Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa
File:                     f52b129b-55ba-354b-9c3a-00936112d94e.roa (raw, json)
Hash identifier:          gUrOGffGorRLl/zBwucqfDFLtQ32MgGeNAgRGoLrR00=
Subject key identifier:   DD:83:5A:8B:EB:29:97:7D:9B:1A:4A:41:3A:CD:F7:CA:D4:5B:E2:86
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F43285848F65BDD51D5375101A57C0880
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     32482
IP address blocks:        2605:7840:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:dd:51:d5:37:51:01:a5:7c:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=d1397c02-6b87-49db-add7-4bedfd7941a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:67:38:0e:b9:a8:52:4a:0c:77:07:d6:36:
                    ea:94:10:78:df:e8:c6:4c:e0:aa:a5:bf:8a:7f:76:
                    4d:51:18:cf:73:a3:ec:1e:b2:00:b0:8c:81:26:15:
                    5e:5d:23:6e:64:c3:ce:4b:82:fe:c7:60:ad:a0:54:
                    e6:8e:ae:f5:c2:84:87:b9:32:ce:d4:88:d0:58:97:
                    bb:c4:f3:9e:3a:09:69:72:57:25:95:38:f4:2c:5a:
                    a5:f5:9e:58:bf:f1:33:72:49:66:0b:06:5a:40:80:
                    a1:ab:3d:9a:7c:32:28:f7:4b:d7:46:bd:83:b4:e0:
                    8d:c2:1c:04:a8:1d:1a:42:f3:62:06:1d:23:82:14:
                    b0:86:48:ef:37:0f:6d:17:4f:8a:65:a7:2b:46:06:
                    24:81:35:bf:89:e8:bf:f5:c6:88:37:72:f7:18:85:
                    98:e2:c4:7f:6e:df:2f:dd:2e:8d:25:93:3a:e0:a5:
                    bd:13:70:4f:40:0e:7e:b5:76:2e:c7:f8:88:68:7b:
                    e9:ba:f6:eb:07:18:cb:0d:34:5d:c9:ac:d8:b4:39:
                    e1:86:15:25:fe:48:37:7a:b8:4f:cc:01:64:4b:a4:
                    ad:2d:9a:94:1d:0a:25:3d:fe:06:6c:23:6b:95:6b:
                    89:60:c1:25:f2:31:69:78:ed:4a:7d:23:b3:55:2f:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:83:5A:8B:EB:29:97:7D:9B:1A:4A:41:3A:CD:F7:CA:D4:5B:E2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f52b129b-55ba-354b-9c3a-00936112d94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7840:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a5:87:09:4b:07:65:0e:82:aa:c6:f4:b9:dd:af:df:53:0c:
         ca:ad:29:0b:01:82:d8:3e:0e:9f:54:37:dd:64:28:ef:27:a2:
         6b:0a:d8:23:97:03:06:a9:b6:e8:4b:2b:1f:78:20:01:1f:e1:
         32:4f:fe:91:d3:87:1a:8d:2a:d3:a9:5c:3e:bc:11:23:8d:3c:
         95:65:ec:65:30:89:2c:d4:6f:b4:7e:d4:f0:f6:99:72:6d:09:
         82:a0:6c:34:df:47:b6:97:31:b7:37:7a:18:4f:2d:30:57:67:
         2e:bf:85:3b:68:f4:f2:83:ac:a1:1d:01:97:4e:39:c1:f9:d2:
         58:20:cd:70:60:6b:c8:79:ea:6d:59:7e:d5:00:be:cf:25:b7:
         9a:64:7f:f9:34:14:b3:ab:25:d0:3c:14:df:47:ca:da:b7:45:
         29:78:b2:af:bf:df:b7:8e:d0:37:78:d5:2f:de:8f:78:3c:a6:
         4d:2b:6c:b1:f8:aa:fd:90:a8:f4:c9:f1:29:45:0c:4d:99:de:
         a3:14:92:9d:cb:01:2d:8a:78:97:9f:b9:c4:92:19:de:3c:e7:
         f0:fb:20:60:0d:ac:87:75:2b:74:3e:19:2a:85:b5:57:5d:3e:
         27:ae:5d:ae:22:a2:e5:7f:d1:db:fb:ac:d7:a9:95:9a:4e:9f:
         d0:ba:11:d9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj2W91R1TdRAaV8CIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz
ODkwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
ZDEzOTdjMDItNmI4Ny00OWRiLWFkZDctNGJlZGZkNzk0MWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZlnOA65qFJKDHcH1jbqlBB43+jGTOCqpb+K
f3ZNURjPc6PsHrIAsIyBJhVeXSNuZMPOS4L+x2CtoFTmjq71woSHuTLO1IjQWJe7
xPOeOglpclcllTj0LFql9Z5Yv/EzcklmCwZaQIChqz2afDIo90vXRr2DtOCNwhwE
qB0aQvNiBh0jghSwhkjvNw9tF0+KZacrRgYkgTW/iei/9caIN3L3GIWY4sR/bt8v
3S6NJZM64KW9E3BPQA5+tXYux/iIaHvpuvbrBxjLDTRdyazYtDnhhhUl/kg3erhP
zAFkS6StLZqUHQolPf4GbCNrlWuJYMEl8jFpeO1KfSOzVS/vGQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN2DWovrKZd9mxpKQTrN98rUW+KGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl
NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvZjUyYjEyOWItNTViYS0z
NTRiLTljM2EtMDA5MzYxMTJkOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5
N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4
Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx
NjRlODM4OTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgV4QCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkKWHCUsHZQ6Cqsb0ud2v31MMyq0pCwGC2D4On1Q33WQo7yeiawrY
I5cDBqm26EsrH3ggAR/hMk/+kdOHGo0q06lcPrwRI408lWXsZTCJLNRvtH7U8PaZ
cm0JgqBsNN9Htpcxtzd6GE8tMFdnLr+FO2j08oOsoR0Bl045wfnSWCDNcGBryHnq
bVl+1QC+zyW3mmR/+TQUs6sl0DwU30fK2rdFKXiyr7/ft47QN3jVL96PeDymTSts
sfiq/ZCo9MnxKUUMTZneoxSSncsBLYp4l5+5xJIZ3jzn8PsgYA2sh3UrdD4ZKoW1
V10+J65driKi5X/R2/us16mVmk6f0LoR2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:03 2025 by rpki-client