Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
File:                     f3eb19d5-af1e-3d62-921a-950796610e1c.roa (raw, json)
Hash identifier:          aNpJLDLULIGRsOOa1nA+Ug3j0ZUHLtStSFvaxjsiUm0=
Subject key identifier:   D7:13:35:92:E1:0A:C5:44:85:9A:36:E6:89:66:8C:60:B7:13:48:7A
Certificate issuer:       /CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
Certificate serial:       010D0C9F43285848A9963206E2B9F11561985F00
Authority key identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     393581
IP address blocks:        2620:1fe::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:32:06:e2:b9:f1:15:61:98:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=829f902b-7070-4d4a-888e-34b3097d1a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:15:33:19:a4:5f:33:9c:38:07:05:ad:cc:
                    ba:e0:7b:18:e2:8a:dd:4f:71:ad:d9:e1:77:ba:66:
                    99:b5:c9:a7:57:32:2e:68:2e:46:46:3f:ea:db:08:
                    6c:57:e0:57:a2:46:95:80:8c:0c:f4:a9:4c:32:c4:
                    d4:82:ae:b3:d6:59:65:cd:04:b0:2c:7a:e5:de:7e:
                    95:c6:b8:3d:07:a1:d8:d5:e4:2a:59:bb:2a:a1:95:
                    5d:a7:cf:4b:bf:cc:fd:11:09:95:56:72:23:25:ad:
                    29:58:20:76:4e:8b:96:ba:c9:45:70:bd:76:b1:1b:
                    cc:68:60:1f:f8:c0:a1:8b:01:29:fd:c6:32:39:e3:
                    86:e3:d3:61:e3:a4:8c:d5:a9:0d:47:97:0e:c3:ee:
                    59:9b:af:54:cc:e0:77:fe:e0:41:29:cb:dc:e1:a6:
                    13:4b:95:33:ae:17:72:f4:d4:6e:aa:6b:5b:f7:ba:
                    db:50:a9:44:d5:e2:2b:a1:ac:80:fe:fa:34:de:a0:
                    20:ea:2a:4d:fb:f8:0d:57:b2:9b:d5:6e:5a:fd:a2:
                    e7:13:fe:6c:a4:ae:91:38:72:a6:bf:bb:6e:74:cd:
                    b7:e5:30:e0:d6:64:f2:30:fb:52:bc:3f:40:94:58:
                    7d:94:72:57:d7:de:a6:a8:21:8e:38:71:6d:ac:bd:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:35:92:E1:0A:C5:44:85:9A:36:E6:89:66:8C:60:B7:13:48:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl

            X509v3 Authority Key Identifier:
                keyid:CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1fe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:b6:90:4e:bc:79:2f:97:0c:0b:d8:dd:fc:be:a2:4a:48:
         9e:15:ff:d5:03:4d:da:73:a9:22:19:99:28:4f:d9:de:ae:5c:
         c4:cd:65:e6:8e:8f:d2:9d:15:36:2a:52:81:8d:35:68:b0:93:
         25:c4:e0:6a:35:38:5c:31:47:76:3c:43:f7:9b:8f:c3:d3:aa:
         4b:06:54:42:98:b5:c7:d2:01:c8:3e:6c:a1:5d:0c:d7:fd:fb:
         8d:de:a9:5b:9d:fc:06:25:fa:9d:39:fa:d6:a5:b5:56:5f:31:
         7c:1c:81:37:e9:f9:67:b2:ae:80:73:55:e9:36:49:01:27:fe:
         75:b7:68:a0:03:6d:55:e9:20:d3:43:2a:88:0d:3b:c9:67:2b:
         51:3a:e1:17:77:c4:77:9e:85:fa:e9:d3:b4:7d:93:ca:8b:a5:
         b1:07:52:64:fb:ed:46:0a:a7:7b:55:c2:cd:52:a8:15:d1:ca:
         b3:d2:33:fc:84:8a:aa:bd:d0:51:e6:6b:3c:ee:fa:1a:be:c1:
         16:88:ab:de:8d:69:57:f4:e2:e4:33:60:55:ad:26:b9:50:87:
         47:d6:49:79:86:73:fc:1c:ef:e7:9e:63:14:10:d1:e9:fe:b9:
         1e:c7:3c:01:4b:f8:d6:b5:7d:31:ce:77:03:74:8d:8e:e7:26:
         2d:ad:81:85
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEipljIG4rnxFWGYXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI2NmZjNWUtOGEwNS00ODg1LThlMTgtMjMzMGE4M2Zj
NWY2MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODI5ZjkwMmItNzA3MC00ZDRhLTg4OGUtMzRiMzA5N2QxYTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaEVMxmkXzOcOAcFrcy64HsY4ordT3Gt2eF3
umaZtcmnVzIuaC5GRj/q2whsV+BXokaVgIwM9KlMMsTUgq6z1lllzQSwLHrl3n6V
xrg9B6HY1eQqWbsqoZVdp89Lv8z9EQmVVnIjJa0pWCB2TouWuslFcL12sRvMaGAf
+MChiwEp/cYyOeOG49Nh46SM1akNR5cOw+5Zm69UzOB3/uBBKcvc4aYTS5Uzrhdy
9NRuqmtb97rbUKlE1eIroayA/vo03qAg6ipN+/gNV7Kb1W5a/aLnE/5spK6ROHKm
v7tudM235TDg1mTyMPtSvD9AlFh9lHJX196mqCGOOHFtrL38pwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNcTNZLhCsVEhZo25olmjGC3E0h6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjY2
ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMwYTgzZmM1ZjYvZjNlYjE5ZDUtYWYxZS0z
ZDYyLTkyMWEtOTUwNzk2NjEwZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI2NmZjNWUtOGEwNS00ODg1LThl
MTgtMjMzMGE4M2ZjNWY2L2MyNjZmYzVlLThhMDUtNDg4NS04ZTE4LTIzMzBhODNm
YzVmNi5jcmwwHwYDVR0jBBgwFoAUzRYZ3WaZijnk/E6xJCuix2NyByowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jMjY2ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMw
YTgzZmM1ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiAB/gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAceu2kE68eS+XDAvY3fy+okpInhX/1QNN2nOpIhmZKE/Z3q5cxM1l
5o6P0p0VNipSgY01aLCTJcTgajU4XDFHdjxD95uPw9OqSwZUQpi1x9IByD5soV0M
1/37jd6pW538BiX6nTn61qW1Vl8xfByBN+n5Z7KugHNV6TZJASf+dbdooANtVekg
00MqiA07yWcrUTrhF3fEd56F+unTtH2TyoulsQdSZPvtRgqne1XCzVKoFdHKs9Iz
/ISKqr3QUeZrPO76Gr7BFoir3o1pV/Ti5DNgVa0muVCHR9ZJeYZz/Bzv555jFBDR
6f65Hsc8AUv41rV9Mc53A3SNjucmLa2BhQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:54:28 2025 by rpki-client