Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd823fc1-82b5-3983-91b2-10333dc15e0f.roa
File:                     dd823fc1-82b5-3983-91b2-10333dc15e0f.roa (raw, json)
Hash identifier:          mJND7pqNvVA3dXoGUZeVqwQIoPz73FvJdkHpTMEXx/g=
Subject key identifier:   E9:A0:A6:A0:DB:21:5D:25:CC:23:4A:5D:71:68:C8:C7:90:B7:DD:5A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858491246FEB729013F40516D7D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd823fc1-82b5-3983-91b2-10333dc15e0f.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397232
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:fe:b7:29:01:3f:40:51:6d:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=4f4821c5-82f0-4b31-b9c8-bd824e616653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:20:6c:c8:e0:31:bb:41:a3:f5:74:34:13:
                    f2:f1:16:99:44:a9:5b:20:d5:e8:af:62:a9:eb:ee:
                    97:a0:3f:df:7d:ae:b0:5c:fb:c2:8f:b9:d3:59:03:
                    1f:61:c5:02:8b:1f:24:11:5a:0d:e1:b9:22:43:82:
                    d6:64:00:22:c3:d7:61:e1:9e:73:6e:e9:2c:9c:26:
                    1a:cf:15:04:aa:c1:b7:41:53:44:7e:30:58:fd:8b:
                    df:d8:0c:65:ec:79:71:db:55:de:73:3b:94:a1:11:
                    da:97:09:84:b6:6a:9c:d7:d5:73:8f:7e:8b:ba:53:
                    c6:f1:cf:4c:25:1b:02:08:61:12:05:9e:b9:db:45:
                    68:50:95:7a:2a:f1:61:d4:1d:7d:19:65:7e:57:7a:
                    58:7c:d5:ac:64:03:c5:ef:77:b8:8b:8b:a5:17:25:
                    58:d2:5d:c6:9f:5c:60:cb:19:33:2b:92:e3:65:eb:
                    1e:7e:76:31:98:8b:c2:1c:c5:ab:12:eb:e1:eb:62:
                    95:27:2d:a9:de:1d:2c:50:51:5b:6b:b7:7e:19:ec:
                    0d:45:e1:57:ff:eb:49:c3:3f:36:0e:16:fb:5b:d1:
                    1c:2c:de:7c:64:6e:a3:7e:d9:48:81:25:dd:9e:e5:
                    46:de:6e:11:90:0d:01:b2:49:63:63:24:39:4e:25:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A0:A6:A0:DB:21:5D:25:CC:23:4A:5D:71:68:C8:C7:90:B7:DD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dd823fc1-82b5-3983-91b2-10333dc15e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:46:e4:46:a8:2a:0c:1f:6f:4e:22:d1:bd:57:fa:f4:98:2d:
         65:cd:af:86:49:00:7e:5c:8d:c9:48:da:27:13:ee:f5:06:87:
         c1:5e:25:df:38:21:c0:32:ee:29:f4:f1:53:dc:40:ea:48:6b:
         78:ea:60:b7:a5:ce:49:35:31:55:62:95:1d:31:d5:fc:d0:fd:
         c6:97:7b:d9:fc:17:b4:98:35:be:08:93:98:00:dd:f0:6e:81:
         59:ef:b6:56:2e:34:7a:e2:01:3e:cb:51:8c:1a:6d:3f:ce:4c:
         0b:9f:20:76:61:41:8c:98:87:aa:3c:1f:e1:c0:b8:9a:d0:59:
         9a:dc:d0:28:6b:3d:11:60:f9:9d:b0:61:fd:9f:ac:a6:8f:e8:
         d3:47:42:2f:a1:39:b0:d9:23:5b:d9:b6:a6:60:5d:e0:6a:f5:
         cf:93:6e:fa:38:0d:a5:c3:86:5d:34:d6:da:ca:c5:c2:5c:85:
         76:82:48:99:bf:2c:d6:79:89:0e:0c:6e:f4:e9:22:cb:48:d7:
         20:0a:0b:40:9b:0a:5b:37:78:1d:f4:fd:a4:c8:9a:71:fe:a2:
         24:52:02:ee:f7:23:6b:27:17:74:24:0d:60:1e:cf:05:2a:30:
         11:82:c7:ed:9b:4d:bb:f7:69:c8:ca:be:68:1d:98:ed:24:49:
         5c:55:20:4f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkSRv63KQE/QFFtfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NGY0ODIxYzUtODJmMC00YjMxLWI5YzgtYmQ4MjRlNjE2NjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXUgbMjgMbtBo/V0NBPy8RaZRKlbINXor2Kp
6+6XoD/ffa6wXPvCj7nTWQMfYcUCix8kEVoN4bkiQ4LWZAAiw9dh4Z5zbuksnCYa
zxUEqsG3QVNEfjBY/Yvf2Axl7Hlx21XeczuUoRHalwmEtmqc19Vzj36LulPG8c9M
JRsCCGESBZ6520VoUJV6KvFh1B19GWV+V3pYfNWsZAPF73e4i4ulFyVY0l3Gn1xg
yxkzK5LjZesefnYxmIvCHMWrEuvh62KVJy2p3h0sUFFba7d+GewNReFX/+tJwz82
Dhb7W9EcLN58ZG6jftlIgSXdnuVG3m4RkA0BskljYyQ5TiW4zwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOmgpqDbIV0lzCNKXXFoyMeQt91aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGQ4MjNmYzEtODJiNS0z
OTgzLTkxYjItMTAzMzNkYzE1ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAf0bkRqgqDB9vTiLRvVf69JgtZc2vhkkAflyNyUjaJxPu9QaHwV4l
3zghwDLuKfTxU9xA6khreOpgt6XOSTUxVWKVHTHV/ND9xpd72fwXtJg1vgiTmADd
8G6BWe+2Vi40euIBPstRjBptP85MC58gdmFBjJiHqjwf4cC4mtBZmtzQKGs9EWD5
nbBh/Z+spo/o00dCL6E5sNkjW9m2pmBd4Gr1z5Nu+jgNpcOGXTTW2srFwlyFdoJI
mb8s1nmJDgxu9Okiy0jXIAoLQJsKWzd4HfT9pMiacf6iJFIC7vcjaycXdCQNYB7P
BSowEYLH7ZtNu/dpyMq+aB2Y7SRJXFUgTw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 07:55:06 2025 by rpki-client