Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7e610c00-c468-3627-9e71-365e754c1393.roa
File:                     7e610c00-c468-3627-9e71-365e754c1393.roa (raw, json)
Hash identifier:          cA0YM3uq8QNBk0nLyD6KYx4ggHpWhFBJJcAK/3TXKjI=
Subject key identifier:   62:AF:DF:ED:B4:22:31:4D:15:C2:B8:85:1C:79:BC:20:B0:3D:FF:D6
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285849C20A1A173BF718665858FA80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7e610c00-c468-3627-9e71-365e754c1393.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     0
IP address blocks:        2001:504:13:5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1a:17:3b:f7:18:66:58:58:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=86be88cb-213f-4015-a0df-b07d37698a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:96:57:e8:b9:81:c1:03:06:55:96:99:3e:
                    3a:b2:04:c3:9f:18:9b:79:f2:1f:aa:86:3b:04:41:
                    77:b1:6a:6f:fd:1b:67:60:ac:e0:18:13:78:06:1c:
                    95:88:99:5d:5b:2c:0b:9b:59:b4:0e:38:41:1d:bd:
                    8d:73:ec:86:99:7e:5e:93:5c:d6:47:ae:ec:74:15:
                    02:5f:cf:58:43:e2:64:88:36:55:cd:d3:0e:ac:23:
                    7e:c8:f3:fe:ab:d8:22:70:83:6b:cd:da:b8:fc:86:
                    eb:86:7e:d5:4a:cb:3e:16:90:42:ad:41:b8:1d:86:
                    00:98:36:4b:db:ec:d8:71:2f:7e:f6:0f:54:d0:c0:
                    29:5e:43:44:b2:20:8a:33:4d:a4:96:b1:08:f9:2a:
                    db:a5:9f:c3:b7:94:da:41:d8:cf:65:ea:67:07:fa:
                    b0:16:ed:38:38:a3:17:0e:55:c6:12:3d:14:4f:47:
                    a0:f5:6e:2b:0e:12:7d:15:31:7d:3b:e3:d5:da:3b:
                    60:ef:fb:c1:ef:ab:a4:8b:94:29:59:8e:e6:82:66:
                    34:b9:5f:25:cc:15:af:08:13:90:83:34:93:4b:88:
                    27:d3:a1:0a:eb:d5:a5:1e:5e:d2:51:32:bf:1a:df:
                    12:5d:87:49:35:84:bb:85:c4:b0:98:4a:37:ae:d2:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AF:DF:ED:B4:22:31:4D:15:C2:B8:85:1C:79:BC:20:B0:3D:FF:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7e610c00-c468-3627-9e71-365e754c1393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13:5::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:18:4b:31:25:67:98:47:16:f2:66:4b:47:15:7f:ef:14:28:
         84:59:15:a8:f9:99:81:22:c4:42:10:42:10:d2:87:52:ca:d9:
         09:bc:b9:62:16:1d:44:4e:7c:30:b2:33:a2:43:f7:b5:d6:1f:
         c6:4a:39:66:af:0a:20:46:7b:eb:58:ca:40:63:e3:a7:63:a0:
         60:6f:ed:f9:ea:80:2f:fe:23:74:81:df:9b:f3:f1:a5:05:57:
         8c:97:63:99:60:67:14:65:d5:aa:2f:5e:f7:ed:87:01:18:33:
         e1:e7:c8:84:6a:fe:86:ac:e4:3d:4f:95:f5:7c:62:95:de:dc:
         ce:61:67:45:dd:ea:9e:92:01:eb:e3:52:34:13:66:70:7e:7e:
         4f:ca:d7:74:9e:a7:73:ce:6f:b0:d4:c5:a5:52:a9:bd:ee:10:
         e1:6b:50:4b:64:78:1a:09:04:28:1a:82:df:20:7f:10:ca:f5:
         23:84:a4:bf:dd:70:17:82:39:35:23:bb:f2:b8:01:4e:b2:85:
         8f:4a:e7:d0:02:bf:51:dc:2f:1d:9d:2a:04:88:27:9d:23:fa:
         f9:48:eb:e6:bf:fa:e3:70:72:b3:78:61:20:dd:9d:2c:cb:db:
         24:02:56:e5:df:96:fa:f2:17:fc:77:4c:90:a4:13:5e:d6:e3:
         39:a9:2e:f4
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEnCChoXO/cYZlhY+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ODZiZTg4Y2ItMjEzZi00MDE1LWEwZGYtYjA3ZDM3Njk4YTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMGWV+i5gcEDBlWWmT46sgTDnxibefIfqoY7
BEF3sWpv/RtnYKzgGBN4BhyViJldWywLm1m0DjhBHb2Nc+yGmX5ek1zWR67sdBUC
X89YQ+JkiDZVzdMOrCN+yPP+q9gicINrzdq4/Ibrhn7VSss+FpBCrUG4HYYAmDZL
2+zYcS9+9g9U0MApXkNEsiCKM02klrEI+SrbpZ/Dt5TaQdjPZepnB/qwFu04OKMX
DlXGEj0UT0eg9W4rDhJ9FTF9O+PV2jtg7/vB76uki5QpWY7mgmY0uV8lzBWvCBOQ
gzSTS4gn06EK69WlHl7SUTK/Gt8SXYdJNYS7hcSwmEo3rtKKqwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFGKv3+20IjFNFcK4hRx5vCCwPf/WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvN2U2MTBjMDAtYzQ2OC0z
NjI3LTllNzEtMzY1ZTc1NGMxMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBAAT
AAUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAUxhLMSVnmEcW8mZLRxV/7xQohFkVqPmZgSLEQhBCENKHUsrZ
Cby5YhYdRE58MLIzokP3tdYfxko5Zq8KIEZ761jKQGPjp2OgYG/t+eqAL/4jdIHf
m/PxpQVXjJdjmWBnFGXVqi9e9+2HARgz4efIhGr+hqzkPU+V9Xxild7czmFnRd3q
npIB6+NSNBNmcH5+T8rXdJ6nc85vsNTFpVKpve4Q4WtQS2R4GgkEKBqC3yB/EMr1
I4Skv91wF4I5NSO78rgBTrKFj0rn0AK/UdwvHZ0qBIgnnSP6+Ujr5r/643Bys3hh
IN2dLMvbJAJW5d+W+vIX/HdMkKQTXtbjOaku9A==
-----END CERTIFICATE-----
Generated at Tue May 6 06:17:32 2025 by rpki-client