Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a2bf7e3-1cca-3a40-834d-68cee312407c.roa
File:                     7a2bf7e3-1cca-3a40-834d-68cee312407c.roa (raw, json)
Hash identifier:          faCRx7y1JdP4wBKQb+cK7ou1w8A0oJpTFPRQ1wEU308=
Subject key identifier:   CD:AE:FC:7D:16:19:DC:0A:52:7D:14:F0:97:DD:7D:B3:F7:E6:34:9D
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F432858498F74D313417DD80F4760F900
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a2bf7e3-1cca-3a40-834d-68cee312407c.roa
Signing time:             Thu 17 Apr 2025 22:09:48 +0000
ROA not before:           Thu 17 Apr 2025 22:09:48 +0000
ROA not after:            Wed 16 Jul 2025 22:09:48 +0000
asID:                     5650
IP address blocks:        2604:4ac0::/32 maxlen: 48
                          2604:4cc0::/32 maxlen: 48
                          2604:4fc0::/32 maxlen: 48
                          2604:5040::/32 maxlen: 48
                          2604:50c0::/32 maxlen: 48
                          2604:6a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:74:d3:13:41:7d:d8:0f:47:60:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Apr 17 22:09:48 2025 GMT
            Not After : Jul 16 22:09:48 2025 GMT
        Subject: CN=4f04761e-dfc2-4ef2-8677-0a7e8052d66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:55:32:c1:3f:27:51:f8:9b:02:0a:5b:c3:e1:
                    5c:24:4f:99:9b:b6:f5:62:27:a0:d7:30:cc:ca:47:
                    c8:c7:fb:b9:76:3b:b3:f9:03:f8:93:07:8d:3a:42:
                    e5:70:e9:96:5b:0a:10:ed:fc:a5:5e:8a:52:86:aa:
                    87:0d:0f:af:12:e3:b8:19:6e:a7:0b:8e:5b:37:a3:
                    f2:ce:80:2b:31:89:5c:be:ed:a2:34:b9:2b:0b:17:
                    e0:4c:5e:f8:2a:28:8f:80:a2:d0:67:da:a0:b4:40:
                    57:4d:94:b4:43:4b:80:13:d4:c7:97:cf:fc:e0:3a:
                    eb:0d:85:d2:ad:bb:d2:b3:b0:0d:12:d3:3e:19:12:
                    aa:22:61:1b:cd:20:d9:c9:dd:87:eb:33:08:04:be:
                    06:76:55:7e:fd:23:c5:a3:94:f6:13:cf:4d:d0:bb:
                    7d:7c:83:a4:d9:10:c1:51:9c:6a:5f:58:ee:ad:48:
                    1b:0b:14:70:9e:e2:f1:78:05:6b:92:c2:6c:8c:9d:
                    60:81:99:08:29:b0:0b:43:9c:87:98:0e:06:d8:40:
                    20:1c:a4:79:ec:79:b3:e4:fb:37:5a:96:a0:22:84:
                    52:b0:4e:76:38:bd:ab:fc:b3:da:70:e0:cd:90:ce:
                    13:07:7a:d5:73:27:42:4e:4d:f2:92:81:b1:e0:39:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AE:FC:7D:16:19:DC:0A:52:7D:14:F0:97:DD:7D:B3:F7:E6:34:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/7a2bf7e3-1cca-3a40-834d-68cee312407c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4ac0::/32
                  2604:4cc0::/32
                  2604:4fc0::/32
                  2604:5040::/32
                  2604:50c0::/32
                  2604:6a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c5:34:e9:c8:c7:3e:aa:e8:e6:00:70:e1:34:74:65:00:d8:
         60:6c:58:2b:2e:aa:22:6d:e8:db:6a:23:93:8f:82:9d:37:b7:
         e0:1b:22:ec:0a:b5:eb:b8:79:aa:a7:2f:0a:cb:1e:e3:5e:31:
         50:ee:01:89:d0:2c:ca:95:cd:08:da:99:67:f0:c1:a4:56:c8:
         41:46:ef:0c:31:cb:5c:fd:82:21:48:f5:04:24:4c:f4:30:a1:
         1e:86:f9:14:b6:e8:72:a9:b3:6e:24:c3:cc:3e:96:78:cb:b5:
         fe:99:e3:d1:e9:68:0c:30:c3:b0:84:28:40:9a:cc:52:78:7f:
         90:b2:cb:c5:7d:b3:10:e0:54:bd:fb:d2:e6:54:ac:83:2c:58:
         d2:a8:d8:35:6e:ac:d3:ba:3c:fc:58:5c:2b:8a:18:ac:75:47:
         37:b9:29:ec:26:55:2f:63:8b:88:98:2b:d9:57:8b:26:40:55:
         4c:22:50:ce:e4:1e:2a:29:ba:e4:54:d0:49:92:92:dd:e7:b3:
         8b:6b:7b:be:cf:e8:42:cc:cb:b6:e1:cb:a1:ce:f4:21:af:e2:
         78:ba:8f:9b:40:2a:07:23:cd:c3:f2:27:fc:8a:97:c6:5a:d5:
         8c:3f:25:4d:e7:a7:86:9d:e0:a6:4c:f3:74:13:c2:d9:ea:ef:
         17:28:e0:b3
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEmPdNMTQX3YD0dg+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI1MDQxNzIyMDk0OFoXDTI1MDcxNjIyMDk0OFowLzEtMCsGA1UEAxMk
NGYwNDc2MWUtZGZjMi00ZWYyLTg2NzctMGE3ZTgwNTJkNjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilUywT8nUfibAgpbw+FcJE+Zm7b1Yieg1zDM
ykfIx/u5djuz+QP4kweNOkLlcOmWWwoQ7fylXopShqqHDQ+vEuO4GW6nC45bN6Py
zoArMYlcvu2iNLkrCxfgTF74KiiPgKLQZ9qgtEBXTZS0Q0uAE9THl8/84DrrDYXS
rbvSs7ANEtM+GRKqImEbzSDZyd2H6zMIBL4GdlV+/SPFo5T2E89N0Lt9fIOk2RDB
UZxqX1jurUgbCxRwnuLxeAVrksJsjJ1ggZkIKbALQ5yHmA4G2EAgHKR57Hmz5Ps3
WpagIoRSsE52OL2r/LPacODNkM4TB3rVcydCTk3ykoGx4DmdBwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFM2u/H0WGdwKUn0U8JfdfbP35jSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvN2EyYmY3ZTMtMWNjYS0z
YTQwLTgzNGQtNjhjZWUzMTI0MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUAJgRKwAMF
ACYETMADBQAmBE/AAwUAJgRQQAMFACYEUMADBQAmBGpAMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJXFNOnI
xz6q6OYAcOE0dGUA2GBsWCsuqiJt6NtqI5OPgp03t+AbIuwKteu4eaqnLwrLHuNe
MVDuAYnQLMqVzQjamWfwwaRWyEFG7wwxy1z9giFI9QQkTPQwoR6G+RS26HKps24k
w8w+lnjLtf6Z49HpaAwww7CEKECazFJ4f5Cyy8V9sxDgVL370uZUrIMsWNKo2DVu
rNO6PPxYXCuKGKx1Rze5KewmVS9ji4iYK9lXiyZAVUwiUM7kHiopuuRU0EmSkt3n
s4tre77P6ELMy7bhy6HO9CGv4ni6j5tAKgcjzcPyJ/yKl8Za1Yw/JU3np4ad4KZM
83QTwtnq7xco4LM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:16:39 2025 by rpki-client