Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/21e0d190-d3b8-316b-bcd9-8ac4f8be53c8.roa
File:                     21e0d190-d3b8-316b-bcd9-8ac4f8be53c8.roa (raw, json)
Hash identifier:          BjyRuBcbL4gAIE4llt6/+c+T16chsi0pnj7ORgSq4x0=
Subject key identifier:   91:94:C1:88:1E:93:A2:C7:27:79:AD:10:DA:53:C0:48:C8:DA:D0:79
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584988CF2BB49CDF8E19A51DEF40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/21e0d190-d3b8-316b-bcd9-8ac4f8be53c8.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     8987
IP address blocks:        2605:4300:2c19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:2b:b4:9c:df:8e:19:a5:1d:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=9e146a1f-aee9-4529-b32c-29540f3a5a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:f3:f3:ea:53:10:7a:b8:cf:08:d4:23:01:
                    10:0a:e2:39:d3:1d:ec:4d:85:36:d9:bf:98:81:ca:
                    80:f6:58:8a:05:66:8f:e4:ef:27:a2:bd:58:22:76:
                    02:83:43:8f:0e:b1:02:aa:14:cd:a0:ff:a1:ce:6a:
                    32:e2:98:86:28:87:76:4d:16:30:1c:44:5a:22:c6:
                    f3:4a:82:e5:92:40:c3:e9:21:40:f4:78:5c:06:3e:
                    eb:1e:cc:dd:54:5f:f9:cb:bb:60:22:cf:0f:68:c4:
                    47:18:5a:4d:2d:18:0d:33:6d:93:af:21:d6:76:4d:
                    6f:be:a6:0f:cc:c1:ab:e1:5f:0b:55:02:11:54:dc:
                    7f:3b:8d:cf:1e:de:9c:7e:33:95:f5:5a:6a:16:e9:
                    a0:e0:fd:30:05:b0:9f:31:12:2a:3e:fe:ba:3d:0d:
                    68:dc:db:64:49:d2:1c:56:1f:cb:e4:59:ae:99:8a:
                    4f:d1:5a:c0:ee:e3:c0:45:8c:d0:6c:e8:18:17:b2:
                    31:91:8e:86:a9:b4:12:b3:ea:b9:a7:2d:a7:22:d6:
                    a1:7e:42:8a:02:1b:66:8d:69:18:dc:4d:3e:f7:87:
                    f8:03:ae:ae:9e:4a:6d:32:10:6d:8e:22:76:51:ab:
                    13:cf:67:e8:b9:ae:e0:ad:a8:a7:1b:83:e9:ed:67:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:94:C1:88:1E:93:A2:C7:27:79:AD:10:DA:53:C0:48:C8:DA:D0:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/21e0d190-d3b8-316b-bcd9-8ac4f8be53c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:a4:3d:0e:86:7e:3c:fb:d2:8f:4a:8f:81:9e:cf:52:47:
         00:30:8e:5d:5d:7f:dc:04:b6:40:73:ed:f3:83:63:e7:61:79:
         74:70:1c:74:f1:c1:26:ee:d2:1a:ed:61:29:d2:94:37:1d:1b:
         c6:68:f7:b3:39:e0:a9:3d:ca:08:bd:cb:20:6e:8d:10:97:b6:
         02:28:f4:25:c4:3e:4c:1d:68:b6:e8:89:b7:81:36:a6:14:0e:
         d6:b9:67:8f:74:83:02:35:5a:b5:6c:1f:04:84:ba:0a:c5:e3:
         34:11:60:b7:35:5d:aa:28:7f:0e:d5:7a:37:10:91:06:7b:81:
         31:2a:1b:61:79:3e:9b:f8:9d:f8:80:85:ec:31:0e:ac:61:c0:
         5a:73:b5:10:cf:f6:7a:2b:61:64:55:3d:db:1e:5b:e1:9a:b1:
         66:f2:a2:e6:d0:d2:87:5c:4a:a8:f0:ae:82:c8:de:d1:82:0f:
         36:56:73:a9:1a:55:0c:cc:ea:32:b6:8c:98:35:7a:88:52:9f:
         96:8d:ad:2d:46:0e:35:6c:a2:8c:a9:83:45:76:b9:58:53:ab:
         11:57:fe:9b:d9:56:03:6d:f9:a6:50:80:6b:dd:ad:54:36:7e:
         27:f0:12:9b:99:3b:1a:2a:ef:dd:a2:1c:cf:52:88:38:76:65:
         84:49:d1:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzyu0nN+OGaUd70AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
OWUxNDZhMWYtYWVlOS00NTI5LWIzMmMtMjk1NDBmM2E1YTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofnz8+pTEHq4zwjUIwEQCuI50x3sTYU22b+Y
gcqA9liKBWaP5O8nor1YInYCg0OPDrECqhTNoP+hzmoy4piGKId2TRYwHERaIsbz
SoLlkkDD6SFA9HhcBj7rHszdVF/5y7tgIs8PaMRHGFpNLRgNM22TryHWdk1vvqYP
zMGr4V8LVQIRVNx/O43PHt6cfjOV9VpqFumg4P0wBbCfMRIqPv66PQ1o3NtkSdIc
Vh/L5FmumYpP0VrA7uPARYzQbOgYF7IxkY6GqbQSs+q5py2nItahfkKKAhtmjWkY
3E0+94f4A66unkptMhBtjiJ2UasTz2foua7grainG4Pp7WfsTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJGUwYgek6LHJ3mtENpTwEjI2tB5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjFlMGQxOTAtZDNiOC0z
MTZiLWJjZDktOGFjNGY4YmU1M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACtxpD0Ohn48+9KPSo+Bns9SRwAwjl1df9wEtkBz7fODY+dheXRw
HHTxwSbu0hrtYSnSlDcdG8Zo97M54Kk9ygi9yyBujRCXtgIo9CXEPkwdaLboibeB
NqYUDta5Z490gwI1WrVsHwSEugrF4zQRYLc1Xaoofw7VejcQkQZ7gTEqG2F5Ppv4
nfiAhewxDqxhwFpztRDP9norYWRVPdseW+GasWbyoubQ0odcSqjwroLI3tGCDzZW
c6kaVQzM6jK2jJg1eohSn5aNrS1GDjVsooypg0V2uVhTqxFX/pvZVgNt+aZQgGvd
rVQ2fifwEpuZOxoq792iHM9SiDh2ZYRJ0f8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:52:11 2025 by rpki-client