Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
File:                     439be47f-ad79-3de0-a5e7-1bb882c73b27.roa (raw, json)
Hash identifier:          Vo1Q+miq2HW09Rtqdcqz9kbzpH6g5chic0dNzHaa8Ag=
Subject key identifier:   80:E8:ED:60:90:F8:57:EC:C1:E3:57:58:7B:B3:03:C4:72:E5:EF:8F
Certificate issuer:       /CN=3d270043-5069-4b58-b6cb-4496aa37669d
Certificate serial:       010D0C9F43285849244E838BABEA7101026C0C00
Authority key identifier: CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14079
IP address blocks:        207.2.112.0/22 maxlen: 22
                          2602:fbd4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:83:8b:ab:ea:71:01:02:6c:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d270043-5069-4b58-b6cb-4496aa37669d
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=2f616e91-8636-4f7c-bab4-80acb9f09fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:66:f6:5f:ac:34:fb:32:f0:3e:5e:7d:2a:
                    8f:71:85:d7:b8:13:7c:39:30:de:b3:29:f5:80:09:
                    11:9f:3e:f6:8b:23:7a:74:d4:da:1d:bf:ac:65:77:
                    88:fc:d3:32:38:1b:1d:50:2a:18:43:79:55:ad:70:
                    d7:7d:7a:e9:4f:f9:e6:fa:4e:94:68:7c:c3:27:b2:
                    00:ab:32:e2:9e:39:05:69:29:41:52:8e:dc:9e:e4:
                    2a:a4:2a:8e:86:fe:ae:3b:fe:39:cd:2a:e9:f7:40:
                    1e:56:cc:51:a1:40:7a:46:95:68:27:38:5f:ef:c3:
                    a9:fe:b1:8c:19:76:e9:75:5e:6d:53:db:99:cd:b0:
                    e3:a0:6f:be:ff:64:a6:08:8d:96:47:c0:3e:95:c6:
                    48:ce:b0:d5:41:47:a8:aa:c1:d0:3a:b5:02:62:96:
                    20:bf:a8:eb:c3:73:98:59:ee:9b:f5:23:46:d9:3c:
                    a3:f4:96:f3:21:06:9d:c7:c6:60:b7:bc:c3:67:bd:
                    5c:e4:b1:4b:54:a6:3a:44:45:59:f9:f4:65:ba:6a:
                    16:7b:cf:a1:94:cc:9c:44:18:9a:f1:e3:e5:c0:cb:
                    e5:b1:aa:21:58:a3:2e:90:54:c4:7b:db:31:66:8d:
                    19:3a:37:1a:fb:4a:3e:47:01:9c:26:82:75:a6:a4:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:ED:60:90:F8:57:EC:C1:E3:57:58:7B:B3:03:C4:72:E5:EF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl

            X509v3 Authority Key Identifier:
                keyid:CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.112.0/22
                IPv6:
                  2602:fbd4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:e6:1e:91:76:2a:bb:33:f9:f6:ca:cb:1f:3b:10:b9:7a:
         c0:e2:a2:d1:43:35:c1:4b:e5:38:6a:4c:12:e1:36:2a:d1:35:
         b6:74:fe:66:08:3c:3e:3c:60:4a:01:be:e9:19:e0:ce:3a:7f:
         02:b8:d9:62:f2:e5:03:ad:ff:af:58:ef:06:eb:cf:ac:76:84:
         37:39:91:7e:e9:a5:ac:bc:e7:de:f6:d2:8f:f5:d3:7f:6a:c0:
         89:5c:b5:2c:0d:38:e5:53:0b:c1:60:20:80:18:14:55:cd:4d:
         80:97:3a:ed:8f:91:74:5c:ca:b1:21:f9:94:d6:bf:17:c5:62:
         53:47:c0:9a:04:ce:b7:c2:0b:62:69:f0:00:07:59:aa:53:33:
         43:19:63:60:b2:b3:d5:4e:33:74:99:db:92:52:66:5f:03:87:
         92:f8:86:b8:66:d8:65:4d:91:90:bc:85:71:82:6e:f4:17:0b:
         23:9d:41:2c:0b:58:42:38:54:cb:f0:c9:d6:97:c7:63:38:25:
         75:8d:c6:76:4b:89:f7:14:fa:4b:8c:58:60:68:cd:ab:b9:44:
         af:75:2a:3c:40:e0:d1:47:c3:b7:b1:c9:e9:37:78:81:1e:0e:
         85:41:07:8d:47:f4:6d:de:5d:73:ef:d7:6c:ac:22:f4:45:ef:
         a5:d9:9b:6a
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkkToOLq+pxAQJsDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyNzAwNDMtNTA2OS00YjU4LWI2Y2ItNDQ5NmFhMzc2
NjlkMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
MmY2MTZlOTEtODYzNi00ZjdjLWJhYjQtODBhY2I5ZjA5ZmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJtm9l+sNPsy8D5efSqPcYXXuBN8OTDesyn1
gAkRnz72iyN6dNTaHb+sZXeI/NMyOBsdUCoYQ3lVrXDXfXrpT/nm+k6UaHzDJ7IA
qzLinjkFaSlBUo7cnuQqpCqOhv6uO/45zSrp90AeVsxRoUB6RpVoJzhf78Op/rGM
GXbpdV5tU9uZzbDjoG++/2SmCI2WR8A+lcZIzrDVQUeoqsHQOrUCYpYgv6jrw3OY
We6b9SNG2Tyj9JbzIQadx8Zgt7zDZ71c5LFLVKY6REVZ+fRlumoWe8+hlMycRBia
8ePlwMvlsaohWKMukFTEe9sxZo0ZOjca+0o+RwGcJoJ1pqTefwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFIDo7WCQ+FfsweNXWHuzA8Ry5e+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDI3
MDA0My01MDY5LTRiNTgtYjZjYi00NDk2YWEzNzY2OWQvNDM5YmU0N2YtYWQ3OS0z
ZGUwLWE1ZTctMWJiODgyYzczYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2QyNzAwNDMtNTA2OS00YjU4LWI2
Y2ItNDQ5NmFhMzc2NjlkLzNkMjcwMDQzLTUwNjktNGI1OC1iNmNiLTQ0OTZhYTM3
NjY5ZC5jcmwwHwYDVR0jBBgwFoAUy1/0GqAt+h6hmbYpNwkXOg7MT8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDI3MDA0My01MDY5LTRiNTgtYjZjYi00NDk2
YWEzNzY2OWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCzwJwMA4E
AgACMAgDBgQmAvvUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqZuYekXYquzP59srLHzsQuXrA4qLRQzXB
S+U4akwS4TYq0TW2dP5mCDw+PGBKAb7pGeDOOn8CuNli8uUDrf+vWO8G68+sdoQ3
OZF+6aWsvOfe9tKP9dN/asCJXLUsDTjlUwvBYCCAGBRVzU2Alzrtj5F0XMqxIfmU
1r8XxWJTR8CaBM63wgtiafAAB1mqUzNDGWNgsrPVTjN0mduSUmZfA4eS+Ia4Zthl
TZGQvIVxgm70FwsjnUEsC1hCOFTL8MnWl8djOCV1jcZ2S4n3FPpLjFhgaM2ruUSv
dSo8QODRR8O3scnpN3iBHg6FQQeNR/Rt3l1z79dsrCL0Re+l2Ztq
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:37:37 2025 by rpki-client