Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa
File:                     ee4cc7b7-5280-3913-ba01-72e16a155541.roa (raw, json)
Hash identifier:          8PRM2f+k067aCDYEeAP5XgHgS5WZnQjM5+nvq3QqEaU=
Subject key identifier:   42:EB:23:D4:5C:36:88:FE:62:08:02:EA:A5:AD:48:0F:0E:B4:38:FE
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F432858490B4C26DF8C5A78B4D8E67C80
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2620:c3:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:26:df:8c:5a:78:b4:d8:e6:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=31af3538-5931-4c47-898d-64b20e516ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:29:cd:b6:78:de:09:ac:79:10:71:67:46:
                    31:ce:79:1d:bf:b5:e0:dd:bb:62:86:0b:25:47:02:
                    b2:a5:8d:aa:d9:4e:80:71:35:41:27:21:fa:3a:f5:
                    7f:81:65:5c:29:b7:70:87:93:cf:b6:e4:4a:e6:6e:
                    71:6b:d0:0f:38:9d:ad:4a:f7:f0:d4:31:0c:6d:da:
                    fb:52:41:a0:82:61:1a:1b:7b:25:5e:49:0d:77:a9:
                    b1:52:d9:72:f1:af:5d:82:05:9f:90:87:e7:5c:68:
                    5d:c0:82:33:90:d8:ef:68:b2:64:ba:a8:74:eb:f5:
                    42:3b:e9:a9:84:10:7a:48:b6:3b:74:34:2f:8c:a8:
                    c9:71:79:22:54:3b:0f:20:9f:5b:50:b2:05:36:9d:
                    b1:b0:5b:ff:b8:0d:a5:56:a2:c1:e8:c5:07:af:ea:
                    88:eb:cf:4a:3e:f0:a9:e7:6d:ab:1c:91:75:2d:86:
                    7f:68:1f:ce:34:dc:8c:39:4d:94:9c:8f:4a:b9:05:
                    0c:59:0b:4d:94:4e:d4:8f:55:c6:f9:d1:a3:8d:e0:
                    c5:e3:b8:92:7f:e7:81:af:a5:1a:39:2d:1a:42:70:
                    f4:8c:5d:28:bd:00:13:82:36:56:f3:7d:6d:84:e5:
                    a7:2d:4a:4e:e0:8e:4e:5b:4f:67:3d:ff:1f:ce:b0:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:23:D4:5C:36:88:FE:62:08:02:EA:A5:AD:48:0F:0E:B4:38:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ec:40:c6:e5:6c:7c:de:7e:c6:20:f3:2b:28:f4:85:f8:68:
         da:66:57:5c:a0:36:ce:90:79:f7:72:70:bb:73:08:f2:89:08:
         81:c8:a1:73:d1:05:dc:33:38:8a:42:42:d8:33:97:07:1d:6d:
         3a:72:bd:c2:c0:7f:8a:22:fc:60:f2:90:e5:f0:d9:e7:49:48:
         41:04:d1:e2:20:ec:01:e0:bc:7e:18:0c:e6:1a:55:b0:0b:4f:
         0e:e0:d2:3c:ff:0d:4b:86:bf:25:01:7e:af:7e:d8:35:68:81:
         50:ed:c8:55:ec:96:a4:83:87:8d:25:8a:15:53:4b:21:34:65:
         70:15:06:eb:f2:f8:f7:b6:d5:d7:83:3d:30:6e:63:40:7d:59:
         dd:0b:81:3f:9a:34:8b:8f:19:2f:dd:fe:c5:73:d2:09:62:ba:
         22:38:01:a2:de:5d:20:24:78:dc:f0:f3:a4:c4:e6:4c:c2:01:
         41:67:15:9c:ae:09:82:2a:a1:ca:26:9e:62:c1:f8:9e:0b:82:
         66:3f:5d:fc:0c:ae:45:e7:80:93:81:bd:65:8a:5a:8e:c6:1b:
         39:a1:f6:32:36:b7:5d:ca:e8:c5:d2:1b:e7:16:8d:c9:78:61:
         0a:27:2d:57:fb:70:73:7c:1d:98:86:bb:73:d4:6c:e7:67:42:
         a5:65:b9:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkLTCbfjFp4tNjmfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3
N2YwMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MzFhZjM1MzgtNTkzMS00YzQ3LTg5OGQtNjRiMjBlNTE2ZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMUpzbZ43gmseRBxZ0Yxznkdv7Xg3btihgsl
RwKypY2q2U6AcTVBJyH6OvV/gWVcKbdwh5PPtuRK5m5xa9APOJ2tSvfw1DEMbdr7
UkGggmEaG3slXkkNd6mxUtly8a9dggWfkIfnXGhdwIIzkNjvaLJkuqh06/VCO+mp
hBB6SLY7dDQvjKjJcXkiVDsPIJ9bULIFNp2xsFv/uA2lVqLB6MUHr+qI689KPvCp
522rHJF1LYZ/aB/ONNyMOU2UnI9KuQUMWQtNlE7Uj1XG+dGjjeDF47iSf+eBr6Ua
OS0aQnD0jF0ovQATgjZW831thOWnLUpO4I5OW09nPf8fzrCzkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFELrI9RcNoj+YggC6qWtSA8OtDj+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy
ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvZWU0Y2M3YjctNTI4MC0z
OTEzLWJhMDEtNzJlMTZhMTU1NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz
ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx
NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh
YTMxMTc3ZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAw+AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEPsQMblbHzefsYg8yso9IX4aNpmV1ygNs6QefdycLtzCPKJCIHI
oXPRBdwzOIpCQtgzlwcdbTpyvcLAf4oi/GDykOXw2edJSEEE0eIg7AHgvH4YDOYa
VbALTw7g0jz/DUuGvyUBfq9+2DVogVDtyFXslqSDh40lihVTSyE0ZXAVBuvy+Pe2
1deDPTBuY0B9Wd0LgT+aNIuPGS/d/sVz0gliuiI4AaLeXSAkeNzw86TE5kzCAUFn
FZyuCYIqocomnmLB+J4LgmY/XfwMrkXngJOBvWWKWo7GGzmh9jI2t13K6MXSG+cW
jcl4YQonLVf7cHN8HZiGu3PUbOdnQqVluY8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:32:04 2025 by rpki-client