Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
File:                     bc90a123-68b1-322a-9457-bc94097ef1ea.roa (raw, json)
Hash identifier:          UF8abobHU1XhVJpsWLRWB+lSIf1G9a1nliMGWxZiFlM=
Subject key identifier:   42:57:92:39:43:40:77:5C:99:A7:36:4C:AC:74:1A:8E:BF:F6:56:1E
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F43285848494576903AC50EA1A4AA8900
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        2602:f9e7:20::/46 maxlen: 48
                          2602:f9e7:24::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:76:90:3a:c5:0e:a1:a4:aa:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=22d9d944-9c6f-4c56-883f-39875eef5b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:81:25:70:68:3e:a0:a4:b6:da:df:55:f2:
                    f2:ab:85:2e:2a:d9:a8:fc:cf:b4:21:6a:20:9f:01:
                    39:0b:68:42:93:3b:7a:37:61:14:8b:1f:b5:a4:cb:
                    41:af:f7:e1:b9:eb:9a:9b:40:b0:ce:60:89:ed:38:
                    2a:83:a4:3a:a4:56:07:cc:92:20:86:95:0b:be:0d:
                    79:c9:f6:19:12:d6:a7:c2:1f:d2:eb:a1:80:01:5f:
                    b1:09:d4:d1:17:89:e7:7f:1a:2d:ab:b7:d5:f4:b9:
                    fe:e6:cb:61:78:d6:df:f3:3c:21:10:05:5a:94:25:
                    12:14:32:58:27:53:34:eb:fc:2a:c8:8f:20:eb:e9:
                    8c:6c:a1:1f:78:5a:83:ad:9b:28:5e:0c:e6:f9:4f:
                    1a:ee:aa:f9:a6:f5:c5:73:8a:07:79:82:4d:82:ef:
                    d5:f0:57:d3:33:15:f8:23:14:92:42:7d:57:12:4c:
                    82:5a:54:a0:0e:b8:b5:37:0f:2e:e5:02:e6:4d:e4:
                    53:ec:10:ee:a6:31:9a:ad:e7:b3:40:e0:86:b1:76:
                    73:6e:79:12:9a:f3:c4:d3:50:da:3a:bc:90:4e:96:
                    65:46:15:0a:d4:6f:98:0f:16:d0:2b:69:bd:b3:21:
                    5a:74:70:e6:2d:de:6c:38:b4:9a:fa:9b:b9:fa:ac:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:57:92:39:43:40:77:5C:99:A7:36:4C:AC:74:1A:8E:BF:F6:56:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/bc90a123-68b1-322a-9457-bc94097ef1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:20::-2602:f9e7:25:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:76:36:07:f4:af:01:3d:41:19:85:e9:a4:4a:79:82:39:87:
         eb:c4:ca:8b:1c:57:dc:12:18:f6:2c:44:fc:45:e3:7a:21:85:
         f3:1c:9c:7a:cd:4b:5b:8b:e9:a9:6f:4e:b4:10:20:6f:f4:cf:
         f2:fd:51:bf:b7:cd:c3:ca:f4:5b:2b:2d:85:c4:2b:aa:7f:ba:
         69:22:09:20:2a:ef:f8:85:ed:a4:55:e2:74:a5:97:3d:fb:aa:
         e2:8f:48:c4:b6:95:af:ac:d7:b8:1c:9a:db:43:6e:74:58:09:
         d2:41:55:d3:0c:72:ab:56:5a:36:1c:5f:bb:6d:1b:ff:64:61:
         41:b9:15:9f:43:a2:09:b4:e8:6c:02:dc:e4:91:4b:86:09:d0:
         6b:f6:51:4e:31:56:bc:16:7a:f7:3d:32:68:8b:33:dd:97:5d:
         44:34:a7:05:0a:44:2b:e5:c1:76:45:bb:77:04:d1:57:de:ad:
         67:12:45:70:f2:5e:8d:4a:45:d6:c1:9b:11:f0:70:0b:e6:92:
         30:0b:49:6e:fd:cb:22:82:eb:0a:9e:64:e7:8b:91:0f:37:c0:
         aa:46:e5:87:9a:3e:bd:c8:e7:b0:c5:86:a3:71:5f:a1:ec:e6:
         9c:45:d4:b3:a5:d2:6f:65:39:d6:a1:67:ad:1f:d9:3f:55:f0:
         06:fb:77:91
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEhJRXaQOsUOoaSqiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj
MzRmMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
MjJkOWQ5NDQtOWM2Zi00YzU2LTg4M2YtMzk4NzVlZWY1YjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSKBJXBoPqCkttrfVfLyq4UuKtmo/M+0IWog
nwE5C2hCkzt6N2EUix+1pMtBr/fhueuam0CwzmCJ7Tgqg6Q6pFYHzJIghpULvg15
yfYZEtanwh/S66GAAV+xCdTRF4nnfxotq7fV9Ln+5stheNbf8zwhEAValCUSFDJY
J1M06/wqyI8g6+mMbKEfeFqDrZsoXgzm+U8a7qr5pvXFc4oHeYJNgu/V8FfTMxX4
IxSSQn1XEkyCWlSgDri1Nw8u5QLmTeRT7BDupjGareezQOCGsXZzbnkSmvPE01Da
OryQTpZlRhUK1G+YDxbQK2m9syFadHDmLd5sOLSa+pu5+qw9XwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFEJXkjlDQHdcmac2TKx0Go6/9lYeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw
ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvYmM5MGExMjMtNjhiMS0z
MjJhLTk0NTctYmM5NDA5N2VmMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm
OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy
YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm
NDZmMmMzNGYuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUmAvnn
ACADBwEmAvnnACQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAU3Y2B/SvAT1BGYXppEp5gjmH68TKixxX3BIY
9ixE/EXjeiGF8xyces1LW4vpqW9OtBAgb/TP8v1Rv7fNw8r0WysthcQrqn+6aSIJ
ICrv+IXtpFXidKWXPfuq4o9IxLaVr6zXuBya20NudFgJ0kFV0wxyq1ZaNhxfu20b
/2RhQbkVn0OiCbTobALc5JFLhgnQa/ZRTjFWvBZ69z0yaIsz3ZddRDSnBQpEK+XB
dkW7dwTRV96tZxJFcPJejUpF1sGbEfBwC+aSMAtJbv3LIoLrCp5k54uRDzfAqkbl
h5o+vcjnsMWGo3FfoezmnEXUs6XSb2U51qFnrR/ZP1XwBvt3kQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:28 2025 by rpki-client