Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b94f0270-f712-3f17-b5aa-b5944cbce54a.roa
File:                     b94f0270-f712-3f17-b5aa-b5944cbce54a.roa (raw, json)
Hash identifier:          JeD87gHhPzZLo7cDiR3Vt1TpKZRAzsknqvNsLFYLXBE=
Subject key identifier:   81:40:8C:DF:02:AD:FE:3B:12:F2:A3:5D:D0:B1:4C:BC:2C:DC:A9:CC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB79C0ED9FC993C5D1F680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b94f0270-f712-3f17-b5aa-b5944cbce54a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        2600:1900:40f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:79:c0:ed:9f:c9:93:c5:d1:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5f437d39-28a6-4446-98bb-4d5a434c60e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:ac:ad:bf:67:6f:be:77:c6:29:56:e3:81:
                    7b:a2:2f:0f:e4:51:c4:76:24:ab:6a:25:ab:ae:ca:
                    10:66:4b:48:e1:fe:64:47:c2:13:ab:d3:b2:93:c2:
                    5b:54:86:82:00:35:34:f8:96:03:55:63:dd:a0:3e:
                    ad:d2:89:bf:cb:aa:f1:57:a0:95:ea:85:01:b6:42:
                    02:4f:e4:29:e2:cd:a1:d2:ae:54:db:b0:2d:47:7d:
                    40:c2:a4:ec:8a:34:01:53:d4:5c:15:5d:d9:cb:f1:
                    d3:a7:8b:04:5c:5d:a0:38:1e:42:48:cc:24:05:4e:
                    b1:81:6f:8c:48:30:03:ff:71:ba:e9:00:84:75:7c:
                    ca:6d:dd:2d:03:9f:d2:2f:e4:a8:09:db:30:4b:a4:
                    25:40:9c:e2:d1:86:ec:df:86:78:b8:55:39:89:10:
                    7d:d2:b0:b3:af:65:cc:7b:76:9e:e7:3f:f1:d9:0b:
                    00:2e:cc:46:08:0c:f5:4e:13:1b:cc:0d:a0:cc:e0:
                    b9:2a:30:72:0c:b6:02:b0:ab:d9:dd:99:7c:7d:95:
                    1c:22:21:09:88:53:7d:0b:e6:49:bc:55:52:5e:32:
                    c5:f5:cf:d8:69:84:66:33:bb:0d:15:84:90:11:54:
                    f5:66:d9:1f:e5:4d:ad:18:0e:8b:9a:42:51:fa:c8:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:8C:DF:02:AD:FE:3B:12:F2:A3:5D:D0:B1:4C:BC:2C:DC:A9:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b94f0270-f712-3f17-b5aa-b5944cbce54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:40f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ef:7b:b9:57:69:27:19:88:6b:17:bb:d0:2b:c8:3e:ab:8a:
         d0:f5:e3:f6:f9:b7:8b:6b:56:d9:39:ea:9b:e4:05:33:09:af:
         65:09:11:e0:82:08:00:a7:8e:61:0d:e7:6b:77:72:d5:e3:51:
         de:47:07:e8:72:e0:45:a8:8e:0a:23:72:07:7d:b6:51:eb:c8:
         42:82:39:6a:a4:14:76:a8:1d:b0:60:fe:5d:2d:8e:0d:36:2d:
         37:e3:69:6f:d5:4d:61:e1:c5:c6:ed:0d:55:23:b2:ad:cf:aa:
         1d:17:e5:88:39:3f:ea:fd:3f:05:a1:46:48:86:d1:b9:14:c6:
         8a:fd:2a:23:72:e6:97:93:e9:c9:c8:9a:08:4a:fa:b4:d7:46:
         09:5e:8a:1a:fc:96:60:6c:1b:db:76:70:03:70:b7:b2:11:0b:
         66:2e:9e:ed:be:57:18:39:9e:e1:a9:7b:1a:0e:7c:8d:eb:1a:
         75:a0:5a:1f:f0:2c:ca:88:3b:1e:a6:49:49:0b:e2:cf:f2:49:
         d0:c4:fb:95:53:31:9f:22:25:f3:f4:da:2e:2f:bf:c0:8a:6c:
         25:65:31:25:04:d7:66:e8:08:47:14:8f:c0:74:0c:17:39:ca:
         8f:fd:53:27:0b:ad:b3:1a:2b:4b:11:9b:57:a2:65:22:61:84:
         44:46:0b:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3nA7Z/Jk8XR9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NWY0MzdkMzktMjhhNi00NDQ2LTk4YmItNGQ1YTQzNGM2MGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfCsrb9nb753xilW44F7oi8P5FHEdiSraiWr
rsoQZktI4f5kR8ITq9Oyk8JbVIaCADU0+JYDVWPdoD6t0om/y6rxV6CV6oUBtkIC
T+Qp4s2h0q5U27AtR31AwqTsijQBU9RcFV3Zy/HTp4sEXF2gOB5CSMwkBU6xgW+M
SDAD/3G66QCEdXzKbd0tA5/SL+SoCdswS6QlQJzi0Ybs34Z4uFU5iRB90rCzr2XM
e3ae5z/x2QsALsxGCAz1ThMbzA2gzOC5KjByDLYCsKvZ3Zl8fZUcIiEJiFN9C+ZJ
vFVSXjLF9c/YaYRmM7sNFYSQEVT1Ztkf5U2tGA6LmkJR+sg2wwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIFAjN8Crf47EvKjXdCxTLws3KnMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjk0ZjAyNzAtZjcxMi0z
ZjE3LWI1YWEtYjU5NDRjYmNlNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAEDw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAjve7lXaScZiGsXu9AryD6ritD14/b5t4trVtk56pvkBTMJr2UJ
EeCCCACnjmEN52t3ctXjUd5HB+hy4EWojgojcgd9tlHryEKCOWqkFHaoHbBg/l0t
jg02LTfjaW/VTWHhxcbtDVUjsq3Pqh0X5Yg5P+r9PwWhRkiG0bkUxor9KiNy5peT
6cnImghK+rTXRgleihr8lmBsG9t2cANwt7IRC2Yunu2+Vxg5nuGpexoOfI3rGnWg
Wh/wLMqIOx6mSUkL4s/ySdDE+5VTMZ8iJfP02i4vv8CKbCVlMSUE12boCEcUj8B0
DBc5yo/9UycLrbMaK0sRm1eiZSJhhERGCzQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:38 2025 by rpki-client