Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/3139829a-5e22-379a-8ff7-d4b23faacffe.roa
File:                     3139829a-5e22-379a-8ff7-d4b23faacffe.roa (raw, json)
Hash identifier:          chBuWQslr7couNL4BYK2LAYofvuJIMJKEBv0ZZzT/+o=
Subject key identifier:   40:69:7E:18:68:B2:17:BE:57:84:0B:D2:FD:AF:22:71:2A:D7:1A:73
Certificate issuer:       /CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Certificate serial:       010D0C9F43285849CBCF8C90F3CC5ABE00CE49C0
Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/3139829a-5e22-379a-8ff7-d4b23faacffe.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14630
IP address blocks:        2620:12e:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8c:90:f3:cc:5a:be:00:ce:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=8af6dfba-e2df-420d-860e-e8f6c197fc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:a9:6c:00:1a:78:15:f4:af:27:6b:cc:10:
                    3b:fb:7a:fd:3c:69:65:1c:15:24:8e:ca:e0:f5:ed:
                    ea:d6:04:4e:22:3c:ea:cc:5b:c3:67:ea:12:ee:4f:
                    15:53:fb:76:97:46:ee:0b:da:d4:bf:86:2b:df:7c:
                    f1:e8:85:50:54:e4:cc:9a:f6:0d:2c:57:ea:bf:cf:
                    8d:fb:8e:87:10:f7:2d:7a:93:40:38:17:43:bd:bf:
                    ad:73:69:20:cb:94:4a:b9:5b:c7:d6:f4:1f:21:15:
                    78:4c:07:35:61:64:61:a3:47:14:fd:ec:73:39:c5:
                    b9:58:96:43:18:0c:ab:61:26:d6:13:fa:e1:62:15:
                    47:14:fc:6c:10:82:48:a8:da:10:5d:71:8d:c5:4e:
                    8c:da:b0:62:2f:42:33:f3:00:f3:7d:8f:da:d0:a8:
                    77:20:4f:4f:9e:5a:e7:9e:f4:fa:eb:d5:8f:cb:2e:
                    18:72:30:57:c4:5a:ea:0b:80:09:ac:ad:0a:a1:45:
                    5e:d8:86:96:c9:22:9e:a3:92:d6:35:ac:cd:5d:59:
                    1c:a9:5f:f5:48:21:73:cb:c8:50:ac:91:29:69:cc:
                    33:9f:d1:cc:b2:3a:90:25:c1:02:19:67:d4:b8:bf:
                    04:bc:58:e2:30:b3:6b:89:36:42:0d:46:1d:5e:0b:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:7E:18:68:B2:17:BE:57:84:0B:D2:FD:AF:22:71:2A:D7:1A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/3139829a-5e22-379a-8ff7-d4b23faacffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl

            X509v3 Authority Key Identifier:
                keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12e:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:45:5d:ae:09:19:f9:93:2b:18:96:32:ee:c7:a9:9b:d7:c4:
         44:07:2f:0d:c2:bc:64:ad:a8:ce:f7:12:ce:fb:5a:f2:fe:f0:
         cf:6f:fb:32:47:07:6d:c5:cc:75:b7:d2:7c:f4:74:1e:ea:33:
         e5:8b:b5:68:a8:08:3a:75:e2:93:31:26:fd:8e:da:53:4a:dc:
         2d:f5:21:59:6f:e4:ac:74:d2:80:3a:ab:4e:2a:09:e2:e3:9d:
         cc:59:03:2f:48:20:fb:bc:e1:e1:06:33:45:62:a2:f5:3f:f4:
         bb:91:3a:7c:ae:b4:19:6f:81:04:d9:ee:23:8b:18:d6:37:06:
         a9:04:95:15:d5:3f:e0:9a:21:73:19:27:fb:14:70:bc:21:01:
         b5:14:a4:86:88:56:67:fe:43:d4:e6:09:d8:01:c3:0c:6f:88:
         ac:76:cc:fc:f3:5e:6c:a1:36:2b:a6:03:3b:6f:d0:e4:74:af:
         af:d3:8d:01:1a:2f:56:fa:42:ec:9f:f2:15:02:b1:e9:1a:92:
         0a:47:25:89:e5:e1:56:bf:a0:ef:bb:65:3a:4b:c9:c2:4c:a3:
         9d:5c:34:96:35:f8:56:ac:45:5a:4c:58:0f:6c:b0:3e:c1:0c:
         98:62:f3:b8:d2:40:6b:38:80:58:24:d7:65:9c:a4:94:d6:eb:
         e0:eb:a7:27
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnLz4yQ88xavgDOScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE5ZDVmMjAtMjM2Ny00NTdiLTk3MGItN2YxYzFhNjBm
Y2FlMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
OGFmNmRmYmEtZTJkZi00MjBkLTg2MGUtZThmNmMxOTdmYzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS2pbAAaeBX0rydrzBA7+3r9PGllHBUkjsrg
9e3q1gROIjzqzFvDZ+oS7k8VU/t2l0buC9rUv4Yr33zx6IVQVOTMmvYNLFfqv8+N
+46HEPctepNAOBdDvb+tc2kgy5RKuVvH1vQfIRV4TAc1YWRho0cU/exzOcW5WJZD
GAyrYSbWE/rhYhVHFPxsEIJIqNoQXXGNxU6M2rBiL0Iz8wDzfY/a0Kh3IE9Pnlrn
nvT669WPyy4YcjBXxFrqC4AJrK0KoUVe2IaWySKeo5LWNazNXVkcqV/1SCFzy8hQ
rJEpacwzn9HMsjqQJcECGWfUuL8EvFjiMLNriTZCDUYdXguKCwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEBpfhhoshe+V4QL0v2vInEq1xpzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlk
NWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFjMWE2MGZjYWUvMzEzOTgyOWEtNWUyMi0z
NzlhLThmZjctZDRiMjNmYWFjZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzE5ZDVmMjAtMjM2Ny00NTdiLTk3
MGItN2YxYzFhNjBmY2FlLzMxOWQ1ZjIwLTIzNjctNDU3Yi05NzBiLTdmMWMxYTYw
ZmNhZS5jcmwwHwYDVR0jBBgwFoAUnFErFXqHY+TuXE7m8ya3OGcc4kswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlkNWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFj
MWE2MGZjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABLuAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaEVdrgkZ+ZMrGJYy7sepm9fERAcvDcK8ZK2ozvcSzvta8v7wz2/7
MkcHbcXMdbfSfPR0Huoz5Yu1aKgIOnXikzEm/Y7aU0rcLfUhWW/krHTSgDqrTioJ
4uOdzFkDL0gg+7zh4QYzRWKi9T/0u5E6fK60GW+BBNnuI4sY1jcGqQSVFdU/4Joh
cxkn+xRwvCEBtRSkhohWZ/5D1OYJ2AHDDG+IrHbM/PNebKE2K6YDO2/Q5HSvr9ON
ARovVvpC7J/yFQKx6RqSCkclieXhVr+g77tlOkvJwkyjnVw0ljX4VqxFWkxYD2yw
PsEMmGLzuNJAaziAWCTXZZyklNbr4OunJw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:21 2025 by rpki-client