Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/5b195705-a590-3c4a-aefd-6bdb153d07d5.roa
File:                     5b195705-a590-3c4a-aefd-6bdb153d07d5.roa (raw, json)
Hash identifier:          LHtD4OYGVWK4EL1G81qUvhORDBzB5EJlr5DQIX/9s1s=
Subject key identifier:   9A:47:F2:5E:14:D1:02:F5:D0:0F:50:EC:7A:31:A9:47:70:4C:F2:48
Certificate issuer:       /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial:       010D0C9F43285849849EF9480A79718B8FF7DE00
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/5b195705-a590-3c4a-aefd-6bdb153d07d5.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     833
IP address blocks:        2602:fc19::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f9:48:0a:79:71:8b:8f:f7:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=6d5604a4-09fc-4e23-9a33-a7c454bae172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:e6:26:1a:f3:69:5b:8d:70:e4:76:1e:e0:
                    66:48:60:30:4a:1e:91:76:39:9a:75:f8:db:c3:50:
                    76:f4:b4:05:b4:91:b8:aa:40:3e:90:e0:0c:ac:89:
                    6a:a8:d5:fd:4a:41:5c:9f:b2:9b:8e:2e:4c:46:77:
                    e2:0a:d3:97:9d:cf:22:e2:15:ec:f8:1e:8f:65:97:
                    a7:a9:6e:e5:d8:cb:8c:95:05:0a:64:4f:21:20:3b:
                    ce:f1:90:ad:18:eb:5d:bf:a1:c0:e3:ba:4d:ab:eb:
                    4b:96:e2:72:cd:47:92:6c:07:72:a4:72:bc:77:40:
                    3e:4c:45:32:17:16:4a:06:ec:4b:41:77:59:5b:0f:
                    17:c3:c1:8f:a5:32:5a:11:f6:02:84:cc:d6:d0:e5:
                    53:83:7d:7c:69:bf:35:69:b6:79:c9:89:37:ac:52:
                    02:23:83:3d:f9:af:a0:7f:7e:02:d1:44:d9:6c:33:
                    b9:ee:4f:65:e9:a5:cf:01:cc:4a:e0:31:b9:2e:df:
                    51:13:c6:fd:d0:91:a8:ac:ec:25:3e:e2:80:0c:f1:
                    f4:aa:d1:9f:06:dd:0b:0c:0f:43:d9:b9:88:63:99:
                    30:d8:cf:de:fc:a8:fc:e4:35:d7:4b:90:e7:26:cb:
                    23:52:7e:fd:5f:93:de:e7:73:42:83:1c:e4:ce:70:
                    89:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:47:F2:5E:14:D1:02:F5:D0:0F:50:EC:7A:31:A9:47:70:4C:F2:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/5b195705-a590-3c4a-aefd-6bdb153d07d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc19::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:c8:1d:9e:18:61:f2:b6:1b:c2:e0:31:06:78:44:7a:53:
         cd:8f:49:fb:b4:6f:1a:dc:92:26:a8:01:a8:6d:d0:7a:23:1a:
         e9:ed:ec:1b:4b:d6:04:3f:b5:fd:c4:53:45:25:4c:a6:6c:a6:
         57:49:d4:18:a8:5a:c9:47:a2:d7:5c:a0:c6:a0:e8:aa:f7:65:
         db:3a:5a:27:b9:96:4b:9e:43:99:dc:33:b6:17:48:f6:dd:12:
         33:79:d1:e8:e9:c7:24:b1:f5:8b:1e:81:15:ec:3d:31:36:60:
         3d:7b:68:dd:45:90:6f:b8:c6:0f:71:31:6e:a6:c1:90:5c:c3:
         01:20:39:cd:d0:a6:70:0d:47:6b:f3:bb:15:cb:1b:ba:e2:61:
         08:93:c0:1b:c6:e7:5a:44:42:1c:2d:91:8e:7d:3c:47:48:60:
         1d:5e:05:c7:aa:bb:51:9f:3d:14:ca:d1:82:09:b0:95:3e:00:
         0a:89:c3:8b:88:b7:ea:99:33:e6:64:43:b6:69:7a:ca:8c:5d:
         35:d0:9a:32:3e:7c:a0:04:ca:5f:75:12:24:84:d9:cb:f5:b2:
         75:34:cf:f4:3c:30:28:ec:cf:d7:45:4f:fc:c5:e0:a3:04:ca:
         7e:bf:24:0b:c0:c4:46:e9:ea:44:82:7e:12:b4:71:8b:dc:33:
         14:df:d4:7f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmEnvlICnlxi4/33gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4
YzUwMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk
NmQ1NjA0YTQtMDlmYy00ZTIzLTlhMzMtYTdjNDU0YmFlMTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6rmJhrzaVuNcOR2HuBmSGAwSh6Rdjmadfjb
w1B29LQFtJG4qkA+kOAMrIlqqNX9SkFcn7Kbji5MRnfiCtOXnc8i4hXs+B6PZZen
qW7l2MuMlQUKZE8hIDvO8ZCtGOtdv6HA47pNq+tLluJyzUeSbAdypHK8d0A+TEUy
FxZKBuxLQXdZWw8Xw8GPpTJaEfYChMzW0OVTg318ab81abZ5yYk3rFICI4M9+a+g
f34C0UTZbDO57k9l6aXPAcxK4DG5Lt9RE8b90JGorOwlPuKADPH0qtGfBt0LDA9D
2bmIY5kw2M/e/Kj85DXXS5DnJssjUn79X5Pe53NCgxzkznCJywIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJpH8l4U0QL10A9Q7HoxqUdwTPJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4
ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvNWIxOTU3MDUtYTU5MC0z
YzRhLWFlZmQtNmJkYjE1M2QwN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk
ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy
OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh
ZWExMjhjNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8GQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbqHIHZ4YYfK2G8LgMQZ4RHpTzY9J+7RvGtySJqgBqG3QeiMa6e3s
G0vWBD+1/cRTRSVMpmymV0nUGKhayUei11ygxqDoqvdl2zpaJ7mWS55DmdwzthdI
9t0SM3nR6OnHJLH1ix6BFew9MTZgPXto3UWQb7jGD3ExbqbBkFzDASA5zdCmcA1H
a/O7FcsbuuJhCJPAG8bnWkRCHC2Rjn08R0hgHV4Fx6q7UZ89FMrRggmwlT4AConD
i4i36pkz5mRDtml6yoxdNdCaMj58oATKX3USJITZy/WydTTP9DwwKOzP10VP/MXg
owTKfr8kC8DERunqRIJ+ErRxi9wzFN/Ufw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:52 2025 by rpki-client