Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa
File:                     c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa (raw, json)
Hash identifier:          o3CHbHodaxOC1mxYSBGtO/crfifZ48iG2rl1SBZ3z3U=
Subject key identifier:   70:0A:93:1C:9C:78:1E:11:0E:72:2B:E2:A3:CD:64:5E:E7:F1:3E:AF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7DDA3E8A98BF8E2F3D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8b12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7d:da:3e:8a:98:bf:8e:2f:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=c7bcb17c-4f65-4592-802f-64a5ff8a7f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:2e:19:5b:ca:25:ae:06:a2:e9:f6:64:7d:
                    23:61:04:02:43:24:39:d3:99:18:a3:cf:68:c1:99:
                    30:0f:7b:97:67:dd:ab:a4:cc:32:79:1b:36:34:6d:
                    46:1c:93:8c:28:dd:62:43:cf:4a:03:4b:0a:13:1d:
                    68:36:3c:9d:fd:83:23:e8:c1:74:05:04:3f:8c:77:
                    4b:c6:5c:23:ba:c3:bc:b5:a8:0e:94:fb:67:a6:19:
                    c7:8d:f9:ed:72:e0:ef:fa:9d:f5:d4:9d:0d:de:ec:
                    e8:5e:5b:36:ca:19:7f:c2:13:e2:35:16:16:16:66:
                    10:9a:19:d9:80:be:03:eb:08:0e:db:4a:00:4e:63:
                    27:fc:64:bb:0b:14:54:10:c3:a1:64:43:37:ff:9b:
                    2e:d2:ed:f2:9d:ed:fe:f7:7f:03:1c:65:66:92:90:
                    88:e0:81:bc:2d:0f:ff:cc:a0:e6:7d:42:a7:f3:2c:
                    48:c3:4a:a8:1d:f9:3d:65:4d:fe:08:11:fa:53:5c:
                    d4:14:49:0e:08:7c:e1:90:2b:1a:7b:3a:57:38:fc:
                    cc:da:59:e2:19:94:00:35:46:54:98:79:8f:27:75:
                    6c:93:f9:88:00:f9:e2:29:82:da:d3:05:bf:2e:ed:
                    fa:2d:a9:ce:a0:8c:5a:bd:ae:3c:c6:29:40:4d:0b:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:93:1C:9C:78:1E:11:0E:72:2B:E2:A3:CD:64:5E:E7:F1:3E:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:31:39:97:2f:cd:af:6d:b9:06:95:92:bc:c7:78:b1:97:b6:
         62:39:b5:c5:6d:8c:13:c9:96:d3:cf:79:11:51:aa:4e:a1:36:
         d6:69:3e:f3:c3:41:41:c9:6c:c9:a7:2b:ff:a3:96:54:f0:da:
         44:04:21:31:87:0b:37:5e:15:f1:13:1c:ec:6b:3f:43:43:7e:
         60:6b:94:14:05:73:d1:f1:ec:24:70:13:5c:5b:c5:01:ef:c1:
         4b:cb:fe:7c:67:05:0d:5c:a6:7b:6e:8d:7e:0f:ac:de:fa:a8:
         bd:8f:a5:6a:1f:5a:1b:40:43:ff:0c:d5:09:bf:3a:15:e0:d7:
         5f:53:4d:d8:c7:b9:52:62:b3:3a:18:46:95:c3:11:f0:dd:21:
         1d:00:ab:64:cd:a7:77:71:4a:42:1c:38:5e:80:11:11:73:f1:
         d2:6b:1c:b9:64:ed:59:cb:75:44:15:49:fc:48:d0:c5:5a:f6:
         b5:57:00:f6:01:f0:d6:0b:50:53:a7:7e:69:2b:da:8d:49:b5:
         86:a1:cf:35:6e:c7:70:17:c3:35:45:9f:99:62:a0:d9:b6:fb:
         58:23:f2:a0:6c:32:aa:6d:02:4c:ce:93:a5:d1:90:f7:83:2a:
         a9:e4:b0:b7:9b:2e:95:22:4f:d4:86:86:49:23:9a:47:67:28:
         86:ed:03:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P33aPoqYv44vPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
YzdiY2IxN2MtNGY2NS00NTkyLTgwMmYtNjRhNWZmOGE3ZjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZkuGVvKJa4Goun2ZH0jYQQCQyQ505kYo89o
wZkwD3uXZ92rpMwyeRs2NG1GHJOMKN1iQ89KA0sKEx1oNjyd/YMj6MF0BQQ/jHdL
xlwjusO8tagOlPtnphnHjfntcuDv+p311J0N3uzoXls2yhl/whPiNRYWFmYQmhnZ
gL4D6wgO20oATmMn/GS7CxRUEMOhZEM3/5su0u3yne3+938DHGVmkpCI4IG8LQ//
zKDmfUKn8yxIw0qoHfk9ZU3+CBH6U1zUFEkOCHzhkCsaezpXOPzM2lniGZQANUZU
mHmPJ3Vsk/mIAPniKYLa0wW/Lu36LanOoIxava48xilATQt/0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHAKkxyceB4RDnIr4qPNZF7n8T6vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzkyYjc3YTYtMWUzOC0z
YWRjLWJkZWUtMTdhZThiMzEwOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYsS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEkxOZcvza9tuQaVkrzHeLGXtmI5tcVtjBPJltPPeRFRqk6hNtZp
PvPDQUHJbMmnK/+jllTw2kQEITGHCzdeFfETHOxrP0NDfmBrlBQFc9Hx7CRwE1xb
xQHvwUvL/nxnBQ1cpntujX4PrN76qL2PpWofWhtAQ/8M1Qm/OhXg119TTdjHuVJi
szoYRpXDEfDdIR0Aq2TNp3dxSkIcOF6AERFz8dJrHLlk7VnLdUQVSfxI0MVa9rVX
APYB8NYLUFOnfmkr2o1JtYahzzVux3AXwzVFn5lioNm2+1gj8qBsMqptAkzOk6XR
kPeDKqnksLebLpUiT9SGhkkjmkdnKIbtAx4=
-----END CERTIFICATE-----
Generated at Mon May 5 20:01:23 2025 by rpki-client