Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/70974fba-bcd2-3ee8-b8b3-a5e9b58eb7b7.roa
File:                     70974fba-bcd2-3ee8-b8b3-a5e9b58eb7b7.roa (raw, json)
Hash identifier:          apUhpLfNA5CLzK5ayC5ANfmTD9o68akLrIWqzuK/UdY=
Subject key identifier:   44:7F:DA:EF:0D:E9:14:C8:68:8F:CA:30:2F:5A:D8:08:23:14:9C:F6
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849CA9CBBD8421BB79B19F74E60
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/70974fba-bcd2-3ee8-b8b3-a5e9b58eb7b7.roa
Signing time:             Fri 09 May 2025 02:42:55 +0000
ROA not before:           Fri 09 May 2025 02:42:55 +0000
ROA not after:            Thu 07 Aug 2025 02:42:55 +0000
asID:                     21859
IP address blocks:        2602:ffe4:c5e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:9c:bb:d8:42:1b:b7:9b:19:f7:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May  9 02:42:55 2025 GMT
            Not After : Aug  7 02:42:55 2025 GMT
        Subject: CN=f2282722-970f-46c8-a7f5-94469cab3c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:d9:ca:89:64:80:23:49:20:7b:ce:52:43:
                    9c:4b:c1:00:96:30:a2:dd:d3:ca:c7:ce:73:34:c4:
                    81:ef:31:1f:50:36:0a:e9:25:eb:c9:ce:70:87:6e:
                    27:87:68:c0:62:50:b8:d8:0c:2e:c2:1e:e9:1e:44:
                    d1:b1:1b:22:55:00:a8:f9:9f:44:99:de:cb:a2:57:
                    ec:30:2f:b9:d7:0e:dc:fc:73:98:9e:f4:73:f9:f8:
                    0e:2f:57:01:0e:8b:53:1c:ae:84:f4:b5:7c:b6:f9:
                    87:05:d6:aa:63:f9:59:79:cd:50:f5:a1:f4:fc:b6:
                    10:92:5c:54:99:2d:41:12:39:0b:3e:0d:2b:de:7a:
                    52:5e:77:3e:87:d6:cf:23:1a:03:4d:5a:f9:5a:9d:
                    a1:14:f1:2a:7d:c4:1f:d9:7c:40:e0:13:c0:0b:99:
                    61:85:35:4e:f7:2f:dc:1c:00:2c:fa:d4:aa:4d:59:
                    0b:07:2f:79:02:25:21:69:2e:f7:fe:75:c9:94:98:
                    ae:40:6b:f0:22:aa:1e:1d:36:59:7d:29:10:55:5e:
                    26:c7:b6:07:db:cc:c9:1a:5b:39:b5:f5:8f:0b:a1:
                    b9:17:43:bc:94:af:1a:09:ca:22:08:e2:c2:b0:51:
                    fc:4c:78:64:63:45:76:27:1f:4b:ad:28:c3:27:c1:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7F:DA:EF:0D:E9:14:C8:68:8F:CA:30:2F:5A:D8:08:23:14:9C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/70974fba-bcd2-3ee8-b8b3-a5e9b58eb7b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c5e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:90:5a:12:fb:48:8a:04:99:1b:d2:ba:7b:9c:67:db:8e:8b:
         d0:59:e8:e7:39:be:0d:40:f2:fe:9f:bd:17:d7:01:6d:2f:f6:
         43:0e:a5:99:ef:6c:47:da:8f:e8:0d:de:b9:2b:11:26:29:58:
         e6:36:dd:b0:bf:d1:57:f3:1b:53:79:cd:f9:83:c2:82:15:47:
         a3:09:12:7c:17:86:b8:fb:67:3b:04:eb:d1:af:60:0e:1f:cd:
         0d:0e:af:e8:28:d7:b0:b0:c9:94:3a:48:a5:4c:04:e9:d8:1d:
         8d:b6:68:4c:d5:e1:fa:3f:ca:41:70:16:7d:57:44:d6:40:f0:
         a9:39:7b:ba:27:74:f4:ff:a4:99:19:9a:9d:dd:d8:24:5f:96:
         d2:96:3d:a3:65:8d:91:43:bf:70:c4:46:5b:02:c5:28:1b:4d:
         2c:25:02:9f:14:b4:d1:15:34:01:bd:b8:90:b6:f1:49:49:84:
         10:2f:16:e0:5f:7e:f4:6d:fe:50:36:d7:12:7f:04:c8:5b:c7:
         d7:37:77:30:45:8e:15:c7:27:5e:a7:16:e5:9a:80:a3:ba:d3:
         03:8f:7b:fd:2e:cd:8e:78:6f:cc:da:32:dc:5b:f2:e1:5c:b6:
         c6:ef:49:8d:ea:2a:73:d4:2d:a9:bd:a4:0e:c3:33:90:3e:f7:
         ca:d8:f8:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnKnLvYQhu3mxn3TmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDUwOTAyNDI1NVoXDTI1MDgwNzAyNDI1NVowLzEtMCsGA1UEAxMk
ZjIyODI3MjItOTcwZi00NmM4LWE3ZjUtOTQ0NjljYWIzYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfzZyolkgCNJIHvOUkOcS8EAljCi3dPKx85z
NMSB7zEfUDYK6SXryc5wh24nh2jAYlC42Awuwh7pHkTRsRsiVQCo+Z9Emd7Lolfs
MC+51w7c/HOYnvRz+fgOL1cBDotTHK6E9LV8tvmHBdaqY/lZec1Q9aH0/LYQklxU
mS1BEjkLPg0r3npSXnc+h9bPIxoDTVr5Wp2hFPEqfcQf2XxA4BPAC5lhhTVO9y/c
HAAs+tSqTVkLBy95AiUhaS73/nXJlJiuQGvwIqoeHTZZfSkQVV4mx7YH28zJGls5
tfWPC6G5F0O8lK8aCcoiCOLCsFH8THhkY0V2Jx9LrSjDJ8HlewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFER/2u8N6RTIaI/KMC9a2AgjFJz2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNzA5NzRmYmEtYmNkMi0z
ZWU4LWI4YjMtYTVlOWI1OGViN2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/5Axe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHqQWhL7SIoEmRvSunucZ9uOi9BZ6Oc5vg1A8v6fvRfXAW0v9kMO
pZnvbEfaj+gN3rkrESYpWOY23bC/0VfzG1N5zfmDwoIVR6MJEnwXhrj7ZzsE69Gv
YA4fzQ0Or+go17CwyZQ6SKVMBOnYHY22aEzV4fo/ykFwFn1XRNZA8Kk5e7ondPT/
pJkZmp3d2CRfltKWPaNljZFDv3DERlsCxSgbTSwlAp8UtNEVNAG9uJC28UlJhBAv
FuBffvRt/lA21xJ/BMhbx9c3dzBFjhXHJ16nFuWagKO60wOPe/0uzY54b8zaMtxb
8uFctsbvSY3qKnPULam9pA7DM5A+98rY+PI=
-----END CERTIFICATE-----
Generated at Mon May 12 02:20:44 2025 by rpki-client