Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/083c1487-772d-3181-9e17-d067bca78275.roa
File:                     083c1487-772d-3181-9e17-d067bca78275.roa (raw, json)
Hash identifier:          Sn6h0tDgBZvVhBWsVA04DSVvPsQcGe4igHhj+QgtYB4=
Subject key identifier:   78:84:78:2C:5C:3B:D1:20:D7:83:CE:D7:18:E1:B6:70:07:61:D2:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858498A42EAE6F385E3686A353B20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/083c1487-772d-3181-9e17-d067bca78275.roa
Signing time:             Wed 16 Apr 2025 01:30:12 +0000
ROA not before:           Wed 16 Apr 2025 01:30:12 +0000
ROA not after:            Tue 15 Jul 2025 01:30:12 +0000
asID:                     17408
IP address blocks:        2001:470:e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:42:ea:e6:f3:85:e3:68:6a:35:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 16 01:30:12 2025 GMT
            Not After : Jul 15 01:30:12 2025 GMT
        Subject: CN=4a925e7c-1ef1-494e-8cf4-83acf2e45213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:40:e1:ed:7a:f0:a0:47:4d:35:c6:b5:6c:
                    c3:af:87:8a:d4:49:c2:6b:29:ae:92:8c:3c:50:2c:
                    6e:b3:0e:ea:95:6a:c8:fa:4f:06:b7:ad:07:c8:42:
                    1d:93:67:70:30:6f:44:22:a8:41:7f:d8:fc:c4:d0:
                    1a:20:88:16:1a:44:fd:0f:aa:b6:08:32:30:3d:a5:
                    47:99:e2:ae:23:db:5a:15:57:3a:bc:fd:8b:d2:f9:
                    9d:56:22:d7:b3:da:59:d6:a8:77:87:d3:a6:4b:0d:
                    6e:22:b0:ee:a4:57:aa:5a:49:21:88:85:ad:ac:ec:
                    20:88:1b:51:9b:5b:43:56:7e:d5:3a:9e:21:79:03:
                    d6:2c:c6:3d:25:1d:06:1c:50:56:99:7b:39:a6:b0:
                    04:82:c5:2d:44:f0:d8:c4:0c:b6:4c:ec:a4:65:26:
                    f3:6d:14:e5:2f:a3:04:46:40:64:ab:5b:b6:d7:71:
                    d0:40:06:5f:16:8c:e5:e7:17:2e:f5:70:cf:6b:4a:
                    05:4a:99:92:14:fa:36:6a:90:6d:5e:e7:7b:b7:c4:
                    90:ce:42:61:0f:fd:74:fc:fd:6d:70:af:80:a1:ca:
                    b5:7f:2d:2d:09:ed:35:7c:30:9a:19:71:ff:26:0c:
                    c8:43:4f:20:1e:40:ea:e2:1d:ed:cd:b3:8a:ac:37:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:78:2C:5C:3B:D1:20:D7:83:CE:D7:18:E1:B6:70:07:61:D2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/083c1487-772d-3181-9e17-d067bca78275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:da:30:09:06:6d:85:4e:24:f5:a9:6d:23:9a:cb:2a:1c:
         09:1a:c5:64:da:a2:eb:4c:0a:8b:d2:22:d4:a8:6f:81:de:c5:
         15:a7:e4:14:32:6f:af:f0:4d:6f:43:eb:da:f6:47:e5:49:36:
         7a:94:2b:99:ff:4d:97:12:bd:57:61:70:0b:dc:b9:ee:ab:34:
         8d:63:a2:b4:39:52:ad:cb:eb:bf:86:9e:41:c3:8a:c8:94:71:
         01:19:68:0d:64:7e:e4:b8:d4:cc:50:1e:58:96:a9:1c:e9:e6:
         f4:4d:3c:f3:e9:6e:e8:de:9a:d4:49:ac:fc:8d:3e:07:5c:13:
         18:02:05:cd:59:78:5e:f6:63:e8:67:eb:6e:05:10:2e:8a:4a:
         69:35:cb:04:a5:61:d3:59:af:2b:ae:05:f3:96:c4:9e:10:f5:
         43:be:05:47:29:e5:3d:27:62:f8:f7:5e:f1:6d:94:a5:a2:52:
         33:c4:05:9d:6b:5e:10:9d:63:83:08:54:85:1d:47:ac:00:34:
         e4:82:0e:1f:65:f5:0a:8d:58:2e:a6:89:64:99:7f:24:71:52:
         36:43:f9:b3:d8:cd:ab:b0:2e:c0:79:92:d0:bf:b2:9c:aa:9e:
         94:fc:19:dd:99:e5:26:6e:4e:31:5b:5f:51:c9:1c:7a:3a:86:
         03:e3:87:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmKQurm84XjaGo1OyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDQxNjAxMzAxMloXDTI1MDcxNTAxMzAxMlowLzEtMCsGA1UEAxMk
NGE5MjVlN2MtMWVmMS00OTRlLThjZjQtODNhY2YyZTQ1MjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvtA4e168KBHTTXGtWzDr4eK1EnCaymukow8
UCxusw7qlWrI+k8Gt60HyEIdk2dwMG9EIqhBf9j8xNAaIIgWGkT9D6q2CDIwPaVH
meKuI9taFVc6vP2L0vmdViLXs9pZ1qh3h9OmSw1uIrDupFeqWkkhiIWtrOwgiBtR
m1tDVn7VOp4heQPWLMY9JR0GHFBWmXs5prAEgsUtRPDYxAy2TOykZSbzbRTlL6ME
RkBkq1u213HQQAZfFozl5xcu9XDPa0oFSpmSFPo2apBtXud7t8SQzkJhD/10/P1t
cK+Aocq1fy0tCe01fDCaGXH/JgzIQ08gHkDq4h3tzbOKrDdCIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHiEeCxcO9Eg14PO1xjhtnAHYdJ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDgzYzE0ODctNzcyZC0z
MTgxLTllMTctZDA2N2JjYTc4Mjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ+T2jAJBm2FTiT1qW0jmssqHAkaxWTaoutMCovSItSob4HexRWn
5BQyb6/wTW9D69r2R+VJNnqUK5n/TZcSvVdhcAvcue6rNI1jorQ5Uq3L67+GnkHD
isiUcQEZaA1kfuS41MxQHliWqRzp5vRNPPPpbujemtRJrPyNPgdcExgCBc1ZeF72
Y+hn624FEC6KSmk1ywSlYdNZryuuBfOWxJ4Q9UO+BUcp5T0nYvj3XvFtlKWiUjPE
BZ1rXhCdY4MIVIUdR6wANOSCDh9l9QqNWC6miWSZfyRxUjZD+bPYzauwLsB5ktC/
spyqnpT8Gd2Z5SZuTjFbX1HJHHo6hgPjh60=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:22 2025 by rpki-client