Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa
File:                     8e278363-35a1-3105-b8ef-b4d02bb5512b.roa (raw, json)
Hash identifier:          D1Zx3Cg4V4Y+CM8HTplXRlOoIXhvWN6JfBsJH22mISw=
Subject key identifier:   66:3B:34:79:2A:C1:A1:27:01:77:BE:FD:1F:2A:03:5E:6D:B5:0F:09
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F43285849BF3F5E0193CBFB1A37A42C80
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     32982
IP address blocks:        2607:f368:b004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:5e:01:93:cb:fb:1a:37:a4:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=94f0d02f-c3db-4887-8b88-815c124d4df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:81:ba:a2:7e:3f:68:b4:0d:2a:44:9c:7e:
                    a3:4c:30:f3:fc:6e:3f:9f:23:5c:f9:75:40:c1:45:
                    cc:f9:26:46:b4:39:c0:63:2e:9b:5a:0f:96:c6:f5:
                    44:d5:2f:ea:35:95:dd:2f:f8:4e:09:86:6d:98:4f:
                    0d:aa:fe:11:64:af:2b:c0:9c:ae:59:cb:c1:b8:e1:
                    6d:67:cd:fe:40:d9:c4:81:6d:3e:22:54:57:a4:32:
                    e5:59:dc:68:c8:ef:e2:3e:d6:fd:be:45:52:c7:60:
                    d1:68:a3:a3:f9:ef:c1:de:85:e9:37:13:e5:bd:0d:
                    75:2b:f1:18:8f:d4:d2:83:38:b8:d7:a5:f9:e0:bc:
                    78:c2:33:f3:3f:c8:a0:df:ac:37:3f:ef:58:56:37:
                    14:3d:07:f7:ff:dc:60:ef:08:af:02:03:5e:70:cd:
                    2f:c0:97:cc:7b:0b:19:a9:e9:93:27:62:2a:05:0a:
                    a0:9b:be:7e:e3:e8:ba:96:38:82:0c:d7:a9:f8:e8:
                    f4:37:58:79:7b:eb:89:a0:b6:61:06:73:eb:24:66:
                    1d:62:46:e6:4a:d1:3a:6d:6c:dd:bf:77:be:74:1a:
                    f3:9a:17:e4:f5:b4:1b:8c:56:63:fe:00:c5:36:d2:
                    4a:5d:6f:1e:fd:0d:b7:b2:46:4a:eb:4f:8c:34:48:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3B:34:79:2A:C1:A1:27:01:77:BE:FD:1F:2A:03:5E:6D:B5:0F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:b004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:d7:b1:56:29:07:0d:17:dd:e6:69:25:8b:ab:d6:53:c9:
         4c:3f:08:d0:6a:eb:d8:c0:ed:29:6c:47:00:89:ce:88:6f:10:
         b1:77:ed:4f:b3:23:74:68:e2:01:a4:6d:b4:65:97:64:ee:0b:
         0a:99:28:84:2a:8e:9a:ab:1b:37:8b:36:20:b7:e5:b8:c6:7d:
         ff:05:66:c1:bf:74:7b:d6:be:38:14:d5:76:26:8a:8d:4b:01:
         27:55:f6:8c:cf:c4:14:6f:c2:0c:b0:db:8d:71:93:a0:64:14:
         cf:26:69:74:99:89:ea:4f:05:cc:54:5b:72:c6:02:79:f7:99:
         e7:63:99:97:c1:c1:db:a4:6b:06:93:62:d7:00:e0:03:32:22:
         61:8d:2e:44:19:ee:36:7d:3f:ce:cf:a3:9c:a3:3c:e6:c9:53:
         fb:1f:71:81:5f:a5:80:d0:3b:84:58:56:40:43:5f:46:44:35:
         92:da:dc:81:e1:03:99:17:d8:da:a1:6e:1b:ca:fa:88:8f:6f:
         1c:8c:22:40:ee:67:4a:39:b5:5a:4e:4b:1d:e5:aa:ea:64:1c:
         c4:02:b8:25:30:7c:37:8b:20:7f:3b:90:64:a2:d4:e8:03:b2:
         37:e2:25:2e:04:2a:1b:d2:11:c9:e4:29:b0:ae:0d:10:ad:9c:
         f1:01:8f:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm/P14Bk8v7GjekLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
OTRmMGQwMmYtYzNkYi00ODg3LThiODgtODE1YzEyNGQ0ZGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBSBuqJ+P2i0DSpEnH6jTDDz/G4/nyNc+XVA
wUXM+SZGtDnAYy6bWg+WxvVE1S/qNZXdL/hOCYZtmE8Nqv4RZK8rwJyuWcvBuOFt
Z83+QNnEgW0+IlRXpDLlWdxoyO/iPtb9vkVSx2DRaKOj+e/B3oXpNxPlvQ11K/EY
j9TSgzi416X54Lx4wjPzP8ig36w3P+9YVjcUPQf3/9xg7wivAgNecM0vwJfMewsZ
qemTJ2IqBQqgm75+4+i6ljiCDNep+Oj0N1h5e+uJoLZhBnPrJGYdYkbmStE6bWzd
v3e+dBrzmhfk9bQbjFZj/gDFNtJKXW8e/Q23skZK60+MNEgAdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGY7NHkqwaEnAXe+/R8qA15ttQ8JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvOGUyNzgzNjMtMzVhMS0z
MTA1LWI4ZWYtYjRkMDJiYjU1MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzaLAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADTW17FWKQcNF93maSWLq9ZTyUw/CNBq69jA7SlsRwCJzohvELF3
7U+zI3Ro4gGkbbRll2TuCwqZKIQqjpqrGzeLNiC35bjGff8FZsG/dHvWvjgU1XYm
io1LASdV9ozPxBRvwgyw241xk6BkFM8maXSZiepPBcxUW3LGAnn3medjmZfBwduk
awaTYtcA4AMyImGNLkQZ7jZ9P87Po5yjPObJU/sfcYFfpYDQO4RYVkBDX0ZENZLa
3IHhA5kX2NqhbhvK+oiPbxyMIkDuZ0o5tVpOSx3lqupkHMQCuCUwfDeLIH87kGSi
1OgDsjfiJS4EKhvSEcnkKbCuDRCtnPEBj+g=
-----END CERTIFICATE-----
Generated at Sat May 10 02:12:46 2025 by rpki-client