Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/734543ed-2724-3cf8-8333-8f4450fdfe75.roa
File:                     734543ed-2724-3cf8-8333-8f4450fdfe75.roa (raw, json)
Hash identifier:          uUwLaZUK79DTn4Syi89SWQMYU95xv5YXgCS6HUwe0bU=
Subject key identifier:   2D:19:1E:47:62:6D:32:24:B3:37:4F:51:DD:57:5B:C8:40:B0:A5:AA
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F43285849EA8513E0CDA997DE0FC98700
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/734543ed-2724-3cf8-8333-8f4450fdfe75.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     22147
IP address blocks:        2001:4830:c150::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:13:e0:cd:a9:97:de:0f:c9:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=96680b4a-60d9-49a8-9b3c-a2360041b56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:47:92:6f:3f:b8:b0:f5:1f:50:7e:b7:35:
                    53:8d:6d:e2:5a:2e:2f:e9:f5:03:52:8b:2d:ff:e9:
                    d8:32:f9:1b:24:fe:66:de:f0:98:61:7e:71:30:c3:
                    e1:f3:32:49:a6:24:d4:10:53:10:ca:9e:f6:79:b1:
                    2e:b1:9c:f3:78:4f:d7:31:72:63:7e:cd:7d:1b:d9:
                    fd:3a:67:6c:9b:e8:42:f2:94:fd:b4:ff:eb:80:b1:
                    dd:6a:51:6c:6b:a5:27:69:1a:95:d2:49:b8:96:a3:
                    d2:a6:9c:42:3b:ed:ab:64:95:34:73:e6:79:c1:e7:
                    ff:73:10:9c:24:a5:32:93:96:10:8f:c7:65:f8:a7:
                    60:bc:80:0e:6a:91:c8:98:2f:0c:32:bc:a0:3d:21:
                    2c:23:6f:b0:f2:25:cf:ed:dc:89:d2:80:21:67:5d:
                    06:b1:7e:87:ed:89:1f:a2:df:a3:3a:59:ec:f4:42:
                    22:6a:ba:1a:41:bf:c1:ed:13:98:b3:a8:99:51:96:
                    e7:37:31:80:2c:f3:c6:83:d1:d2:ac:18:43:57:48:
                    d4:1d:ff:07:d2:34:45:b5:24:90:45:ef:ca:f9:db:
                    95:71:38:6e:db:80:10:51:c5:44:24:c1:6b:7c:dd:
                    71:ee:b5:db:2c:0a:22:e0:97:e3:4a:17:ff:02:4b:
                    82:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:19:1E:47:62:6D:32:24:B3:37:4F:51:DD:57:5B:C8:40:B0:A5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/734543ed-2724-3cf8-8333-8f4450fdfe75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:9b:73:2c:17:5a:38:2a:bc:f4:1f:80:31:81:59:df:a5:
         2a:dd:af:04:05:fb:42:6c:b1:29:cb:7d:a1:a8:0d:e4:f9:ae:
         37:17:1c:75:93:70:a5:de:33:00:04:f8:06:d9:83:42:72:86:
         3f:79:d4:54:40:5e:5f:8f:d3:84:06:b7:a0:62:52:d7:59:8d:
         f9:6d:8e:e3:3d:c1:64:92:07:1b:b7:2b:a4:b7:17:9c:2e:a0:
         3a:c6:b7:6b:7f:d1:40:ce:87:c8:73:77:f4:c4:c7:35:06:9d:
         bd:10:0c:e9:2d:c5:96:1c:a7:7c:e9:d4:08:c7:b0:6f:54:48:
         b8:6b:1f:50:86:cf:57:48:8a:08:d4:f5:ba:e6:a0:30:e7:84:
         44:ac:73:30:f9:99:8f:6d:8a:25:7a:c5:30:e2:34:68:ad:fd:
         57:72:cb:7a:92:0a:b9:01:84:62:79:38:ee:53:a9:74:03:5c:
         6d:d3:81:ef:50:98:05:81:63:02:bc:45:6b:2c:ae:2e:ae:df:
         b6:a7:ab:ec:a0:76:5f:9c:56:fb:7c:b9:2d:2c:a8:da:d2:cc:
         0b:bf:f7:41:28:d7:58:73:b0:89:bd:b1:b0:a8:75:5e:86:01:
         3f:f3:b3:ec:81:04:de:1f:5b:ec:d7:2d:dc:43:d2:45:2f:2c:
         49:85:f4:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnqhRPgzamX3g/JhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
OTY2ODBiNGEtNjBkOS00OWE4LTliM2MtYTIzNjAwNDFiNTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOVHkm8/uLD1H1B+tzVTjW3iWi4v6fUDUost
/+nYMvkbJP5m3vCYYX5xMMPh8zJJpiTUEFMQyp72ebEusZzzeE/XMXJjfs19G9n9
Omdsm+hC8pT9tP/rgLHdalFsa6UnaRqV0km4lqPSppxCO+2rZJU0c+Z5wef/cxCc
JKUyk5YQj8dl+KdgvIAOapHImC8MMrygPSEsI2+w8iXP7dyJ0oAhZ10GsX6H7Ykf
ot+jOlns9EIiaroaQb/B7ROYs6iZUZbnNzGALPPGg9HSrBhDV0jUHf8H0jRFtSSQ
Re/K+duVcThu24AQUcVEJMFrfN1x7rXbLAoi4JfjShf/AkuC+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC0ZHkdibTIkszdPUd1XW8hAsKWqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvNzM0NTQzZWQtMjcyNC0z
Y2Y4LTgzMzMtOGY0NDUwZmRmZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIMMFQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA5om3MsF1o4Krz0H4AxgVnfpSrdrwQF+0JssSnLfaGoDeT5rjcX
HHWTcKXeMwAE+AbZg0Jyhj951FRAXl+P04QGt6BiUtdZjfltjuM9wWSSBxu3K6S3
F5wuoDrGt2t/0UDOh8hzd/TExzUGnb0QDOktxZYcp3zp1AjHsG9USLhrH1CGz1dI
igjU9brmoDDnhESsczD5mY9tiiV6xTDiNGit/Vdyy3qSCrkBhGJ5OO5TqXQDXG3T
ge9QmAWBYwK8RWssri6u37anq+ygdl+cVvt8uS0sqNrSzAu/90Eo11hzsIm9sbCo
dV6GAT/zs+yBBN4fW+zXLdxD0kUvLEmF9BA=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:37 2025 by rpki-client