Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa
File:                     de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa (raw, json)
Hash identifier:          hOWJ801EpP1GFoM1ITG8ElIsFO1BPKaGpBWfum1D2Ck=
Subject key identifier:   0C:25:2A:6C:85:A1:2C:8D:D2:A5:7E:FE:9A:9A:E6:26:A7:9F:D1:9D
Certificate issuer:       /CN=d2de1f15-6014-4202-aea6-3c118c783bfd
Certificate serial:       010D0C9F432858495D896CBD9E57A59AD5DEAB00
Authority key identifier: 7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        2607:b4c0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:6c:bd:9e:57:a5:9a:d5:de:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2de1f15-6014-4202-aea6-3c118c783bfd
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=35130eaa-68c0-4659-81d3-ce12507d2ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:c5:ea:75:f2:e4:b3:9e:ea:8e:a6:5d:85:
                    8f:e3:20:13:68:9b:4c:72:6b:78:8f:fd:08:ca:7d:
                    eb:bb:1a:95:10:48:bd:6a:f1:88:8f:0e:84:58:1c:
                    1b:be:9f:04:61:bf:9e:ee:0d:70:5e:11:d5:34:11:
                    97:bb:5c:d1:b1:31:59:4d:13:08:86:a8:6c:65:91:
                    4b:01:4f:9e:a6:33:bc:7e:44:b2:e6:d6:0f:20:40:
                    29:8b:15:21:51:5c:03:5b:f4:df:ae:66:ae:2b:6e:
                    6f:87:40:1f:98:8b:4e:94:e0:48:7d:bd:ac:f9:c6:
                    e5:6f:d6:41:1a:a7:b4:03:38:da:93:54:fd:5f:01:
                    b7:d2:78:4d:b3:1f:73:bf:a5:ac:00:00:11:08:c5:
                    53:71:db:11:d9:1c:f1:17:db:14:7f:eb:22:b7:92:
                    7f:de:23:c3:fc:41:c6:fb:17:50:0f:60:97:29:d9:
                    ab:12:bb:ee:d5:4a:f6:1f:72:cf:4e:bf:8f:e7:94:
                    8f:e4:8d:90:1e:10:47:be:69:8b:1d:a6:3e:ea:7d:
                    78:91:32:09:d1:60:06:1f:ee:98:9c:0b:f4:65:71:
                    bd:c9:78:90:a5:17:0c:fd:28:39:f6:54:5c:0e:ad:
                    85:b9:04:66:b6:2e:88:98:eb:de:0e:9b:1f:56:23:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:25:2A:6C:85:A1:2C:8D:D2:A5:7E:FE:9A:9A:E6:26:A7:9F:D1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.crl

            X509v3 Authority Key Identifier:
                keyid:7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b4c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:58:fc:7d:06:f6:f3:61:65:2b:80:af:70:e0:76:97:39:
         3a:89:cf:d4:db:a8:45:e4:88:2e:74:4c:73:06:dd:c9:ee:85:
         40:0c:58:49:c2:dc:36:88:83:96:a0:72:b1:d4:61:cf:fe:04:
         00:a2:47:5c:83:67:cb:fc:d0:39:52:14:99:f7:5b:98:85:8a:
         c0:40:bb:ff:6c:6c:91:ff:6d:0d:6c:ca:49:21:e9:df:02:2a:
         1c:30:15:05:cc:7a:df:2e:2d:e7:59:a7:73:cc:2c:ff:71:75:
         6e:a7:17:0d:fd:9a:1c:c4:3a:15:90:75:e9:ca:4c:06:c5:28:
         70:a3:d4:82:94:8e:73:b0:64:1f:7d:af:61:28:07:a7:05:0d:
         b2:a7:66:c7:b7:ec:28:e0:96:17:20:6a:a3:fa:37:1f:c2:08:
         c7:33:97:4d:49:f4:ac:0e:d0:60:5b:38:f5:c6:65:20:e4:2a:
         d0:df:f9:24:c8:5a:fd:90:18:a9:ff:a1:b2:9d:40:1b:1b:d2:
         70:3e:06:26:98:83:44:5e:c2:94:38:c4:c6:94:5c:c9:95:87:
         47:70:8c:c8:82:e6:99:4a:2b:14:2d:10:6c:3a:22:27:fd:e5:
         76:34:a9:ad:69:e9:ef:ac:89:90:47:ed:71:e8:05:e9:5b:d0:
         b2:99:58:a4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEldiWy9nlelmtXeqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJkZTFmMTUtNjAxNC00MjAyLWFlYTYtM2MxMThjNzgz
YmZkMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk
MzUxMzBlYWEtNjhjMC00NjU5LTgxZDMtY2UxMjUwN2QyZmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizLF6nXy5LOe6o6mXYWP4yATaJtMcmt4j/0I
yn3ruxqVEEi9avGIjw6EWBwbvp8EYb+e7g1wXhHVNBGXu1zRsTFZTRMIhqhsZZFL
AU+epjO8fkSy5tYPIEApixUhUVwDW/TfrmauK25vh0AfmItOlOBIfb2s+cblb9ZB
Gqe0Azjak1T9XwG30nhNsx9zv6WsAAARCMVTcdsR2RzxF9sUf+sit5J/3iPD/EHG
+xdQD2CXKdmrErvu1Ur2H3LPTr+P55SP5I2QHhBHvmmLHaY+6n14kTIJ0WAGH+6Y
nAv0ZXG9yXiQpRcM/Sg59lRcDq2FuQRmti6ImOveDpsfViOVHQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAwlKmyFoSyN0qV+/pqa5iann9GdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMmRl
MWYxNS02MDE0LTQyMDItYWVhNi0zYzExOGM3ODNiZmQvZGUxY2VjYTEtMzFkOC0z
MWMwLWIxYTUtOWM0NmFiZDBiYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDJkZTFmMTUtNjAxNC00MjAyLWFl
YTYtM2MxMThjNzgzYmZkL2QyZGUxZjE1LTYwMTQtNDIwMi1hZWE2LTNjMTE4Yzc4
M2JmZC5jcmwwHwYDVR0jBBgwFoAUfvA8D54aNYkkqLz8ZDyv52Qu2fUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kMmRlMWYxNS02MDE0LTQyMDItYWVhNi0zYzEx
OGM3ODNiZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJge0wAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAj7BY/H0G9vNhZSuAr3Dgdpc5OonP1NuoReSILnRMcwbdye6FQAxY
ScLcNoiDlqBysdRhz/4EAKJHXINny/zQOVIUmfdbmIWKwEC7/2xskf9tDWzKSSHp
3wIqHDAVBcx63y4t51mnc8ws/3F1bqcXDf2aHMQ6FZB16cpMBsUocKPUgpSOc7Bk
H32vYSgHpwUNsqdmx7fsKOCWFyBqo/o3H8IIxzOXTUn0rA7QYFs49cZlIOQq0N/5
JMha/ZAYqf+hsp1AGxvScD4GJpiDRF7ClDjExpRcyZWHR3CMyILmmUorFC0QbDoi
J/3ldjSprWnp76yJkEftcegF6VvQsplYpA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:15:27 2025 by rpki-client