Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a927515-e0c2-3fdd-884c-02bd1b65b9fd.roa
File:                     8a927515-e0c2-3fdd-884c-02bd1b65b9fd.roa (raw, json)
Hash identifier:          OrFcjeWfGdb8lhLqJHU1O6gIsgob7KbNbuDB5RKh2js=
Subject key identifier:   7B:B1:E5:DC:AA:82:16:D1:6D:39:CE:01:75:9A:78:43:25:E9:B9:55
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801962D5F722F6CC5DBA00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a927515-e0c2-3fdd-884c-02bd1b65b9fd.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397220
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:19:62:d5:f7:22:f6:cc:5d:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=8ebd8d15-96c7-49d6-a7b8-e836c50db44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:d9:23:89:a1:6a:d3:dc:aa:c5:7d:f6:96:
                    64:31:23:d2:ef:a4:cc:f0:7a:cc:0e:87:49:2f:6b:
                    16:de:72:82:12:72:ec:af:3f:d1:37:7e:4d:10:55:
                    ed:4e:20:9a:c4:b6:ca:4b:45:d5:7d:6b:c5:4c:ea:
                    13:4d:a0:2e:f8:d8:5e:d6:db:a0:1d:49:9e:90:55:
                    6f:a3:15:28:0b:0b:a9:b3:9d:73:88:dd:df:88:23:
                    ec:43:2a:03:94:2e:f7:e0:6c:1b:46:a2:c6:6e:51:
                    e9:89:ba:15:98:61:b9:aa:81:e1:09:a7:f4:48:ae:
                    4e:07:76:c5:2d:6f:91:cf:4e:c6:da:0b:42:88:bb:
                    7c:c5:cb:b5:e9:74:ea:ae:2b:d4:5b:fb:91:ee:93:
                    22:6f:c5:1c:14:ae:d5:09:17:bd:82:dd:0f:94:93:
                    06:62:f2:27:98:41:73:3d:c8:45:fc:84:6d:85:98:
                    b6:d5:1e:da:c4:b6:da:57:43:ca:84:a2:84:7b:e5:
                    b0:2d:23:b7:d5:79:8f:9d:d7:e6:21:10:82:86:cc:
                    2c:fb:d3:27:1d:79:8c:b1:fb:ef:70:44:03:de:91:
                    d8:b2:b2:83:58:cb:9d:12:96:76:b6:e0:36:9a:75:
                    a4:7e:8b:9e:22:a6:e4:b7:ba:35:0f:06:27:d3:d8:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B1:E5:DC:AA:82:16:D1:6D:39:CE:01:75:9A:78:43:25:E9:B9:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a927515-e0c2-3fdd-884c-02bd1b65b9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:cf:fd:3a:be:e9:f6:4a:51:1e:e8:1f:79:83:36:6b:b7:4c:
         7d:e3:bb:d1:45:bf:52:b6:16:d3:2b:b9:2c:12:62:e2:76:e6:
         d4:b8:3d:70:8c:2f:65:d7:2e:89:02:28:8e:92:d9:0b:25:4c:
         12:8f:4d:33:73:97:90:a2:0f:af:3b:0c:5d:30:68:f8:c8:d2:
         b7:9b:d6:3d:46:43:e5:3f:ec:3e:9b:2a:47:e1:de:ff:79:d2:
         ab:ed:6b:30:23:c2:be:0d:92:b7:2b:52:2e:48:ae:ff:15:11:
         36:97:0a:75:a0:d0:05:4e:8a:58:bf:d5:3f:6e:4e:2e:4f:40:
         09:bb:70:d2:d7:c3:30:fa:14:1e:55:75:12:02:25:f5:8e:2b:
         91:8b:82:c6:74:ab:70:c8:27:a8:57:10:9a:9e:7e:0a:b4:80:
         dd:fa:28:ab:3d:7a:d4:6b:a8:bc:fb:c9:7d:dd:83:ac:b9:10:
         63:73:c7:ae:ec:3c:0b:71:15:06:3b:50:1e:62:0e:fd:f5:5b:
         ac:26:aa:b9:ab:e9:dc:e3:9e:a6:c9:d0:5d:e3:6d:b3:d9:ff:
         73:88:79:82:0d:1a:e7:24:8b:46:68:ee:16:8e:55:dd:8e:f0:
         5c:78:a5:0f:7a:e1:a0:73:0a:15:63:16:e3:5e:e9:65:f5:44:
         ad:3d:78:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgBli1fci9sxdugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
OGViZDhkMTUtOTZjNy00OWQ2LWE3YjgtZTgzNmM1MGRiNDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm3ZI4mhatPcqsV99pZkMSPS76TM8HrMDodJ
L2sW3nKCEnLsrz/RN35NEFXtTiCaxLbKS0XVfWvFTOoTTaAu+Nhe1tugHUmekFVv
oxUoCwups51ziN3fiCPsQyoDlC734GwbRqLGblHpiboVmGG5qoHhCaf0SK5OB3bF
LW+Rz07G2gtCiLt8xcu16XTqrivUW/uR7pMib8UcFK7VCRe9gt0PlJMGYvInmEFz
PchF/IRthZi21R7axLbaV0PKhKKEe+WwLSO31XmPndfmIRCChsws+9MnHXmMsfvv
cEQD3pHYsrKDWMudEpZ2tuA2mnWkfoueIqbkt7o1DwYn09hu1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHux5dyqghbRbTnOAXWaeEMl6blVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGE5Mjc1MTUtZTBjMi0z
ZmRkLTg4NGMtMDJiZDFiNjViOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADvP/Tq+6fZKUR7oH3mDNmu3TH3ju9FFv1K2FtMruSwSYuJ25tS4
PXCML2XXLokCKI6S2QslTBKPTTNzl5CiD687DF0waPjI0reb1j1GQ+U/7D6bKkfh
3v950qvtazAjwr4NkrcrUi5Irv8VETaXCnWg0AVOili/1T9uTi5PQAm7cNLXwzD6
FB5VdRICJfWOK5GLgsZ0q3DIJ6hXEJqefgq0gN36KKs9etRrqLz7yX3dg6y5EGNz
x67sPAtxFQY7UB5iDv31W6wmqrmr6dzjnqbJ0F3jbbPZ/3OIeYINGucki0Zo7haO
Vd2O8Fx4pQ964aBzChVjFuNe6WX1RK09eBI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:17:54 2025 by rpki-client