Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa
File:                     8aefadba-6c2b-364a-882a-231170fd640d.roa (raw, json)
Hash identifier:          w4YWCzWkDcgdAub9W1As6uXUSNdeKWiOIMcBVBxdX+Q=
Subject key identifier:   40:66:0F:AC:0E:3D:3C:5C:39:A6:94:62:30:3C:AF:29:8B:E9:65:0E
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F4328584898D6091ED4CE273B98809980
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     26679
IP address blocks:        2620:112:e000::/44 maxlen: 44
                          2620:112:e000::/48 maxlen: 48
                          2620:112:e001::/48 maxlen: 48
                          2620:112:e002::/48 maxlen: 48
                          2620:112:e003::/48 maxlen: 48
                          2620:112:e004::/48 maxlen: 48
                          2620:112:e005::/48 maxlen: 48
                          2620:112:e006::/48 maxlen: 48
                          2620:112:e007::/48 maxlen: 48
                          2620:112:e008::/48 maxlen: 48
                          2620:112:e009::/48 maxlen: 48
                          2620:112:e00a::/48 maxlen: 48
                          2620:112:e00b::/48 maxlen: 48
                          2620:112:e00c::/48 maxlen: 48
                          2620:112:e00d::/48 maxlen: 48
                          2620:112:e00e::/48 maxlen: 48
                          2620:112:e00f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:09:1e:d4:ce:27:3b:98:80:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=7212589c-0db3-4279-a527-08163e1346e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:b5:cc:09:2a:e7:ce:5a:bd:f0:82:c5:8a:
                    f7:50:71:5d:68:d1:bc:e6:bb:6b:21:07:ae:5f:42:
                    7c:97:f2:1c:4a:23:ea:ca:43:7f:08:5c:d3:60:f2:
                    ce:47:6c:2b:0f:42:a0:10:ee:4e:40:73:ea:a1:62:
                    38:1b:d8:00:da:5c:65:6b:04:cf:4e:ce:1e:24:a6:
                    a1:38:a8:bc:0b:11:66:9c:01:57:8d:0d:90:5b:ad:
                    9d:11:3a:8b:4b:cf:fb:d9:0d:01:0c:5f:76:3e:43:
                    64:b4:17:e5:c2:c3:0a:1a:7a:c6:55:2f:99:00:1e:
                    b4:fa:62:6f:36:60:ab:41:f2:cc:37:55:a9:51:e7:
                    8d:2f:af:dc:33:21:07:7d:51:42:0e:d7:a3:eb:ab:
                    5c:1d:a1:2b:41:fe:55:24:0d:57:e6:c3:0f:b5:e8:
                    4e:11:9a:ce:b0:65:57:ab:2a:b7:fb:cc:6f:dd:6b:
                    ea:14:3d:70:fe:40:d4:db:eb:0f:fc:d6:44:21:1b:
                    81:33:29:84:d6:cc:15:b0:60:16:64:2e:81:5a:06:
                    3e:9d:ff:6a:7c:ce:cb:8b:70:95:60:fb:55:bf:57:
                    b2:1d:94:64:3b:8a:25:8c:88:5a:81:be:58:94:01:
                    c1:88:28:c0:c0:ef:2d:27:71:70:9b:dd:de:b5:f8:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:66:0F:AC:0E:3D:3C:5C:39:A6:94:62:30:3C:AF:29:8B:E9:65:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:112:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a0:f3:0f:e1:62:59:11:49:77:1b:83:bb:2a:4c:7e:7b:78:
         6f:79:04:18:e4:6e:01:e2:55:e2:ce:b0:5a:a7:33:d3:a0:e4:
         39:5e:a7:36:fd:f5:95:b0:b2:b6:e0:d4:57:ae:57:3e:27:bd:
         1c:d3:3b:8d:e5:6d:a1:3f:f4:40:7b:c0:35:4f:f7:57:1e:36:
         c9:18:9a:9f:76:e9:ac:88:8f:b7:ea:20:45:72:2b:0a:af:a2:
         af:82:ef:b9:86:d5:19:9e:e8:01:e0:37:0b:39:84:3d:1d:f0:
         95:b0:49:c5:a4:db:f7:6c:4a:26:f4:fe:3d:04:17:86:05:62:
         a1:4d:4c:73:95:13:4f:90:97:2c:09:26:be:56:1e:f9:08:44:
         76:69:1f:b5:99:49:a8:25:d8:ca:ea:37:2f:cd:c7:89:48:12:
         35:e6:6c:c4:46:c2:67:71:ad:0a:ef:de:55:f9:37:85:02:5d:
         25:22:40:7d:a3:33:fe:d6:d3:90:75:27:52:b2:48:ec:a3:eb:
         d8:a6:d6:41:65:f9:ac:10:96:bc:70:7e:1d:24:8d:2e:0c:16:
         ab:37:fd:1c:2e:82:ab:23:bf:6e:4c:26:ef:04:53:b5:27:a4:
         bb:bd:8e:ae:2f:82:0f:be:7f:c3:d2:08:92:43:32:98:30:75:
         08:27:a2:f0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiY1gke1M4nO5iAmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY5NDQ2ZGItNmEyZS00N2JjLWEzM2ItMmRkODgzYmZi
ODk5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzIxMjU4OWMtMGRiMy00Mjc5LWE1MjctMDgxNjNlMTM0NmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSW1zAkq585avfCCxYr3UHFdaNG85rtrIQeu
X0J8l/IcSiPqykN/CFzTYPLOR2wrD0KgEO5OQHPqoWI4G9gA2lxlawTPTs4eJKah
OKi8CxFmnAFXjQ2QW62dETqLS8/72Q0BDF92PkNktBflwsMKGnrGVS+ZAB60+mJv
NmCrQfLMN1WpUeeNL6/cMyEHfVFCDtej66tcHaErQf5VJA1X5sMPtehOEZrOsGVX
qyq3+8xv3WvqFD1w/kDU2+sP/NZEIRuBMymE1swVsGAWZC6BWgY+nf9qfM7Li3CV
YPtVv1eyHZRkO4oljIhagb5YlAHBiCjAwO8tJ3Fwm93etfhuRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEBmD6wOPTxcOaaUYjA8rymL6WUOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0
NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4ODNiZmI4OTkvOGFlZmFkYmEtNmMyYi0z
NjRhLTg4MmEtMjMxMTcwZmQ2NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY5NDQ2ZGItNmEyZS00N2JjLWEz
M2ItMmRkODgzYmZiODk5Lzk2OTQ0NmRiLTZhMmUtNDdiYy1hMzNiLTJkZDg4M2Jm
Yjg5OS5jcmwwHwYDVR0jBBgwFoAUjExRRRuXGOwp9mXrg3Mn44TCANcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85Njk0NDZkYi02YTJlLTQ3YmMtYTMzYi0yZGQ4
ODNiZmI4OTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABEuAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGqg8w/hYlkRSXcbg7sqTH57eG95BBjkbgHiVeLOsFqnM9Og5Dle
pzb99ZWwsrbg1FeuVz4nvRzTO43lbaE/9EB7wDVP91ceNskYmp926ayIj7fqIEVy
Kwqvoq+C77mG1Rme6AHgNws5hD0d8JWwScWk2/dsSib0/j0EF4YFYqFNTHOVE0+Q
lywJJr5WHvkIRHZpH7WZSagl2MrqNy/Nx4lIEjXmbMRGwmdxrQrv3lX5N4UCXSUi
QH2jM/7W05B1J1KySOyj69im1kFl+awQlrxwfh0kjS4MFqs3/Rwugqsjv25MJu8E
U7UnpLu9jq4vgg++f8PSCJJDMpgwdQgnovA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:54:37 2025 by rpki-client