Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/41eef9e7-05dd-3353-85e0-443a2845f0ea.roa
File:                     41eef9e7-05dd-3353-85e0-443a2845f0ea.roa (raw, json)
Hash identifier:          swDHA9bmAoN0ByM8Ejjd4WGxxY4jnqd8U4flDwfPsRc=
Subject key identifier:   B9:2E:33:3A:7D:3E:DC:6C:F8:B4:34:27:E9:62:E3:C2:5A:9B:D7:76
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F43285849BC74A65FE796F053FF0DE870
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/41eef9e7-05dd-3353-85e0-443a2845f0ea.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     18934
IP address blocks:        2605:9a40:68::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:a6:5f:e7:96:f0:53:ff:0d:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=f0719e1a-009e-446c-8d0e-9652d4d80e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:bb:ef:64:ca:82:ad:a7:1a:59:15:37:0f:
                    32:8e:c6:98:58:2b:4d:fc:f0:25:ef:6a:61:91:fe:
                    77:8f:81:03:57:ae:ba:4c:8d:46:17:21:7e:06:44:
                    ea:45:e6:b5:39:ae:82:d2:60:95:0e:bf:6e:de:be:
                    8e:a7:5f:71:27:c0:c0:f5:56:f6:87:3e:03:e0:fc:
                    51:39:7c:51:21:8f:b6:ee:e0:ba:35:46:87:d1:e4:
                    ce:97:17:5b:88:a6:1d:70:38:42:86:07:a1:ad:30:
                    9b:db:2c:8a:e8:94:e3:cb:66:4d:16:0b:e0:4e:98:
                    d1:ce:96:6c:57:32:f4:93:e9:60:6f:eb:2b:15:8f:
                    92:81:db:62:90:15:e1:c4:1d:2d:f1:a7:2c:81:04:
                    00:46:fe:c2:d1:d2:01:5e:18:84:e1:ab:1b:6f:20:
                    16:97:bc:e7:13:1e:bd:af:82:ce:8f:95:38:c5:79:
                    5c:20:25:79:cc:00:cb:af:99:bc:4c:9f:c6:88:b8:
                    cb:8f:ca:f9:fb:36:da:fa:50:54:41:47:d8:c2:bd:
                    ce:50:81:61:b3:b4:56:7a:3c:a0:4d:1c:03:56:b3:
                    38:92:db:07:df:bd:03:ba:15:6d:cc:a0:80:2c:25:
                    59:21:74:3b:0d:7e:9c:80:90:84:5c:c7:af:5e:4c:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2E:33:3A:7D:3E:DC:6C:F8:B4:34:27:E9:62:E3:C2:5A:9B:D7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/41eef9e7-05dd-3353-85e0-443a2845f0ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a40:68::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:7c:ed:c8:87:f4:f1:19:31:76:97:c4:9d:99:52:1c:5a:
         9e:89:1a:37:d2:a0:59:06:73:1b:b5:a6:aa:7f:79:76:7b:76:
         db:85:f9:ce:08:a2:81:98:4f:11:4e:eb:f8:cf:60:06:e0:08:
         c3:f1:b8:11:ae:97:ae:e1:0b:e5:df:da:1b:ff:3d:6e:51:34:
         10:75:bc:90:46:25:dd:33:2e:ab:90:3b:17:b2:a8:45:51:cf:
         83:b2:a9:18:4d:ee:a9:21:e3:2a:f9:37:1d:23:84:b8:03:94:
         b1:20:8e:49:16:be:60:52:09:35:fd:9e:d9:c0:2c:a4:07:1d:
         b4:d5:94:c4:42:e7:d3:3a:f4:e3:5f:92:1f:b8:35:fa:9b:40:
         a9:13:a9:39:95:cc:7b:bf:1e:2e:42:d2:60:9e:55:6c:ac:26:
         10:89:62:27:b2:b6:92:c6:c3:a4:fe:28:07:ab:69:20:a5:90:
         19:32:d9:17:63:68:c3:18:b3:b5:6f:ca:14:37:5c:2f:01:8a:
         6e:6a:65:6a:db:7b:fc:d6:72:77:7b:46:15:e3:6a:a4:fc:fd:
         2f:1d:c2:1d:f7:00:94:9e:3d:2a:d1:ac:bc:1f:54:50:64:fa:
         1d:33:17:bb:9c:b7:06:e7:22:38:b2:50:bf:8a:94:a7:1f:5e:
         c2:08:9f:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm8dKZf55bwU/8N6HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk
YjdmMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk
ZjA3MTllMWEtMDA5ZS00NDZjLThkMGUtOTY1MmQ0ZDgwZTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFq772TKgq2nGlkVNw8yjsaYWCtN/PAl72ph
kf53j4EDV666TI1GFyF+BkTqRea1Oa6C0mCVDr9u3r6Op19xJ8DA9Vb2hz4D4PxR
OXxRIY+27uC6NUaH0eTOlxdbiKYdcDhChgehrTCb2yyK6JTjy2ZNFgvgTpjRzpZs
VzL0k+lgb+srFY+SgdtikBXhxB0t8acsgQQARv7C0dIBXhiE4asbbyAWl7znEx69
r4LOj5U4xXlcICV5zADLr5m8TJ/GiLjLj8r5+zba+lBUQUfYwr3OUIFhs7RWejyg
TRwDVrM4ktsH370DuhVtzKCALCVZIXQ7DX6cgJCEXMevXkwCAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLkuMzp9Ptxs+LQ0J+li48Jam9d2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky
MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvNDFlZWY5ZTctMDVkZC0z
MzUzLTg1ZTAtNDQzYTI4NDVmMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0
OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj
ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz
NTgwY2RiN2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWaQABo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACBufO3Ih/TxGTF2l8SdmVIcWp6JGjfSoFkGcxu1pqp/eXZ7dtuF
+c4IooGYTxFO6/jPYAbgCMPxuBGul67hC+Xf2hv/PW5RNBB1vJBGJd0zLquQOxey
qEVRz4OyqRhN7qkh4yr5Nx0jhLgDlLEgjkkWvmBSCTX9ntnALKQHHbTVlMRC59M6
9ONfkh+4NfqbQKkTqTmVzHu/Hi5C0mCeVWysJhCJYieytpLGw6T+KAeraSClkBky
2RdjaMMYs7VvyhQ3XC8Bim5qZWrbe/zWcnd7RhXjaqT8/S8dwh33AJSePSrRrLwf
VFBk+h0zF7uctwbnIjiyUL+KlKcfXsIInzM=
-----END CERTIFICATE-----
Generated at Fri May 9 05:35:03 2025 by rpki-client