Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edb2ad44-6c08-3bdc-a491-d0e8cfc4159c.roa
File:                     edb2ad44-6c08-3bdc-a491-d0e8cfc4159c.roa (raw, json)
Hash identifier:          a+6K88O8r40/y/PTwegzsPMcZGZUK8+9xQuanSbfVOc=
Subject key identifier:   B4:F6:4B:06:BC:CA:65:97:74:5C:1E:FB:68:83:4D:8D:FE:93:79:9D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801A008B64F0C2293AFB30
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edb2ad44-6c08-3bdc-a491-d0e8cfc4159c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397230
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1a:00:8b:64:f0:c2:29:3a:fb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=b408ed7a-8b1b-4f09-97ec-3b96e2135f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:71:6f:94:37:df:79:a4:aa:9b:3b:9d:76:ba:
                    12:f0:cd:63:8c:a2:fd:97:52:20:04:54:c0:d4:1b:
                    78:48:80:0a:f4:67:30:91:2b:f8:2d:b9:27:90:d2:
                    9d:6b:7d:5b:65:36:f3:f1:6f:d5:42:64:7a:31:1e:
                    51:6c:d2:60:eb:65:0d:c8:5a:ad:ca:49:4d:a2:9d:
                    b1:5d:65:4c:af:99:bb:f8:d3:3d:36:dc:73:78:d5:
                    1d:bb:43:e2:d1:a0:c7:6f:04:94:11:80:b4:df:04:
                    78:b5:d5:32:73:15:02:dd:1d:5f:b4:89:40:6f:bf:
                    40:c5:13:23:a0:8f:9e:33:cc:3a:06:84:14:c6:11:
                    0b:2b:3e:86:2a:5b:a4:80:ae:8b:25:2c:de:0a:cf:
                    a4:0a:bd:31:62:63:97:c3:34:aa:ff:38:df:dd:48:
                    c9:f7:5a:1d:b2:6b:45:fc:57:33:6e:e9:41:30:7a:
                    42:21:81:a5:d6:1e:98:c0:2f:5e:72:08:80:76:f9:
                    0e:36:b4:41:db:bf:fd:49:f2:22:6c:ef:84:aa:07:
                    31:29:ca:04:31:c7:8f:8b:33:c2:87:1d:bc:1b:ad:
                    3a:aa:36:5b:a5:d6:f0:09:eb:fc:48:c8:11:dd:cb:
                    be:8b:cf:ed:8a:75:c5:7c:79:9e:9a:6d:5b:db:79:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:4B:06:BC:CA:65:97:74:5C:1E:FB:68:83:4D:8D:FE:93:79:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edb2ad44-6c08-3bdc-a491-d0e8cfc4159c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:2c:66:ec:3e:7e:19:d7:b4:76:47:a2:0b:cc:b4:b9:61:
         88:4f:21:0e:41:46:5c:c6:c0:41:95:12:35:28:20:34:08:dd:
         f9:18:ac:62:fc:93:8e:82:59:4e:27:dd:74:df:9f:3c:2f:40:
         09:56:3c:7e:0f:30:0b:33:e5:a7:86:7b:db:93:78:19:8d:4a:
         5a:89:16:0c:1f:86:ac:01:18:04:49:58:31:67:b0:69:e9:a5:
         0c:bc:e7:a3:f4:5f:77:3f:94:c5:95:a9:fa:15:d1:21:65:1f:
         cd:2c:37:69:53:d8:71:f0:50:3a:69:ab:8e:b6:dd:e9:47:46:
         47:08:62:05:49:eb:67:ed:ae:f1:a2:bd:79:02:0c:30:4e:77:
         eb:92:1f:8f:84:4f:c1:8d:c7:23:12:2e:01:db:b9:48:3f:7e:
         29:1f:9d:42:25:5d:a1:f0:ea:08:75:c3:47:33:fa:60:29:81:
         d7:37:bf:d9:32:37:35:10:a0:70:3a:65:5e:fc:47:37:c9:38:
         75:10:bc:49:ba:bd:3f:8a:ec:1d:93:9b:ff:28:3d:db:45:54:
         39:f7:0b:41:2a:fe:51:f4:6c:fb:b6:02:ac:9e:6a:40:7d:a5:
         e4:39:43:99:fb:e2:02:34:52:20:91:38:ed:97:e3:15:2c:e5:
         96:c9:3b:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgBoAi2Twwik6+zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YjQwOGVkN2EtOGIxYi00ZjA5LTk3ZWMtM2I5NmUyMTM1ZjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3FvlDffeaSqmzuddroS8M1jjKL9l1IgBFTA
1Bt4SIAK9GcwkSv4LbknkNKda31bZTbz8W/VQmR6MR5RbNJg62UNyFqtyklNop2x
XWVMr5m7+NM9NtxzeNUdu0Pi0aDHbwSUEYC03wR4tdUycxUC3R1ftIlAb79AxRMj
oI+eM8w6BoQUxhELKz6GKlukgK6LJSzeCs+kCr0xYmOXwzSq/zjf3UjJ91odsmtF
/FczbulBMHpCIYGl1h6YwC9ecgiAdvkONrRB27/9SfIibO+EqgcxKcoEMcePizPC
hx28G606qjZbpdbwCev8SMgR3cu+i8/tinXFfHmemm1b23mzHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLT2Swa8ymWXdFwe+2iDTY3+k3mdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWRiMmFkNDQtNmMwOC0z
YmRjLWE0OTEtZDBlOGNmYzQxNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABzDLGbsPn4Z17R2R6ILzLS5YYhPIQ5BRlzGwEGVEjUoIDQI3fkY
rGL8k46CWU4n3XTfnzwvQAlWPH4PMAsz5aeGe9uTeBmNSlqJFgwfhqwBGARJWDFn
sGnppQy856P0X3c/lMWVqfoV0SFlH80sN2lT2HHwUDppq4623elHRkcIYgVJ62ft
rvGivXkCDDBOd+uSH4+ET8GNxyMSLgHbuUg/fikfnUIlXaHw6gh1w0cz+mApgdc3
v9kyNzUQoHA6ZV78RzfJOHUQvEm6vT+K7B2Tm/8oPdtFVDn3C0Eq/lH0bPu2Aqye
akB9peQ5Q5n74gI0UiCROO2X4xUs5ZbJO5s=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:02:39 2025 by rpki-client