Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa
File:                     66059507-adf2-3390-af86-e4bb17ea4aa3.roa (raw, json)
Hash identifier:          +qYvQPHyU4yXTXT6XlTtIjqD+iE1wMSFe+nX332CqXA=
Subject key identifier:   CB:C3:00:38:F0:D0:B1:73:F0:2B:E8:25:6F:01:BA:1A:3E:D9:78:28
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849B9AA04D82B4369044E469D10
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     396955
IP address blocks:        2001:468:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:04:d8:2b:43:69:04:4e:46:9d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=2e5f8899-4dea-4b03-b659-6df69b8a8b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:8f:b8:ec:86:75:53:89:d2:0e:8f:f3:25:
                    f6:7a:27:3a:1e:bf:60:0b:a0:a7:08:af:72:5d:ec:
                    f6:76:39:24:00:ca:42:23:26:66:7a:e3:08:ce:a8:
                    b8:b5:d3:5a:ba:55:b9:f7:27:c5:5f:08:97:0c:7a:
                    d2:1e:51:a4:31:70:76:f5:28:68:22:76:44:53:8e:
                    6f:81:56:88:52:76:82:a3:57:5d:93:78:10:4c:8f:
                    96:09:29:48:b0:56:64:57:86:05:aa:0c:82:59:07:
                    a0:9c:b6:3d:44:09:b6:e1:16:4c:3f:6f:32:c3:f7:
                    e9:87:4b:09:87:3d:27:c9:71:e7:45:d2:f4:b8:06:
                    01:43:62:3b:20:f5:b9:9d:64:d4:ff:ed:45:52:aa:
                    1e:86:ed:e2:71:66:30:20:90:bd:11:1f:1e:06:84:
                    10:dd:a9:05:57:c4:47:33:73:49:17:19:f7:8e:3d:
                    e0:c5:b4:91:38:d9:9f:76:41:bf:e7:f6:93:15:9f:
                    09:c9:f1:c8:13:1c:42:19:83:1c:93:42:3d:e1:0f:
                    77:a5:44:45:ce:ec:a6:16:56:82:7a:31:01:e4:bd:
                    86:10:38:77:58:dc:5c:3f:fe:1a:82:72:b4:6c:69:
                    9e:bc:0b:b9:2f:23:e6:7f:d2:00:49:b9:dd:40:ab:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C3:00:38:F0:D0:B1:73:F0:2B:E8:25:6F:01:BA:1A:3E:D9:78:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:91:96:50:25:69:78:c6:f2:1c:b1:e7:95:46:49:c0:13:
         eb:7d:8f:d5:47:76:6a:82:33:af:50:a7:4c:56:50:b7:33:29:
         c3:04:77:57:de:20:e3:2a:41:b4:96:30:fc:d4:a2:88:bd:a5:
         44:39:87:c7:d7:63:4b:3b:75:bb:b3:59:7b:3e:93:48:64:74:
         7e:dc:43:47:97:bd:d8:cf:d9:db:e2:03:d2:b9:e7:1a:fa:23:
         6f:d3:84:59:99:56:d3:5c:7f:a3:0f:55:23:fe:57:c1:dc:d5:
         ee:27:92:1d:8d:d1:cf:10:1e:e9:b0:c7:1a:81:b5:f9:fb:43:
         25:50:12:e4:59:22:b8:d5:46:aa:01:3b:7d:37:33:ca:a3:7f:
         12:dd:ad:39:6f:16:23:07:92:28:15:66:63:67:d3:e4:94:21:
         15:a8:d9:cc:29:53:f4:12:65:d8:46:4d:ce:d8:d0:15:2e:1d:
         73:43:fc:6d:4c:ea:53:bc:cc:f3:46:82:5b:30:08:0d:ab:52:
         96:05:0b:c4:55:f9:fe:1b:a7:89:34:86:1f:1c:ce:60:5e:19:
         b4:25:80:2d:e7:be:2c:f7:6b:8b:18:5b:3b:ad:b5:8e:16:ee:
         d2:ee:8c:1b:4e:72:57:98:cd:bf:df:80:b8:a8:9d:7b:91:be:
         dc:f8:2b:1a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEm5qgTYK0NpBE5GnRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk
MmU1Zjg4OTktNGRlYS00YjAzLWI2NTktNmRmNjliOGE4YjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsqPuOyGdVOJ0g6P8yX2eic6Hr9gC6CnCK9y
Xez2djkkAMpCIyZmeuMIzqi4tdNaulW59yfFXwiXDHrSHlGkMXB29ShoInZEU45v
gVaIUnaCo1ddk3gQTI+WCSlIsFZkV4YFqgyCWQegnLY9RAm24RZMP28yw/fph0sJ
hz0nyXHnRdL0uAYBQ2I7IPW5nWTU/+1FUqoehu3icWYwIJC9ER8eBoQQ3akFV8RH
M3NJFxn3jj3gxbSRONmfdkG/5/aTFZ8JyfHIExxCGYMck0I94Q93pURFzuymFlaC
ejEB5L2GEDh3WNxcP/4agnK0bGmevAu5LyPmf9IASbndQKsaQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMvDADjw0LFz8CvoJW8Buho+2XgoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNjYwNTk1MDctYWRmMi0z
MzkwLWFmODYtZTRiYjE3ZWE0YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEaA8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWzKRllAlaXjG8hyx55VGScAT632P1Ud2aoIzr1CnTFZQtzMpwwR3
V94g4ypBtJYw/NSiiL2lRDmHx9djSzt1u7NZez6TSGR0ftxDR5e92M/Z2+ID0rnn
Gvojb9OEWZlW01x/ow9VI/5XwdzV7ieSHY3RzxAe6bDHGoG1+ftDJVAS5FkiuNVG
qgE7fTczyqN/Et2tOW8WIweSKBVmY2fT5JQhFajZzClT9BJl2EZNztjQFS4dc0P8
bUzqU7zM80aCWzAIDatSlgULxFX5/huniTSGHxzOYF4ZtCWALee+LPdrixhbO621
jhbu0u6MG05yV5jNv9+AuKide5G+3PgrGg==
-----END CERTIFICATE-----
Generated at Mon May 12 01:31:11 2025 by rpki-client