Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/3b85d474-2af7-357e-b6cf-df184cf9fbef.roa
File:                     3b85d474-2af7-357e-b6cf-df184cf9fbef.roa (raw, json)
Hash identifier:          O13++oWI7en1t+zRK7ELJTSEBagTz6p1GQRs/gf3ekM=
Subject key identifier:   42:1B:64:03:EF:5F:94:6B:38:E5:FB:5F:69:3C:20:9F:1C:41:65:2B
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F43285849ABB4A5F078F2419AD9595290
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/3b85d474-2af7-357e-b6cf-df184cf9fbef.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     3635
IP address blocks:        2610:20:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a5:f0:78:f2:41:9a:d9:59:52:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=cdfa2025-c8eb-4483-a422-afafc13f81c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:d0:38:37:52:ed:3d:1b:2d:1f:ec:ea:d2:
                    81:a7:e4:52:34:d2:67:9a:e9:d6:37:d7:c3:3a:c2:
                    e9:88:47:fe:f5:5e:4d:a8:9f:97:2e:3a:b7:5f:b7:
                    37:29:bb:83:9a:90:16:9e:f3:5e:15:6f:0e:73:57:
                    f3:92:5c:27:0f:a9:68:63:f8:ed:41:10:3d:a7:e3:
                    17:ea:85:90:c9:56:81:06:76:8c:7d:fb:a4:ac:17:
                    04:d5:49:70:10:74:3b:a4:8e:9c:df:41:41:3b:c5:
                    53:4e:ef:2e:30:59:36:c1:e5:1a:0f:a2:ba:8c:be:
                    6b:d3:72:ce:af:06:41:e3:ec:64:0d:08:a7:40:21:
                    e6:18:6b:fd:ef:05:b5:ba:ae:df:c0:5d:c9:ca:6e:
                    61:80:9f:f6:b4:88:b7:48:6f:ac:6f:b8:d2:72:9d:
                    ed:26:45:4c:20:ca:1f:5a:74:2d:d7:41:9d:cd:93:
                    29:3b:fd:e8:f6:3e:9a:70:3e:f2:73:94:73:a1:71:
                    67:ca:fa:ed:f9:db:d3:26:56:1a:e3:60:db:6d:da:
                    7c:32:24:f1:a8:0f:47:b7:1c:2e:80:62:04:e1:16:
                    21:59:94:49:7f:5b:3b:c9:08:86:80:bc:06:6c:da:
                    fb:8f:72:a9:d9:10:43:65:67:32:ff:39:d9:b0:bb:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1B:64:03:EF:5F:94:6B:38:E5:FB:5F:69:3C:20:9F:1C:41:65:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/3b85d474-2af7-357e-b6cf-df184cf9fbef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:79:ad:bf:59:e7:f2:14:a0:f1:b7:39:88:fb:a3:8d:87:19:
         1f:17:4c:02:fc:0d:54:01:9e:b2:87:89:bc:cb:56:a0:ad:be:
         69:5b:ea:8e:22:e5:b1:a5:b0:6e:d3:84:3c:21:e2:66:12:eb:
         29:3e:98:f9:be:55:8f:7a:14:5d:0c:f0:46:2e:df:26:9e:a1:
         b3:09:65:de:55:3e:b5:63:ba:0f:2d:74:83:12:40:30:9d:00:
         78:cc:b7:3b:58:6f:d9:b9:8a:c8:2f:32:b4:6b:d7:1f:62:62:
         c5:65:a7:29:ee:d1:9e:b7:e6:b3:5a:68:9d:fe:ec:74:81:d0:
         3b:f8:2b:a1:ad:c2:95:e1:55:e8:8c:9a:88:03:a3:32:9a:9d:
         78:fa:e5:f0:83:92:b2:71:34:a3:48:b7:3a:e5:eb:d7:63:4c:
         a6:2b:29:a7:c4:2d:b2:ea:32:0e:88:fa:6f:34:83:97:ce:ef:
         7e:7e:2d:b2:21:a5:7b:40:53:6c:33:2c:df:15:99:41:43:78:
         bc:57:b7:d7:21:bc:21:cb:ae:91:00:47:04:a7:9c:a6:7b:0f:
         a7:d6:d7:dc:d5:f3:87:ee:94:45:dc:9d:77:99:01:b0:e7:09:
         ce:34:be:f8:67:40:0d:34:23:66:30:07:09:82:7f:12:62:d2:
         69:85:4b:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmrtKXwePJBmtlZUpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm
YWI3MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
Y2RmYTIwMjUtYzhlYi00NDgzLWE0MjItYWZhZmMxM2Y4MWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoubQODdS7T0bLR/s6tKBp+RSNNJnmunWN9fD
OsLpiEf+9V5NqJ+XLjq3X7c3KbuDmpAWnvNeFW8Oc1fzklwnD6loY/jtQRA9p+MX
6oWQyVaBBnaMffukrBcE1UlwEHQ7pI6c30FBO8VTTu8uMFk2weUaD6K6jL5r03LO
rwZB4+xkDQinQCHmGGv97wW1uq7fwF3Jym5hgJ/2tIi3SG+sb7jScp3tJkVMIMof
WnQt10GdzZMpO/3o9j6acD7yc5RzoXFnyvrt+dvTJlYa42Dbbdp8MiTxqA9Htxwu
gGIE4RYhWZRJf1s7yQiGgLwGbNr7j3Kp2RBDZWcy/znZsLtlkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEIbZAPvX5RrOOX7X2k8IJ8cQWUrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk
NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvM2I4NWQ0NzQtMmFmNy0z
NTdlLWI2Y2YtZGYxODRjZjlmYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2
ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3
ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4
ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIDAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAh5rb9Z5/IUoPG3OYj7o42HGR8XTAL8DVQBnrKHibzLVqCtvmlb
6o4i5bGlsG7ThDwh4mYS6yk+mPm+VY96FF0M8EYu3yaeobMJZd5VPrVjug8tdIMS
QDCdAHjMtztYb9m5isgvMrRr1x9iYsVlpynu0Z635rNaaJ3+7HSB0Dv4K6GtwpXh
VeiMmogDozKanXj65fCDkrJxNKNItzrl69djTKYrKafELbLqMg6I+m80g5fO735+
LbIhpXtAU2wzLN8VmUFDeLxXt9chvCHLrpEARwSnnKZ7D6fW19zV84fulEXcnXeZ
AbDnCc40vvhnQA00I2YwBwmCfxJi0mmFS8k=
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:11:09 2025 by rpki-client