Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa
File:                     bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa (raw, json)
Hash identifier:          ZY9Np1/qekGT+WJsd340d8BZwe2yOWRhH03dJx6jKks=
Subject key identifier:   9C:5D:0C:EF:F6:18:F9:23:EE:9F:20:1B:24:47:14:22:50:0A:40:47
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285848A9962A171CC992538E4D9800
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     18526
IP address blocks:        2602:fd6f:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:2a:17:1c:c9:92:53:8e:4d:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=ec2b4f6b-684f-4d7a-9f1f-e078c1f12e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:9a:e1:ec:f0:95:b8:3e:30:20:bf:8d:95:
                    2c:ee:f1:15:df:fe:31:88:c1:54:a7:81:fb:36:50:
                    b4:51:2d:17:cc:ce:3e:b6:9b:c4:7d:b7:17:f2:58:
                    0d:8e:03:7b:8d:62:f8:cf:88:8c:a5:25:cc:5d:57:
                    6a:ec:9d:93:78:6f:32:fb:23:f3:db:6b:b3:d3:ae:
                    12:b4:2a:50:1e:d0:03:c8:ba:ad:88:89:bf:5c:87:
                    c9:4b:f2:9c:7d:b9:36:06:c9:b6:1d:99:9f:12:d6:
                    a8:4d:3b:22:40:09:05:f4:b0:9d:ce:19:01:8d:99:
                    f8:25:3e:96:5e:30:ae:2c:3a:74:8e:b9:d3:6a:8a:
                    fb:17:be:4a:46:ff:98:ee:f9:27:1b:e3:0e:3e:e7:
                    7d:c9:17:5c:c3:dd:f4:2e:61:84:eb:be:80:e9:96:
                    30:33:1d:e1:6e:1a:0b:11:9e:f4:4e:60:69:5f:e7:
                    58:86:f4:87:2e:f3:db:ac:da:7c:4f:10:a7:8c:0f:
                    a9:ca:66:9e:53:c3:58:81:c1:42:58:35:e8:e2:7b:
                    81:72:b0:dc:46:84:f6:b1:ea:65:a7:8f:a9:2e:f4:
                    32:2f:ec:89:aa:47:f5:43:87:93:00:34:c1:28:d1:
                    e1:1d:f3:14:4c:7d:21:49:29:d0:fc:b1:18:42:be:
                    a7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5D:0C:EF:F6:18:F9:23:EE:9F:20:1B:24:47:14:22:50:0A:40:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:dd:c5:ca:fd:83:b4:be:de:ba:35:99:21:38:45:33:76:fb:
         cb:85:c7:4d:13:24:a5:53:df:9a:43:eb:5d:38:54:d6:f8:75:
         ce:f1:4f:12:85:13:ab:41:72:6d:59:87:ca:47:ac:b7:6b:9d:
         a7:a9:5f:7e:3e:97:bd:c1:17:07:c1:08:08:b5:c0:77:b4:58:
         6e:19:ff:1d:df:06:16:f3:a2:44:c2:7a:e1:bc:c1:5d:3f:d7:
         33:e9:c0:b7:06:59:95:19:46:62:d7:fa:01:32:6a:9c:94:46:
         17:2d:51:db:e4:3a:4e:1e:7f:de:7b:13:80:a2:a1:be:9b:3d:
         0a:9b:b6:b6:11:08:a0:c3:1f:c4:3f:cf:9a:91:4d:bb:94:00:
         ee:ee:85:be:78:d0:80:8b:45:af:70:f9:90:51:5e:25:43:63:
         fa:4a:8e:93:d4:b2:16:66:2d:a7:7b:83:67:01:ad:15:46:f1:
         96:d7:cf:1a:58:b2:37:f2:5d:28:88:a2:10:44:11:f7:c1:e8:
         aa:ba:17:cf:f6:9e:ee:56:bb:ba:ee:35:ea:1a:6a:fa:6a:32:
         7d:bc:72:c4:3f:c0:21:dd:2a:5e:ed:92:64:77:84:c7:1d:c3:
         b7:01:b0:4d:a6:2d:bd:42:52:3a:70:e4:e6:e7:bb:33:2e:3c:
         cc:3d:01:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplioXHMmSU45NmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWMyYjRmNmItNjg0Zi00ZDdhLTlmMWYtZTA3OGMxZjEyZTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG6a4ezwlbg+MCC/jZUs7vEV3/4xiMFUp4H7
NlC0US0XzM4+tpvEfbcX8lgNjgN7jWL4z4iMpSXMXVdq7J2TeG8y+yPz22uz064S
tCpQHtADyLqtiIm/XIfJS/Kcfbk2Bsm2HZmfEtaoTTsiQAkF9LCdzhkBjZn4JT6W
XjCuLDp0jrnTaor7F75KRv+Y7vknG+MOPud9yRdcw930LmGE676A6ZYwMx3hbhoL
EZ70TmBpX+dYhvSHLvPbrNp8TxCnjA+pymaeU8NYgcFCWDXo4nuBcrDcRoT2sepl
p4+pLvQyL+yJqkf1Q4eTADTBKNHhHfMUTH0hSSnQ/LEYQr6nLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJxdDO/2GPkj7p8gGyRHFCJQCkBHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvYmRmN2EyNzMtNGQwZi0z
ZmZlLTk1MjktMzcxZGIzZTAzNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9bwAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACTdxcr9g7S+3ro1mSE4RTN2+8uFx00TJKVT35pD6104VNb4dc7x
TxKFE6tBcm1Zh8pHrLdrnaepX34+l73BFwfBCAi1wHe0WG4Z/x3fBhbzokTCeuG8
wV0/1zPpwLcGWZUZRmLX+gEyapyURhctUdvkOk4ef957E4Ciob6bPQqbtrYRCKDD
H8Q/z5qRTbuUAO7uhb540ICLRa9w+ZBRXiVDY/pKjpPUshZmLad7g2cBrRVG8ZbX
zxpYsjfyXSiIohBEEffB6Kq6F8/2nu5Wu7ruNeoaavpqMn28csQ/wCHdKl7tkmR3
hMcdw7cBsE2mLb1CUjpw5ObnuzMuPMw9AZU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:18:00 2025 by rpki-client