Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa
File:                     6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa (raw, json)
Hash identifier:          Xq/VCdfy8cqVeCvt9wySl/FiODQ7hiTyENWA46A+pUY=
Subject key identifier:   EE:89:05:1C:5B:6D:A2:D2:85:E3:C1:DE:96:D7:BD:86:EF:90:49:15
Certificate issuer:       /CN=62f9290e-905b-4384-a03f-fbec24a43858
Certificate serial:       010D0C9F432858499DBF3121499136544071E8C0
Authority key identifier: DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     683
IP address blocks:        2620:0:dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:31:21:49:91:36:54:40:71:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f9290e-905b-4384-a03f-fbec24a43858
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=043f968d-7ad9-4373-ae67-1c49707cf998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:42:f1:0d:d6:2b:64:a9:64:00:d6:d2:26:
                    f8:95:2f:1f:c7:ee:ec:d4:7b:66:bf:2d:5b:dc:cc:
                    0e:23:49:36:77:e4:f0:23:89:ce:99:87:fd:88:7d:
                    6b:80:b2:56:8d:60:a8:95:0d:0f:ac:57:cf:15:e8:
                    0a:3f:c5:e7:37:03:1b:6a:4b:f1:5b:30:fd:7c:e7:
                    e2:71:51:c9:d9:7f:1d:73:1c:a0:3a:71:54:49:1d:
                    f4:7f:92:45:06:54:a4:b6:9b:23:ff:79:0f:73:3f:
                    e7:21:a4:5a:54:81:b3:77:9e:14:df:b7:3c:9a:2c:
                    7d:24:3e:cc:9c:04:87:85:b2:be:1d:bf:73:8a:16:
                    55:eb:26:89:42:c9:bc:81:1d:c3:fd:3d:fb:78:f2:
                    53:05:2f:9a:c1:1b:5f:a7:fe:4c:45:bf:49:e0:af:
                    df:b8:2e:02:36:04:a2:cc:eb:86:4c:b2:09:b2:cb:
                    08:eb:2a:5a:5d:d8:cc:fe:bb:6c:8e:e7:8c:36:65:
                    16:25:35:67:9a:31:0f:2d:d7:71:17:aa:8d:38:8b:
                    83:70:49:ec:10:63:5f:47:88:e1:79:a2:54:dc:d7:
                    14:15:de:d9:fe:d4:25:75:8e:5c:59:c3:25:4c:f5:
                    7a:b3:04:30:de:8e:79:62:6d:46:1c:af:34:86:a1:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:89:05:1C:5B:6D:A2:D2:85:E3:C1:DE:96:D7:BD:86:EF:90:49:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl

            X509v3 Authority Key Identifier:
                keyid:DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:dc0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e9:10:90:1a:2d:02:db:f5:46:d0:44:14:08:04:83:fc:83:
         38:cd:d5:b3:ab:72:f8:72:09:d7:58:91:37:85:e2:f0:17:66:
         1a:13:28:58:fc:1d:11:96:0d:81:ac:91:49:a1:d1:3d:50:5b:
         cb:ff:46:a1:91:08:a4:5f:d9:4e:07:5c:8f:ba:2a:f0:d4:65:
         30:5b:4f:0d:2e:c6:98:ca:41:41:32:8a:61:4d:c9:ec:35:a7:
         e2:dc:7d:fe:c8:85:89:87:0b:4c:b3:b3:c4:1e:5e:ea:cb:bf:
         ec:55:aa:80:1b:75:32:86:49:0e:48:60:26:8c:25:03:99:2a:
         f0:ab:8a:13:bb:e0:68:a8:3c:d8:b4:74:b3:2b:78:dd:69:6a:
         0f:cd:15:96:19:cc:72:42:01:51:03:c7:3c:0c:e7:a6:71:54:
         86:2d:b0:fa:6e:a1:85:b7:02:0b:c7:34:b4:bc:45:88:64:e5:
         9d:6a:24:e9:21:b7:91:05:83:3e:14:70:31:e6:4a:d6:f7:14:
         1c:09:7a:22:d4:4c:fa:a6:bb:d6:a6:52:83:e2:9c:a4:ea:4d:
         4c:ae:39:15:a9:5a:6c:65:4e:03:1a:5e:b3:74:87:19:de:f9:
         9e:c2:53:d8:b0:77:fc:35:14:12:0d:50:78:f0:61:fa:76:d0:
         e9:23:0c:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvzEhSZE2VEBx6MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjJmOTI5MGUtOTA1Yi00Mzg0LWEwM2YtZmJlYzI0YTQz
ODU4MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
MDQzZjk2OGQtN2FkOS00MzczLWFlNjctMWM0OTcwN2NmOTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KlC8Q3WK2SpZADW0ib4lS8fx+7s1Htmvy1b
3MwOI0k2d+TwI4nOmYf9iH1rgLJWjWColQ0PrFfPFegKP8XnNwMbakvxWzD9fOfi
cVHJ2X8dcxygOnFUSR30f5JFBlSktpsj/3kPcz/nIaRaVIGzd54U37c8mix9JD7M
nASHhbK+Hb9zihZV6yaJQsm8gR3D/T37ePJTBS+awRtfp/5MRb9J4K/fuC4CNgSi
zOuGTLIJsssI6ypaXdjM/rtsjueMNmUWJTVnmjEPLddxF6qNOIuDcEnsEGNfR4jh
eaJU3NcUFd7Z/tQldY5cWcMlTPV6swQw3o55Ym1GHK80hqHw1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO6JBRxbbaLShePB3pbXvYbvkEkVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5
MjkwZS05MDViLTQzODQtYTAzZi1mYmVjMjRhNDM4NTgvNmViZTlkZmQtMmMxNC0z
YzJiLTlmNDMtMWNkNGYyNjhiMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjJmOTI5MGUtOTA1Yi00Mzg0LWEw
M2YtZmJlYzI0YTQzODU4LzYyZjkyOTBlLTkwNWItNDM4NC1hMDNmLWZiZWMyNGE0
Mzg1OC5jcmwwHwYDVR0jBBgwFoAU3KRHHf5OfHHIQDtzYK8GU+EkT98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5MjkwZS05MDViLTQzODQtYTAzZi1mYmVj
MjRhNDM4NTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA3A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAADpEJAaLQLb9UbQRBQIBIP8gzjN1bOrcvhyCddYkTeF4vAXZhoT
KFj8HRGWDYGskUmh0T1QW8v/RqGRCKRf2U4HXI+6KvDUZTBbTw0uxpjKQUEyimFN
yew1p+Lcff7IhYmHC0yzs8QeXurLv+xVqoAbdTKGSQ5IYCaMJQOZKvCrihO74Gio
PNi0dLMreN1pag/NFZYZzHJCAVEDxzwM56ZxVIYtsPpuoYW3AgvHNLS8RYhk5Z1q
JOkht5EFgz4UcDHmStb3FBwJeiLUTPqmu9amUoPinKTqTUyuORWpWmxlTgMaXrN0
hxne+Z7CU9iwd/w1FBINUHjwYfp20OkjDNw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:13:46 2025 by rpki-client