Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa
File:                     21b3acb0-357c-3d95-928b-9d0c6629e02b.roa (raw, json)
Hash identifier:          DyzGkSq3mXt/Zt6QFon6esiCnP9Aonfzplwoqc6gs+g=
Subject key identifier:   D8:E4:49:E6:77:97:05:60:98:74:53:21:58:2B:6D:42:FF:17:09:61
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FCC7D914B3E8A536427E8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     23252
IP address blocks:        2001:470:2fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:cc:7d:91:4b:3e:8a:53:64:27:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ffac2e4f-ffb7-4af3-9f5c-b418da8f6352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:78:c9:7b:23:7d:fa:fc:74:98:d5:3c:89:
                    2d:e3:3e:85:bf:de:26:7e:d5:40:e0:c8:ae:9f:d7:
                    a4:89:39:3a:1b:19:37:82:b0:8f:41:3b:bf:35:20:
                    db:e9:22:3b:3f:6c:b2:c4:cf:12:77:43:b3:3a:79:
                    7b:14:6c:94:15:7c:20:35:62:f9:e7:48:ac:7c:13:
                    3e:42:10:0c:c4:e7:64:30:e6:95:e9:7a:a1:1d:ad:
                    28:6f:1f:40:f1:57:b3:a5:e2:b5:3c:3b:3c:0b:a6:
                    1d:6a:50:bc:38:e5:76:6d:a5:57:c5:c3:c1:eb:c4:
                    8f:49:eb:43:09:00:0e:05:57:4c:07:dc:b9:76:1f:
                    d7:49:2d:31:97:fd:3e:c1:61:84:91:0a:a4:9b:f9:
                    bb:07:61:ce:95:ed:74:0d:37:33:95:13:88:a5:69:
                    40:e1:45:ee:cf:ac:fe:08:be:90:dc:1a:35:60:bc:
                    e1:6e:57:be:3b:69:e2:08:3e:3e:84:2e:a4:50:c5:
                    f2:47:e4:84:d9:c5:0d:14:6c:2a:dc:35:79:6b:fe:
                    ca:fa:47:b0:e8:eb:4d:9b:45:94:43:cb:9a:8e:9c:
                    0b:eb:ff:1b:43:61:f9:e0:90:05:43:18:34:6b:9b:
                    38:b7:82:f0:b9:bc:69:5b:48:ec:67:60:40:9d:2c:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E4:49:E6:77:97:05:60:98:74:53:21:58:2B:6D:42:FF:17:09:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21b3acb0-357c-3d95-928b-9d0c6629e02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:45:88:c7:f8:ba:6a:e4:0f:85:54:97:45:ef:7e:7a:49:14:
         05:64:a4:9e:16:3d:b0:a8:98:e3:47:25:cf:9d:b5:82:6a:e0:
         ba:27:2c:32:8b:34:fb:f6:5f:6f:4d:a0:aa:2d:ce:70:a2:90:
         5e:49:ec:de:83:8a:05:ea:bd:ee:29:0b:7a:c6:49:5b:f9:81:
         94:ca:11:2f:6a:6a:37:94:0f:57:6a:b3:52:0d:c4:47:27:14:
         26:34:9e:97:a2:4c:6b:2d:2f:9d:b5:74:68:29:59:ff:fa:70:
         e0:87:10:a7:e3:e9:80:68:fc:20:14:46:63:f1:3e:18:68:1a:
         bc:a0:27:d6:64:2f:9b:95:c9:66:34:69:e3:c6:d6:f8:af:e7:
         5e:72:6c:8f:28:5b:a1:7d:bc:89:a3:b8:7c:71:f2:1b:da:bc:
         63:0b:e5:64:04:fd:f2:f6:c1:b0:66:5b:4a:be:c4:87:5d:84:
         16:41:a8:3d:93:f3:8b:f6:51:76:2b:89:d0:fd:07:9a:75:c0:
         51:26:d6:aa:60:73:61:47:0e:cf:e4:e8:7d:cd:0a:ce:bb:0a:
         5e:3e:a0:03:4c:b4:64:b7:39:ca:e2:80:2e:9a:23:73:79:bd:
         90:61:18:12:67:61:8c:c4:b2:6c:02:5e:bf:78:ef:7a:36:b7:
         76:06:0c:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8x9kUs+ilNkJ+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
ZmZhYzJlNGYtZmZiNy00YWYzLTlmNWMtYjQxOGRhOGY2MzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5J4yXsjffr8dJjVPIkt4z6Fv94mftVA4Miu
n9ekiTk6Gxk3grCPQTu/NSDb6SI7P2yyxM8Sd0OzOnl7FGyUFXwgNWL550isfBM+
QhAMxOdkMOaV6XqhHa0obx9A8VezpeK1PDs8C6YdalC8OOV2baVXxcPB68SPSetD
CQAOBVdMB9y5dh/XSS0xl/0+wWGEkQqkm/m7B2HOle10DTczlROIpWlA4UXuz6z+
CL6Q3Bo1YLzhble+O2niCD4+hC6kUMXyR+SE2cUNFGwq3DV5a/7K+kew6OtNm0WU
Q8uajpwL6/8bQ2H54JAFQxg0a5s4t4LwubxpW0jsZ2BAnSyHSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNjkSeZ3lwVgmHRTIVgrbUL/FwlhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFiM2FjYjAtMzU3Yy0z
ZDk1LTkyOGItOWQwYzY2MjllMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADJFiMf4umrkD4VUl0XvfnpJFAVkpJ4WPbComONHJc+dtYJq4Lon
LDKLNPv2X29NoKotznCikF5J7N6DigXqve4pC3rGSVv5gZTKES9qajeUD1dqs1IN
xEcnFCY0npeiTGstL521dGgpWf/6cOCHEKfj6YBo/CAURmPxPhhoGrygJ9ZkL5uV
yWY0aePG1viv515ybI8oW6F9vImjuHxx8hvavGML5WQE/fL2wbBmW0q+xIddhBZB
qD2T84v2UXYridD9B5p1wFEm1qpgc2FHDs/k6H3NCs67Cl4+oANMtGS3OcrigC6a
I3N5vZBhGBJnYYzEsmwCXr9473o2t3YGDCw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:04 2025 by rpki-client