Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa
File:                     0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa (raw, json)
Hash identifier:          bxAv/VOs2NfxC82kVdzks3qvmIs37Od5vpIf8JW7EiY=
Subject key identifier:   EB:E2:F7:DA:16:F6:19:16:47:71:5D:DC:99:45:AF:F0:B4:C8:78:43
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584943FB5139150B6EB585B93C90
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa
Signing time:             Fri 21 Mar 2025 21:19:21 +0000
ROA not before:           Fri 21 Mar 2025 21:19:21 +0000
ROA not after:            Thu 19 Jun 2025 21:19:21 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:fb:51:39:15:0b:6e:b5:85:b9:3c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Mar 21 21:19:21 2025 GMT
            Not After : Jun 19 21:19:21 2025 GMT
        Subject: CN=f87b6dd5-abb5-4a4e-8428-6aa478612d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:61:20:e2:c7:7f:87:9d:b1:b3:41:b8:b6:
                    91:f4:a1:c2:d0:46:30:4e:03:a7:24:54:ca:51:7f:
                    2d:a6:92:c6:97:b1:5c:ef:55:5c:6c:c2:ca:0a:c4:
                    a5:57:7e:b2:0f:27:69:10:90:62:d4:57:53:a8:41:
                    fb:c8:cc:34:58:57:3c:33:66:27:b3:0b:77:74:b0:
                    67:0e:4d:c8:89:94:a8:05:ed:de:36:cb:5d:b7:5f:
                    ad:27:d0:d2:d5:be:94:3c:5c:d5:e5:27:92:18:e7:
                    b6:65:92:bf:c1:e0:20:b6:e3:e7:ce:15:e2:ed:73:
                    9c:65:37:a9:8a:5b:fa:47:f2:21:90:02:69:18:9e:
                    42:1e:bd:a8:71:16:13:b9:ab:1b:7b:15:f3:26:f6:
                    2a:73:a2:46:2d:1c:7f:ec:e8:20:c8:62:f9:a3:b3:
                    e1:af:a5:4e:80:4f:85:3c:a2:eb:42:8e:a8:b4:12:
                    7c:06:c0:94:f8:3a:1e:48:05:01:1b:a9:18:60:33:
                    46:3f:94:48:f2:f6:c7:49:ec:f7:c5:4b:b0:76:39:
                    99:a1:6a:44:41:01:6c:46:49:4c:f4:07:2f:32:aa:
                    b2:6c:9f:61:70:0d:54:c5:ed:8b:af:81:ab:ec:57:
                    b7:d4:fd:bf:2d:78:0f:bb:1b:09:45:94:f1:a7:cf:
                    af:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:F7:DA:16:F6:19:16:47:71:5D:DC:99:45:AF:F0:B4:C8:78:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e1:ac:12:c8:13:05:e8:da:50:9a:b1:4d:42:8f:d7:5b:01:
         c6:fb:85:f8:99:0d:15:5c:b4:42:91:3d:c7:a5:4e:58:a4:7d:
         24:3b:12:69:a1:04:12:c2:12:6b:ee:e2:f7:3f:f6:12:21:5b:
         9d:dd:80:49:bc:73:b8:85:65:15:d7:85:fb:22:72:91:0e:d6:
         3a:e3:dd:62:1a:4e:c9:66:11:f9:07:3a:ce:0b:76:cb:38:cd:
         db:48:44:69:0c:bc:35:c5:6a:8a:51:fa:a8:92:ad:89:92:93:
         3d:14:ae:41:43:b4:74:a7:ad:96:f8:6a:46:80:2a:af:d4:ac:
         d4:93:29:77:07:12:c1:8a:5b:cd:f5:6b:20:f5:d2:f3:32:85:
         2f:84:8d:31:55:57:b0:41:c1:ea:5c:81:b9:5e:0a:a8:52:65:
         9d:d3:72:d3:c5:3b:45:65:26:3c:d5:22:16:44:8d:7c:42:d4:
         99:9b:09:f2:c0:50:ca:b8:db:ac:20:dc:c9:2d:00:2e:75:be:
         40:51:e4:eb:ad:b6:f6:bb:c9:49:56:51:a9:2f:88:29:fd:a8:
         e6:dd:ce:61:f2:87:5b:b8:3a:ea:44:47:42:cf:50:4d:8c:46:
         f3:be:61:75:31:5a:78:28:59:86:36:06:dc:7a:81:1a:f9:c9:
         61:fb:10:e9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElD+1E5FQtutYW5PJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDMyMTIxMTkyMVoXDTI1MDYxOTIxMTkyMVowLzEtMCsGA1UEAxMk
Zjg3YjZkZDUtYWJiNS00YTRlLTg0MjgtNmFhNDc4NjEyZDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAthIOLHf4edsbNBuLaR9KHC0EYwTgOnJFTK
UX8tppLGl7Fc71VcbMLKCsSlV36yDydpEJBi1FdTqEH7yMw0WFc8M2Ynswt3dLBn
Dk3IiZSoBe3eNstdt1+tJ9DS1b6UPFzV5SeSGOe2ZZK/weAgtuPnzhXi7XOcZTep
ilv6R/IhkAJpGJ5CHr2ocRYTuasbexXzJvYqc6JGLRx/7OggyGL5o7Phr6VOgE+F
PKLrQo6otBJ8BsCU+DoeSAUBG6kYYDNGP5RI8vbHSez3xUuwdjmZoWpEQQFsRklM
9AcvMqqybJ9hcA1Uxe2Lr4Gr7Fe31P2/LXgPuxsJRZTxp8+v3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOvi99oW9hkWR3Fd3JlFr/C0yHhDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMGQyZmIyODEtYzdjYi0z
MWJjLWJmZjItMjMzMmZiNGJiZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgf88BEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJThrBLIEwXo2lCasU1Cj9dbAcb7hfiZDRVctEKRPcelTlikfSQ7
EmmhBBLCEmvu4vc/9hIhW53dgEm8c7iFZRXXhfsicpEO1jrj3WIaTslmEfkHOs4L
dss4zdtIRGkMvDXFaopR+qiSrYmSkz0UrkFDtHSnrZb4akaAKq/UrNSTKXcHEsGK
W831ayD10vMyhS+EjTFVV7BBwepcgbleCqhSZZ3TctPFO0VlJjzVIhZEjXxC1Jmb
CfLAUMq426wg3MktAC51vkBR5Outtva7yUlWUakviCn9qObdzmHyh1u4OupER0LP
UE2MRvO+YXUxWngoWYY2Btx6gRr5yWH7EOk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:23 2025 by rpki-client