Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa
File:                     3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa (raw, json)
Hash identifier:          TEgZoQP3jcon6BHrpYKyPLBNfdt3D1fnjbajpk9yfAw=
Subject key identifier:   3E:B1:81:9D:C1:9F:EB:8B:49:7A:35:0D:BA:B2:0B:65:76:EB:94:1C
Certificate issuer:       /CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245
Certificate serial:       010D0C9F4328584988CF220B90FE9C7418104D00
Authority key identifier: DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     54009
IP address blocks:        2602:812:d000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:22:0b:90:fe:9c:74:18:10:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=4d036893-faf5-4b87-afe0-4b5c699c5472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:5b:df:5a:c8:41:1b:a2:09:5b:f6:f1:4f:
                    62:d4:7c:99:47:1d:45:b8:46:f7:84:88:31:bf:11:
                    1c:02:8f:36:ca:ca:29:a7:8c:d5:7a:cc:27:a4:43:
                    e0:f3:e1:b3:dc:43:dd:32:36:06:bb:2a:4b:7b:6c:
                    55:27:0d:f5:f0:1d:61:f7:f7:2f:0c:2e:42:b5:85:
                    0d:5a:64:a9:66:40:c6:5a:71:83:4a:f2:22:f5:71:
                    39:bb:33:6b:72:9e:71:78:ae:6a:bb:fa:a6:6b:5c:
                    fd:bc:d1:39:94:1a:74:61:f6:bf:6d:55:81:da:3c:
                    8b:32:d3:94:85:fc:86:8b:fc:d5:0b:d3:22:0e:dd:
                    07:fb:65:35:d9:9c:59:c6:86:fc:2e:c6:43:16:0f:
                    bb:2e:fd:91:49:1c:2a:ea:25:15:55:12:f5:3f:b5:
                    cf:f3:61:db:6e:dc:c8:e7:26:09:ae:b7:11:fa:81:
                    a6:10:4b:da:64:4e:1a:a0:11:6f:1e:16:ae:e3:c1:
                    e7:2d:d2:c9:3c:cd:a4:4d:f3:89:4a:39:00:34:4a:
                    08:84:91:3e:71:49:35:0a:aa:47:01:91:93:e4:e8:
                    4b:92:22:58:e4:5c:e6:a5:65:a4:d2:60:37:dc:c2:
                    c9:f5:3b:82:32:ef:97:af:28:4b:d0:ef:47:57:09:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B1:81:9D:C1:9F:EB:8B:49:7A:35:0D:BA:B2:0B:65:76:EB:94:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl

            X509v3 Authority Key Identifier:
                keyid:DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:d000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:61:ce:5f:13:cc:97:49:81:d4:0a:e5:f8:e8:bc:e7:f7:e7:
         a6:ea:ff:05:92:f3:9b:ad:b9:c7:6f:61:0b:7b:6d:59:b4:5e:
         d9:e4:9a:5d:4b:85:7e:47:c3:9e:f5:e8:0c:af:f4:01:4f:a9:
         25:57:74:24:30:e5:8f:51:29:c4:d7:42:f5:83:7b:25:17:2c:
         b4:4b:18:6a:95:04:f8:b9:38:4a:f8:72:d2:80:79:53:33:0d:
         94:ba:c9:dd:7b:cf:76:b4:0a:a7:b1:79:11:d7:c1:43:e1:aa:
         4a:14:78:0e:f3:ee:bb:7c:c2:7f:05:72:dc:e7:94:12:c1:72:
         fa:21:aa:b1:21:a6:da:79:e9:27:d6:60:21:54:69:a9:80:d4:
         df:a9:b0:2e:5c:96:4c:4a:80:9e:c3:6a:ba:07:c5:cf:b9:b2:
         45:c7:e1:2d:50:2a:b6:a2:36:c2:69:3b:70:da:f5:92:95:75:
         9d:9a:f6:94:db:bd:c5:27:fe:81:e1:23:37:11:62:92:0f:47:
         07:3d:ed:b9:a7:ea:d8:75:a6:62:66:ad:ec:4f:ae:68:41:ee:
         f7:c4:e4:fe:3d:73:da:e0:60:6e:dc:8a:46:07:07:ee:8a:8b:
         38:8c:aa:40:96:c1:a6:93:ee:35:5b:37:15:d6:68:4b:22:4b:
         5f:b1:66:59
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmIzyILkP6cdBgQTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTljNTA1MTQtZWViYS00YWIyLWI4ZTAtMmE2NDI3NGVi
MjQ1MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
NGQwMzY4OTMtZmFmNS00Yjg3LWFmZTAtNGI1YzY5OWM1NDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZNb31rIQRuiCVv28U9i1HyZRx1FuEb3hIgx
vxEcAo82ysopp4zVeswnpEPg8+Gz3EPdMjYGuypLe2xVJw318B1h9/cvDC5CtYUN
WmSpZkDGWnGDSvIi9XE5uzNrcp5xeK5qu/qma1z9vNE5lBp0Yfa/bVWB2jyLMtOU
hfyGi/zVC9MiDt0H+2U12ZxZxob8LsZDFg+7Lv2RSRwq6iUVVRL1P7XP82HbbtzI
5yYJrrcR+oGmEEvaZE4aoBFvHhau48HnLdLJPM2kTfOJSjkANEoIhJE+cUk1CqpH
AZGT5OhLkiJY5FzmpWWk0mA33MLJ9TuCMu+XryhL0O9HVwm/gQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD6xgZ3Bn+uLSXo1DbqyC2V265QcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWM1
MDUxNC1lZWJhLTRhYjItYjhlMC0yYTY0Mjc0ZWIyNDUvM2JmNmRiZjgtM2RjYS0z
ZmE5LWIyNWEtMTc2ZGIyYmJlYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTljNTA1MTQtZWViYS00YWIyLWI4
ZTAtMmE2NDI3NGViMjQ1L2E5YzUwNTE0LWVlYmEtNGFiMi1iOGUwLTJhNjQyNzRl
YjI0NS5jcmwwHwYDVR0jBBgwFoAU3ZYpjh1ow6GiOci11ZLDmMbBPVUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWM1MDUxNC1lZWJhLTRhYjItYjhlMC0yYTY0
Mjc0ZWIyNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIEtAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKWHOXxPMl0mB1Arl+Oi85/fnpur/BZLzm625x29hC3ttWbRe2eSa
XUuFfkfDnvXoDK/0AU+pJVd0JDDlj1EpxNdC9YN7JRcstEsYapUE+Lk4Svhy0oB5
UzMNlLrJ3XvPdrQKp7F5EdfBQ+GqShR4DvPuu3zCfwVy3OeUEsFy+iGqsSGm2nnp
J9ZgIVRpqYDU36mwLlyWTEqAnsNqugfFz7myRcfhLVAqtqI2wmk7cNr1kpV1nZr2
lNu9xSf+geEjNxFikg9HBz3tuafq2HWmYmat7E+uaEHu98Tk/j1z2uBgbtyKRgcH
7oqLOIyqQJbBppPuNVs3FdZoSyJLX7FmWQ==
-----END CERTIFICATE-----
Generated at Sun May 11 09:58:12 2025 by rpki-client