Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/35ac175d-d37d-3848-97bf-95b3456aee02.roa
File:                     35ac175d-d37d-3848-97bf-95b3456aee02.roa (raw, json)
Hash identifier:          aS1jDaESMmoAsK+rqFhgW4m5VuH5RsUHFxW6ZUqTLgI=
Subject key identifier:   52:05:D1:05:7E:F3:31:C6:B6:E1:49:6D:DF:B6:97:A9:FC:CA:A2:35
Certificate issuer:       /CN=1c8f0fea-4d37-4154-9909-d7fb16d78856
Certificate serial:       010D0C9F43285849C0A4CCB9798D463D0793A880
Authority key identifier: 99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/35ac175d-d37d-3848-97bf-95b3456aee02.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     401478
IP address blocks:        2604:3a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:cc:b9:79:8d:46:3d:07:93:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c8f0fea-4d37-4154-9909-d7fb16d78856
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=9a56eaed-d569-459b-b994-019f9ad0f3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:8d:3d:ea:3a:6b:f8:02:72:92:df:ba:36:
                    5e:33:99:8b:40:fd:b2:10:2b:73:f0:aa:29:30:9d:
                    c5:09:59:9d:65:4c:83:87:a3:60:8e:bb:37:81:57:
                    4e:18:cf:1e:fe:1f:e8:96:0c:52:69:63:61:93:23:
                    65:67:32:9b:a3:77:bd:eb:9e:a5:f5:00:ed:5b:e6:
                    fb:8c:be:e5:09:cf:cb:39:a9:cc:e4:d0:35:f8:ec:
                    56:26:50:7e:ec:dd:ea:3f:54:6d:46:67:5a:79:ba:
                    55:7e:2c:53:21:34:06:50:ad:d6:96:80:ad:50:76:
                    f3:a5:0b:d7:58:75:17:20:f3:ad:b0:2c:7d:b5:8a:
                    6d:0c:03:2b:87:9d:15:61:f0:cf:23:2a:29:ee:ee:
                    24:7c:c4:32:4e:5e:e9:65:31:3a:9a:fc:08:93:d3:
                    f1:7e:34:91:97:27:2c:5b:2e:08:19:76:c8:b8:bc:
                    25:9c:3a:ad:36:b9:20:b3:d4:3a:e7:3e:ae:e2:ca:
                    7e:9c:d7:30:a2:5f:07:c0:69:e2:32:31:a4:13:d5:
                    8f:0f:b4:57:39:3b:7c:c3:55:fc:18:f5:91:da:ab:
                    9f:84:ea:31:62:ea:31:87:ff:e5:f9:42:c2:f4:15:
                    47:f6:dd:c4:ed:f2:54:4b:86:d4:bf:93:b1:6c:79:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:05:D1:05:7E:F3:31:C6:B6:E1:49:6D:DF:B6:97:A9:FC:CA:A2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/35ac175d-d37d-3848-97bf-95b3456aee02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl

            X509v3 Authority Key Identifier:
                keyid:99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:47:ba:62:a0:25:38:f7:19:7e:41:b4:75:fc:99:d8:73:8b:
         61:56:d0:ce:ed:36:e6:c8:3c:8f:20:a3:54:a5:7a:28:bb:dc:
         cf:e9:8a:76:d0:a8:8d:61:54:91:b5:18:15:c0:28:8c:69:1b:
         13:31:ef:fa:ce:b4:22:55:a8:d0:1c:d2:cb:da:dd:5e:71:e9:
         8e:0e:e7:6f:4e:13:9e:9c:a5:c3:a7:85:79:35:44:9d:cb:2b:
         3c:27:34:0b:4d:38:c7:9b:17:ce:25:f0:df:67:0f:2f:eb:ea:
         b2:d7:78:5d:77:8d:99:dc:e4:a2:67:c2:9a:61:35:c0:64:7f:
         de:d2:7c:7c:af:6e:ea:e3:a2:ab:ca:fb:d3:64:73:85:ed:2e:
         64:85:5f:59:f8:82:8a:da:e8:18:60:f4:bb:e6:6e:71:06:73:
         a2:be:69:f4:b6:67:b8:9b:e3:b5:1e:b5:01:8d:ba:73:8b:a1:
         b0:85:1d:85:94:e0:3a:6d:f7:8e:ac:3b:2e:fb:38:57:86:a4:
         4a:13:11:5c:05:cc:75:20:2c:b4:aa:d2:5e:3d:c0:7f:cc:5d:
         b4:b1:20:5e:61:7c:88:71:45:6c:40:b9:7c:8a:ac:27:ea:05:
         a3:70:38:bf:d3:07:ef:04:71:19:ac:1d:b6:dd:33:0b:7d:35:
         65:67:05:7c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApMy5eY1GPQeTqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM4ZjBmZWEtNGQzNy00MTU0LTk5MDktZDdmYjE2ZDc4
ODU2MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
OWE1NmVhZWQtZDU2OS00NTliLWI5OTQtMDE5ZjlhZDBmM2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1CNPeo6a/gCcpLfujZeM5mLQP2yECtz8Kop
MJ3FCVmdZUyDh6Ngjrs3gVdOGM8e/h/olgxSaWNhkyNlZzKbo3e9656l9QDtW+b7
jL7lCc/LOanM5NA1+OxWJlB+7N3qP1RtRmdaebpVfixTITQGUK3WloCtUHbzpQvX
WHUXIPOtsCx9tYptDAMrh50VYfDPIyop7u4kfMQyTl7pZTE6mvwIk9PxfjSRlycs
Wy4IGXbIuLwlnDqtNrkgs9Q65z6u4sp+nNcwol8HwGniMjGkE9WPD7RXOTt8w1X8
GPWR2qufhOoxYuoxh//l+ULC9BVH9t3E7fJUS4bUv5OxbHkxWwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFIF0QV+8zHGtuFJbd+2l6n8yqI1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzhm
MGZlYS00ZDM3LTQxNTQtOTkwOS1kN2ZiMTZkNzg4NTYvMzVhYzE3NWQtZDM3ZC0z
ODQ4LTk3YmYtOTViMzQ1NmFlZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM4ZjBmZWEtNGQzNy00MTU0LTk5
MDktZDdmYjE2ZDc4ODU2LzFjOGYwZmVhLTRkMzctNDE1NC05OTA5LWQ3ZmIxNmQ3
ODg1Ni5jcmwwHwYDVR0jBBgwFoAUmbHNPC3VXnALETGq017gYgdqFFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzhmMGZlYS00ZDM3LTQxNTQtOTkwOS1kN2Zi
MTZkNzg4NTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQDoDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCMR7pioCU49xl+QbR1/JnYc4thVtDO7TbmyDyPIKNUpXoou9zP6Yp2
0KiNYVSRtRgVwCiMaRsTMe/6zrQiVajQHNLL2t1ecemODudvThOenKXDp4V5NUSd
yys8JzQLTTjHmxfOJfDfZw8v6+qy13hdd42Z3OSiZ8KaYTXAZH/e0nx8r27q46Kr
yvvTZHOF7S5khV9Z+IKK2ugYYPS75m5xBnOivmn0tme4m+O1HrUBjbpzi6GwhR2F
lOA6bfeOrDsu+zhXhqRKExFcBcx1ICy0qtJePcB/zF20sSBeYXyIcUVsQLl8iqwn
6gWjcDi/0wfvBHEZrB223TMLfTVlZwV8
-----END CERTIFICATE-----
Generated at Sun May 11 04:37:27 2025 by rpki-client