Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06a918e5-1f36-37c2-837c-e541e562cc74.roa
File:                     06a918e5-1f36-37c2-837c-e541e562cc74.roa (raw, json)
Hash identifier:          NjLSNn5URcgXrWMlTK5HuH/KXZkuNqQ5YmaJ5En1We4=
Subject key identifier:   4D:A4:1D:FC:13:8A:6E:8B:2C:9A:37:4C:E4:A7:AE:2E:5F:9A:1C:DF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AAF64B85A2FD947AB24D45000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06a918e5-1f36-37c2-837c-e541e562cc74.roa
Signing time:             Wed 30 Jul 2025 01:30:10 +0000
ROA not before:           Wed 30 Jul 2025 01:30:10 +0000
ROA not after:            Tue 28 Oct 2025 01:30:10 +0000
asID:                     214618
IP address blocks:        2001:470:4a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:64:b8:5a:2f:d9:47:ab:24:d4:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 30 01:30:10 2025 GMT
            Not After : Oct 28 01:30:10 2025 GMT
        Subject: CN=13c1fcb3-02fd-414e-8c6c-7cfed6e1a0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:e2:e8:a1:c0:8c:75:5b:87:6b:86:27:ff:
                    fe:1f:b6:ac:d9:32:89:f7:04:ef:73:e6:9e:eb:83:
                    29:f9:99:e2:ab:87:2e:a3:42:ec:06:5a:0e:df:62:
                    0f:ac:62:24:e3:85:e0:51:ad:b3:16:62:f6:ae:1b:
                    43:0c:c0:fa:45:e6:38:bf:e2:f7:56:78:8f:01:34:
                    67:cf:d3:fa:a5:93:55:d2:d9:7c:d9:35:09:dc:8f:
                    25:6d:59:af:07:86:c7:bc:e4:83:cf:d3:b8:0e:69:
                    b3:f7:1c:cf:52:77:f3:4a:ad:7f:85:77:ff:ea:8c:
                    07:65:a0:b0:8d:b1:28:5d:ea:d4:4d:83:fe:88:15:
                    64:40:ed:80:b4:5f:9d:fc:87:66:16:7a:29:c1:70:
                    f8:d8:10:20:e5:47:c8:70:d3:11:ec:93:5e:94:56:
                    c6:95:91:9e:4a:ae:58:55:10:06:2f:68:8f:0a:fa:
                    eb:f3:d0:0b:a2:7c:db:45:12:fa:db:0e:4c:a5:0f:
                    db:1e:60:3e:26:e2:cf:39:de:86:34:8f:58:18:a6:
                    71:a5:3e:8c:99:89:f2:08:08:7d:20:ba:02:c8:7d:
                    4b:d4:03:14:7b:e0:50:14:c9:ba:ec:2f:72:f7:5b:
                    d0:d7:65:cd:c8:4d:9f:18:5b:91:d0:84:b0:16:34:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:1D:FC:13:8A:6E:8B:2C:9A:37:4C:E4:A7:AE:2E:5F:9A:1C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06a918e5-1f36-37c2-837c-e541e562cc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:01:fa:c5:19:49:53:f9:7e:e1:a4:e4:58:a9:de:d1:7b:4e:
         a6:a5:e5:ee:76:94:90:ed:80:9c:cf:d2:27:f9:20:09:21:28:
         b5:ab:7f:d0:b1:38:9f:72:dc:cb:b1:84:0c:b0:8e:6d:4a:46:
         39:a2:42:91:af:98:7e:7d:a5:9f:aa:ad:5a:b9:41:a1:37:b5:
         be:b5:ba:5a:e0:01:6a:a5:6e:ac:f1:62:6e:9e:c0:34:27:e2:
         37:e3:cf:2a:1b:0d:9d:d5:55:46:a0:1c:c3:13:da:4f:de:ce:
         e8:43:49:20:e6:02:f0:08:0d:ff:37:94:94:e9:8a:78:0c:21:
         d6:8e:92:6c:90:ef:66:4d:41:f7:63:5c:e6:27:15:51:f7:ef:
         da:14:3a:53:01:43:51:b9:ec:84:dd:2c:d3:0c:d5:db:91:9c:
         6a:0a:8c:b5:1c:ef:ea:b2:9d:03:5d:83:69:ca:ea:7e:c4:47:
         fb:45:80:1d:4b:3a:0c:84:e6:c9:16:0c:0d:1f:71:b2:3e:9f:
         6b:78:d0:49:2f:12:a7:67:e2:4e:4f:90:e2:dd:68:40:bf:13:
         20:b0:6d:59:9a:7f:e2:01:10:4a:5a:f3:0d:42:e0:7b:6f:3f:
         41:f4:5e:d4:70:c1:a8:51:17:5f:44:cb:ae:14:cc:bd:7f:2e:
         4c:6b:9a:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqvZLhaL9lHqyTUUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDczMDAxMzAxMFoXDTI1MTAyODAxMzAxMFowLzEtMCsGA1UEAxMk
MTNjMWZjYjMtMDJmZC00MTRlLThjNmMtN2NmZWQ2ZTFhMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Xi6KHAjHVbh2uGJ//+H7as2TKJ9wTvc+ae
64Mp+Zniq4cuo0LsBloO32IPrGIk44XgUa2zFmL2rhtDDMD6ReY4v+L3VniPATRn
z9P6pZNV0tl82TUJ3I8lbVmvB4bHvOSDz9O4Dmmz9xzPUnfzSq1/hXf/6owHZaCw
jbEoXerUTYP+iBVkQO2AtF+d/IdmFnopwXD42BAg5UfIcNMR7JNelFbGlZGeSq5Y
VRAGL2iPCvrr89ALonzbRRL62w5MpQ/bHmA+JuLPOd6GNI9YGKZxpT6MmYnyCAh9
ILoCyH1L1AMUe+BQFMm67C9y91vQ12XNyE2fGFuR0ISwFjRr3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE2kHfwTim6LLJo3TOSnri5fmhzfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDZhOTE4ZTUtMWYzNi0z
N2MyLTgzN2MtZTU0MWU1NjJjYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMUB+sUZSVP5fuGk5Fip3tF7Tqal5e52lJDtgJzP0if5IAkhKLWr
f9CxOJ9y3MuxhAywjm1KRjmiQpGvmH59pZ+qrVq5QaE3tb61ulrgAWqlbqzxYm6e
wDQn4jfjzyobDZ3VVUagHMMT2k/ezuhDSSDmAvAIDf83lJTpingMIdaOkmyQ72ZN
QfdjXOYnFVH379oUOlMBQ1G57ITdLNMM1duRnGoKjLUc7+qynQNdg2nK6n7ER/tF
gB1LOgyE5skWDA0fcbI+n2t40EkvEqdn4k5PkOLdaEC/EyCwbVmaf+IBEEpa8w1C
4HtvP0H0XtRwwahRF19Ey64UzL1/LkxrmnY=
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:50 2025 by rpki-client