqNyR9eMiYjSYCu/gU7PUZK97Qe+VodKo0YA2hbY3NP9
LTWg2/H4DWyoqGBJTHZawYQdLkk/Tfcu6FRhIXyi/QfAsHdMewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIyHAG1jZEvWk4RxEi+T/YLN624gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj
NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvODM3OGFkM2YtZjVjNS0z
ZDBlLWJmNDctZTMzNjE5Yjk1NWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy
MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5
OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0
MTk1OTk5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9NQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARQ9oPKZ7tZfrnmLytiomf1CN8JYkF7O8G5XeRZoD62UyFLR12YPL
FdJT6J5g+vXW/CAFWmLj2HLlu0tXGs8bb0wQZLrRouR4wQY11PcVtT25IUp74REN
o/OGEMtvkHYsjW1hT5s+SYsOYMvP3jZgiJGaUIAy93RPQ6zKSSEFg9a1WqUv9P2o
Oy8MYPPUojcYtK0n8jfZyeqS6jAdDPBlLP4pJlhuKU2JwEaRKf7TV1o8fv0J4Ebw
/mTj/09tkwh0a+bDw5o/5JmHIPmLzNTrIHPR1u0PaoQ8RuWZx9Y9lZi/ZMEegasH
ogwEFjm4fH7zYzEFDNw8NEH5DCd2v6JtYw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:56:14 2025 by rpki-client