Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa
File:                     1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa (raw, json)
Hash identifier:          RPVLX1yZw4du8EN73t4a6T+wqGWA7c0UgBwsuRgcY5k=
Subject key identifier:   DA:4C:FA:D9:1F:43:F3:BB:71:ED:99:59:3B:99:EB:74:76:DB:40:02
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F4328584819CFCF9C008F681A2CDFCB40
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        2620:104:6003::/48 maxlen: 48
                          2620:104:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:cf:9c:00:8f:68:1a:2c:df:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=a3495078-36ab-4f8f-8d64-eafd983e68f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:e5:1f:10:03:8a:85:42:8e:5e:4a:71:12:
                    59:b6:56:a2:c9:07:fd:60:56:ca:c9:bc:ce:94:14:
                    13:76:b1:fd:4f:50:70:3f:3a:cd:67:fa:d4:14:d4:
                    37:bd:47:28:7a:3b:e9:d8:b4:e5:bf:c0:87:69:6d:
                    3b:cc:7a:96:5a:0e:89:e6:58:8a:26:d3:ab:da:8b:
                    a5:86:bc:94:d3:4d:d4:be:11:bb:fb:03:f2:d3:e6:
                    01:cb:d6:66:2b:6e:00:d4:bc:79:4c:2e:da:e7:6a:
                    5c:f3:6b:10:da:2a:63:48:f6:22:cd:36:7b:09:bd:
                    04:23:46:c8:22:02:3e:59:65:f2:9e:c8:b8:74:3d:
                    2d:8c:48:c0:0a:82:4b:09:cc:17:d1:0b:78:16:94:
                    8a:66:6f:a8:49:8d:23:79:96:e0:6d:12:9c:1c:c4:
                    46:df:b5:58:39:c1:4b:15:ef:d8:c2:20:55:86:38:
                    c4:3a:c2:65:fe:34:4c:e3:f4:a2:b5:4c:b7:27:61:
                    fe:c8:63:f6:de:31:98:11:d6:d0:51:ee:2e:a9:aa:
                    de:48:0c:31:c2:44:95:0c:f6:03:f2:e9:d1:7b:87:
                    f1:8e:fc:4f:1e:07:50:3b:73:bf:30:ff:38:a7:02:
                    b2:b6:f6:1f:20:44:79:87:aa:6f:59:2d:34:7a:74:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4C:FA:D9:1F:43:F3:BB:71:ED:99:59:3B:99:EB:74:76:DB:40:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:6003::-2620:104:6004:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:b5:53:03:a1:c4:3c:5a:b2:5d:44:b1:46:7d:81:18:c8:
         8e:44:d6:c6:89:4c:53:95:04:92:cd:34:f5:5b:13:02:ee:34:
         59:7f:c9:4e:53:31:4e:00:1a:8b:85:73:99:84:d9:aa:01:a0:
         79:b4:3a:99:d1:11:61:01:6f:85:7a:02:19:1d:58:89:b6:70:
         18:f9:92:f9:4f:47:a9:30:79:bd:a4:5a:b6:b8:2a:0e:03:a6:
         e6:bf:d8:50:bd:02:32:9e:64:53:e0:ca:9b:d6:2a:59:c0:cc:
         f2:4c:27:bf:ba:99:57:0c:c1:1b:13:49:35:00:2b:bc:3b:48:
         d3:5e:ba:15:dc:03:0d:05:98:48:55:fd:79:22:47:ba:77:4b:
         9a:9f:20:06:f1:91:bd:01:92:ab:91:9d:4a:fe:a0:69:62:30:
         83:f8:04:81:fe:04:f3:bd:62:cc:22:2f:9b:ef:cf:c9:86:cf:
         37:7f:63:66:31:ee:be:ba:2b:e2:c8:1e:d0:00:31:82:e8:94:
         34:e3:7d:04:52:ae:84:52:82:26:b2:a9:13:46:7a:3f:bb:4f:
         cb:f8:fc:61:60:85:3b:cd:43:8d:b4:32:d1:33:6c:5c:b0:c7:
         cd:8f:e1:bb:8a:6b:2c:9d:5f:9b:9b:a7:f2:ee:f2:d4:b4:8a:
         8a:5c:33:85
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEgZz8+cAI9oGizfy0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjZkZGEwMzItNzlmOS00MjNlLTk5OTQtMzNmZGIxY2Q0
NGRiMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YTM0OTUwNzgtMzZhYi00ZjhmLThkNjQtZWFmZDk4M2U2OGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdrlHxADioVCjl5KcRJZtlaiyQf9YFbKybzO
lBQTdrH9T1BwPzrNZ/rUFNQ3vUcoejvp2LTlv8CHaW07zHqWWg6J5liKJtOr2oul
hryU003UvhG7+wPy0+YBy9ZmK24A1Lx5TC7a52pc82sQ2ipjSPYizTZ7Cb0EI0bI
IgI+WWXynsi4dD0tjEjACoJLCcwX0Qt4FpSKZm+oSY0jeZbgbRKcHMRG37VYOcFL
Fe/YwiBVhjjEOsJl/jRM4/SitUy3J2H+yGP23jGYEdbQUe4uqareSAwxwkSVDPYD
8unRe4fxjvxPHgdQO3O/MP84pwKytvYfIER5h6pvWS00enTpRQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFNpM+tkfQ/O7ce2ZWTuZ63R220ACMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRk
YTAzMi03OWY5LTQyM2UtOTk5NC0zM2ZkYjFjZDQ0ZGIvMTQwM2NjMzgtNGIzYy0z
OTI5LTg5ODMtM2RiMDViMWY5ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjZkZGEwMzItNzlmOS00MjNlLTk5
OTQtMzNmZGIxY2Q0NGRiLzI2ZGRhMDMyLTc5ZjktNDIzZS05OTk0LTMzZmRiMWNk
NDRkYi5jcmwwHwYDVR0jBBgwFoAUlOxHNSwx7ERB/+Hh13pxBU8VHbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRkYTAzMi03OWY5LTQyM2UtOTk5NC0zM2Zk
YjFjZDQ0ZGIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmIAEE
YAMDBwAmIAEEYAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEALBO1UwOhxDxasl1EsUZ9gRjIjkTWxolMU5UE
ks009VsTAu40WX/JTlMxTgAai4VzmYTZqgGgebQ6mdERYQFvhXoCGR1YibZwGPmS
+U9HqTB5vaRatrgqDgOm5r/YUL0CMp5kU+DKm9YqWcDM8kwnv7qZVwzBGxNJNQAr
vDtI0166FdwDDQWYSFX9eSJHundLmp8gBvGRvQGSq5GdSv6gaWIwg/gEgf4E871i
zCIvm+/PyYbPN39jZjHuvror4sge0AAxguiUNON9BFKuhFKCJrKpE0Z6P7tPy/j8
YWCFO81DjbQy0TNsXLDHzY/hu4prLJ1fm5un8u7y1LSKilwzhQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:53 2025 by rpki-client