Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/542b12ed-e8f9-37f8-9197-c17a8eca5bf5.roa
File:                     542b12ed-e8f9-37f8-9197-c17a8eca5bf5.roa (raw, json)
Hash identifier:          8EXZq2DHmRzhNlYd+7ux0ascFjjHNWB7gkwO1IpSg9s=
Subject key identifier:   35:86:3C:BE:13:DF:41:DE:08:BB:49:23:0B:77:C0:23:E9:6E:29:E6
Certificate issuer:       /CN=405ae070-e9e9-4d3c-b449-868426ff2303
Certificate serial:       010D0C9F43285849CBCF8D2C872E0BD82D00BB20
Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/542b12ed-e8f9-37f8-9197-c17a8eca5bf5.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     15296
IP address blocks:        2605:fd00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8d:2c:87:2e:0b:d8:2d:00:bb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=c0f2d836-957b-436b-87e1-cfa3405c3cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:71:ab:06:c6:0a:41:33:14:ca:9d:9b:0b:
                    74:c8:08:69:26:86:e1:38:f1:51:de:05:be:a7:f4:
                    5d:32:f5:4e:95:8a:11:a5:58:30:b8:03:6d:aa:c3:
                    a4:85:52:cd:7b:79:4d:5c:8b:46:66:c9:50:05:d7:
                    26:6c:4d:69:db:83:54:94:81:da:03:54:13:e4:e2:
                    3c:c2:93:67:f3:cc:8a:f3:e0:6a:f9:1f:fd:f2:d6:
                    0e:7a:2c:65:e1:19:ca:28:64:c4:fb:84:70:64:60:
                    ce:25:58:45:6e:2c:04:a5:b8:1f:35:fc:a5:70:b8:
                    f7:23:f7:e9:00:90:d5:a4:8d:ae:f8:a5:e1:9e:68:
                    40:d9:10:7e:52:7d:17:ba:90:11:e1:c6:84:cc:29:
                    6e:bb:f2:67:f4:6f:f6:27:9a:30:38:36:cc:d7:bf:
                    2e:29:70:24:27:3e:1a:ac:a6:62:5a:1b:59:68:bf:
                    7c:99:c6:33:27:e1:db:1d:a5:f1:fd:31:c7:1c:16:
                    1a:89:97:41:74:a3:92:04:60:e1:0f:67:dd:4e:e9:
                    76:1e:87:18:86:19:32:61:9d:60:35:0a:92:9b:74:
                    29:79:15:86:f7:fa:58:7e:37:d4:13:d1:f5:2b:00:
                    95:0e:6c:95:8f:9f:b8:e2:84:4d:53:3f:7b:59:d6:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:86:3C:BE:13:DF:41:DE:08:BB:49:23:0B:77:C0:23:E9:6E:29:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/542b12ed-e8f9-37f8-9197-c17a8eca5bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl

            X509v3 Authority Key Identifier:
                keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fd00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:9f:68:64:a6:a9:da:f2:32:aa:b7:a7:79:5d:87:dd:21:
         df:b6:7f:a1:ae:e4:a6:fe:87:00:0f:b4:85:da:b1:40:b9:97:
         d3:a6:5d:52:64:52:bd:cc:19:5b:19:6b:15:2f:a6:c0:df:e0:
         38:9e:ae:a2:77:74:62:0b:f9:03:87:84:59:e6:7f:49:b8:4b:
         3f:8a:96:b0:71:f1:f7:c5:3d:6c:ee:df:b5:56:2f:9b:2b:8e:
         0f:c6:56:13:61:f5:29:63:a3:41:bc:2b:9b:7e:61:19:b8:8e:
         a1:5c:80:03:6d:47:3b:a0:b9:1c:3c:45:e4:a1:4b:bf:33:6b:
         5f:17:ea:22:1f:fe:36:c6:0e:36:2c:5c:b9:f2:6b:db:b1:dd:
         6a:69:ff:af:d9:a6:40:1d:98:3a:77:78:d8:e1:d8:47:de:39:
         f5:61:be:41:bc:c9:b9:91:a2:41:6c:da:93:77:d1:1a:1f:70:
         e3:01:43:3b:e6:bc:aa:57:46:c6:b7:a4:92:2a:c5:ab:5f:7e:
         b1:ef:73:6f:e9:fe:55:ed:83:c7:f4:6c:47:22:5e:66:e2:c9:
         50:be:e1:2f:8b:fa:91:31:c0:71:b1:e4:a3:55:99:ec:a7:bf:
         9b:33:ea:7b:04:18:4c:3d:b0:66:38:fc:f3:a3:cd:66:e9:3e:
         db:38:ac:7a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnLz40shy4L2C0AuyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDA1YWUwNzAtZTllOS00ZDNjLWI0NDktODY4NDI2ZmYy
MzAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
YzBmMmQ4MzYtOTU3Yi00MzZiLTg3ZTEtY2ZhMzQwNWMzY2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAophxqwbGCkEzFMqdmwt0yAhpJobhOPFR3gW+
p/RdMvVOlYoRpVgwuANtqsOkhVLNe3lNXItGZslQBdcmbE1p24NUlIHaA1QT5OI8
wpNn88yK8+Bq+R/98tYOeixl4RnKKGTE+4RwZGDOJVhFbiwEpbgfNfylcLj3I/fp
AJDVpI2u+KXhnmhA2RB+Un0XupAR4caEzCluu/Jn9G/2J5owODbM178uKXAkJz4a
rKZiWhtZaL98mcYzJ+HbHaXx/THHHBYaiZdBdKOSBGDhD2fdTul2HocYhhkyYZ1g
NQqSm3QpeRWG9/pYfjfUE9H1KwCVDmyVj5+44oRNUz97WdZK/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDWGPL4T30HeCLtJIwt3wCPpbinmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MDVh
ZTA3MC1lOWU5LTRkM2MtYjQ0OS04Njg0MjZmZjIzMDMvNTQyYjEyZWQtZThmOS0z
N2Y4LTkxOTctYzE3YThlY2E1YmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDA1YWUwNzAtZTllOS00ZDNjLWI0
NDktODY4NDI2ZmYyMzAzLzQwNWFlMDcwLWU5ZTktNGQzYy1iNDQ5LTg2ODQyNmZm
MjMwMy5jcmwwHwYDVR0jBBgwFoAU+SE6MwHvAr4Jvp3/wgjkvb025GAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80MDVhZTA3MC1lOWU5LTRkM2MtYjQ0OS04Njg0
MjZmZjIzMDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB4m59oZKap2vIyqreneV2H3SHftn+hruSm/ocAD7SF2rFAuZfTpl1S
ZFK9zBlbGWsVL6bA3+A4nq6id3RiC/kDh4RZ5n9JuEs/ipawcfH3xT1s7t+1Vi+b
K44PxlYTYfUpY6NBvCubfmEZuI6hXIADbUc7oLkcPEXkoUu/M2tfF+oiH/42xg42
LFy58mvbsd1qaf+v2aZAHZg6d3jY4dhH3jn1Yb5BvMm5kaJBbNqTd9EaH3DjAUM7
5ryqV0bGt6SSKsWrX36x73Nv6f5V7YPH9GxHIl5m4slQvuEvi/qRMcBxseSjVZns
p7+bM+p7BBhMPbBmOPzzo81m6T7bOKx6
-----END CERTIFICATE-----
Generated at Sun May 11 01:27:29 2025 by rpki-client