Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa
File:                     252e51df-b074-3d81-91f6-d7a86aee0e02.roa (raw, json)
Hash identifier:          rAbdXGILYeCqc28L9vWTFFFMejfCpQORqvg7zDRLaDY=
Subject key identifier:   BE:95:DE:9F:E1:9B:CF:A4:45:49:F8:A8:23:13:33:17:33:D5:FF:82
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849F2E5509CEF61BC4552DC7500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     12247
IP address blocks:        2001:470:391::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:50:9c:ef:61:bc:45:52:dc:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=5b3a4d5b-00a8-4967-aedd-989dc60df2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:07:9e:d7:97:60:b6:da:e2:0d:4a:71:98:
                    db:97:d0:03:a5:0f:fc:e9:ec:9b:2b:af:58:9f:98:
                    00:23:f7:fb:cd:5f:63:5e:b7:54:7a:4f:a1:45:76:
                    66:3e:55:a4:74:59:57:53:57:3e:f0:69:70:6a:e1:
                    57:e1:8d:e6:03:f9:99:07:e6:30:4a:09:be:d6:8d:
                    aa:1d:ab:c4:bf:bd:96:2f:75:c7:e3:07:10:1a:74:
                    1c:57:7f:56:7f:b5:da:fe:4a:50:18:d3:d6:72:fd:
                    3a:3d:17:90:cc:4f:7c:b2:3c:e0:39:5b:0d:e5:a0:
                    bb:d9:c2:41:19:b4:c6:42:ab:3e:bd:d9:be:37:fa:
                    07:2a:0c:4d:95:39:f2:05:8d:e4:8e:9d:a6:4a:e3:
                    0d:83:82:9e:56:d6:d6:40:e2:5b:a9:e3:53:15:b4:
                    71:35:68:f7:f7:b5:16:22:d6:9b:fa:9f:67:17:d7:
                    c9:20:5b:0e:f6:f5:0c:ee:2e:4a:f8:3d:2b:b9:6d:
                    03:40:bd:a5:bd:cb:ec:30:e8:05:9a:ec:68:15:f2:
                    fc:92:d3:4b:60:a6:fe:59:7a:96:64:2d:15:74:89:
                    78:f7:ba:48:f3:e5:e9:c2:d2:a3:ae:64:7d:7c:c6:
                    91:84:bc:2f:3f:a3:a6:e6:7b:ff:b0:62:e3:ee:ee:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:95:DE:9F:E1:9B:CF:A4:45:49:F8:A8:23:13:33:17:33:D5:FF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/252e51df-b074-3d81-91f6-d7a86aee0e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:3c:8e:27:c1:94:b3:d2:85:fc:7e:39:ef:eb:13:71:e2:
         54:1e:c7:33:93:20:f2:fc:24:91:2b:c3:af:9d:6d:1e:1e:2b:
         70:21:df:8f:24:90:0e:4b:e3:7e:9e:83:b7:4c:71:13:b4:14:
         92:ae:e3:3d:7f:3a:ec:01:3c:62:c4:b4:ae:9f:f8:a5:1c:4c:
         86:1c:18:cf:ed:1d:f8:a1:9a:cb:24:83:ff:e4:9b:d3:2d:76:
         91:5a:2f:50:e0:ac:dd:39:49:37:14:cd:56:0d:a5:b0:ae:f2:
         12:36:95:8f:bb:e8:a3:d6:99:1c:df:85:ef:45:99:9c:82:53:
         eb:58:e1:17:3c:89:be:7b:1c:6f:a7:5d:4a:d6:7f:8a:a7:52:
         f3:f4:6e:8a:dc:a8:17:99:7c:7c:a4:b8:9a:26:c6:9e:e6:bf:
         3b:4d:18:a4:b3:ab:e9:34:b3:c2:50:d9:45:fd:59:21:ac:68:
         2d:23:08:d2:e2:f3:ac:5d:95:32:7c:fb:f6:ad:8e:68:b9:35:
         07:70:b4:98:84:6d:36:be:68:ad:05:16:b7:ed:18:48:42:85:
         ca:71:ba:dc:91:17:45:8f:9a:2f:a6:3d:fb:8e:ae:58:ea:2c:
         d5:dd:11:fd:d1:34:ad:9b:db:84:27:3e:e7:10:2c:bd:a9:1f:
         f4:cc:c2:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5VCc72G8RVLcdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk
NWIzYTRkNWItMDBhOC00OTY3LWFlZGQtOTg5ZGM2MGRmMmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljgHnteXYLba4g1KcZjbl9ADpQ/86eybK69Y
n5gAI/f7zV9jXrdUek+hRXZmPlWkdFlXU1c+8GlwauFX4Y3mA/mZB+YwSgm+1o2q
HavEv72WL3XH4wcQGnQcV39Wf7Xa/kpQGNPWcv06PReQzE98sjzgOVsN5aC72cJB
GbTGQqs+vdm+N/oHKgxNlTnyBY3kjp2mSuMNg4KeVtbWQOJbqeNTFbRxNWj397UW
Itab+p9nF9fJIFsO9vUM7i5K+D0ruW0DQL2lvcvsMOgFmuxoFfL8ktNLYKb+WXqW
ZC0VdIl497pI8+XpwtKjrmR9fMaRhLwvP6Om5nv/sGLj7u7LFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL6V3p/hm8+kRUn4qCMTMxcz1f+CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjUyZTUxZGYtYjA3NC0z
ZDgxLTkxZjYtZDdhODZhZWUwZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI2WPI4nwZSz0oX8fjnv6xNx4lQexzOTIPL8JJErw6+dbR4eK3Ah
348kkA5L436eg7dMcRO0FJKu4z1/OuwBPGLEtK6f+KUcTIYcGM/tHfihmsskg//k
m9MtdpFaL1DgrN05STcUzVYNpbCu8hI2lY+76KPWmRzfhe9FmZyCU+tY4Rc8ib57
HG+nXUrWf4qnUvP0borcqBeZfHykuJomxp7mvztNGKSzq+k0s8JQ2UX9WSGsaC0j
CNLi86xdlTJ8+/atjmi5NQdwtJiEbTa+aK0FFrftGEhChcpxutyRF0WPmi+mPfuO
rljqLNXdEf3RNK2b24QnPucQLL2pH/TMwjE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:05:22 2025 by rpki-client