Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa
File:                     7a9a9079-ed6e-36bc-9987-7579134bf17f.roa (raw, json)
Hash identifier:          89bX467KOuL6fx3+KWrP34VeX19Z3t6Zj0R9q4+bPpg=
Subject key identifier:   80:1E:7D:AB:73:DF:81:E5:58:EB:EA:1A:98:50:33:FC:A3:E3:AE:10
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F43285848D6411E430C4DFB19D9C9B3A0
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     399646
IP address blocks:        2602:f9f3::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:1e:43:0c:4d:fb:19:d9:c9:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=ea7d1ecd-cc53-4c31-9b48-d8707ccf308a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:0c:0f:ce:bc:a1:d2:39:fb:56:18:13:62:
                    70:69:6b:64:64:30:50:7f:2c:17:ec:36:a2:87:eb:
                    83:c7:46:d6:46:9b:04:6a:47:0f:24:fa:5e:c4:87:
                    17:6b:0d:51:57:97:f3:83:06:e1:d5:a0:e9:10:f2:
                    ad:69:3d:05:67:97:57:50:31:45:ff:1a:0d:4b:27:
                    04:d7:9e:45:b7:4a:24:7e:37:99:fc:b5:fd:3e:61:
                    88:a1:d4:36:36:32:7b:26:f8:06:65:c0:74:68:ef:
                    cf:d1:3b:9e:7b:cb:43:e0:76:6f:b4:ad:15:b4:f5:
                    fe:0b:28:1b:7a:b9:b6:3e:56:10:d6:82:96:53:0e:
                    80:5e:02:53:64:a1:a1:11:12:77:43:c8:c1:47:df:
                    45:3d:b8:ea:82:97:11:1d:7c:1e:d5:b6:8f:7c:a2:
                    d1:bd:b2:be:60:2f:5d:8b:82:d1:a3:ce:16:8f:9b:
                    dc:3a:6a:93:45:c2:72:7f:ac:d7:0e:d9:13:9f:ec:
                    c8:d4:65:49:8f:9b:04:f3:4d:4b:75:67:f1:4f:72:
                    ae:1c:5f:07:d5:93:c2:cd:de:b1:6b:d8:68:dc:3c:
                    3a:16:6c:2f:49:cb:8d:03:ea:df:8a:03:30:e3:ec:
                    75:38:61:f4:e2:c5:1a:f4:71:3d:26:2a:a7:67:a4:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:7D:AB:73:DF:81:E5:58:EB:EA:1A:98:50:33:FC:A3:E3:AE:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f3::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4d:13:8c:7f:ff:3e:f7:88:80:cc:7f:34:1b:4a:85:1e:5b:
         d5:56:b6:37:f1:7b:60:b8:ea:8c:c8:59:ba:29:28:bb:40:6e:
         17:a8:41:e2:eb:74:30:62:f6:21:4a:d4:1a:d2:3c:1d:3f:d6:
         88:69:21:a1:8c:4b:a5:eb:df:32:3a:98:84:84:c2:22:75:6f:
         86:79:97:1d:72:24:63:a0:77:b2:36:07:9c:3e:63:86:a7:de:
         0f:e3:d6:38:10:db:ad:42:3c:a8:d0:da:7d:bc:4d:59:83:40:
         8c:fa:d7:36:95:1d:76:57:a8:1a:bd:87:0e:d4:09:b7:2d:f2:
         12:ad:e8:e5:ae:86:57:6d:48:97:b8:58:c9:cb:d6:bd:2c:8f:
         9f:06:58:e6:79:36:03:4a:e8:c5:85:0d:e0:ab:73:87:10:e8:
         61:b8:ab:f3:fa:d4:16:bb:fd:50:5c:74:5b:fa:45:0e:42:d5:
         73:df:bd:fc:8c:92:55:c4:73:4a:44:eb:0b:8a:07:f6:72:0e:
         93:a5:7d:b4:30:d9:82:8c:69:f8:93:c1:d1:78:cf:89:9e:2a:
         95:8b:7f:1c:11:0d:4f:00:23:38:d9:16:53:ef:0b:7f:c8:5f:
         fb:55:9e:96:04:e2:b4:fb:bd:99:8c:2e:9b:12:c5:51:4a:70:
         ec:91:6d:2e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjWQR5DDE37GdnJs6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx
M2M0MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWE3ZDFlY2QtY2M1My00YzMxLTliNDgtZDg3MDdjY2YzMDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQMD868odI5+1YYE2JwaWtkZDBQfywX7Dai
h+uDx0bWRpsEakcPJPpexIcXaw1RV5fzgwbh1aDpEPKtaT0FZ5dXUDFF/xoNSycE
155Ft0okfjeZ/LX9PmGIodQ2NjJ7JvgGZcB0aO/P0Tuee8tD4HZvtK0VtPX+Cygb
erm2PlYQ1oKWUw6AXgJTZKGhERJ3Q8jBR99FPbjqgpcRHXwe1baPfKLRvbK+YC9d
i4LRo84Wj5vcOmqTRcJyf6zXDtkTn+zI1GVJj5sE801LdWfxT3KuHF8H1ZPCzd6x
a9ho3Dw6FmwvScuNA+rfigMw4+x1OGH04sUa9HE9JiqnZ6RrFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIAefatz34HlWOvqGphQM/yj464QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx
OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvN2E5YTkwNzktZWQ2ZS0z
NmJjLTk5ODctNzU3OTEzNGJmMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi
ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl
MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw
Mzg2ZTEzYzQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL58zBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAfTROMf/8+94iAzH80G0qFHlvVVrY38XtguOqMyFm6KSi7QG4XqEHi
63QwYvYhStQa0jwdP9aIaSGhjEul698yOpiEhMIidW+GeZcdciRjoHeyNgecPmOG
p94P49Y4ENutQjyo0Np9vE1Zg0CM+tc2lR12V6gavYcO1Am3LfISrejlroZXbUiX
uFjJy9a9LI+fBljmeTYDSujFhQ3gq3OHEOhhuKvz+tQWu/1QXHRb+kUOQtVz3738
jJJVxHNKROsLigf2cg6TpX20MNmCjGn4k8HReM+JniqVi38cEQ1PACM42RZT7wt/
yF/7VZ6WBOK0+72ZjC6bEsVRSnDskW0u
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:15 2025 by rpki-client