Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/64b04f18-6d92-3bae-a8a9-8b34149ee966.roa
File:                     64b04f18-6d92-3bae-a8a9-8b34149ee966.roa (raw, json)
Hash identifier:          DRAwq/cvW5HYY7l+b42EheX8DkJNsB2kbL5TBteTVKY=
Subject key identifier:   41:10:99:44:3E:1A:0A:A6:F3:8D:75:91:64:2A:39:BD:51:A7:FD:01
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F43285849860469A51C7459CAE2A183C0
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/64b04f18-6d92-3bae-a8a9-8b34149ee966.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        2620:ab:a002::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:69:a5:1c:74:59:ca:e2:a1:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=161439d2-630a-49ff-b470-35711f873775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:d5:d4:4b:4b:71:4c:99:35:08:9d:09:11:
                    43:c0:72:02:8b:17:6b:68:b3:64:c3:ae:45:df:45:
                    9f:6c:0d:7e:b9:77:1e:4f:56:bb:eb:a3:f2:6b:0b:
                    79:25:8b:a8:e6:05:80:3f:a0:6e:b2:17:55:6d:ae:
                    72:91:70:94:19:df:e5:f1:11:fd:19:08:d1:c8:7c:
                    a0:6c:27:c1:8b:cc:17:f8:54:37:41:24:72:4d:7f:
                    66:0c:89:b3:43:4d:31:2c:92:b5:56:9d:f0:44:79:
                    af:38:7d:7e:48:db:ed:42:1b:f9:bb:26:a4:d3:e6:
                    71:77:4e:20:fd:7a:51:9b:98:2a:e3:89:73:93:6d:
                    43:2b:3e:55:1e:19:f5:a0:e8:e2:1c:88:8a:f5:98:
                    48:e2:e1:06:54:9f:b9:4d:69:b7:0c:24:83:b4:5f:
                    40:16:5c:2a:bb:77:6c:ea:e4:20:16:e6:b3:2c:80:
                    2e:44:41:cd:c4:00:a2:fc:63:ad:f7:8b:f1:df:f3:
                    b3:01:80:d0:a2:c5:8e:71:3e:bb:23:4f:68:d1:fa:
                    17:e5:50:12:35:0c:8f:b9:3b:52:80:ad:36:0f:fb:
                    ab:90:a5:71:1a:b1:19:9e:f6:ad:4d:96:b7:3f:71:
                    8d:3b:93:8b:6e:2e:f2:19:da:4b:07:2c:87:ba:40:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:99:44:3E:1A:0A:A6:F3:8D:75:91:64:2A:39:BD:51:A7:FD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/64b04f18-6d92-3bae-a8a9-8b34149ee966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a002::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:19:a2:3c:43:e7:01:4f:09:51:2c:ae:47:6f:c1:7f:de:
         f1:fb:3c:6e:e5:b0:53:3c:ad:70:e5:62:a5:79:bf:44:96:ee:
         2a:32:1f:1b:69:76:5f:37:47:f5:c8:a0:ff:33:12:2c:c4:f4:
         73:14:4f:ff:0e:26:14:d9:b6:29:68:22:8e:ca:a6:16:f3:41:
         90:a0:a7:16:a0:43:d0:d5:a3:11:3d:74:bb:0f:7d:b5:72:28:
         47:c7:20:9a:e0:7b:ce:78:cc:78:19:15:15:55:11:9e:bd:f6:
         97:2e:00:0a:29:f4:ee:f1:fa:d4:cb:90:06:54:e4:28:c0:eb:
         eb:23:da:77:90:a5:51:93:95:ec:93:6a:77:1a:7e:56:d2:81:
         df:3a:88:ed:84:e7:e8:39:e2:db:b1:c0:11:4e:d0:70:6e:5b:
         0f:81:77:63:5b:e2:e5:80:00:22:41:2c:21:7a:cb:45:e2:af:
         2f:30:02:24:5c:e1:05:6f:c5:07:93:18:8a:e4:c4:76:8f:1b:
         8a:c4:e2:59:39:ea:08:e3:d9:bd:3b:44:49:ac:d3:f5:63:2e:
         d1:71:85:bd:5d:63:0d:b3:5a:72:ff:38:d9:b4:ee:51:e2:d0:
         b4:b5:70:f0:32:aa:81:b6:5c:77:78:8f:6a:37:18:23:15:42:
         b5:a3:af:be
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmGBGmlHHRZyuKhg8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzliNmIyZmMtMzQyMi00NmU3LWI2MzctN2I4ZGNiODRi
ZmYxMB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk
MTYxNDM5ZDItNjMwYS00OWZmLWI0NzAtMzU3MTFmODczNzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KLV1EtLcUyZNQidCRFDwHICixdraLNkw65F
30WfbA1+uXceT1a766Pyawt5JYuo5gWAP6BushdVba5ykXCUGd/l8RH9GQjRyHyg
bCfBi8wX+FQ3QSRyTX9mDImzQ00xLJK1Vp3wRHmvOH1+SNvtQhv5uyak0+Zxd04g
/XpRm5gq44lzk21DKz5VHhn1oOjiHIiK9ZhI4uEGVJ+5TWm3DCSDtF9AFlwqu3ds
6uQgFuazLIAuREHNxACi/GOt94vx3/OzAYDQosWOcT67I09o0foX5VASNQyPuTtS
gK02D/urkKVxGrEZnvatTZa3P3GNO5OLbi7yGdpLByyHukCtmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEEQmUQ+Ggqm8411kWQqOb1Rp/0BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWI2
YjJmYy0zNDIyLTQ2ZTctYjYzNy03YjhkY2I4NGJmZjEvNjRiMDRmMTgtNmQ5Mi0z
YmFlLWE4YTktOGIzNDE0OWVlOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzliNmIyZmMtMzQyMi00NmU3LWI2
MzctN2I4ZGNiODRiZmYxLzM5YjZiMmZjLTM0MjItNDZlNy1iNjM3LTdiOGRjYjg0
YmZmMS5jcmwwHwYDVR0jBBgwFoAU9Xm1K1wSfAvIzQB1QiwV/G+mN3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zOWI2YjJmYy0zNDIyLTQ2ZTctYjYzNy03Yjhk
Y2I4NGJmZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAq6AC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI01GaI8Q+cBTwlRLK5Hb8F/3vH7PG7lsFM8rXDlYqV5v0SW7ioy
Hxtpdl83R/XIoP8zEizE9HMUT/8OJhTZtiloIo7KphbzQZCgpxagQ9DVoxE9dLsP
fbVyKEfHIJrge854zHgZFRVVEZ699pcuAAop9O7x+tTLkAZU5CjA6+sj2neQpVGT
leyTancaflbSgd86iO2E5+g54tuxwBFO0HBuWw+Bd2Nb4uWAACJBLCF6y0Xiry8w
AiRc4QVvxQeTGIrkxHaPG4rE4lk56gjj2b07REms0/VjLtFxhb1dYw2zWnL/ONm0
7lHi0LS1cPAyqoG2XHd4j2o3GCMVQrWjr74=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:47:06 2025 by rpki-client