Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/454cd66f-518f-3f95-b41d-19021531bfd2.roa
File:                     454cd66f-518f-3f95-b41d-19021531bfd2.roa (raw, json)
Hash identifier:          qGafdt9a4CENBH3JVi70+ifH6MQ4+aV1RhMZvlNZvAY=
Subject key identifier:   7B:77:E6:47:2A:49:8A:3D:A1:83:39:74:73:1E:69:D2:A5:2F:F0:55
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B64246A42B9E50220929C80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/454cd66f-518f-3f95-b41d-19021531bfd2.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     54858
IP address blocks:        2605:2980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:24:6a:42:b9:e5:02:20:92:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=726104f6-a653-4d49-ac2a-6fff4ad53092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:9c:bf:23:a7:c0:be:76:30:44:17:90:39:
                    9b:c5:d0:6f:a0:cd:d7:f6:ac:39:5a:86:a0:b4:e0:
                    dd:46:b8:af:8b:39:ff:7c:f4:b0:01:84:ac:f0:03:
                    92:54:1e:12:b3:dc:b5:49:c9:9c:96:ea:87:62:22:
                    13:23:6e:95:9d:c0:3e:92:ef:5e:3a:8e:34:2e:7c:
                    a8:7b:d1:de:1c:29:18:30:81:92:0c:6e:2a:a3:fd:
                    9f:7e:0d:80:d0:73:e6:fa:26:da:b7:2c:34:34:52:
                    09:9e:25:2f:fb:2d:67:6f:40:06:a3:46:a9:5f:a4:
                    b8:2d:5c:f6:f7:db:56:0e:4a:6c:62:80:b6:2b:87:
                    ba:0e:52:6c:f5:27:5f:82:e9:f4:da:90:33:ed:18:
                    d0:12:84:b3:e9:4d:f6:b3:78:d3:45:f0:5d:41:d6:
                    30:9a:dc:38:93:dd:c4:fe:7d:1f:54:d4:80:55:73:
                    da:eb:81:91:c4:d5:88:0e:ee:09:d8:c2:48:1f:93:
                    03:a1:d8:e6:8d:53:f3:b1:17:59:49:89:63:e9:13:
                    d0:10:b5:a8:fd:62:e2:f9:92:42:e1:df:bf:91:0c:
                    ac:63:df:75:cb:f8:d5:36:34:39:75:c8:54:31:c0:
                    91:92:53:2c:6a:4e:a7:22:4a:1a:c9:a6:4f:54:ed:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:77:E6:47:2A:49:8A:3D:A1:83:39:74:73:1E:69:D2:A5:2F:F0:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/454cd66f-518f-3f95-b41d-19021531bfd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4a:51:ce:85:15:6e:91:db:4f:ae:0e:fd:b6:ec:c3:f7:7a:
         86:40:c6:18:f6:2e:ac:af:6f:4d:a2:34:0e:dc:49:da:82:3c:
         36:cd:de:92:48:ca:a3:0a:dd:a1:5b:4a:65:7b:fc:74:29:c3:
         9b:ab:fe:5f:f1:f1:d7:6f:9f:0c:72:8e:af:f7:46:32:cc:18:
         77:59:73:eb:e8:96:09:40:9f:c0:49:6e:da:bc:50:17:94:06:
         3a:a4:e1:0d:8d:d1:7d:8f:33:bf:94:9c:25:0d:5e:d5:f4:f9:
         94:77:bd:3e:96:e0:74:4e:06:ca:76:32:a3:b1:39:1b:8a:2d:
         dc:32:8d:ad:7d:00:1b:97:31:53:6e:d8:0f:f2:50:95:07:e9:
         97:21:5c:f5:ae:3b:e7:0c:c1:63:6a:d2:03:0d:c3:7e:13:82:
         94:4b:e3:f7:90:d9:2d:50:e6:9f:08:df:52:13:43:09:dd:b2:
         3c:c1:6c:1d:90:33:48:e8:b4:8f:84:f0:f9:03:e6:45:5d:fe:
         cc:97:ec:98:46:45:e4:e8:8a:e1:6d:62:44:34:ed:96:7f:07:
         18:a6:96:ff:b9:10:3e:25:3a:9b:18:f5:83:ae:32:d4:8f:56:
         61:05:e2:63:0f:be:c8:ff:58:b7:13:30:17:45:fe:94:bf:33:
         23:2c:df:b2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZCRqQrnlAiCSnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
NzI2MTA0ZjYtYTY1My00ZDQ5LWFjMmEtNmZmZjRhZDUzMDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluicvyOnwL52MEQXkDmbxdBvoM3X9qw5Woag
tODdRrivizn/fPSwAYSs8AOSVB4Ss9y1ScmcluqHYiITI26VncA+ku9eOo40Lnyo
e9HeHCkYMIGSDG4qo/2ffg2A0HPm+ibatyw0NFIJniUv+y1nb0AGo0apX6S4LVz2
99tWDkpsYoC2K4e6DlJs9Sdfgun02pAz7RjQEoSz6U32s3jTRfBdQdYwmtw4k93E
/n0fVNSAVXPa64GRxNWIDu4J2MJIH5MDodjmjVPzsRdZSYlj6RPQELWo/WLi+ZJC
4d+/kQysY991y/jVNjQ5dchUMcCRklMsak6nIkoayaZPVO2R5wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHt35kcqSYo9oYM5dHMeadKlL/BVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDU0Y2Q2NmYtNTE4Zi0z
Zjk1LWI0MWQtMTkwMjE1MzFiZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUpgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAiSlHOhRVukdtPrg79tuzD93qGQMYY9i6sr29NojQO3Enagjw2zd6S
SMqjCt2hW0ple/x0KcObq/5f8fHXb58Mco6v90YyzBh3WXPr6JYJQJ/ASW7avFAX
lAY6pOENjdF9jzO/lJwlDV7V9PmUd70+luB0TgbKdjKjsTkbii3cMo2tfQAblzFT
btgP8lCVB+mXIVz1rjvnDMFjatIDDcN+E4KUS+P3kNktUOafCN9SE0MJ3bI8wWwd
kDNI6LSPhPD5A+ZFXf7Ml+yYRkXk6IrhbWJENO2WfwcYppb/uRA+JTqbGPWDrjLU
j1ZhBeJjD77I/1i3EzAXRf6UvzMjLN+y
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:40 2025 by rpki-client