Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
File:                     fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa (raw, json)
Hash identifier:          /tdqZebtTpLBHuqM7KKG1T2osWCvb8QrvWp60pUVLRA=
Subject key identifier:   3B:D2:64:94:44:74:3E:71:31:0D:93:66:5A:D9:5F:E1:94:0F:A4:14
Certificate issuer:       /CN=6f206706-c108-40c1-8f2d-14fbbf92d951
Certificate serial:       010D0C9F43285848BBBB790A2635BD7C49572A00
Authority key identifier: 1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     32484
IP address blocks:        2607:2ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:79:0a:26:35:bd:7c:49:57:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f206706-c108-40c1-8f2d-14fbbf92d951
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=81abb617-490b-4b4b-8408-117e4ad39b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:35:50:08:66:69:97:3b:2c:9d:9d:6b:ad:
                    e3:a0:c8:10:56:6f:e9:35:52:9f:10:90:29:50:53:
                    02:a2:42:39:38:7c:48:25:3a:88:e7:f7:cb:fe:39:
                    1e:57:e1:8f:33:5d:1d:f3:a9:dc:ac:5b:b5:e5:d7:
                    15:75:4f:39:76:e5:26:2d:cf:25:46:79:f4:5e:ee:
                    f7:24:7a:3b:80:fb:8c:77:62:df:a3:ab:66:d1:1d:
                    00:09:08:18:e1:aa:ac:17:ee:94:b5:f7:1b:36:fb:
                    1d:9f:c8:3f:bf:1d:d1:0f:1f:43:07:29:c9:3a:53:
                    ed:9d:33:17:7c:8a:bc:03:60:7f:0e:27:82:a8:7a:
                    38:38:16:db:ea:c3:aa:38:dd:ba:75:9a:fd:de:11:
                    43:0d:4a:84:12:2c:e6:09:52:74:2d:3f:b8:82:65:
                    52:84:b7:49:35:f6:f0:87:2e:60:d5:a8:cc:03:d2:
                    d2:f2:d6:0c:a7:93:de:d1:bd:a1:d6:4a:7a:82:d3:
                    63:aa:6f:3c:9e:09:54:62:ab:31:87:8a:41:cc:ce:
                    a0:59:46:d7:4f:ca:96:68:ad:23:79:4d:3b:0b:39:
                    78:e9:a8:0a:ba:93:fc:38:9d:f3:2d:50:d8:04:db:
                    d9:31:4f:e0:ec:04:e3:42:53:3a:5f:92:a9:01:2c:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D2:64:94:44:74:3E:71:31:0D:93:66:5A:D9:5F:E1:94:0F:A4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:3f:f8:c6:90:ab:3f:09:16:c2:79:af:60:51:fd:5c:e2:
         35:60:01:66:1f:bf:ce:bf:8c:1e:40:b8:6d:dd:a7:7b:ec:41:
         5c:1c:24:b7:ea:6b:43:7c:82:e9:54:83:d3:8d:46:01:89:5e:
         84:85:f4:af:c0:d7:92:73:f7:04:5b:cd:e7:0c:8b:c9:ee:67:
         2b:a2:b5:a4:1a:ca:19:96:2f:1d:6e:e8:01:ea:25:cc:09:48:
         0e:c0:bc:bd:4c:46:d6:1e:40:e8:8b:da:e9:06:13:28:17:aa:
         d8:3b:41:18:78:49:6f:3f:1b:34:1f:10:c2:2f:bb:b2:85:be:
         57:60:06:1e:62:90:37:35:28:a1:de:d5:97:b4:98:13:80:b6:
         25:b6:c0:d7:29:79:8b:aa:3f:5f:1c:c5:39:09:62:ec:41:46:
         7c:31:6d:e2:d5:48:73:75:8e:d3:99:66:4c:41:55:43:3c:66:
         f7:6c:f4:99:1f:c4:bb:34:68:b2:39:49:02:16:50:6f:4f:44:
         11:0b:31:71:92:6c:1d:6e:c4:44:d0:fa:d6:ac:36:43:f5:36:
         e7:ab:36:93:4d:48:15:a2:c3:f6:dc:70:74:12:82:8c:28:54:
         da:bf:94:4e:dc:5f:8f:6f:85:6b:b1:3d:2f:09:71:55:41:29:
         18:d8:7d:ab
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi7u3kKJjW9fElXKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYyMDY3MDYtYzEwOC00MGMxLThmMmQtMTRmYmJmOTJk
OTUxMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
ODFhYmI2MTctNDkwYi00YjRiLTg0MDgtMTE3ZTRhZDM5YjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvng1UAhmaZc7LJ2da63joMgQVm/pNVKfEJAp
UFMCokI5OHxIJTqI5/fL/jkeV+GPM10d86ncrFu15dcVdU85duUmLc8lRnn0Xu73
JHo7gPuMd2Lfo6tm0R0ACQgY4aqsF+6UtfcbNvsdn8g/vx3RDx9DBynJOlPtnTMX
fIq8A2B/DieCqHo4OBbb6sOqON26dZr93hFDDUqEEizmCVJ0LT+4gmVShLdJNfbw
hy5g1ajMA9LS8tYMp5Pe0b2h1kp6gtNjqm88nglUYqsxh4pBzM6gWUbXT8qWaK0j
eU07Czl46agKupP8OJ3zLVDYBNvZMU/g7ATjQlM6X5KpASy/QwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDvSZJREdD5xMQ2TZlrZX+GUD6QUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZjIw
NjcwNi1jMTA4LTQwYzEtOGYyZC0xNGZiYmY5MmQ5NTEvZmQ0YjRjYzQtODY3OC0z
ZmYzLWI1YTYtMTEwMDUxZTM1ODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmYyMDY3MDYtYzEwOC00MGMxLThm
MmQtMTRmYmJmOTJkOTUxLzZmMjA2NzA2LWMxMDgtNDBjMS04ZjJkLTE0ZmJiZjky
ZDk1MS5jcmwwHwYDVR0jBBgwFoAUG6vHwS3/L3lunEvd9i1HuF/D72swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZjIwNjcwNi1jMTA4LTQwYzEtOGYyZC0xNGZi
YmY5MmQ5NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcqwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCc+z/4xpCrPwkWwnmvYFH9XOI1YAFmH7/Ov4weQLht3ad77EFcHCS3
6mtDfILpVIPTjUYBiV6EhfSvwNeSc/cEW83nDIvJ7mcrorWkGsoZli8dbugB6iXM
CUgOwLy9TEbWHkDoi9rpBhMoF6rYO0EYeElvPxs0HxDCL7uyhb5XYAYeYpA3NSih
3tWXtJgTgLYltsDXKXmLqj9fHMU5CWLsQUZ8MW3i1UhzdY7TmWZMQVVDPGb3bPSZ
H8S7NGiyOUkCFlBvT0QRCzFxkmwdbsRE0PrWrDZD9TbnqzaTTUgVosP23HB0EoKM
KFTav5RO3F+Pb4VrsT0vCXFVQSkY2H2r
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:53:01 2025 by rpki-client