Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/1fc40bda-0880-3876-af33-e88706fee1ca.roa
File:                     1fc40bda-0880-3876-af33-e88706fee1ca.roa (raw, json)
Hash identifier:          Y+YlUKeyhizNGUCGGfkvIho8DBlkhfbsr8srCaE8Uec=
Subject key identifier:   61:0F:BE:B3:88:73:A4:B3:78:14:85:B8:D3:F6:84:19:8D:0B:5E:C5
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F432858487E50662252B1C40BCA86F5B4
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/1fc40bda-0880-3876-af33-e88706fee1ca.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     15169
IP address blocks:        2605:a7c0::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:66:22:52:b1:c4:0b:ca:86:f5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=c5f49182-0a1f-4bd6-95b8-82a597f36e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:3f:dc:94:18:d4:84:96:0c:e5:8b:57:05:
                    7e:35:64:a3:6d:ab:57:04:a1:65:58:dd:3d:53:c8:
                    82:91:5e:4b:ab:ea:fa:6c:66:92:bb:8a:1e:6f:09:
                    52:73:ca:97:82:b6:43:ff:34:e9:92:ad:1e:14:02:
                    4a:47:ce:2b:17:f9:ff:22:3c:af:4a:40:1e:e6:f6:
                    80:72:0f:f1:b1:9f:50:55:98:00:48:ad:f7:5d:3c:
                    75:7f:b5:39:af:fa:1c:8b:df:33:67:e0:c3:93:3c:
                    17:61:5c:b6:35:fd:8e:70:6d:55:06:a3:4d:f7:12:
                    f3:54:1c:01:7b:16:bb:2b:0c:3f:bd:be:ed:16:41:
                    39:73:fd:ed:0f:64:50:48:63:31:64:44:67:71:3c:
                    9b:3b:d0:41:60:41:91:a8:3d:37:b5:ea:47:8e:1d:
                    f3:75:2a:46:a4:54:19:85:bd:e1:d5:26:6e:1b:56:
                    e6:92:7f:45:e2:37:df:3c:6b:a5:bd:c7:79:0d:66:
                    f7:ba:ff:15:8c:a6:37:2b:4c:ea:20:86:e7:e3:e6:
                    95:8a:a1:5d:8b:0a:ba:81:6f:fa:0b:9a:b9:8e:91:
                    4f:b2:15:07:0d:2b:5c:b2:7a:56:7f:76:5b:8b:f9:
                    7e:cf:04:fd:54:ca:88:c4:fd:36:fe:d7:c0:af:01:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0F:BE:B3:88:73:A4:B3:78:14:85:B8:D3:F6:84:19:8D:0B:5E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/1fc40bda-0880-3876-af33-e88706fee1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:ee:d0:71:8a:93:b9:a4:b8:90:42:9d:1b:8f:01:f1:c6:
         b1:3c:32:7c:a7:79:34:ef:b9:22:06:de:b7:9c:8f:b6:ef:9c:
         ec:ad:c9:f8:4e:dc:4d:6e:42:5f:68:91:5c:9d:6e:47:2a:25:
         f1:d9:bd:01:9b:97:d4:d2:94:50:25:fe:97:50:bc:f4:f6:b3:
         bc:8a:52:1d:2b:4f:86:e6:14:97:16:ac:d4:48:69:10:ec:33:
         de:d3:52:07:e0:d8:bb:22:a9:d4:84:4e:ab:81:ad:f1:81:7f:
         73:54:84:98:33:e4:f1:17:5f:8f:23:c6:bb:f5:23:f6:b1:08:
         8d:a2:4e:b8:91:d8:27:f7:4f:a9:e9:b0:1f:a9:6f:ef:b0:00:
         d3:06:23:4e:0a:b5:d1:d5:f6:d8:a8:45:ab:52:34:13:0f:56:
         84:ed:3b:af:4f:71:35:0a:2f:37:af:ba:d1:dc:aa:d6:51:cd:
         c1:f6:a8:3c:c6:ec:8c:e9:8b:f4:69:56:6c:66:51:5d:9b:44:
         3f:73:81:e6:49:4b:44:52:23:ed:37:e4:c5:ae:cd:e9:b0:67:
         03:52:84:52:b2:dc:b6:62:03:0d:f3:3b:d4:5b:93:ff:25:6e:
         a5:36:9b:19:85:0e:86:58:3a:53:72:d2:fe:7f:0d:da:58:d4:
         0d:74:76:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh+UGYiUrHEC8qG9bQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli
Njc2MB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk
YzVmNDkxODItMGExZi00YmQ2LTk1YjgtODJhNTk3ZjM2ZTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxk/3JQY1ISWDOWLVwV+NWSjbatXBKFlWN09
U8iCkV5Lq+r6bGaSu4oebwlSc8qXgrZD/zTpkq0eFAJKR84rF/n/IjyvSkAe5vaA
cg/xsZ9QVZgASK33XTx1f7U5r/oci98zZ+DDkzwXYVy2Nf2OcG1VBqNN9xLzVBwB
exa7Kww/vb7tFkE5c/3tD2RQSGMxZERncTybO9BBYEGRqD03tepHjh3zdSpGpFQZ
hb3h1SZuG1bmkn9F4jffPGulvcd5DWb3uv8VjKY3K0zqIIbn4+aViqFdiwq6gW/6
C5q5jpFPshUHDStcsnpWf3Zbi/l+zwT9VMqIxP02/tfArwEWJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGEPvrOIc6SzeBSFuNP2hBmNC17FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5
MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvMWZjNDBiZGEtMDg4MC0z
ODc2LWFmMzMtZTg4NzA2ZmVlMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3
ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5
YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy
Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgWnwAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACqz7tBxipO5pLiQQp0bjwHxxrE8MnyneTTvuSIG3recj7bvnOyt
yfhO3E1uQl9okVydbkcqJfHZvQGbl9TSlFAl/pdQvPT2s7yKUh0rT4bmFJcWrNRI
aRDsM97TUgfg2LsiqdSETquBrfGBf3NUhJgz5PEXX48jxrv1I/axCI2iTriR2Cf3
T6npsB+pb++wANMGI04KtdHV9tioRatSNBMPVoTtO69PcTUKLzevutHcqtZRzcH2
qDzG7Izpi/RpVmxmUV2bRD9zgeZJS0RSI+035MWuzemwZwNShFKy3LZiAw3zO9Rb
k/8lbqU2mxmFDoZYOlNy0v5/DdpY1A10dh8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:26 2025 by rpki-client