Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa
File:                     069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa (raw, json)
Hash identifier:          yKHjvnCtv4gCq2GBZbO5dmUNEj3KLrDt/9xBwNVW1e4=
Subject key identifier:   2B:29:D4:49:8C:D1:0D:B9:7C:A1:A7:9D:FB:F4:0D:CD:7B:60:2D:67
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F43285849B149F4A69C866E8071521A80
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     32771
IP address blocks:        2620:111:800a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f4:a6:9c:86:6e:80:71:52:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=de8fbf27-7215-4039-b39c-36995b052b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:65:29:43:31:c1:b3:70:ad:28:20:8c:fe:
                    fd:84:a8:27:be:bf:56:8f:59:9c:cf:6d:22:38:6e:
                    77:dd:dd:24:8a:69:cb:3a:c7:66:66:15:53:b4:d1:
                    4f:9d:eb:e4:37:f7:f1:81:f6:b0:cb:e6:7f:ab:af:
                    b6:92:4e:81:95:59:a1:3c:5b:9e:8e:9c:d3:f3:d5:
                    80:02:33:eb:8b:bf:bb:85:8d:53:f9:63:c3:5f:1b:
                    4b:26:b1:4a:f9:94:39:75:06:28:76:2d:03:25:c7:
                    9e:4d:a3:fe:e8:ff:e8:7c:78:4a:80:a4:6d:b1:ff:
                    ae:c5:4f:86:c1:bc:98:c6:db:7a:4b:ae:a7:83:aa:
                    2a:1e:54:4f:6e:42:7b:22:80:22:fa:f0:c5:c4:0f:
                    83:26:45:06:72:13:cc:0e:53:f2:4e:22:64:f3:19:
                    94:0c:1b:ac:be:36:8d:62:15:08:34:bf:e9:9f:7f:
                    1d:2b:24:60:e2:90:23:e2:d9:0e:af:11:eb:9b:8f:
                    54:52:94:d8:5d:49:6d:b5:61:97:ee:d6:ee:31:78:
                    da:7e:da:2f:81:c2:1a:67:07:bb:c6:83:19:2a:a6:
                    c6:26:27:ed:7e:a9:57:cf:ea:4f:4c:9e:e6:fb:83:
                    9f:e8:95:d0:db:fe:4a:77:d3:a1:a8:2a:b0:d8:7c:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:29:D4:49:8C:D1:0D:B9:7C:A1:A7:9D:FB:F4:0D:CD:7B:60:2D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:4b:ee:de:c7:26:5e:4c:c2:45:44:c6:31:2a:b5:f8:b3:
         93:f7:73:f4:82:c0:94:f2:28:d8:bd:66:9f:85:2d:a0:6b:e9:
         f5:6d:cf:e7:27:bb:ca:a2:4d:48:bf:f9:78:8e:21:eb:64:f3:
         82:be:1c:9d:7d:fb:96:34:f8:75:45:bb:a4:ac:92:fe:46:aa:
         a7:06:4e:7c:ab:87:43:6c:62:19:66:53:4e:10:c4:ea:39:12:
         77:6a:71:d4:d5:03:3f:d4:41:85:a7:ca:fa:31:5c:df:24:da:
         73:46:fd:36:5d:46:93:8c:c9:81:85:21:a3:60:8a:9d:d4:dd:
         bc:d4:f1:9d:21:c4:09:fb:72:95:69:0e:f7:dc:cb:9b:08:37:
         7a:1a:b2:ef:0f:61:98:7a:2a:d0:74:af:c9:ac:c9:e5:95:87:
         47:12:f5:a1:a8:da:e5:a4:cd:31:03:8c:e4:22:a4:a3:93:5a:
         45:08:73:7a:43:16:79:59:fc:8d:04:51:94:71:dd:c5:49:e7:
         c4:b4:cc:3e:75:a2:2e:50:9b:83:88:29:cd:3e:c2:2f:63:ce:
         49:c7:06:54:12:2a:d0:12:09:be:77:51:87:70:d7:cc:ff:60:
         3e:c3:06:7d:75:22:a0:5c:6e:6b:d1:6a:30:fa:61:f7:89:39:
         1a:05:7c:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSfSmnIZugHFSGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl
OTVjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
ZGU4ZmJmMjctNzIxNS00MDM5LWIzOWMtMzY5OTViMDUyYjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfFlKUMxwbNwrSggjP79hKgnvr9Wj1mcz20i
OG533d0kimnLOsdmZhVTtNFPnevkN/fxgfawy+Z/q6+2kk6BlVmhPFuejpzT89WA
AjPri7+7hY1T+WPDXxtLJrFK+ZQ5dQYodi0DJceeTaP+6P/ofHhKgKRtsf+uxU+G
wbyYxtt6S66ng6oqHlRPbkJ7IoAi+vDFxA+DJkUGchPMDlPyTiJk8xmUDBusvjaN
YhUINL/pn38dKyRg4pAj4tkOrxHrm49UUpTYXUlttWGX7tbuMXjaftovgcIaZwe7
xoMZKqbGJiftfqlXz+pPTJ7m+4Of6JXQ2/5Kd9OhqCqw2HwblQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCsp1EmM0Q25fKGnnfv0Dc17YC1nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5
OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMDY5Y2RiOTQtNTdlYS0z
OTg0LWJjNTAtYWQxYTJkNTU5MWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4
ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0
ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh
YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFTCS+7exyZeTMJFRMYxKrX4s5P3c/SCwJTyKNi9Zp+FLaBr6fVt
z+cnu8qiTUi/+XiOIetk84K+HJ19+5Y0+HVFu6Sskv5GqqcGTnyrh0NsYhlmU04Q
xOo5EndqcdTVAz/UQYWnyvoxXN8k2nNG/TZdRpOMyYGFIaNgip3U3bzU8Z0hxAn7
cpVpDvfcy5sIN3oasu8PYZh6KtB0r8msyeWVh0cS9aGo2uWkzTEDjOQipKOTWkUI
c3pDFnlZ/I0EUZRx3cVJ58S0zD51oi5Qm4OIKc0+wi9jzknHBlQSKtASCb53UYdw
18z/YD7DBn11IqBcbmvRajD6YfeJORoFfPg=
-----END CERTIFICATE-----
Generated at Wed May 7 13:35:38 2025 by rpki-client