Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/29d451b7-eec4-3ec4-893f-c79f12a5414c.roa
File:                     29d451b7-eec4-3ec4-893f-c79f12a5414c.roa (raw, json)
Hash identifier:          BPaStUTTejNUdSYvX4+1XB7uKjpsSmu3jDQvd2rVlk4=
Subject key identifier:   82:45:7B:92:9D:14:10:39:B3:11:1B:AF:51:56:75:DA:4E:74:5E:82
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285849AE266D20D11B8279CCDDE658
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/29d451b7-eec4-3ec4-893f-c79f12a5414c.roa
Signing time:             Mon 28 Apr 2025 22:01:54 +0000
ROA not before:           Mon 28 Apr 2025 22:01:54 +0000
ROA not after:            Sun 27 Jul 2025 22:01:54 +0000
asID:                     142046
IP address blocks:        2602:f9a9:b00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:26:6d:20:d1:1b:82:79:cc:dd:e6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Apr 28 22:01:54 2025 GMT
            Not After : Jul 27 22:01:54 2025 GMT
        Subject: CN=4fc04709-cabf-4116-a665-7ee90af835eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:c2:47:11:41:37:76:3c:b9:0d:c9:4a:b2:
                    c7:1e:94:95:db:75:5c:a3:26:e2:a8:99:39:0b:88:
                    3e:ee:c5:d3:c5:68:2e:8c:d1:08:e3:e4:9a:a1:16:
                    a9:33:72:25:20:08:6f:cb:6c:de:03:68:9e:41:f9:
                    8b:1f:4c:25:ff:27:f1:ac:5a:1f:d1:46:15:c3:8d:
                    41:f5:ab:f5:82:fe:19:4a:c0:73:77:2e:c8:6c:0d:
                    9f:90:15:c3:17:bc:bb:38:1c:0c:d8:b9:d9:84:d2:
                    5a:c7:e7:c3:01:6b:56:c8:8a:50:12:e7:32:8a:be:
                    2d:8f:07:a5:99:28:5a:53:91:ee:3f:77:5c:0a:a7:
                    8c:e1:d2:28:86:53:82:f6:87:a5:89:6c:af:18:06:
                    d0:1e:d4:b9:1d:92:e4:c8:16:ab:72:54:8f:52:f1:
                    00:72:87:23:b9:e4:18:fd:0f:8a:ae:f2:6f:fb:bc:
                    12:42:37:60:86:2b:17:cc:13:82:e9:aa:7e:f1:53:
                    40:33:45:35:c8:a0:40:f2:85:78:ea:d0:8e:6e:ec:
                    d0:5b:c4:d6:8b:c4:04:81:13:23:39:dd:04:7f:c7:
                    2a:39:7e:01:ae:75:1d:29:b6:72:2b:3d:9c:86:b8:
                    dc:66:33:0c:62:73:8a:07:cd:aa:62:ea:42:40:d0:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:7B:92:9D:14:10:39:B3:11:1B:AF:51:56:75:DA:4E:74:5E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/29d451b7-eec4-3ec4-893f-c79f12a5414c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:b00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:ac:3d:43:a1:bc:db:34:ec:b4:bf:55:8d:4a:54:dd:30:
         4e:50:7f:33:2c:16:d2:dc:a3:87:8b:27:52:03:ed:4e:46:71:
         8c:aa:ec:a1:d1:e1:d3:39:58:22:8d:56:c4:06:97:0a:ad:8c:
         f1:1c:ec:46:72:d1:bf:fb:e8:33:0d:d3:22:4e:fa:bd:c0:d1:
         6c:22:9e:5b:1a:ae:70:76:7f:5a:10:09:75:8c:17:0b:d4:f8:
         31:97:3c:94:41:bc:ca:11:b2:1d:ff:f0:eb:fd:a1:9f:de:37:
         e6:7f:d1:49:99:06:18:9b:6b:a5:41:19:57:7c:28:d8:22:69:
         17:bd:ea:e1:f4:db:ee:0a:dd:71:96:4f:08:ab:cf:e8:b6:cc:
         c9:7c:7f:e1:35:64:26:bb:ea:b4:ef:ab:2c:3f:35:cc:9f:31:
         3b:a1:d9:6b:5d:d5:62:50:70:58:02:c5:51:ec:5e:d2:1d:bc:
         14:1a:25:58:ef:53:17:41:4d:8f:39:38:99:f8:87:73:14:b9:
         b8:e6:2d:d3:43:45:51:27:0f:a3:12:3f:16:53:7d:60:50:9e:
         35:2a:69:77:e2:06:e8:6a:f4:07:45:0b:5e:28:e2:42:6e:2e:
         eb:a3:98:44:31:03:d7:5b:fc:80:6b:7b:a6:70:f4:0a:04:e7:
         91:f6:62:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmuJm0g0RuCeczd5lgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi
MWEyMB4XDTI1MDQyODIyMDE1NFoXDTI1MDcyNzIyMDE1NFowLzEtMCsGA1UEAxMk
NGZjMDQ3MDktY2FiZi00MTE2LWE2NjUtN2VlOTBhZjgzNWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa7CRxFBN3Y8uQ3JSrLHHpSV23VcoybiqJk5
C4g+7sXTxWgujNEI4+SaoRapM3IlIAhvy2zeA2ieQfmLH0wl/yfxrFof0UYVw41B
9av1gv4ZSsBzdy7IbA2fkBXDF7y7OBwM2LnZhNJax+fDAWtWyIpQEucyir4tjwel
mShaU5HuP3dcCqeM4dIohlOC9oeliWyvGAbQHtS5HZLkyBarclSPUvEAcocjueQY
/Q+KrvJv+7wSQjdghisXzBOC6ap+8VNAM0U1yKBA8oV46tCObuzQW8TWi8QEgRMj
Od0Ef8cqOX4BrnUdKbZyKz2chrjcZjMMYnOKB82qYupCQNAV1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIJFe5KdFBA5sxEbr1FWddpOdF6CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy
NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvMjlkNDUxYjctZWVjNC0z
ZWM0LTg5M2YtYzc5ZjEyYTU0MTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky
MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi
YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk
MTBiYmIxYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5qQsA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAvlrD1DobzbNOy0v1WNSlTdME5QfzMsFtLco4eLJ1ID7U5GcYyq
7KHR4dM5WCKNVsQGlwqtjPEc7EZy0b/76DMN0yJO+r3A0WwinlsarnB2f1oQCXWM
FwvU+DGXPJRBvMoRsh3/8Ov9oZ/eN+Z/0UmZBhiba6VBGVd8KNgiaRe96uH02+4K
3XGWTwirz+i2zMl8f+E1ZCa76rTvqyw/NcyfMTuh2Wtd1WJQcFgCxVHsXtIdvBQa
JVjvUxdBTY85OJn4h3MUubjmLdNDRVEnD6MSPxZTfWBQnjUqaXfiBuhq9AdFC14o
4kJuLuujmEQxA9db/IBre6Zw9AoE55H2YgI=
-----END CERTIFICATE-----
Generated at Fri May 9 21:59:45 2025 by rpki-client