Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
File:                     4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa (raw, json)
Hash identifier:          HZNQXnsVFUNFK5+wQLn9t8E3QeIxW0GR89y+XICr8dI=
Subject key identifier:   FE:DF:B6:C4:9E:10:5A:AF:4E:26:43:E9:C4:48:26:F4:4C:31:C5:20
Certificate issuer:       /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial:       010D0C9F43285849BF3F5D104E0A6A164648D080
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     398325
IP address blocks:        2605:e040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:5d:10:4e:0a:6a:16:46:48:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=88618c3b-f35c-47e5-9ef9-429ea36b0288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:49:63:2a:77:2e:72:03:02:31:7c:de:5f:
                    03:c3:4a:fc:b5:74:a5:83:90:88:54:1a:73:f3:4d:
                    7a:f3:70:99:0a:4e:f7:1c:fa:28:fe:4a:db:f9:45:
                    f0:e8:4d:fb:f9:7f:7d:be:1a:4a:1f:f4:17:93:81:
                    b3:50:2e:54:b6:1e:46:c2:28:17:87:5c:6f:0c:ad:
                    04:ed:94:5a:56:81:7d:cd:60:ba:96:c4:57:28:2a:
                    ee:b4:35:c3:91:7f:19:fb:5f:e5:e2:f4:10:66:37:
                    25:6d:95:86:e3:25:40:df:6b:c6:8f:91:4a:c0:68:
                    c2:94:e4:ec:21:e4:34:d6:7a:48:06:11:2c:c4:35:
                    64:70:03:48:00:e2:10:be:72:10:b1:21:b4:77:fe:
                    f7:07:1d:a9:21:7c:73:28:97:a9:ee:c8:2a:6a:b8:
                    d3:a3:03:5d:0e:04:b8:49:c7:3a:78:63:ee:8b:e7:
                    3c:c4:4d:2a:2d:b9:4f:84:2b:3f:98:7e:5d:9b:71:
                    76:71:a3:4b:9e:6b:28:aa:c4:0e:1e:5f:25:e8:6c:
                    06:ab:be:23:f9:8d:4b:0f:40:06:0f:96:b0:65:a2:
                    c9:46:88:4e:79:bd:28:27:91:66:87:80:a9:33:f4:
                    c2:48:9b:56:07:b1:e0:a9:64:44:c5:13:05:d5:1b:
                    3b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DF:B6:C4:9E:10:5A:AF:4E:26:43:E9:C4:48:26:F4:4C:31:C5:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl

            X509v3 Authority Key Identifier:
                keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:8f:43:d8:97:ac:82:98:e9:d5:c2:7b:b5:c6:6c:6e:f7:
         b7:a6:28:5c:f3:71:93:d4:71:d4:96:37:2e:8c:34:c3:10:4b:
         c6:b2:ec:72:19:0b:5f:ae:0a:04:b5:04:47:4f:84:f7:e8:72:
         3e:0b:b7:c2:05:09:88:90:77:0f:39:7d:45:3d:09:5d:40:61:
         a6:8e:bc:2a:0c:ca:c5:c8:2b:3e:0f:7e:be:11:19:23:17:d7:
         fb:3e:02:d7:da:38:de:91:b2:3b:95:42:60:9a:61:d7:0b:0f:
         87:15:7b:cf:b2:6d:70:49:e0:c7:aa:48:22:5e:73:f3:6f:39:
         36:36:3a:a9:54:fc:b7:f8:64:4a:0a:ec:0c:9b:c0:d8:4e:e0:
         e2:b1:d1:71:31:bf:37:ff:fa:75:a4:2f:30:58:66:5a:2b:23:
         05:a7:34:1a:85:53:7d:df:69:ec:7a:6e:24:34:a4:7e:3d:ff:
         98:fe:d2:d9:02:fb:0b:de:4f:92:1f:b5:c7:5a:54:41:47:9a:
         7f:fc:e9:83:f8:59:fb:92:51:33:c7:57:a0:54:36:98:5c:fe:
         ba:cc:2a:29:b0:4b:69:4f:92:92:71:7f:d2:2f:71:72:01:11:
         0c:5a:ab:7c:90:84:e9:50:1f:f9:ee:24:dc:d0:f7:00:da:d3:
         56:e4:8e:ac
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P10QTgpqFkZI0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJjMzBjZGEtM2IzZi00ZThlLWE2ODctYjIwZDU0NDhh
NGU3MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
ODg2MThjM2ItZjM1Yy00N2U1LTllZjktNDI5ZWEzNmIwMjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+dJYyp3LnIDAjF83l8Dw0r8tXSlg5CIVBpz
801683CZCk73HPoo/krb+UXw6E37+X99vhpKH/QXk4GzUC5Uth5GwigXh1xvDK0E
7ZRaVoF9zWC6lsRXKCrutDXDkX8Z+1/l4vQQZjclbZWG4yVA32vGj5FKwGjClOTs
IeQ01npIBhEsxDVkcANIAOIQvnIQsSG0d/73Bx2pIXxzKJep7sgqarjTowNdDgS4
Scc6eGPui+c8xE0qLblPhCs/mH5dm3F2caNLnmsoqsQOHl8l6GwGq74j+Y1LD0AG
D5awZaLJRohOeb0oJ5Fmh4CpM/TCSJtWB7HgqWRExRMF1Rs7swIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP7ftsSeEFqvTiZD6cRIJvRMMcUgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMz
MGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBkNTQ0OGE0ZTcvNDAwMWNiM2EtZTIwNi0z
MmQ1LTljOWEtYmQ4NmFjM2E2MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWJjMzBjZGEtM2IzZi00ZThlLWE2
ODctYjIwZDU0NDhhNGU3L2FiYzMwY2RhLTNiM2YtNGU4ZS1hNjg3LWIyMGQ1NDQ4
YTRlNy5jcmwwHwYDVR0jBBgwFoAUWjNUcS2B4/8BBQT5LA5f45A2vMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMzMGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBk
NTQ0OGE0ZTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXgQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQABuI9D2Jesgpjp1cJ7tcZsbve3pihc83GT1HHUljcujDTDEEvGsuxy
GQtfrgoEtQRHT4T36HI+C7fCBQmIkHcPOX1FPQldQGGmjrwqDMrFyCs+D36+ERkj
F9f7PgLX2jjekbI7lUJgmmHXCw+HFXvPsm1wSeDHqkgiXnPzbzk2NjqpVPy3+GRK
CuwMm8DYTuDisdFxMb83//p1pC8wWGZaKyMFpzQahVN932nsem4kNKR+Pf+Y/tLZ
AvsL3k+SH7XHWlRBR5p//OmD+Fn7klEzx1egVDaYXP66zCopsEtpT5KScX/SL3Fy
AREMWqt8kITpUB/57iTc0PcA2tNW5I6s
-----END CERTIFICATE-----
Generated at Fri May 9 11:01:19 2025 by rpki-client