Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa
File:                     2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa (raw, json)
Hash identifier:          7H5oKUDd+vaNfXwKeyUcOGMK7d3Vr4rYuN/DydXkgh8=
Subject key identifier:   2F:FC:28:FA:2C:B6:01:95:07:F2:C3:7F:A5:7C:F6:4A:6B:A8:35:AE
Certificate issuer:       /CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
Certificate serial:       010D0C9F43285849C904EA9F88D49D5C18F03B80
Authority key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     46969
IP address blocks:        2607:4f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ea:9f:88:d4:9d:5c:18:f0:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=b8415106-56a6-4983-b946-d4b5cf0259ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:0f:69:9a:3c:5c:00:7d:5e:27:32:c8:68:
                    52:68:31:47:50:97:7b:9e:cc:2c:7f:2d:54:6b:50:
                    65:08:5d:9c:62:1e:5c:8e:82:44:b3:9f:3c:8d:57:
                    00:d1:f8:9b:cd:4e:26:82:f1:ee:ec:70:1e:f2:5d:
                    96:b3:7a:77:56:09:a6:43:9e:f9:e8:cc:40:23:2d:
                    35:d9:12:c0:52:73:c3:72:c7:58:33:1d:f0:7e:31:
                    ab:8a:0d:7e:55:3f:0d:4f:a2:a2:21:75:40:10:dd:
                    6e:52:e6:49:e1:f0:ef:79:fc:d3:82:98:b3:77:72:
                    3b:9f:da:4d:d8:95:68:d8:cf:a7:97:0d:b3:1f:9c:
                    0a:6b:af:71:92:5f:ac:27:e0:c4:77:7a:60:b2:64:
                    44:7f:ed:f1:bd:3c:aa:7d:f5:48:39:03:9a:e3:39:
                    d8:a4:03:9a:46:79:00:9e:da:02:03:b1:7e:0e:9a:
                    7e:f8:bd:78:fa:ee:b7:2a:22:ef:e5:71:c7:ea:13:
                    3d:85:72:1b:f5:5e:be:a6:e3:a9:25:33:f7:c4:be:
                    f1:b0:ce:65:b4:59:ab:63:d9:cf:fc:c9:1c:49:19:
                    33:88:6c:b2:15:12:bd:08:03:00:d6:54:4e:77:f3:
                    b5:06:42:aa:61:ad:66:7b:3f:54:4c:b5:37:d1:0a:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FC:28:FA:2C:B6:01:95:07:F2:C3:7F:A5:7C:F6:4A:6B:A8:35:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl

            X509v3 Authority Key Identifier:
                keyid:98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:82:c0:b0:a3:ab:d1:77:34:30:73:2e:1b:bc:e6:3d:45:ec:
         98:68:41:2c:0a:8f:ac:79:b8:83:8e:cd:ea:b0:54:51:cf:94:
         9b:08:6d:91:13:92:c5:dc:8c:90:43:31:77:b6:0b:35:e6:72:
         f3:32:0b:f6:0d:35:8d:4e:03:15:76:1b:86:fc:8b:c3:c3:3b:
         ed:66:f2:02:e8:d5:83:e9:5a:a4:b7:a3:d2:d6:07:ce:31:ff:
         84:05:b5:4d:d1:01:00:86:9e:9c:27:6f:54:df:42:1b:ee:c4:
         d5:1d:e4:f9:e0:93:3e:b7:be:a6:1b:6e:8e:2b:89:35:39:62:
         b1:29:1d:92:6b:3e:6b:0a:05:9a:14:75:f5:a5:38:3e:fc:b3:
         d4:4b:72:63:13:e2:fa:88:ae:a1:ec:e9:92:7d:ba:9e:c3:cd:
         9b:2f:0a:42:e3:ac:78:c7:f7:66:e8:fb:62:98:29:52:7e:d8:
         f0:ff:5b:ae:30:d8:ca:86:e0:cf:4f:f6:16:8c:c0:44:72:6c:
         a2:90:15:49:3b:25:16:73:63:a9:1b:2b:b3:fb:f5:aa:39:41:
         f7:77:6e:ab:f7:3c:45:df:cb:ec:bf:b6:a2:b6:38:fb:11:b1:
         35:be:4e:ce:ea:bf:9b:95:02:e9:92:c7:0d:eb:e7:15:ec:f8:
         b5:74:36:e8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnJBOqfiNSdXBjwO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTZiMzMwNTItZTVhOC00ZjYzLWIyNjQtYjU1YzFhZTFl
ZDViMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
Yjg0MTUxMDYtNTZhNi00OTgzLWI5NDYtZDRiNWNmMDI1OWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMgPaZo8XAB9XicyyGhSaDFHUJd7nswsfy1U
a1BlCF2cYh5cjoJEs588jVcA0fibzU4mgvHu7HAe8l2Ws3p3VgmmQ5756MxAIy01
2RLAUnPDcsdYMx3wfjGrig1+VT8NT6KiIXVAEN1uUuZJ4fDvefzTgpizd3I7n9pN
2JVo2M+nlw2zH5wKa69xkl+sJ+DEd3pgsmREf+3xvTyqffVIOQOa4znYpAOaRnkA
ntoCA7F+Dpp++L14+u63KiLv5XHH6hM9hXIb9V6+puOpJTP3xL7xsM5ltFmrY9nP
/MkcSRkziGyyFRK9CAMA1lROd/O1BkKqYa1mez9UTLU30QrEdQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFC/8KPostgGVB/LDf6V89kprqDWuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNmIz
MzA1Mi1lNWE4LTRmNjMtYjI2NC1iNTVjMWFlMWVkNWIvMmQxZTM3MjYtZjRjMC0z
ZTk0LTllMDEtOTg4OGJlYTgyYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTZiMzMwNTItZTVhOC00ZjYzLWIy
NjQtYjU1YzFhZTFlZDViL2E2YjMzMDUyLWU1YTgtNGY2My1iMjY0LWI1NWMxYWUx
ZWQ1Yi5jcmwwHwYDVR0jBBgwFoAUmNFnM/i3BuH79/fAB0RFgYBx3HQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hNmIzMzA1Mi1lNWE4LTRmNjMtYjI2NC1iNTVj
MWFlMWVkNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdPQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQApgsCwo6vRdzQwcy4bvOY9ReyYaEEsCo+sebiDjs3qsFRRz5SbCG2R
E5LF3IyQQzF3tgs15nLzMgv2DTWNTgMVdhuG/IvDwzvtZvIC6NWD6Vqkt6PS1gfO
Mf+EBbVN0QEAhp6cJ29U30Ib7sTVHeT54JM+t76mG26OK4k1OWKxKR2Saz5rCgWa
FHX1pTg+/LPUS3JjE+L6iK6h7OmSfbqew82bLwpC46x4x/dm6PtimClSftjw/1uu
MNjKhuDPT/YWjMBEcmyikBVJOyUWc2OpGyuz+/WqOUH3d26r9zxF38vsv7aitjj7
EbE1vk7O6r+blQLpkscN6+cV7Pi1dDbo
-----END CERTIFICATE-----
Generated at Sat May 10 20:36:30 2025 by rpki-client