Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f138934c-05bf-3475-8ed5-d1ae32ff4fed.roa
File:                     f138934c-05bf-3475-8ed5-d1ae32ff4fed.roa (raw, json)
Hash identifier:          8kqcIR6S5X7/7j+chRombc/Hu+VeOpHK3qaU1Ti5gB8=
Subject key identifier:   7F:DD:11:DF:06:57:F3:25:26:1A:1A:7B:5A:F0:D4:2F:D5:05:D5:AF
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F432858486695B47C4F678AACAEB7AA00
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f138934c-05bf-3475-8ed5-d1ae32ff4fed.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     399196
IP address blocks:        2604:4d40:7000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:b4:7c:4f:67:8a:ac:ae:b7:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=a2a9d93f-9884-43a4-b8f7-5808c344e06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:b3:78:7e:d7:bf:67:79:25:65:39:8a:94:
                    e9:cc:05:0f:48:35:8e:84:80:58:94:6d:1a:a6:93:
                    07:a8:f8:f6:b9:bc:e9:6a:ad:6d:61:c6:42:ad:44:
                    0f:c7:ff:83:87:10:90:11:89:61:05:a5:9c:f0:97:
                    f6:b7:8d:13:ee:af:b9:a3:7d:b5:e3:6a:99:16:83:
                    6a:05:7e:dd:42:62:cf:e3:55:a3:6f:cb:31:1c:8c:
                    32:62:fb:7c:7a:8e:f6:c5:3d:1b:6a:f8:24:65:cb:
                    65:b4:70:85:d1:19:52:07:a8:39:07:47:74:8c:84:
                    c8:f3:ab:40:fd:5a:c1:98:94:b3:2c:62:d6:6d:24:
                    2e:2a:87:f7:e7:1d:7c:d1:c2:68:97:f1:75:5b:c7:
                    a6:77:4b:cb:54:48:29:85:13:b2:ab:0e:d9:bb:c7:
                    d8:f9:71:bc:cb:2c:77:59:db:3b:67:eb:a8:22:df:
                    5c:9a:3c:7f:86:12:5b:5d:2a:5d:48:9b:e2:17:52:
                    0e:f9:fc:15:26:11:85:a2:69:aa:83:7b:3f:9d:da:
                    12:c9:45:de:03:c8:21:77:91:99:dc:f2:26:95:b6:
                    6d:e6:de:d7:91:73:11:3d:49:1b:97:31:ee:5e:59:
                    8b:68:ca:cf:75:e0:17:d7:9a:55:68:80:5c:ba:a5:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DD:11:DF:06:57:F3:25:26:1A:1A:7B:5A:F0:D4:2F:D5:05:D5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f138934c-05bf-3475-8ed5-d1ae32ff4fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4d40:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a2:df:73:93:80:aa:4e:73:a4:09:ae:b6:a8:07:2a:3f:00:
         af:e6:3f:d8:b1:08:a5:81:79:19:7a:19:10:39:ad:cf:c3:b1:
         13:9b:52:dc:b5:e3:75:75:21:76:78:3e:7c:5e:eb:60:3b:c7:
         99:05:eb:bc:1a:4a:a9:9d:20:5b:ac:4f:31:56:3f:fe:9b:a8:
         cd:e3:c8:9d:00:04:31:70:84:09:b1:39:cd:3d:b8:27:9f:f8:
         ae:e1:f6:85:d5:33:1f:ba:29:c5:2b:34:95:28:15:89:24:11:
         46:16:01:9c:4c:5f:85:6e:8c:5e:d9:81:bf:e6:d0:8d:80:b7:
         b5:44:76:3e:05:ab:c8:57:e6:b6:25:eb:fa:e0:6f:e0:cb:3c:
         56:c7:41:9d:a3:25:d5:55:e5:ff:1b:48:bb:c2:de:38:77:47:
         84:60:24:17:35:ce:5e:f4:c7:b7:8b:b8:d3:b3:89:46:8b:20:
         1c:f6:03:c7:46:60:6b:cf:90:83:83:b1:62:e9:c3:9d:85:93:
         d5:ba:a3:bd:0f:1d:95:ad:2d:da:74:36:90:b9:f7:18:82:96:
         82:44:30:9e:71:40:83:7d:7c:a2:de:e6:43:0a:b4:05:36:1a:
         6f:29:15:54:9c:33:ee:d0:4a:60:c0:91:bb:a1:97:42:49:72:
         2f:d6:58:a6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhmlbR8T2eKrK63qgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YTJhOWQ5M2YtOTg4NC00M2E0LWI4ZjctNTgwOGMzNDRlMDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpCzeH7Xv2d5JWU5ipTpzAUPSDWOhIBYlG0a
ppMHqPj2ubzpaq1tYcZCrUQPx/+DhxCQEYlhBaWc8Jf2t40T7q+5o32142qZFoNq
BX7dQmLP41Wjb8sxHIwyYvt8eo72xT0bavgkZctltHCF0RlSB6g5B0d0jITI86tA
/VrBmJSzLGLWbSQuKof35x180cJol/F1W8emd0vLVEgphROyqw7Zu8fY+XG8yyx3
Wds7Z+uoIt9cmjx/hhJbXSpdSJviF1IO+fwVJhGFommqg3s/ndoSyUXeA8ghd5GZ
3PImlbZt5t7XkXMRPUkblzHuXlmLaMrPdeAX15pVaIBcuqUdbwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH/dEd8GV/MlJhoae1rw1C/VBdWvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZjEzODkzNGMtMDViZi0z
NDc1LThlZDUtZDFhZTMyZmY0ZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRNQHAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAC6Lfc5OAqk5zpAmutqgHKj8Ar+Y/2LEIpYF5GXoZEDmtz8OxE5tS
3LXjdXUhdng+fF7rYDvHmQXrvBpKqZ0gW6xPMVY//puozePInQAEMXCECbE5zT24
J5/4ruH2hdUzH7opxSs0lSgViSQRRhYBnExfhW6MXtmBv+bQjYC3tUR2PgWryFfm
tiXr+uBv4Ms8VsdBnaMl1VXl/xtIu8LeOHdHhGAkFzXOXvTHt4u407OJRosgHPYD
x0Zga8+Qg4OxYunDnYWT1bqjvQ8dla0t2nQ2kLn3GIKWgkQwnnFAg318ot7mQwq0
BTYabykVVJwz7tBKYMCRu6GXQklyL9ZYpg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:59:07 2025 by rpki-client