Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f3c69b0-729f-3b65-becd-adef310073c9.roa
File:                     2f3c69b0-729f-3b65-becd-adef310073c9.roa (raw, json)
Hash identifier:          YAI03CktCoTCohVLNRfX8GfR+RlXLqkBuYFuiRMdcHg=
Subject key identifier:   9E:4D:86:B1:BA:6B:60:80:DF:8B:D4:C1:D7:91:72:DF:50:2C:EC:C9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC046C29CFCDBD0B28200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f3c69b0-729f-3b65-becd-adef310073c9.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     11994
IP address blocks:        2001:470:e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c0:46:c2:9c:fc:db:d0:b2:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a19aba95-9dbc-48dd-9054-db337986e8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:30:39:8a:06:72:d7:86:89:1c:48:b6:ef:
                    07:41:35:c3:16:72:8f:31:b4:10:96:45:17:91:71:
                    6b:d1:1b:64:c9:eb:2c:1b:a7:7e:9b:0b:c0:d3:06:
                    e1:e5:1a:88:62:41:6b:b9:d7:ef:8c:5d:eb:d0:04:
                    d0:d0:98:0b:bb:65:c8:94:84:d1:15:81:58:e2:61:
                    e9:f7:b2:ac:da:1a:ee:85:4e:7b:8f:2b:d7:54:97:
                    24:25:f3:2d:8f:3c:c7:61:3d:e0:55:6a:e8:d4:14:
                    b7:c0:67:fe:25:5e:dc:d6:d2:e7:27:3a:87:bb:e3:
                    81:7c:e9:9c:65:6b:1a:9e:c3:56:a7:00:dd:41:e3:
                    a6:93:f0:4a:bd:e4:9e:72:f2:ae:51:df:f1:5c:52:
                    02:c3:fc:67:b4:af:6a:e5:0d:2e:d5:a9:63:de:18:
                    e0:09:04:99:d8:62:36:6b:0f:98:97:31:5c:4f:ef:
                    d2:8a:bf:06:9f:e4:cc:a9:50:8c:72:a8:6f:8d:13:
                    76:a6:10:69:12:96:0f:68:78:fd:85:61:8d:aa:d9:
                    8d:44:26:f8:5b:70:bb:32:93:5c:a8:86:96:60:82:
                    91:42:95:7e:3a:79:ad:fe:03:db:ba:86:33:d6:75:
                    e8:c2:d2:53:aa:95:82:0a:3a:be:34:75:ca:ae:b5:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4D:86:B1:BA:6B:60:80:DF:8B:D4:C1:D7:91:72:DF:50:2C:EC:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f3c69b0-729f-3b65-becd-adef310073c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:97:df:ac:be:69:e2:4e:b6:e8:1c:a6:56:73:13:6c:80:95:
         99:83:24:e3:83:55:ad:77:a0:c7:4e:5b:78:97:15:b5:a6:4b:
         77:70:64:dd:fa:00:cd:6b:9b:16:2a:14:98:77:54:ba:03:29:
         ae:79:f6:af:c0:27:2f:c0:ed:13:e9:75:35:2e:03:66:c1:39:
         98:a0:6d:b9:75:25:c4:1c:48:b2:14:79:e9:06:41:e1:cc:2f:
         4e:5d:9b:64:df:48:2b:d8:c4:0d:92:3c:27:21:fe:d2:3d:76:
         b2:f8:85:7d:1a:e4:94:bd:cc:a1:96:7f:14:10:7d:fc:b8:b8:
         35:9e:14:13:68:f4:0e:84:ed:2f:9c:bf:19:fc:69:94:a4:17:
         91:80:28:e4:64:1b:66:0a:61:04:6b:6a:60:95:72:8e:72:5c:
         0c:fb:57:7a:d4:f7:9a:62:87:a3:4c:3e:44:4d:1c:f7:13:fe:
         f7:85:ef:ff:09:ca:22:2c:da:cf:3b:b5:20:38:bc:8d:b0:9f:
         96:0d:a4:59:2a:62:c8:63:dc:39:c9:ed:18:a2:8f:5c:45:70:
         3e:b6:ec:15:eb:f3:aa:08:f3:6d:6f:34:65:0a:a4:e0:bc:e7:
         c0:9c:ff:c7:c3:5a:66:71:64:f4:ee:10:eb:d3:6c:fc:b4:fe:
         33:9f:ed:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8BGwpz829CyggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YTE5YWJhOTUtOWRiYy00OGRkLTkwNTQtZGIzMzc5ODZlOGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizIwOYoGcteGiRxItu8HQTXDFnKPMbQQlkUX
kXFr0RtkyessG6d+mwvA0wbh5RqIYkFrudfvjF3r0ATQ0JgLu2XIlITRFYFY4mHp
97Ks2hruhU57jyvXVJckJfMtjzzHYT3gVWro1BS3wGf+JV7c1tLnJzqHu+OBfOmc
ZWsansNWpwDdQeOmk/BKveSecvKuUd/xXFICw/xntK9q5Q0u1alj3hjgCQSZ2GI2
aw+YlzFcT+/Sir8Gn+TMqVCMcqhvjRN2phBpEpYPaHj9hWGNqtmNRCb4W3C7MpNc
qIaWYIKRQpV+Onmt/gPbuoYz1nXowtJTqpWCCjq+NHXKrrW4AQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ5NhrG6a2CA34vUwdeRct9QLOzJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmYzYzY5YjAtNzI5Zi0z
YjY1LWJlY2QtYWRlZjMxMDA3M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALGX36y+aeJOtugcplZzE2yAlZmDJOODVa13oMdOW3iXFbWmS3dw
ZN36AM1rmxYqFJh3VLoDKa559q/AJy/A7RPpdTUuA2bBOZigbbl1JcQcSLIUeekG
QeHML05dm2TfSCvYxA2SPCch/tI9drL4hX0a5JS9zKGWfxQQffy4uDWeFBNo9A6E
7S+cvxn8aZSkF5GAKORkG2YKYQRramCVco5yXAz7V3rU95pih6NMPkRNHPcT/veF
7/8JyiIs2s87tSA4vI2wn5YNpFkqYshj3DnJ7Riij1xFcD627BXr86oI821vNGUK
pOC858Cc/8fDWmZxZPTuEOvTbPy0/jOf7Tg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:42:26 2025 by rpki-client