Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b322779-155c-3a92-be08-c9b537124d8b.roa
File:                     2b322779-155c-3a92-be08-c9b537124d8b.roa (raw, json)
Hash identifier:          0xVeaDcmRi+pME7omuRLrQGn7fsTglC9Mf/OsJdpuv8=
Subject key identifier:   9F:29:88:E9:B7:DE:3D:2E:C1:63:8E:72:16:A1:76:91:1D:A8:8F:66
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F734E88CDCEA8ABC90EF8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b322779-155c-3a92-be08-c9b537124d8b.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8066::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:73:4e:88:cd:ce:a8:ab:c9:0e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=9519bc5e-412d-4932-9977-7b6cea4a8686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:2c:68:c0:be:cd:db:83:9e:5d:34:7a:3f:
                    ce:5a:5a:c3:b6:15:c7:95:86:ab:38:ee:a2:51:09:
                    60:bc:d5:bb:49:f4:35:35:21:c6:9f:aa:cb:97:09:
                    5a:3b:df:02:1f:f1:7e:78:04:df:00:6c:58:f5:b7:
                    0d:30:3f:eb:d8:84:f7:09:07:6b:b4:63:c6:e8:c7:
                    2b:9c:98:49:ee:0e:bf:b7:76:06:84:bb:05:12:22:
                    9c:0d:c9:e2:bd:67:30:e0:4f:1f:c6:96:f6:bf:0e:
                    af:bc:f9:41:28:d5:e6:1c:fe:9b:59:a1:6a:60:a1:
                    21:12:1f:a5:c2:9f:7c:27:27:ed:a8:d3:0f:b4:ad:
                    f3:20:e9:f0:12:26:52:e2:c0:f4:9b:73:21:6b:09:
                    8d:a2:2e:4e:34:0b:a2:22:c3:1c:1d:f0:e8:4d:df:
                    fb:1a:66:bb:ed:c1:5c:77:64:37:2c:ee:74:99:10:
                    7d:0e:e5:69:d1:e7:5f:b2:8a:2c:ef:d3:05:e3:1f:
                    fd:b2:5e:8b:64:08:7b:93:45:cb:60:89:33:08:bc:
                    b6:7f:90:85:b0:1e:c4:56:7c:ed:ea:ac:41:16:8d:
                    e6:ff:2b:1d:2f:91:e1:80:88:3a:89:bf:c4:f5:7a:
                    49:81:74:c4:1b:0c:3c:1e:79:fa:b7:d1:3e:51:78:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:29:88:E9:B7:DE:3D:2E:C1:63:8E:72:16:A1:76:91:1D:A8:8F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b322779-155c-3a92-be08-c9b537124d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8066::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:28:66:8c:db:12:6a:b3:49:c1:97:b6:c6:2e:12:8e:4f:96:
         0d:72:19:0d:b7:a0:c5:b1:b3:50:b9:22:05:ce:8e:08:e9:05:
         a3:63:e0:cf:ea:fd:db:e7:e1:48:ac:9d:a8:56:aa:d5:e0:5c:
         97:4d:fa:ca:bb:c7:ec:00:9f:d0:a6:85:30:c7:7b:e0:09:f3:
         f5:ec:0a:ea:87:58:28:19:e0:fc:53:f8:1d:77:5e:e7:1c:ce:
         61:71:db:55:36:d0:08:5a:e3:0e:37:90:b5:ba:2c:1c:8f:03:
         51:e7:4f:07:26:4b:79:67:5b:27:66:49:37:e2:65:1c:9a:45:
         4f:26:e9:9d:7d:67:f5:52:9c:fa:10:a1:3f:a5:c1:be:c9:d6:
         14:ed:25:d4:7c:a0:3c:67:51:d7:c7:d5:61:c1:8f:83:a9:10:
         90:fb:11:6a:a3:a5:bb:55:e1:fe:bd:1d:39:98:c1:96:53:4f:
         fd:e6:21:ee:22:9a:fe:9d:01:72:30:89:4e:64:03:84:75:75:
         96:38:84:d4:64:a2:04:aa:64:b7:23:6c:46:88:2b:72:1a:2e:
         cd:4d:57:d6:88:92:40:44:78:c9:6a:90:f0:98:e6:b4:14:34:
         32:cd:21:99:77:d6:79:8c:0a:3e:0a:e1:c4:33:22:87:3d:ea:
         c0:87:6e:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P3NOiM3OqKvJDvgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
OTUxOWJjNWUtNDEyZC00OTMyLTk5NzctN2I2Y2VhNGE4Njg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY0saMC+zduDnl00ej/OWlrDthXHlYarOO6i
UQlgvNW7SfQ1NSHGn6rLlwlaO98CH/F+eATfAGxY9bcNMD/r2IT3CQdrtGPG6Mcr
nJhJ7g6/t3YGhLsFEiKcDcnivWcw4E8fxpb2vw6vvPlBKNXmHP6bWaFqYKEhEh+l
wp98JyftqNMPtK3zIOnwEiZS4sD0m3MhawmNoi5ONAuiIsMcHfDoTd/7Gma77cFc
d2Q3LO50mRB9DuVp0edfsoos79MF4x/9sl6LZAh7k0XLYIkzCLy2f5CFsB7EVnzt
6qxBFo3m/ysdL5HhgIg6ib/E9XpJgXTEGww8Hnn6t9E+UXgo4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ8piOm33j0uwWOOchahdpEdqI9mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMmIzMjI3NzktMTU1Yy0z
YTkyLWJlMDgtYzliNTM3MTI0ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYBm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHAoZozbEmqzScGXtsYuEo5Plg1yGQ23oMWxs1C5IgXOjgjpBaNj
4M/q/dvn4UisnahWqtXgXJdN+sq7x+wAn9CmhTDHe+AJ8/XsCuqHWCgZ4PxT+B13
XucczmFx21U20Aha4w43kLW6LByPA1HnTwcmS3lnWydmSTfiZRyaRU8m6Z19Z/VS
nPoQoT+lwb7J1hTtJdR8oDxnUdfH1WHBj4OpEJD7EWqjpbtV4f69HTmYwZZTT/3m
Ie4imv6dAXIwiU5kA4R1dZY4hNRkogSqZLcjbEaIK3IaLs1NV9aIkkBEeMlqkPCY
5rQUNDLNIZl31nmMCj4K4cQzIoc96sCHbmA=
-----END CERTIFICATE-----
Generated at Wed May 7 01:39:41 2025 by rpki-client