Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16281bc0-6a7f-3f46-91b9-50f3c2497ba1.roa
File:                     16281bc0-6a7f-3f46-91b9-50f3c2497ba1.roa (raw, json)
Hash identifier:          8+FeV2pVf98MKQsJf1ueAXK+ld53q07TJPwyRjvO5/4=
Subject key identifier:   43:00:08:AD:DA:1F:FF:2F:B8:CC:F6:3C:BD:5F:AF:09:89:70:F0:A6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584996C4BA9B0AB1751A8ECDE200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16281bc0-6a7f-3f46-91b9-50f3c2497ba1.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     34774
IP address blocks:        2001:470:360::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:ba:9b:0a:b1:75:1a:8e:cd:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=6e852048-b7a1-4f9f-ab1b-a10265140fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:75:ed:52:2f:b7:cc:13:ce:20:0e:ad:ce:
                    25:64:3b:c6:52:a8:3d:18:7f:38:af:81:9c:66:fa:
                    07:03:0c:a2:4d:a6:4b:2d:cf:cc:16:f5:80:8e:62:
                    c6:c4:42:07:64:a0:03:ab:1a:52:9e:ce:5b:5e:a2:
                    c9:ac:47:d1:e4:00:cb:d9:bb:c6:f1:51:8b:f4:92:
                    ba:b5:a1:41:5d:cc:5a:29:ab:25:75:db:5c:3a:ac:
                    25:f4:53:e4:8e:70:f0:5a:36:95:da:f5:3c:2c:3f:
                    37:71:fa:02:9c:31:dd:f4:89:ff:64:71:d3:60:4b:
                    d4:4f:68:75:be:76:e5:ca:2c:1b:18:bd:7f:09:f6:
                    3a:f4:95:cd:d4:6a:bb:b4:a1:42:5b:cd:6c:6e:84:
                    78:f6:81:61:58:da:6a:87:72:55:ce:82:55:f1:59:
                    b7:d8:f2:07:a2:21:0c:eb:08:e1:3a:f2:27:c5:3e:
                    cb:7f:07:f2:5b:b2:6e:3d:7d:c3:6a:e8:99:42:23:
                    56:87:a9:af:16:12:0a:f6:0d:81:f1:8c:75:63:6a:
                    98:d9:bf:ff:cb:f9:56:6c:4e:b6:09:e7:b6:a7:91:
                    13:05:a1:4e:28:51:90:5c:4f:7c:cc:17:d0:12:bc:
                    3b:ed:61:ed:00:d5:59:cc:a6:d3:a3:e1:2e:d3:97:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:08:AD:DA:1F:FF:2F:B8:CC:F6:3C:BD:5F:AF:09:89:70:F0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16281bc0-6a7f-3f46-91b9-50f3c2497ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:360::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:a0:1b:0c:3c:62:65:d4:cf:53:5a:a0:95:ee:45:04:02:
         32:fe:8d:fa:4c:7b:36:6c:4c:b5:f1:ae:84:f2:a2:7b:c2:e5:
         85:5a:ca:3d:a3:08:88:45:cf:0e:29:80:34:7c:08:1a:10:16:
         72:e0:c5:87:82:59:99:ab:e7:0b:c4:8a:f1:b6:c5:ea:83:62:
         06:9e:9a:49:4f:13:18:5c:aa:dd:94:3e:2a:fe:0c:a9:15:02:
         b7:80:18:9a:6c:31:1a:3d:f0:81:bd:fc:4e:a7:2e:39:7d:b2:
         c5:ae:6d:04:e4:08:67:ee:0c:71:a6:e5:20:44:3c:7d:9e:ec:
         d6:fe:69:11:3d:46:6b:d4:3f:ca:b8:87:58:76:a5:46:f1:1e:
         3f:da:f5:f3:24:d7:04:4c:d4:8e:f7:35:40:95:f6:92:63:db:
         ad:bd:36:ef:df:03:ef:c7:29:a9:44:51:f9:de:4e:65:36:1f:
         39:b1:11:88:c0:42:4a:7f:d2:e7:93:1e:74:62:f7:f8:dd:18:
         4e:d1:65:0e:b1:0e:38:0c:be:bf:1d:6f:56:59:87:b9:7f:32:
         ae:bc:c1:c0:83:05:10:2d:39:7c:08:d1:41:cd:6f:6d:ec:7b:
         d9:31:55:a1:cc:fa:13:12:5a:a8:84:3f:7a:4b:c9:11:5d:33:
         3e:31:c8:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxLqbCrF1Go7N4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
NmU4NTIwNDgtYjdhMS00ZjlmLWFiMWItYTEwMjY1MTQwZmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRh17VIvt8wTziAOrc4lZDvGUqg9GH84r4Gc
ZvoHAwyiTaZLLc/MFvWAjmLGxEIHZKADqxpSns5bXqLJrEfR5ADL2bvG8VGL9JK6
taFBXcxaKaslddtcOqwl9FPkjnDwWjaV2vU8LD83cfoCnDHd9In/ZHHTYEvUT2h1
vnblyiwbGL1/CfY69JXN1Gq7tKFCW81sboR49oFhWNpqh3JVzoJV8Vm32PIHoiEM
6wjhOvInxT7LfwfyW7JuPX3DauiZQiNWh6mvFhIK9g2B8Yx1Y2qY2b//y/lWbE62
Cee2p5ETBaFOKFGQXE98zBfQErw77WHtANVZzKbTo+Eu05dNcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEMACK3aH/8vuMz2PL1frwmJcPCmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTYyODFiYzAtNmE3Zi0z
ZjQ2LTkxYjktNTBmM2MyNDk3YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcANg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEwhoBsMPGJl1M9TWqCV7kUEAjL+jfpMezZsTLXxroTyonvC5YVa
yj2jCIhFzw4pgDR8CBoQFnLgxYeCWZmr5wvEivG2xeqDYgaemklPExhcqt2UPir+
DKkVAreAGJpsMRo98IG9/E6nLjl9ssWubQTkCGfuDHGm5SBEPH2e7Nb+aRE9RmvU
P8q4h1h2pUbxHj/a9fMk1wRM1I73NUCV9pJj2629Nu/fA+/HKalEUfneTmU2Hzmx
EYjAQkp/0ueTHnRi9/jdGE7RZQ6xDjgMvr8db1ZZh7l/Mq68wcCDBRAtOXwI0UHN
b23se9kxVaHM+hMSWqiEP3pLyRFdMz4xyLs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:16:32 2025 by rpki-client