Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e7c1583-5d03-3ec9-94c8-80af5c02de09.roa
File:                     0e7c1583-5d03-3ec9-94c8-80af5c02de09.roa (raw, json)
Hash identifier:          iJRPUHu8Q5xHP0X04j+pB/C5TS8STHHs+++VufHD+9M=
Subject key identifier:   16:4F:EE:D7:C5:B3:D1:37:75:EA:42:3D:52:B2:BC:BA:47:C8:BB:75
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F180176884BEE029141A9F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e7c1583-5d03-3ec9-94c8-80af5c02de09.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397218
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:17:68:84:be:e0:29:14:1a:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=4c1c4d3f-a64d-4b18-b442-fd9e63e4a307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:65:4f:de:1e:ac:ed:d5:97:b0:7d:f5:35:
                    e6:91:55:8e:18:32:ef:cc:dc:8d:10:8e:0b:2e:f7:
                    2a:70:38:b2:57:55:1a:c2:66:f1:3d:1e:88:33:93:
                    14:46:4b:b8:72:85:a5:91:9f:b5:c2:f9:97:7e:40:
                    06:d2:8b:8a:6a:4f:7e:b5:92:2c:82:41:c9:81:58:
                    01:59:75:cb:32:b6:89:1a:c1:d8:3e:46:cd:ff:35:
                    c4:6d:69:b6:ee:5a:7c:be:75:81:88:59:1f:66:32:
                    3a:81:14:23:28:97:a1:ea:1f:89:34:16:e2:0f:df:
                    6d:19:5d:4d:fd:1d:2c:9e:be:3e:60:8a:e2:61:91:
                    09:5a:59:62:91:25:b0:bb:7c:7f:be:ef:f1:ad:22:
                    66:20:f3:91:93:29:6f:1d:6d:28:99:99:dc:05:6c:
                    25:61:81:6a:cd:b6:f5:07:78:70:82:9e:8e:57:57:
                    1b:f3:9a:8e:96:77:10:59:cf:96:32:6d:6b:cd:70:
                    82:c7:de:d8:12:df:41:30:38:fe:04:ef:2c:64:89:
                    cf:0b:84:7e:d9:cc:45:e3:f7:42:dd:7d:53:02:76:
                    5f:32:c0:9c:59:19:d8:3d:dd:9f:45:2a:83:90:47:
                    2f:b5:e3:2a:00:29:9d:70:d7:be:56:11:c1:de:cc:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4F:EE:D7:C5:B3:D1:37:75:EA:42:3D:52:B2:BC:BA:47:C8:BB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e7c1583-5d03-3ec9-94c8-80af5c02de09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a4:c3:68:50:bd:f8:f9:8b:94:72:9e:95:23:54:9d:61:d4:
         0e:23:74:fd:34:72:66:d5:b4:40:9a:5d:ed:53:44:55:f5:df:
         ac:5f:75:1d:f9:09:5c:26:d7:6b:4b:38:44:d1:8c:0d:e6:59:
         64:23:a3:68:8e:66:9f:f0:cb:a4:c3:b6:c9:99:f5:38:a1:35:
         27:ea:f6:8a:8a:5f:66:d3:b6:01:8b:95:9f:08:c8:dc:1f:a8:
         3c:a0:44:4c:d6:fd:22:75:1e:25:6f:40:5e:53:28:8b:99:ab:
         83:58:4b:fb:6e:0e:89:b9:f0:f9:61:9b:d7:43:2c:9d:3b:87:
         64:1f:fa:28:91:de:32:00:ec:3a:36:d4:ac:33:f4:32:60:e8:
         91:b4:ab:26:15:84:1e:d0:20:9d:1a:77:a4:a1:21:e0:54:90:
         d4:28:bb:55:dd:44:7a:40:69:f8:22:ab:cb:81:34:5b:48:a4:
         5d:5b:24:49:8b:d4:b6:7f:36:2f:41:e4:a4:34:6d:8b:dc:07:
         d0:4e:e0:bb:e6:d5:0b:7b:75:84:9c:f0:ab:02:bd:d3:23:99:
         f3:8c:68:4f:c8:52:45:8d:11:ec:24:54:a6:9b:12:0f:f1:10:
         48:c5:cc:0d:e0:6c:bc:11:96:2b:2c:a7:d3:8d:6e:fe:54:75:
         ec:45:26:f3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgBdohL7gKRQan4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NGMxYzRkM2YtYTY0ZC00YjE4LWI0NDItZmQ5ZTYzZTRhMzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RBlT94erO3Vl7B99TXmkVWOGDLvzNyNEI4L
LvcqcDiyV1UawmbxPR6IM5MURku4coWlkZ+1wvmXfkAG0ouKak9+tZIsgkHJgVgB
WXXLMraJGsHYPkbN/zXEbWm27lp8vnWBiFkfZjI6gRQjKJeh6h+JNBbiD99tGV1N
/R0snr4+YIriYZEJWllikSWwu3x/vu/xrSJmIPORkylvHW0omZncBWwlYYFqzbb1
B3hwgp6OV1cb85qOlncQWc+WMm1rzXCCx97YEt9BMDj+BO8sZInPC4R+2cxF4/dC
3X1TAnZfMsCcWRnYPd2fRSqDkEcvteMqACmdcNe+VhHB3sxuowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBZP7tfFs9E3depCPVKyvLpHyLt1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGU3YzE1ODMtNWQwMy0z
ZWM5LTk0YzgtODBhZjVjMDJkZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAICkw2hQvfj5i5RynpUjVJ1h1A4jdP00cmbVtECaXe1TRFX136xf
dR35CVwm12tLOETRjA3mWWQjo2iOZp/wy6TDtsmZ9TihNSfq9oqKX2bTtgGLlZ8I
yNwfqDygREzW/SJ1HiVvQF5TKIuZq4NYS/tuDom58Plhm9dDLJ07h2Qf+iiR3jIA
7Do21Kwz9DJg6JG0qyYVhB7QIJ0ad6ShIeBUkNQou1XdRHpAafgiq8uBNFtIpF1b
JEmL1LZ/Ni9B5KQ0bYvcB9BO4Lvm1Qt7dYSc8KsCvdMjmfOMaE/IUkWNEewkVKab
Eg/xEEjFzA3gbLwRlissp9ONbv5UdexFJvM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:13:11 2025 by rpki-client