Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/40b2e0b1-4774-3ce6-9c77-11c7c4ddb51a.roa
File:                     40b2e0b1-4774-3ce6-9c77-11c7c4ddb51a.roa (raw, json)
Hash identifier:          ZewPppxFFdpqoYxVvFeT/1PceISVkJ+mydIvbywBRos=
Subject key identifier:   78:13:E2:EB:85:C9:DD:A6:77:8B:B3:E9:0C:4B:8D:16:CF:70:CF:F3
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285848AF2B8922F121D42F138B47A0
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/40b2e0b1-4774-3ce6-9c77-11c7c4ddb51a.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     62925
IP address blocks:        2602:f9a9:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:89:22:f1:21:d4:2f:13:8b:47:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=31376c7a-2912-43d7-a5a9-58ffeb99dd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:4a:5c:6b:d9:a0:0c:af:45:d7:43:6f:45:
                    21:62:f7:e2:17:75:57:de:2c:73:28:a0:38:69:85:
                    0d:dd:c4:18:7b:1f:c9:91:0c:28:42:8b:ea:1b:4a:
                    05:e0:4a:79:bb:43:04:f3:2a:e6:87:cc:07:a4:81:
                    23:62:41:46:ec:71:e7:e1:c1:6f:0e:36:ae:be:25:
                    ff:8d:5f:f0:6e:b1:b5:12:92:c9:e6:23:bb:40:4b:
                    0d:cc:5b:67:39:45:4c:51:a5:df:0d:5d:43:38:80:
                    b4:47:98:88:b5:e2:59:bf:d5:ef:4e:66:38:da:1e:
                    e5:d0:6d:0f:d3:2e:15:cc:09:87:04:28:6a:02:a6:
                    d6:d7:36:48:33:51:1e:9f:a9:63:7c:6c:71:da:58:
                    fe:17:29:73:33:67:7d:35:7e:a2:4b:3d:10:d7:10:
                    ef:e7:94:83:36:34:a4:b5:a1:ed:57:cf:4e:5f:61:
                    09:39:8e:a3:fe:8d:59:12:d0:e8:50:7c:ff:35:5e:
                    76:05:7f:f4:26:0b:01:ce:12:ca:e9:30:3e:64:7f:
                    4b:23:2e:ff:84:31:13:e9:d8:a8:41:3f:13:2d:4e:
                    ac:15:36:09:93:f4:b7:15:5c:1e:f3:1b:d9:e8:d9:
                    01:20:5b:b7:ba:81:c5:3d:e7:3d:eb:8f:e5:14:83:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:E2:EB:85:C9:DD:A6:77:8B:B3:E9:0C:4B:8D:16:CF:70:CF:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/40b2e0b1-4774-3ce6-9c77-11c7c4ddb51a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:9b:7f:60:c7:cf:1b:16:87:2b:2b:33:ac:aa:e5:6d:c3:
         02:d5:48:30:a2:e1:5d:e6:23:ee:6c:55:36:84:63:5a:e6:9b:
         11:44:9e:0a:81:a1:8d:81:dc:c2:b5:db:ec:a8:c8:de:72:12:
         4f:56:23:47:ca:5c:27:1a:74:da:59:51:24:12:42:1b:7f:bc:
         91:af:10:eb:77:b9:e3:aa:03:1d:9b:08:60:19:00:25:27:f3:
         3c:61:ab:69:82:b0:77:e0:f4:d4:53:f9:1e:65:73:9c:8a:5c:
         31:d2:7a:7f:e5:e9:61:e8:06:81:07:a6:7a:58:a0:60:f2:bb:
         f0:f9:d0:02:05:73:e0:7b:61:37:31:48:41:90:e8:47:b6:7e:
         8f:6f:0c:39:8e:eb:16:9a:15:b4:98:99:b5:7d:26:ac:a4:52:
         c6:92:bd:36:76:23:2f:d7:13:04:44:5a:18:20:4a:e4:a7:fc:
         59:e9:85:cc:f4:54:58:60:0a:b3:02:f0:24:bf:ea:b8:ba:75:
         29:be:8e:fd:47:82:37:45:48:d6:43:61:a3:ca:0e:00:64:38:
         3f:b9:c1:dc:11:c0:10:a0:cb:83:a2:90:45:a9:9d:9c:18:b7:
         a6:c4:f7:2f:14:9b:0b:1f:07:ef:c6:45:02:44:0a:1a:cc:f7:
         ca:00:3a:2f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEivK4ki8SHULxOLR6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi
MWEyMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MzEzNzZjN2EtMjkxMi00M2Q3LWE1YTktNThmZmViOTlkZDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbtKXGvZoAyvRddDb0UhYvfiF3VX3ixzKKA4
aYUN3cQYex/JkQwoQovqG0oF4Ep5u0ME8yrmh8wHpIEjYkFG7HHn4cFvDjauviX/
jV/wbrG1EpLJ5iO7QEsNzFtnOUVMUaXfDV1DOIC0R5iIteJZv9XvTmY42h7l0G0P
0y4VzAmHBChqAqbW1zZIM1Een6ljfGxx2lj+FylzM2d9NX6iSz0Q1xDv55SDNjSk
taHtV89OX2EJOY6j/o1ZEtDoUHz/NV52BX/0JgsBzhLK6TA+ZH9LIy7/hDET6dio
QT8TLU6sFTYJk/S3FVwe8xvZ6NkBIFu3uoHFPec964/lFIN7pwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHgT4uuFyd2md4uz6QxLjRbPcM/zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy
NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvNDBiMmUwYjEtNDc3NC0z
Y2U2LTljNzctMTFjN2M0ZGRiNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky
MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi
YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk
MTBiYmIxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5qQkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAILCbf2DHzxsWhysrM6yq5W3DAtVIMKLhXeYj7mxVNoRjWuabEUSe
CoGhjYHcwrXb7KjI3nIST1YjR8pcJxp02llRJBJCG3+8ka8Q63e546oDHZsIYBkA
JSfzPGGraYKwd+D01FP5HmVznIpcMdJ6f+XpYegGgQemeligYPK78PnQAgVz4Hth
NzFIQZDoR7Z+j28MOY7rFpoVtJiZtX0mrKRSxpK9NnYjL9cTBERaGCBK5Kf8WemF
zPRUWGAKswLwJL/quLp1Kb6O/UeCN0VI1kNho8oOAGQ4P7nB3BHAEKDLg6KQRamd
nBi3psT3LxSbCx8H78ZFAkQKGsz3ygA6Lw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:35 2025 by rpki-client