Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c/321fae3c-6089-3339-9ddd-cfe4a1640be5.roa
File:                     321fae3c-6089-3339-9ddd-cfe4a1640be5.roa (raw, json)
Hash identifier:          g4WKDYInYZ8ywbI7qHuMdZVjf3RyzvtPr0cLcmqR560=
Subject key identifier:   0D:19:C9:82:7C:0F:B0:1B:7C:AE:83:79:07:ED:F4:45:31:53:EE:14
Certificate issuer:       /CN=bed9b12e-ac68-426a-8ce3-7cc63c41c90c
Certificate serial:       010D0C9F4328584834557C480D34B8F913D33C00
Authority key identifier: 25:79:49:63:4F:FA:17:26:28:A4:7C:57:3B:92:06:3F:36:42:3E:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c/321fae3c-6089-3339-9ddd-cfe4a1640be5.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        2602:fa03:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c/bed9b12e-ac68-426a-8ce3-7cc63c41c90c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c/bed9b12e-ac68-426a-8ce3-7cc63c41c90c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:7c:48:0d:34:b8:f9:13:d3:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bed9b12e-ac68-426a-8ce3-7cc63c41c90c
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=ba428e68-8451-4ec4-a463-ea719deee8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:66:7e:e1:a4:04:6f:24:b6:62:2f:34:17:
                    e4:5f:85:30:96:b3:ea:cc:27:a0:d5:52:13:97:35:
                    fd:01:56:52:6f:a0:e4:68:58:62:a9:8d:93:6d:28:
                    d1:05:d1:52:3b:47:dd:08:b3:2d:0a:5e:c4:a5:2e:
                    0a:b3:79:ae:52:a8:31:1d:e1:01:60:64:b9:43:9d:
                    a5:f2:0d:da:8a:15:65:fd:ba:03:44:6d:4b:a9:6e:
                    43:51:f5:b6:cf:6e:5e:ea:9d:fe:f1:b5:5b:61:60:
                    7e:89:83:d1:67:7a:bd:79:dc:f1:60:af:2c:d3:9b:
                    fe:7b:72:25:fb:98:f5:b7:9e:55:e3:0e:40:fc:59:
                    2b:72:b2:da:47:77:57:d3:cc:70:90:11:43:39:ec:
                    a3:27:54:6b:bd:e9:96:0e:4c:e4:b3:0d:42:b7:2d:
                    22:e5:71:3a:94:43:22:10:6b:f2:3c:78:0b:45:1e:
                    46:35:3c:02:1f:81:c8:3b:28:ce:90:b9:84:b3:d0:
                    3f:c8:da:2d:17:98:71:4e:d2:01:95:61:20:16:6d:
                    84:26:0a:84:0d:0a:2a:7a:56:b9:3a:ce:64:d5:28:
                    24:be:a0:42:30:ae:32:77:3e:f1:2c:9d:ae:a8:df:
                    82:ee:b5:0e:9b:76:0a:91:1c:9a:d5:db:41:31:8e:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:19:C9:82:7C:0F:B0:1B:7C:AE:83:79:07:ED:F4:45:31:53:EE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c/321fae3c-6089-3339-9ddd-cfe4a1640be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c/bed9b12e-ac68-426a-8ce3-7cc63c41c90c.crl

            X509v3 Authority Key Identifier:
                keyid:25:79:49:63:4F:FA:17:26:28:A4:7C:57:3B:92:06:3F:36:42:3E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bed9b12e-ac68-426a-8ce3-7cc63c41c90c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa03:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:76:4e:75:28:0a:cf:a6:f9:d9:1a:41:32:5b:7e:06:42:
         2e:cf:e0:d1:7e:df:7c:30:5b:39:21:98:a4:17:90:0c:79:79:
         2e:c2:e0:ae:af:91:cc:3e:5b:db:3c:96:bb:e4:f1:d6:92:9e:
         ca:3b:d0:1d:33:0e:92:38:0a:66:6f:af:c1:a1:ab:64:27:be:
         68:53:82:bc:29:f3:36:68:84:0c:b2:79:b4:9e:69:9a:3f:62:
         59:45:31:96:e9:3b:12:b7:e7:fd:00:16:ac:d2:67:2b:8e:76:
         17:0e:e3:81:bb:c3:4f:e6:9d:80:51:b6:b9:a6:3e:70:18:76:
         f1:6c:f9:59:2e:ce:e4:cb:a0:30:1b:c5:9d:eb:84:0f:07:79:
         ab:07:b6:67:dc:34:ff:b8:bb:34:98:e4:00:21:96:20:df:34:
         b3:b8:eb:7b:6c:dc:3a:de:22:f5:7a:8d:e0:8e:44:ec:c7:14:
         6b:8f:45:b2:b8:de:65:92:63:4d:bd:ce:26:c5:8f:ed:73:51:
         11:41:d9:19:07:4f:8a:9d:e1:9b:7b:23:d3:fd:87:35:d9:11:
         bb:a1:14:53:c7:42:ba:d6:e1:5b:d3:28:d9:30:57:ff:b2:e7:
         5a:68:8c:01:f4:72:b6:e2:30:b8:95:24:f0:bd:b6:b3:9d:1b:
         ba:49:9f:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg0VXxIDTS4+RPTPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmVkOWIxMmUtYWM2OC00MjZhLThjZTMtN2NjNjNjNDFj
OTBjMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
YmE0MjhlNjgtODQ1MS00ZWM0LWE0NjMtZWE3MTlkZWVlOGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UpmfuGkBG8ktmIvNBfkX4UwlrPqzCeg1VIT
lzX9AVZSb6DkaFhiqY2TbSjRBdFSO0fdCLMtCl7EpS4Ks3muUqgxHeEBYGS5Q52l
8g3aihVl/boDRG1LqW5DUfW2z25e6p3+8bVbYWB+iYPRZ3q9edzxYK8s05v+e3Il
+5j1t55V4w5A/FkrcrLaR3dX08xwkBFDOeyjJ1RrvemWDkzksw1Cty0i5XE6lEMi
EGvyPHgLRR5GNTwCH4HIOyjOkLmEs9A/yNotF5hxTtIBlWEgFm2EJgqEDQoqela5
Os5k1SgkvqBCMK4ydz7xLJ2uqN+C7rUOm3YKkRya1dtBMY7AJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA0ZyYJ8D7AbfK6DeQft9EUxU+4UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZWQ5
YjEyZS1hYzY4LTQyNmEtOGNlMy03Y2M2M2M0MWM5MGMvMzIxZmFlM2MtNjA4OS0z
MzM5LTlkZGQtY2ZlNGExNjQwYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmVkOWIxMmUtYWM2OC00MjZhLThj
ZTMtN2NjNjNjNDFjOTBjL2JlZDliMTJlLWFjNjgtNDI2YS04Y2UzLTdjYzYzYzQx
YzkwYy5jcmwwHwYDVR0jBBgwFoAUJXlJY0/6FyYopHxXO5IGPzZCPpYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iZWQ5YjEyZS1hYzY4LTQyNmEtOGNlMy03Y2M2
M2M0MWM5MGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6AwAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAPidk51KArPpvnZGkEyW34GQi7P4NF+33wwWzkhmKQXkAx5eS7C
4K6vkcw+W9s8lrvk8daSnso70B0zDpI4CmZvr8Ghq2QnvmhTgrwp8zZohAyyebSe
aZo/YllFMZbpOxK35/0AFqzSZyuOdhcO44G7w0/mnYBRtrmmPnAYdvFs+VkuzuTL
oDAbxZ3rhA8HeasHtmfcNP+4uzSY5AAhliDfNLO463ts3DreIvV6jeCOROzHFGuP
RbK43mWSY029zibFj+1zURFB2RkHT4qd4Zt7I9P9hzXZEbuhFFPHQrrW4VvTKNkw
V/+y51pojAH0crbiMLiVJPC9trOdG7pJnzQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:09 2025 by rpki-client