Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12262777-c090-3b49-b57b-c361013e3513.roa
File:                     12262777-c090-3b49-b57b-c361013e3513.roa (raw, json)
Hash identifier:          /KTu/dDev/CGSQsMXBoo78OoMEX5BYDjLDo8KIpVbyY=
Subject key identifier:   94:57:4E:8A:CE:AF:F7:28:01:C9:34:4E:AD:93:E8:66:C4:7C:A0:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BD60199A9889DDB1FBD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12262777-c090-3b49-b57b-c361013e3513.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     61616
IP address blocks:        2001:470:293::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:d6:01:99:a9:88:9d:db:1f:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b6318020-d77e-4139-9d98-3369b4b8a57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:0d:24:ff:24:67:c5:37:d1:a3:94:05:4e:
                    87:e5:75:56:b5:27:7d:e7:b6:e5:ba:42:7c:4a:32:
                    b7:b8:5b:54:81:d4:15:55:57:8f:cd:35:06:aa:c3:
                    7e:ab:a6:9d:c3:3a:85:cb:76:36:9e:ab:2e:b9:c3:
                    ea:68:85:41:9b:72:e8:a5:54:51:03:9a:53:0d:d5:
                    fc:3b:46:a6:24:58:48:f4:ef:99:2c:80:77:5d:7d:
                    ae:91:22:ad:5b:3b:17:6a:cb:43:d7:d9:be:12:b8:
                    26:b6:13:de:03:09:af:5c:10:12:b0:35:0a:26:db:
                    09:c1:64:5f:e6:bd:b4:84:ef:40:41:bb:62:9a:a4:
                    68:d0:80:5d:52:22:9e:61:ca:2c:96:95:2f:33:21:
                    3b:4f:41:93:ab:fd:74:60:cc:ff:c9:4a:74:56:d9:
                    9b:4c:72:d3:9c:0c:61:81:33:be:a1:a1:21:7b:c6:
                    c4:22:2d:64:0b:8d:ac:7f:bc:fc:61:fd:de:aa:c4:
                    00:d5:00:f3:c1:60:2c:de:94:c6:19:12:d7:0a:55:
                    10:06:a8:c0:f7:38:94:83:16:b2:d0:4b:c3:71:c2:
                    3a:19:53:7f:0c:f2:b3:e1:4f:de:1b:92:18:0a:82:
                    21:81:36:d0:ba:f0:e4:68:ce:2a:f0:e7:43:8a:c1:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:57:4E:8A:CE:AF:F7:28:01:C9:34:4E:AD:93:E8:66:C4:7C:A0:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12262777-c090-3b49-b57b-c361013e3513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:293::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:c5:b1:a3:71:a2:af:28:15:3a:b3:6f:6e:65:95:15:5b:
         8d:99:8c:d9:63:5d:a4:b3:96:76:17:f3:c9:f9:94:e4:2e:2c:
         c2:e7:e8:be:09:57:26:42:a5:42:61:83:8e:0f:59:53:38:8d:
         ea:34:8c:c4:6b:b5:3e:45:1f:ec:74:87:e3:38:6b:34:17:f7:
         78:c2:90:25:15:5f:e7:4a:b0:4c:96:43:e6:9b:3a:3f:b5:e7:
         03:f4:50:45:23:45:f4:47:af:2e:88:a9:a9:29:26:33:a9:c0:
         46:d7:aa:bb:f8:a4:fd:10:cd:4e:ee:bb:89:00:5e:c3:f6:0a:
         e4:d8:81:8c:10:c4:85:69:cb:bb:bf:8e:95:15:b2:03:92:15:
         4b:8f:da:c6:5e:7a:9c:6a:46:ca:12:1b:04:e4:17:61:26:61:
         b7:c0:37:c1:89:9a:60:0b:bc:40:83:fb:e7:24:73:c2:98:a6:
         3d:bd:f2:46:3b:da:99:49:f8:9e:47:6f:fb:90:1f:58:e4:bf:
         48:18:0b:51:06:3d:59:e7:ad:c1:a1:94:b9:21:a5:fa:47:0d:
         97:5d:51:98:26:14:f5:1e:0c:c7:91:9c:07:9b:f6:46:35:fa:
         07:f4:6a:54:2e:27:cd:c8:a2:95:e2:ba:32:00:96:be:ef:bc:
         c8:2c:3c:9d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9YBmamIndsfvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
YjYzMTgwMjAtZDc3ZS00MTM5LTlkOTgtMzM2OWI0YjhhNTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3UNJP8kZ8U30aOUBU6H5XVWtSd957blukJ8
SjK3uFtUgdQVVVePzTUGqsN+q6adwzqFy3Y2nqsuucPqaIVBm3LopVRRA5pTDdX8
O0amJFhI9O+ZLIB3XX2ukSKtWzsXastD19m+ErgmthPeAwmvXBASsDUKJtsJwWRf
5r20hO9AQbtimqRo0IBdUiKeYcoslpUvMyE7T0GTq/10YMz/yUp0VtmbTHLTnAxh
gTO+oaEhe8bEIi1kC42sf7z8Yf3eqsQA1QDzwWAs3pTGGRLXClUQBqjA9ziUgxay
0EvDccI6GVN/DPKz4U/eG5IYCoIhgTbQuvDkaM4q8OdDisEEDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJRXTorOr/coAck0Tq2T6GbEfKDuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTIyNjI3NzctYzA5MC0z
YjQ5LWI1N2ItYzM2MTAxM2UzNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGHCxbGjcaKvKBU6s29uZZUVW42ZjNljXaSzlnYX88n5lOQuLMLn
6L4JVyZCpUJhg44PWVM4jeo0jMRrtT5FH+x0h+M4azQX93jCkCUVX+dKsEyWQ+ab
Oj+15wP0UEUjRfRHry6IqakpJjOpwEbXqrv4pP0QzU7uu4kAXsP2CuTYgYwQxIVp
y7u/jpUVsgOSFUuP2sZeepxqRsoSGwTkF2EmYbfAN8GJmmALvECD++ckc8KYpj29
8kY72plJ+J5Hb/uQH1jkv0gYC1EGPVnnrcGhlLkhpfpHDZddUZgmFPUeDMeRnAeb
9kY1+gf0alQuJ83IopXiujIAlr7vvMgsPJ0=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:52:48 2025 by rpki-client