Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
File:                     b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa (raw, json)
Hash identifier:          VxB/D7KjB7WEAnOzEVQGnvFFHpe5weQxIIXZNiS/Zx4=
Subject key identifier:   69:6D:D2:3C:4C:BD:DC:E8:B3:3D:3A:17:CD:6B:BA:0A:2D:25:F5:C7
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F4328584A7D15FC7545B292C0D374E380
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     4185
IP address blocks:        2620:10f:b000::/48 maxlen: 48
                          2620:10f:b070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:fc:75:45:b2:92:c0:d3:74:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=72c8af85-81f9-48f6-a641-aff9ddf5169f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:89:66:90:35:7b:27:3c:d3:e6:89:13:db:
                    10:bc:ab:7b:5a:6f:e0:b4:7b:fb:79:7a:24:e6:da:
                    c1:89:43:47:ed:24:7b:32:ed:1a:69:01:2e:40:fa:
                    31:fd:9e:78:ee:d8:25:db:e9:43:3a:4a:2e:0d:e8:
                    d0:75:62:3a:de:d2:41:af:db:99:e6:00:2f:49:64:
                    55:e3:67:70:e2:a0:5d:0e:ef:9f:b6:ff:bb:b8:bc:
                    8c:dc:6b:fc:ac:ca:7d:b8:0e:48:a4:df:f5:bf:6a:
                    1d:39:d8:ae:86:70:b0:0c:ad:0e:01:9c:d9:26:57:
                    af:d2:3b:6a:ff:3c:3e:e4:f1:3d:52:77:3c:aa:77:
                    c1:a2:d6:38:18:fb:ca:24:f3:92:30:03:b0:14:b7:
                    cc:9d:48:46:a0:5f:3a:ef:27:9f:ce:2f:8c:e2:54:
                    2c:2a:14:f4:c3:35:00:e8:ad:b6:65:ec:c5:d9:51:
                    a8:c9:bd:d3:52:da:f4:f7:9e:14:26:dc:72:f6:91:
                    c4:7d:23:ba:23:8d:85:61:cf:b8:2f:d7:0c:42:d8:
                    fd:5b:63:cc:1b:fb:53:18:2d:51:df:fa:e1:56:b1:
                    7c:c7:a8:d6:8c:8c:4a:ed:79:fd:e7:06:ef:e3:c0:
                    55:7c:0b:87:49:87:2d:75:5d:c1:b1:4c:17:50:61:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:D2:3C:4C:BD:DC:E8:B3:3D:3A:17:CD:6B:BA:0A:2D:25:F5:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/48
                  2620:10f:b070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:25:74:3f:9f:84:59:a4:55:12:fc:03:b9:de:de:38:5d:db:
         ba:75:2c:ef:48:b1:c4:5d:43:59:3b:b3:ed:80:ea:2e:15:05:
         8f:12:c9:9f:90:f2:f3:42:39:94:fc:1c:51:95:85:bf:58:86:
         94:99:1d:52:61:ea:fd:d2:e5:d3:79:94:19:45:67:e8:64:d2:
         99:d7:19:a0:a0:ae:92:30:45:c0:07:25:35:4c:ac:de:e2:a7:
         3d:69:30:65:f6:b6:c1:d9:e0:bd:51:54:49:a7:13:f2:79:5d:
         f7:06:da:5a:3b:a1:d3:ec:78:0e:eb:a9:4c:9d:43:53:9b:38:
         b5:12:16:7e:98:0b:f2:3f:76:0f:ce:36:24:d5:de:7d:51:4e:
         5e:a7:00:7e:e4:59:f7:01:b6:d1:b7:b2:a6:fd:b7:5a:ad:76:
         98:0f:74:77:d3:96:b6:dd:33:02:ff:e2:5c:bd:a3:96:ee:4a:
         d6:55:d2:f3:19:cb:2f:f2:47:5a:bc:27:cd:bb:23:07:68:22:
         5c:9f:be:3e:d0:42:a1:be:76:88:e3:9b:23:d5:48:6b:1b:2e:
         b5:4e:9c:eb:51:a4:94:41:db:80:a7:ac:7f:31:5d:88:6d:87:
         f7:67:d3:61:4e:c3:59:1f:92:0a:bf:f1:22:d0:22:50:c0:16:
         94:a9:c3:de
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEp9Ffx1RbKSwNN044AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz
ZjBkMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
NzJjOGFmODUtODFmOS00OGY2LWE2NDEtYWZmOWRkZjUxNjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8yJZpA1eyc80+aJE9sQvKt7Wm/gtHv7eXok
5trBiUNH7SR7Mu0aaQEuQPox/Z547tgl2+lDOkouDejQdWI63tJBr9uZ5gAvSWRV
42dw4qBdDu+ftv+7uLyM3Gv8rMp9uA5IpN/1v2odOdiuhnCwDK0OAZzZJlev0jtq
/zw+5PE9Unc8qnfBotY4GPvKJPOSMAOwFLfMnUhGoF867yefzi+M4lQsKhT0wzUA
6K22ZezF2VGoyb3TUtr0954UJtxy9pHEfSO6I42FYc+4L9cMQtj9W2PMG/tTGC1R
3/rhVrF8x6jWjIxK7Xn95wbv48BVfAuHSYctdV3BsUwXUGEXNQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGlt0jxMvdzosz06F81rugotJfXHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw
NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvYjU4YzNlMTMtNGNjYy0z
Y2FiLWJkODAtZmMyNDEyN2Q5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm
M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1
M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz
MzQ0NTNmMGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJiABD7AA
AwcAJiABD7BwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFAldD+fhFmkVRL8A7ne3jhd27p1LO9IscRdQ1k7
s+2A6i4VBY8SyZ+Q8vNCOZT8HFGVhb9YhpSZHVJh6v3S5dN5lBlFZ+hk0pnXGaCg
rpIwRcAHJTVMrN7ipz1pMGX2tsHZ4L1RVEmnE/J5XfcG2lo7odPseA7rqUydQ1Ob
OLUSFn6YC/I/dg/ONiTV3n1RTl6nAH7kWfcBttG3sqb9t1qtdpgPdHfTlrbdMwL/
4ly9o5buStZV0vMZyy/yR1q8J827IwdoIlyfvj7QQqG+dojjmyPVSGsbLrVOnOtR
pJRB24CnrH8xXYhth/dn02FOw1kfkgq/8SLQIlDAFpSpw94=
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:21:13 2025 by rpki-client