Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f52f41d2-cb53-32e4-bcf9-3c388071aa35.roa
File:                     f52f41d2-cb53-32e4-bcf9-3c388071aa35.roa (raw, json)
Hash identifier:          PQ/vsWURkk990G2z+dKOFk74khAQlpm4m341SIJdSec=
Subject key identifier:   57:DA:A9:82:63:66:AD:30:2B:83:D2:CA:F4:1F:27:D1:E8:0D:BF:16
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858498B0050B2DE1565B43A45C200
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f52f41d2-cb53-32e4-bcf9-3c388071aa35.roa
Signing time:             Wed 16 Apr 2025 07:51:49 +0000
ROA not before:           Wed 16 Apr 2025 07:51:49 +0000
ROA not after:            Tue 15 Jul 2025 07:51:49 +0000
asID:                     62610
IP address blocks:        2604:980:e01b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:00:50:b2:de:15:65:b4:3a:45:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 16 07:51:49 2025 GMT
            Not After : Jul 15 07:51:49 2025 GMT
        Subject: CN=66a12636-5a84-4def-932d-e2df97f88359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:97:13:9a:2f:06:6c:22:c6:e4:5d:03:54:
                    9a:03:cd:14:fd:ae:29:4a:77:94:04:9c:02:f9:2e:
                    74:00:4c:22:74:5a:57:0f:ad:1f:ff:76:8a:b8:93:
                    39:4e:2e:4d:5d:38:9a:e8:a7:34:33:01:09:c5:7f:
                    66:b7:ba:df:40:bd:e7:fe:75:06:aa:53:da:d4:10:
                    50:fd:46:e8:de:a8:6c:b6:f4:f4:08:fb:f0:23:b8:
                    bc:fd:68:68:10:99:3a:25:a4:35:14:a6:d8:c1:3a:
                    a4:e1:5f:f0:56:ae:34:29:74:0c:d8:ec:ae:7d:96:
                    87:b7:0e:30:51:99:84:95:a1:9b:d9:d1:74:3c:ce:
                    53:49:85:48:74:06:cb:07:9f:88:52:40:2f:0a:14:
                    54:2a:11:f7:ea:d1:3b:53:0f:36:c5:c3:c1:d3:4f:
                    1e:bb:27:c1:1f:df:76:2c:13:0c:1e:4b:5f:80:d3:
                    69:14:17:35:65:63:a6:cb:7a:f3:1c:8f:09:db:b1:
                    8a:d4:be:cd:a4:c6:2b:43:4b:3a:17:3c:d6:4f:5c:
                    1a:27:a4:7f:88:ba:5e:1e:e3:b6:82:8a:8e:4a:1f:
                    6c:9b:8c:ab:cb:cb:fa:ef:02:df:ff:43:08:1c:b0:
                    75:1e:bc:90:51:0a:81:66:e6:29:af:cc:28:cc:d1:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:A9:82:63:66:AD:30:2B:83:D2:CA:F4:1F:27:D1:E8:0D:BF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f52f41d2-cb53-32e4-bcf9-3c388071aa35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e01b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:96:0c:f5:9b:fb:88:51:cb:79:93:7c:17:b8:e2:9f:fc:14:
         d7:0d:c2:48:49:dc:39:d0:d2:5c:22:8a:c3:82:96:9c:71:b3:
         fc:10:73:05:68:72:b3:61:fb:ce:9c:1f:27:84:d8:0b:e5:86:
         7b:57:8a:d0:5b:69:01:c5:1b:94:5f:27:f4:e9:08:5f:90:6a:
         34:11:3e:3a:12:56:1e:f6:28:94:0b:46:62:d0:98:08:46:00:
         13:44:23:88:55:35:f8:89:89:04:19:15:e1:d3:4e:9a:9e:df:
         3a:07:42:27:54:32:ac:51:af:9a:a1:11:5d:da:bb:50:01:e8:
         d7:a6:85:52:78:e5:fc:73:01:cf:5c:c7:68:e3:e0:b0:3b:ab:
         b5:e4:4b:a4:87:eb:d6:ea:28:d3:04:72:bc:f5:a7:35:da:37:
         f7:ff:f5:35:48:cc:fe:67:69:80:32:d1:e7:6f:7f:87:e2:25:
         20:ce:4e:56:ab:96:da:9a:fc:97:1a:46:bb:72:72:55:99:75:
         e0:0b:91:31:eb:e7:f6:27:78:1b:4a:91:45:cc:be:19:8f:59:
         f6:48:36:c2:6d:91:e1:e3:64:ec:8e:99:53:1e:2e:52:0a:50:
         d4:60:74:1f:54:7c:5a:c4:97:d3:14:f3:37:d5:38:5a:31:95:
         0a:60:50:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmLAFCy3hVltDpFwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDQxNjA3NTE0OVoXDTI1MDcxNTA3NTE0OVowLzEtMCsGA1UEAxMk
NjZhMTI2MzYtNWE4NC00ZGVmLTkzMmQtZTJkZjk3Zjg4MzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixmXE5ovBmwixuRdA1SaA80U/a4pSneUBJwC
+S50AEwidFpXD60f/3aKuJM5Ti5NXTia6Kc0MwEJxX9mt7rfQL3n/nUGqlPa1BBQ
/Ubo3qhstvT0CPvwI7i8/WhoEJk6JaQ1FKbYwTqk4V/wVq40KXQM2OyufZaHtw4w
UZmElaGb2dF0PM5TSYVIdAbLB5+IUkAvChRUKhH36tE7Uw82xcPB008euyfBH992
LBMMHktfgNNpFBc1ZWOmy3rzHI8J27GK1L7NpMYrQ0s6FzzWT1waJ6R/iLpeHuO2
goqOSh9sm4yry8v67wLf/0MIHLB1HryQUQqBZuYpr8wozNE2ZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFfaqYJjZq0wK4PSyvQfJ9HoDb8WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZjUyZjQxZDItY2I1My0z
MmU0LWJjZjktM2MzODgwNzFhYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQJgOAb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK6WDPWb+4hRy3mTfBe44p/8FNcNwkhJ3DnQ0lwiisOClpxxs/wQ
cwVocrNh+86cHyeE2AvlhntXitBbaQHFG5RfJ/TpCF+QajQRPjoSVh72KJQLRmLQ
mAhGABNEI4hVNfiJiQQZFeHTTpqe3zoHQidUMqxRr5qhEV3au1AB6NemhVJ45fxz
Ac9cx2jj4LA7q7XkS6SH69bqKNMEcrz1pzXaN/f/9TVIzP5naYAy0edvf4fiJSDO
Tlarltqa/JcaRrtyclWZdeALkTHr5/YneBtKkUXMvhmPWfZINsJtkeHjZOyOmVMe
LlIKUNRgdB9UfFrEl9MU8zfVOFoxlQpgUOg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:05:21 2025 by rpki-client