Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/bba397d2-686c-32ea-8247-424889060922.roa
File:                     bba397d2-686c-32ea-8247-424889060922.roa (raw, json)
Hash identifier:          rLxhNH37s9oZK2eGE8lFYkWF8rr7p8D0u3fiuMkkmjI=
Subject key identifier:   73:24:B7:67:0E:3B:B0:EE:8D:91:C3:0E:67:7E:A9:91:F4:D8:48:CB
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F43285849A784C4738DC45362D4E3FF40
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/bba397d2-686c-32ea-8247-424889060922.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     56508
IP address blocks:        2602:815:900f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c4:73:8d:c4:53:62:d4:e3:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=5c67cc44-68b1-4293-8fba-b0964ebebb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:d2:03:73:ea:d0:e5:ac:99:fe:dd:41:3b:
                    1b:1a:ba:77:53:75:4a:30:41:22:ba:14:21:3f:61:
                    ea:1e:78:5d:eb:af:b7:da:06:37:c9:37:2e:47:ff:
                    6f:63:69:42:6e:5e:bf:94:79:ff:b0:82:4b:13:66:
                    ed:dc:31:5f:6f:f3:12:ba:e0:55:eb:d1:4e:5b:1c:
                    07:fc:81:10:cc:d4:f6:61:ce:19:3e:24:fe:ae:77:
                    be:27:4d:7b:95:d3:5f:a0:16:17:6e:9f:25:63:6b:
                    1e:09:f0:c8:56:d6:5e:0e:d0:dd:5e:0e:02:69:26:
                    59:44:60:f0:83:5b:cc:e1:95:81:24:50:a2:4c:33:
                    b6:fb:14:63:37:41:63:4a:d1:ee:6a:08:99:cd:3d:
                    0e:9b:16:e6:bb:29:a7:de:e4:cf:36:9a:e3:8b:42:
                    d3:08:41:71:dc:c3:63:66:6b:d7:c9:60:78:67:84:
                    fb:60:ee:7f:7a:57:87:4b:7c:09:b1:17:bd:aa:a5:
                    bf:f9:79:a7:dc:f9:9f:fc:0a:6b:e1:9a:47:69:bf:
                    74:5d:8d:4c:6d:ee:48:7c:72:54:ce:ed:fb:b2:66:
                    1a:cc:01:96:5b:8d:82:cc:74:34:fe:60:9f:b7:22:
                    99:06:79:37:be:9f:5b:54:c1:6a:67:27:05:8c:df:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:24:B7:67:0E:3B:B0:EE:8D:91:C3:0E:67:7E:A9:91:F4:D8:48:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/bba397d2-686c-32ea-8247-424889060922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:900f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:80:6c:5a:81:ff:68:e6:4f:b2:1a:4e:f2:5c:65:14:08:
         1f:af:3c:99:af:12:d8:96:3f:4d:fb:d7:f6:68:34:b8:c2:07:
         ba:9c:34:75:8a:41:98:fd:af:a7:7d:d6:33:97:dc:64:b6:16:
         31:60:1b:98:78:6b:44:bb:0a:dd:09:d4:3c:64:8a:3f:32:e3:
         7c:d5:7a:51:da:a2:c2:de:4f:8a:82:9b:cd:76:7d:dc:de:58:
         ec:a2:3c:d6:3a:cc:6a:f2:2d:d6:8d:e2:df:4e:ae:4d:98:75:
         1e:74:4d:f3:ce:05:43:8c:09:ab:df:16:8f:80:9e:35:2c:5b:
         2c:b7:5e:fc:e0:01:d8:2a:2c:0f:da:af:48:f9:12:10:33:38:
         6c:09:9b:15:dc:c7:3e:c1:7e:bf:a9:09:5f:bb:5d:28:18:ba:
         0f:96:dc:f9:d2:f3:35:d3:ae:cb:0d:45:2d:6a:39:68:12:78:
         77:09:2c:40:58:45:60:a5:35:57:f2:58:0a:e7:d5:49:b3:12:
         3d:b4:a1:49:5a:01:8c:29:b8:76:6d:97:8d:39:c4:e5:14:0c:
         fd:c3:53:05:95:be:3d:94:18:c5:f4:5d:39:54:1f:35:73:23:
         6a:12:be:c3:d2:ae:31:15:c2:de:0a:b4:05:27:58:36:27:1d:
         20:d7:f6:1d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhMRzjcRTYtTj/0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFlZjVjYzEtOTY5Ny00MDE2LWE3YjEtODQxMDY1MjAx
MjhhMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
NWM2N2NjNDQtNjhiMS00MjkzLThmYmEtYjA5NjRlYmViYjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHSA3Pq0OWsmf7dQTsbGrp3U3VKMEEiuhQh
P2HqHnhd66+32gY3yTcuR/9vY2lCbl6/lHn/sIJLE2bt3DFfb/MSuuBV69FOWxwH
/IEQzNT2Yc4ZPiT+rne+J017ldNfoBYXbp8lY2seCfDIVtZeDtDdXg4CaSZZRGDw
g1vM4ZWBJFCiTDO2+xRjN0FjStHuagiZzT0Omxbmuymn3uTPNprji0LTCEFx3MNj
ZmvXyWB4Z4T7YO5/eleHS3wJsRe9qqW/+Xmn3Pmf/Apr4ZpHab90XY1Mbe5IfHJU
zu37smYazAGWW42CzHQ0/mCftyKZBnk3vp9bVMFqZycFjN+vIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHMkt2cOO7DujZHDDmd+qZH02EjLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYWVm
NWNjMS05Njk3LTQwMTYtYTdiMS04NDEwNjUyMDEyOGEvYmJhMzk3ZDItNjg2Yy0z
MmVhLTgyNDctNDI0ODg5MDYwOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGFlZjVjYzEtOTY5Ny00MDE2LWE3
YjEtODQxMDY1MjAxMjhhL2RhZWY1Y2MxLTk2OTctNDAxNi1hN2IxLTg0MTA2NTIw
MTI4YS5jcmwwHwYDVR0jBBgwFoAUU5ElfGQKg+eUefKE5srTZ00KJZAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYWVmNWNjMS05Njk3LTQwMTYtYTdiMS04NDEw
NjUyMDEyOGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFZAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGHxgGxagf9o5k+yGk7yXGUUCB+vPJmvEtiWP0371/ZoNLjCB7qc
NHWKQZj9r6d91jOX3GS2FjFgG5h4a0S7Ct0J1Dxkij8y43zVelHaosLeT4qCm812
fdzeWOyiPNY6zGryLdaN4t9Ork2YdR50TfPOBUOMCavfFo+AnjUsWyy3XvzgAdgq
LA/ar0j5EhAzOGwJmxXcxz7Bfr+pCV+7XSgYug+W3PnS8zXTrssNRS1qOWgSeHcJ
LEBYRWClNVfyWArn1UmzEj20oUlaAYwpuHZtl405xOUUDP3DUwWVvj2UGMX0XTlU
HzVzI2oSvsPSrjEVwt4KtAUnWDYnHSDX9h0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:00 2025 by rpki-client