Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/f63fc3ab-cc51-39d7-97a0-c077bc808f1c.roa
File:                     f63fc3ab-cc51-39d7-97a0-c077bc808f1c.roa (raw, json)
Hash identifier:          AjvxHTOABuFy/gZUSYNZtKNQ1a70ADZ2W85QL3bBDzM=
Subject key identifier:   C2:AC:CA:62:F4:F8:EF:D0:AA:30:CF:E8:C5:61:9D:96:06:C2:DF:6E
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584940394F88666E18C226C6A680
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/f63fc3ab-cc51-39d7-97a0-c077bc808f1c.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        2620:1f7:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:4f:88:66:6e:18:c2:26:c6:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=609f7a67-ea25-4ad8-86da-be8c6e516d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:de:d9:c0:4e:fb:14:d0:f7:15:bc:29:42:
                    10:c3:0a:7f:7e:97:77:f3:cb:81:9a:da:a0:59:64:
                    a6:2f:58:d5:a2:5b:fe:76:e2:eb:f2:a7:d5:42:d0:
                    45:a5:5a:ce:25:eb:d5:f0:ea:ad:ad:e7:20:54:af:
                    36:aa:69:39:d8:94:57:2d:1f:dd:93:8a:af:d1:a4:
                    72:f9:04:27:02:99:26:1c:a5:c8:f2:a9:5b:49:35:
                    9e:52:fe:e9:54:f0:0b:4c:96:b1:ae:f7:9b:9a:05:
                    d2:24:f9:45:d9:64:f3:ea:d9:61:57:b6:12:ff:64:
                    f1:e0:88:20:76:d3:13:39:81:35:06:29:e4:61:33:
                    cd:e6:59:04:56:98:b2:09:97:bf:38:28:7b:bd:57:
                    54:91:89:19:8b:d2:5d:90:62:51:93:0f:11:09:53:
                    61:0d:af:ed:5a:45:97:1c:7a:dc:52:6f:d7:0b:52:
                    06:c8:65:44:6b:05:1a:71:4a:5c:8e:ce:60:3a:06:
                    35:86:14:50:3a:e3:46:b1:ef:2b:d3:bb:2d:c8:e5:
                    ae:99:ce:6f:86:6c:c2:3a:de:1c:3a:86:56:bb:77:
                    da:97:82:9c:1d:19:e7:98:a1:f9:c8:81:c8:73:70:
                    39:a5:93:8e:d7:7d:e0:10:f7:0f:d4:4e:cd:94:1b:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AC:CA:62:F4:F8:EF:D0:AA:30:CF:E8:C5:61:9D:96:06:C2:DF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/f63fc3ab-cc51-39d7-97a0-c077bc808f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:03:d8:b3:6e:e1:54:2f:4a:40:56:e1:c2:33:79:5d:56:
         11:50:d8:f6:bb:6a:07:73:1d:1f:60:84:b3:76:49:c2:08:b2:
         f3:3f:d5:d9:40:e4:83:26:c5:3b:0a:6c:92:c1:0b:77:ae:06:
         c0:c9:71:c5:e6:51:28:ae:34:2f:c3:85:ef:3a:2c:c5:ef:da:
         dd:1b:f1:44:c9:07:e5:33:98:af:42:9f:5e:c6:37:f2:63:7b:
         1c:1c:29:65:64:bb:7c:8d:b8:f3:6a:6c:fc:f6:ac:ae:83:90:
         cd:6d:d1:9d:9b:f6:70:78:a8:7d:be:de:06:d2:a2:e3:da:3c:
         f4:00:67:70:a1:6a:73:42:9a:10:e8:b0:65:ab:40:b9:f0:f6:
         b3:7f:70:ec:08:8a:f9:2b:6a:b7:6f:ad:ce:c3:ac:cb:c4:77:
         88:91:18:60:a0:cc:10:b4:a4:56:fd:00:fa:f3:f9:22:8c:a5:
         61:0d:03:eb:ca:b3:94:bc:50:52:ad:3e:67:b2:23:11:fd:29:
         9f:29:f9:75:3c:c8:90:69:dd:76:75:44:83:eb:d9:52:92:15:
         a3:83:ec:1d:dc:b1:63:ee:c9:76:a7:3c:eb:27:24:82:27:c9:
         19:48:8a:88:74:98:6d:74:97:28:9e:40:3c:28:2f:a6:3d:33:
         8a:74:05:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOU+IZm4YwibGpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
NjA5ZjdhNjctZWEyNS00YWQ4LTg2ZGEtYmU4YzZlNTE2ZDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstje2cBO+xTQ9xW8KUIQwwp/fpd388uBmtqg
WWSmL1jVolv+duLr8qfVQtBFpVrOJevV8OqtrecgVK82qmk52JRXLR/dk4qv0aRy
+QQnApkmHKXI8qlbSTWeUv7pVPALTJaxrvebmgXSJPlF2WTz6tlhV7YS/2Tx4Igg
dtMTOYE1BinkYTPN5lkEVpiyCZe/OCh7vVdUkYkZi9JdkGJRkw8RCVNhDa/tWkWX
HHrcUm/XC1IGyGVEawUacUpcjs5gOgY1hhRQOuNGse8r07styOWumc5vhmzCOt4c
OoZWu3fal4KcHRnnmKH5yIHIc3A5pZOO133gEPcP1E7NlBv7gQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMKsymL0+O/QqjDP6MVhnZYGwt9uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvZjYzZmMzYWItY2M1MS0z
OWQ3LTk3YTAtYzA3N2JjODA4ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADRcA9izbuFUL0pAVuHCM3ldVhFQ2Pa7agdzHR9ghLN2ScIIsvM/
1dlA5IMmxTsKbJLBC3euBsDJccXmUSiuNC/Dhe86LMXv2t0b8UTJB+UzmK9Cn17G
N/JjexwcKWVku3yNuPNqbPz2rK6DkM1t0Z2b9nB4qH2+3gbSouPaPPQAZ3ChanNC
mhDosGWrQLnw9rN/cOwIivkrardvrc7DrMvEd4iRGGCgzBC0pFb9APrz+SKMpWEN
A+vKs5S8UFKtPmeyIxH9KZ8p+XU8yJBp3XZ1RIPr2VKSFaOD7B3csWPuyXanPOsn
JIInyRlIioh0mG10lyieQDwoL6Y9M4p0BVs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:14:58 2025 by rpki-client