Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f3fd2ff9-75b2-3f8b-92b4-789f2a419597.roa
File:                     f3fd2ff9-75b2-3f8b-92b4-789f2a419597.roa (raw, json)
Hash identifier:          SkkcTlhefBh9ubtQFjXw7SGqfXSIYnvUuLXyECiaCxc=
Subject key identifier:   07:13:FE:F9:50:E9:4B:4A:4C:6B:37:14:F5:FA:75:7A:BC:60:1F:FE
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285848FD56C77BB145301AECE5D440
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f3fd2ff9-75b2-3f8b-92b4-789f2a419597.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     271
IP address blocks:        2607:f8f0:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c7:7b:b1:45:30:1a:ec:e5:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=7ecf8444-79e9-4e3e-ae21-800915780c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:4b:71:4c:bf:49:47:4e:56:8f:c5:74:56:
                    24:4c:40:89:5a:e9:a4:71:9c:87:d5:a8:28:fb:49:
                    7b:45:95:93:c2:45:3a:49:98:9a:c9:d4:e1:a1:9c:
                    87:88:89:4c:2a:f1:a9:2a:a9:9d:b4:f8:e2:ec:9b:
                    d5:d4:87:8f:e5:5e:d4:4c:34:76:01:2f:25:c6:77:
                    b1:d4:ee:5f:45:16:8a:8e:58:f2:80:09:3b:a7:2d:
                    55:c8:a8:56:ca:ac:7c:f9:6a:3b:cd:b3:6c:d0:92:
                    b9:d8:da:0b:db:5f:38:b3:22:55:b5:8a:d1:07:e9:
                    24:ad:77:31:9c:10:03:7a:b5:31:90:1b:1b:da:13:
                    7f:9e:d8:d8:f0:36:40:4a:65:07:44:06:b8:25:46:
                    ac:ff:95:85:73:9f:74:b4:79:24:53:b6:6a:5c:21:
                    05:8e:dd:85:0e:39:3f:b8:34:40:34:8b:e6:93:ef:
                    d7:ae:ca:84:ba:24:a3:80:98:64:33:5d:10:78:0c:
                    ef:65:aa:3f:43:9f:48:e0:9a:7e:8a:6f:d2:f7:7e:
                    8c:e0:9a:55:e3:b2:8e:0a:5f:7f:08:08:bd:36:8e:
                    c7:98:ed:f8:4c:d7:99:e4:9c:67:13:1f:42:73:0f:
                    dc:a0:34:57:96:8c:34:2b:48:bb:af:66:78:6c:a6:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:13:FE:F9:50:E9:4B:4A:4C:6B:37:14:F5:FA:75:7A:BC:60:1F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f3fd2ff9-75b2-3f8b-92b4-789f2a419597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:e2:97:60:d8:a2:6d:56:13:81:69:26:47:61:8b:15:a1:
         13:f0:66:a0:96:95:9e:2c:f3:1a:fb:55:94:4d:07:32:76:2a:
         49:1e:8a:ce:e6:13:28:42:67:d4:0b:71:7b:87:f3:30:49:62:
         3c:f6:e9:90:d7:8a:3c:a3:fe:67:f2:93:aa:e5:b9:80:5e:e5:
         21:c7:48:09:83:ea:ef:5e:51:1e:b4:74:4c:3c:21:2b:c2:b4:
         e1:29:d8:3e:e6:85:80:5b:b9:49:57:4d:f4:fa:71:60:46:eb:
         db:85:24:ce:37:56:27:c3:a2:30:d3:2d:89:f2:04:e5:fa:fc:
         05:87:f7:56:10:26:be:e5:95:0e:57:a4:c8:b0:4c:e8:45:66:
         9e:db:07:c1:c7:36:3e:d8:50:4f:00:6a:df:b8:9a:d9:cb:a7:
         85:4a:9f:8d:b6:34:03:54:c4:09:7d:6f:d1:be:27:fd:dd:48:
         20:41:9e:68:33:bd:54:3d:8b:32:e4:08:46:e7:e6:f7:5c:81:
         95:09:83:13:34:7c:7e:73:e4:55:11:bc:41:5c:13:48:76:3e:
         61:93:9b:12:77:b1:89:49:0c:3f:3a:ce:db:29:d3:12:a7:2d:
         4d:99:60:99:8d:a5:f8:12:42:0f:e9:7c:ed:74:24:3e:2e:9d:
         1b:b3:77:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9Vsd7sUUwGuzl1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
N2VjZjg0NDQtNzllOS00ZTNlLWFlMjEtODAwOTE1NzgwYzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0NLcUy/SUdOVo/FdFYkTECJWumkcZyH1ago
+0l7RZWTwkU6SZiaydThoZyHiIlMKvGpKqmdtPji7JvV1IeP5V7UTDR2AS8lxnex
1O5fRRaKjljygAk7py1VyKhWyqx8+Wo7zbNs0JK52NoL2184syJVtYrRB+kkrXcx
nBADerUxkBsb2hN/ntjY8DZASmUHRAa4JUas/5WFc590tHkkU7ZqXCEFjt2FDjk/
uDRANIvmk+/XrsqEuiSjgJhkM10QeAzvZao/Q59I4Jp+im/S936M4JpV47KOCl9/
CAi9No7HmO34TNeZ5JxnEx9Ccw/coDRXlow0K0i7r2Z4bKa5yQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAcT/vlQ6UtKTGs3FPX6dXq8YB/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZjNmZDJmZjktNzViMi0z
ZjhiLTkyYjQtNzg5ZjJhNDE5NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEae4pdg2KJtVhOBaSZHYYsVoRPwZqCWlZ4s8xr7VZRNBzJ2Kkke
is7mEyhCZ9QLcXuH8zBJYjz26ZDXijyj/mfyk6rluYBe5SHHSAmD6u9eUR60dEw8
ISvCtOEp2D7mhYBbuUlXTfT6cWBG69uFJM43VifDojDTLYnyBOX6/AWH91YQJr7l
lQ5XpMiwTOhFZp7bB8HHNj7YUE8Aat+4mtnLp4VKn422NANUxAl9b9G+J/3dSCBB
nmgzvVQ9izLkCEbn5vdcgZUJgxM0fH5z5FURvEFcE0h2PmGTmxJ3sYlJDD86ztsp
0xKnLU2ZYJmNpfgSQg/pfO10JD4unRuzd1w=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:42 2025 by rpki-client