Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
File:                     f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa (raw, json)
Hash identifier:          9mmBJ7321R0Zm9INObC/DwVTnnb4N+U3/kuvquehaHI=
Subject key identifier:   3B:2E:87:BD:87:11:33:D6:21:EE:04:A5:EA:39:F9:05:7B:63:53:2E
Certificate issuer:       /CN=17436076-857b-4889-82e9-22151c59a4b1
Certificate serial:       010D0C9F43285849FCAA81F426EC9D75D25E8320
Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     46644
IP address blocks:        2620:bf:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:81:f4:26:ec:9d:75:d2:5e:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=7ade0475-ce56-4b04-b6ca-25f5a48f1328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:e0:29:28:68:a2:db:0e:7c:34:68:ec:43:
                    d9:67:95:2c:cc:38:f5:6e:19:ce:dc:62:e2:cc:f2:
                    dc:9e:a7:1c:c6:01:fb:7b:a8:8e:51:bf:ce:61:da:
                    ab:b3:88:eb:74:2e:f2:17:cd:d5:f5:1d:69:1a:39:
                    70:b1:49:27:c1:6e:7c:33:fe:b6:94:d3:c0:d2:6f:
                    0f:a6:42:e7:f8:79:58:a2:45:1a:10:e9:cf:23:60:
                    d4:c7:ee:ac:4a:7e:aa:2f:9a:ac:38:41:f6:78:f6:
                    90:71:d0:a3:c6:57:95:a9:01:8f:29:dd:ca:8d:de:
                    62:ca:32:8c:c6:37:d0:dd:2f:74:61:b1:e1:a7:60:
                    b5:e5:1f:0f:96:5f:9d:cd:d0:ed:fa:c6:ea:4c:8b:
                    85:fe:67:26:a9:ea:34:29:a1:87:0f:1d:97:13:a6:
                    0e:99:11:6c:c7:81:9f:36:cf:4a:52:d1:d3:c1:0b:
                    31:4a:fa:26:34:a0:06:e1:8e:b8:d8:67:ba:46:91:
                    54:51:b7:53:86:e7:ac:51:50:29:5e:20:de:38:f9:
                    e2:cc:43:c1:6e:b6:03:f9:a9:dd:07:d9:83:c1:2a:
                    d0:43:5a:ab:5f:b7:7a:8a:6f:27:7f:2d:e4:92:a3:
                    96:0b:d6:1f:c7:14:b2:5c:82:86:51:ee:63:92:54:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2E:87:BD:87:11:33:D6:21:EE:04:A5:EA:39:F9:05:7B:63:53:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:3a:04:ed:03:f9:73:b2:ce:a1:4c:8a:28:a7:24:78:59:
         62:dc:5b:26:f9:70:77:7f:c2:bc:68:30:bf:ba:14:29:08:8b:
         6e:13:c4:2c:78:94:47:7f:fd:40:0e:e1:43:2d:64:4f:8a:82:
         a2:7c:73:14:b3:4f:42:4b:2f:9d:35:cd:85:50:6f:35:c2:cd:
         de:8c:1e:0e:7c:fd:c9:0a:bb:5c:75:ed:6a:9b:e0:18:7f:51:
         19:51:f0:cd:0c:21:85:3b:8b:28:3e:2b:2f:9d:a1:67:9a:82:
         76:cb:67:85:75:8f:3a:bd:9e:10:d6:d4:42:82:c6:cb:2d:9d:
         25:00:53:b5:b3:5d:6d:77:c1:b6:67:20:fd:10:4b:8e:a0:e1:
         c7:16:5f:20:f0:9b:89:0e:e5:e7:fe:2e:fe:6a:55:61:b2:e6:
         4b:fe:12:5c:0b:13:5c:9e:12:e6:e0:8e:19:93:3e:94:d6:97:
         ad:b9:09:4e:c9:31:47:08:30:01:d8:bf:1c:3c:a5:11:b7:68:
         e9:ab:65:40:2c:5f:03:a7:b7:71:25:2f:56:43:6a:29:af:ad:
         4b:22:d5:4e:83:c0:20:1f:36:11:5f:0b:69:6e:f6:80:ec:f0:
         72:ad:d3:c7:f9:bf:db:12:7a:3f:da:dc:70:b3:ea:27:51:c6:
         75:14:34:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn8qoH0JuydddJegyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0MzYwNzYtODU3Yi00ODg5LTgyZTktMjIxNTFjNTlh
NGIxMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
N2FkZTA0NzUtY2U1Ni00YjA0LWI2Y2EtMjVmNWE0OGYxMzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgabgKShootsOfDRo7EPZZ5UszDj1bhnO3GLi
zPLcnqccxgH7e6iOUb/OYdqrs4jrdC7yF83V9R1pGjlwsUknwW58M/62lNPA0m8P
pkLn+HlYokUaEOnPI2DUx+6sSn6qL5qsOEH2ePaQcdCjxleVqQGPKd3Kjd5iyjKM
xjfQ3S90YbHhp2C15R8Pll+dzdDt+sbqTIuF/mcmqeo0KaGHDx2XE6YOmRFsx4Gf
Ns9KUtHTwQsxSvomNKAG4Y642Ge6RpFUUbdThuesUVApXiDeOPnizEPBbrYD+and
B9mDwSrQQ1qrX7d6im8nfy3kkqOWC9YfxxSyXIKGUe5jklTb9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDsuh72HETPWIe4Epeo5+QV7Y1MuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQz
NjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1MWM1OWE0YjEvZjM4NWFkODItMzMwNi0z
ZTZlLWIzMjItY2RkNWYwMWEwZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTc0MzYwNzYtODU3Yi00ODg5LTgy
ZTktMjIxNTFjNTlhNGIxLzE3NDM2MDc2LTg1N2ItNDg4OS04MmU5LTIyMTUxYzU5
YTRiMS5jcmwwHwYDVR0jBBgwFoAURwr6VrkJyafubX7+uiMMy4AYHR0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQzNjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1
MWM1OWE0YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAvyAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGhPOgTtA/lzss6hTIoopyR4WWLcWyb5cHd/wrxoML+6FCkIi24T
xCx4lEd//UAO4UMtZE+KgqJ8cxSzT0JLL501zYVQbzXCzd6MHg58/ckKu1x17Wqb
4Bh/URlR8M0MIYU7iyg+Ky+doWeagnbLZ4V1jzq9nhDW1EKCxsstnSUAU7WzXW13
wbZnIP0QS46g4ccWXyDwm4kO5ef+Lv5qVWGy5kv+ElwLE1yeEubgjhmTPpTWl625
CU7JMUcIMAHYvxw8pRG3aOmrZUAsXwOnt3ElL1ZDaimvrUsi1U6DwCAfNhFfC2lu
9oDs8HKt08f5v9sSej/a3HCz6idRxnUUNJQ=
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:47 2025 by rpki-client