Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7861eb62-18d8-313b-8576-6f10f89a37de.roa
File:                     7861eb62-18d8-313b-8576-6f10f89a37de.roa (raw, json)
Hash identifier:          iOQwHHAG663SST4ptq4DxmkFT0+ALipaJ3CS8YjyvH4=
Subject key identifier:   E8:46:19:AF:AD:F6:3F:DB:C8:43:EE:7F:00:D9:E7:50:82:F5:24:AB
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F432858498FC9BCA6B28F18B8104FD200
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7861eb62-18d8-313b-8576-6f10f89a37de.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2620:117:bfc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:bc:a6:b2:8f:18:b8:10:4f:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=69d4ca77-0e9f-4dda-ba38-00fde78874fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:5d:8b:a9:c7:2a:ea:24:33:3b:e8:89:6a:
                    24:f1:5f:08:b7:34:74:99:6d:c5:15:51:ed:ef:03:
                    d1:21:8a:cf:c0:d5:d3:40:2a:6d:1c:a6:ef:a5:ad:
                    19:19:a9:af:bb:5d:70:ae:7e:32:cf:e4:f5:d4:0d:
                    a4:97:45:da:7e:bc:4c:ad:f1:c1:82:9a:4d:70:4d:
                    2f:4e:84:93:19:ba:a6:a3:ae:32:00:e6:79:4c:47:
                    df:13:4a:63:55:58:42:5b:33:96:d5:8b:f4:cf:88:
                    d8:0a:b5:99:9e:24:36:18:8f:a9:15:2c:fd:d5:5d:
                    81:33:39:6a:4a:46:dd:ec:b3:92:e2:fc:24:b0:e4:
                    6d:b1:3b:7a:c2:38:99:1b:ca:b4:f4:60:81:81:94:
                    a9:b2:46:e9:c0:93:59:38:bb:e3:19:6a:d9:f5:dd:
                    0e:96:c7:dd:05:82:e1:a6:17:f8:5b:91:04:a6:5d:
                    f0:fe:d6:6b:a4:64:9a:90:f2:68:a8:0e:80:20:fc:
                    31:5a:c9:02:3b:79:a6:d1:f6:a3:77:f8:9c:0f:0c:
                    fc:63:72:06:44:58:da:32:ec:ca:71:7d:84:0a:47:
                    ca:62:3b:4d:6d:01:a8:54:18:d6:a8:92:85:cc:c5:
                    1d:4c:57:fe:fe:d2:c4:f0:6a:91:f3:f0:aa:b2:95:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:19:AF:AD:F6:3F:DB:C8:43:EE:7F:00:D9:E7:50:82:F5:24:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7861eb62-18d8-313b-8576-6f10f89a37de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:bfc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:8e:a8:9a:14:23:ef:31:2d:51:29:59:63:a0:ca:71:c2:
         cb:55:3a:97:b2:37:6d:1f:f5:47:60:ec:27:e8:53:73:d1:a7:
         05:11:8c:7b:d3:14:6a:d3:00:c1:0b:ab:d1:ec:61:75:76:3f:
         81:be:ae:58:63:c5:a5:49:d2:b7:8a:03:e3:ac:a6:ed:6b:3c:
         aa:12:0a:0a:8b:18:ac:43:54:22:29:4c:09:d0:4c:ff:fd:dc:
         44:ac:51:3b:ef:62:2f:e8:c4:b5:0b:0b:79:a6:4c:45:b8:1d:
         ef:6f:14:33:33:42:0c:e5:77:3a:7f:7e:b8:84:6c:45:fb:3a:
         7a:80:31:43:d5:87:d9:d9:c0:18:3d:8c:78:ed:3f:48:88:78:
         e9:c9:68:1e:4f:47:e6:09:db:b2:56:16:1c:b8:d0:be:20:4c:
         59:a2:52:7a:f1:86:7f:64:2e:03:1e:bd:a4:05:6f:4a:f8:83:
         04:7e:88:8d:77:c7:e4:31:c5:6a:08:98:c2:a2:3f:5b:86:8e:
         27:0c:33:06:94:fd:43:67:18:08:82:ef:b0:9e:ce:7d:aa:94:
         c4:57:54:01:7c:f5:fb:d7:29:04:92:48:31:28:85:ac:74:a8:
         df:b5:10:03:68:11:e7:8d:35:97:27:e7:ac:e6:bb:d5:b2:3a:
         67:13:40:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmPybymso8YuBBP0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ4NjVjNmEtNTRjOC00ZjU4LWFjODAtOWY5YmRkMzY4
ZWUzMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk
NjlkNGNhNzctMGU5Zi00ZGRhLWJhMzgtMDBmZGU3ODg3NGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFFdi6nHKuokMzvoiWok8V8ItzR0mW3FFVHt
7wPRIYrPwNXTQCptHKbvpa0ZGamvu11wrn4yz+T11A2kl0XafrxMrfHBgppNcE0v
ToSTGbqmo64yAOZ5TEffE0pjVVhCWzOW1Yv0z4jYCrWZniQ2GI+pFSz91V2BMzlq
Skbd7LOS4vwksORtsTt6wjiZG8q09GCBgZSpskbpwJNZOLvjGWrZ9d0OlsfdBYLh
phf4W5EEpl3w/tZrpGSakPJoqA6AIPwxWskCO3mm0fajd/icDwz8Y3IGRFjaMuzK
cX2ECkfKYjtNbQGoVBjWqJKFzMUdTFf+/tLE8GqR8/CqspVBJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOhGGa+t9j/byEPufwDZ51CC9SSrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2
NWM2YS01NGM4LTRmNTgtYWM4MC05ZjliZGQzNjhlZTMvNzg2MWViNjItMThkOC0z
MTNiLTg1NzYtNmYxMGY4OWEzN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmQ4NjVjNmEtNTRjOC00ZjU4LWFj
ODAtOWY5YmRkMzY4ZWUzL2ZkODY1YzZhLTU0YzgtNGY1OC1hYzgwLTlmOWJkZDM2
OGVlMy5jcmwwHwYDVR0jBBgwFoAUnF7bhNrXtUYQZQi78yRa+HEfzo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2NWM2YS01NGM4LTRmNTgtYWM4MC05Zjli
ZGQzNjhlZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABF7/A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHsfjqiaFCPvMS1RKVljoMpxwstVOpeyN20f9Udg7CfoU3PRpwUR
jHvTFGrTAMELq9HsYXV2P4G+rlhjxaVJ0reKA+Ospu1rPKoSCgqLGKxDVCIpTAnQ
TP/93ESsUTvvYi/oxLULC3mmTEW4He9vFDMzQgzldzp/friEbEX7OnqAMUPVh9nZ
wBg9jHjtP0iIeOnJaB5PR+YJ27JWFhy40L4gTFmiUnrxhn9kLgMevaQFb0r4gwR+
iI13x+QxxWoImMKiP1uGjicMMwaU/UNnGAiC77Cezn2qlMRXVAF89fvXKQSSSDEo
hax0qN+1EANoEeeNNZcn56zmu9WyOmcTQBU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:38 2025 by rpki-client