Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a96c621-5367-3741-ac63-05f0bad0bca3.roa
File:                     4a96c621-5367-3741-ac63-05f0bad0bca3.roa (raw, json)
Hash identifier:          7rXp1Si62XL5af19uKQpHW/8jTmktv92P1+QOZ3+aWA=
Subject key identifier:   BD:B7:80:27:57:6D:51:55:79:35:C9:52:1D:22:EE:24:D7:E7:1B:08
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F18020E8E1096504704879D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a96c621-5367-3741-ac63-05f0bad0bca3.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397218
IP address blocks:        2001:503:e239::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:20:e8:e1:09:65:04:70:48:79:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=f3fa9b77-68b5-4648-97d3-c649b8a81495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2e:25:58:63:e6:26:fc:d9:da:01:36:74:0e:
                    23:93:d9:47:73:fb:51:91:dc:74:d4:39:e1:bb:25:
                    1a:86:c6:9d:21:a9:92:09:b7:31:52:d6:50:d5:2d:
                    29:3c:cd:df:b0:91:7b:d6:e1:91:b0:3a:07:b9:e2:
                    f4:69:fc:29:91:df:d7:67:5a:41:6e:9e:f0:ec:2d:
                    95:45:58:b2:fa:f0:60:8c:78:a7:df:e0:9a:07:01:
                    a7:3b:bb:50:12:9f:cf:50:d6:50:75:02:86:b2:20:
                    08:18:c2:d0:6a:95:b6:f6:38:01:10:33:d9:d8:33:
                    da:a8:ff:bb:56:f7:55:49:fa:b2:05:67:2c:50:a0:
                    ed:ec:83:a2:30:ef:df:60:2b:c2:d6:f0:46:3b:da:
                    92:a9:9f:55:89:8f:a0:a0:10:02:a3:0f:5c:e4:ca:
                    1d:04:f6:d4:4a:16:1d:64:2e:77:8b:bb:39:b3:e3:
                    bd:34:75:52:07:1c:44:bc:09:95:69:0b:e7:96:08:
                    07:f5:23:4d:a3:af:f2:4d:95:da:f2:f4:65:70:51:
                    74:a9:1d:0b:41:2f:8e:90:31:9f:69:84:91:f2:02:
                    13:30:db:88:de:61:1b:8f:54:e4:00:4e:9b:5c:92:
                    ca:23:f6:8e:ad:d7:64:57:8b:fa:65:ec:90:e8:22:
                    5d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B7:80:27:57:6D:51:55:79:35:C9:52:1D:22:EE:24:D7:E7:1B:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a96c621-5367-3741-ac63-05f0bad0bca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:21:3e:bd:ca:d2:7d:23:19:f7:8c:e7:ab:95:26:66:d5:d2:
         53:ca:8c:5b:a6:4f:07:da:63:e9:cc:36:74:fa:74:c2:82:23:
         e0:68:55:af:47:92:e6:a9:25:47:61:a3:2c:c5:e7:78:76:91:
         d3:06:6a:d0:d9:38:8c:ba:49:7e:06:1c:f6:bc:11:06:48:be:
         40:d0:7e:c5:01:62:f7:59:85:82:b4:ad:cd:65:95:3a:94:33:
         9a:69:33:ec:49:e7:da:5d:47:93:9c:4d:08:56:a7:a8:b7:ce:
         85:22:8d:25:0d:42:8f:df:20:e3:b0:a3:67:d1:67:db:47:87:
         58:40:db:5f:36:60:64:9d:bd:05:25:78:27:65:7b:dc:55:3e:
         a4:1c:39:da:e2:f2:f2:67:32:ca:1a:38:51:85:d2:54:fb:28:
         27:e5:21:d1:cf:0c:b1:8f:f1:7e:02:66:54:4f:da:cb:43:7c:
         fd:21:6b:e2:8f:74:12:08:59:fc:c9:63:f0:f1:12:1f:32:a7:
         3c:ee:d0:1b:77:6a:93:dc:81:7d:bb:f3:1b:85:3a:04:48:e1:
         9b:9e:a6:fb:92:fd:b7:29:6f:3b:5a:3c:b5:27:a7:ae:5b:e0:
         ce:6f:35:ff:90:6a:57:2f:c8:c6:12:4f:c1:95:0a:ee:6f:ae:
         00:ec:26:77
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgCDo4QllBHBIedAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZjNmYTliNzctNjhiNS00NjQ4LTk3ZDMtYzY0OWI4YTgxNDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S4lWGPmJvzZ2gE2dA4jk9lHc/tRkdx01Dnh
uyUahsadIamSCbcxUtZQ1S0pPM3fsJF71uGRsDoHueL0afwpkd/XZ1pBbp7w7C2V
RViy+vBgjHin3+CaBwGnO7tQEp/PUNZQdQKGsiAIGMLQapW29jgBEDPZ2DPaqP+7
VvdVSfqyBWcsUKDt7IOiMO/fYCvC1vBGO9qSqZ9ViY+goBACow9c5ModBPbUShYd
ZC53i7s5s+O9NHVSBxxEvAmVaQvnlggH9SNNo6/yTZXa8vRlcFF0qR0LQS+OkDGf
aYSR8gITMNuI3mEbj1TkAE6bXJLKI/aOrddkV4v6ZeyQ6CJdBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL23gCdXbVFVeTXJUh0i7iTX5xsIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGE5NmM2MjEtNTM2Ny0z
NzQxLWFjNjMtMDVmMGJhZDBiY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABIhPr3K0n0jGfeM56uVJmbV0lPKjFumTwfaY+nMNnT6dMKCI+Bo
Va9HkuapJUdhoyzF53h2kdMGatDZOIy6SX4GHPa8EQZIvkDQfsUBYvdZhYK0rc1l
lTqUM5ppM+xJ59pdR5OcTQhWp6i3zoUijSUNQo/fIOOwo2fRZ9tHh1hA2182YGSd
vQUleCdle9xVPqQcOdri8vJnMsoaOFGF0lT7KCflIdHPDLGP8X4CZlRP2stDfP0h
a+KPdBIIWfzJY/DxEh8ypzzu0Bt3apPcgX278xuFOgRI4ZuepvuS/bcpbztaPLUn
p65b4M5vNf+QalcvyMYST8GVCu5vrgDsJnc=
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:06:49 2025 by rpki-client