Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa
File:                     37c9addf-7b8f-33a5-96eb-afba41e723d5.roa (raw, json)
Hash identifier:          HOl9uIFmmdxkh8wXbixfOodbBW+p9RM09TGuEEbpARA=
Subject key identifier:   02:C9:EB:6B:8D:48:B8:16:49:44:0D:2D:AB:B7:27:6B:91:DD:FE:4C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BDCCB9388044948155900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     23047
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:dc:cb:93:88:04:49:48:15:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=7aec13d4-15eb-4298-95f8-09ffe84baaa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:f3:c0:18:6c:37:3c:45:96:6f:0a:b3:ad:
                    27:5d:62:52:08:ce:ba:1f:43:d7:49:69:5d:a8:91:
                    fb:68:72:66:a1:e3:ea:f9:47:cd:f9:df:f5:96:35:
                    62:77:6f:d3:0a:1c:08:f0:17:e2:1a:87:0a:05:be:
                    58:91:7f:06:6b:e0:d3:f6:03:4a:f8:6b:fc:59:56:
                    62:99:84:85:c4:53:17:b5:90:30:4a:c2:6c:ee:c1:
                    cb:c8:91:6e:d6:ed:05:d0:d5:e3:c6:42:9c:5c:d1:
                    fe:86:e5:f4:f7:ad:46:ff:c4:e4:61:d7:48:f3:98:
                    69:15:c0:a7:19:b9:50:2d:7c:1d:96:f6:ff:d1:21:
                    1a:04:aa:1c:fb:5b:4d:16:84:ac:d3:e0:61:40:32:
                    c8:36:df:93:a1:a3:1c:41:31:f5:08:f8:ea:11:d3:
                    df:12:b8:00:74:b8:b8:d3:ed:3a:9a:de:59:bd:03:
                    b8:28:f4:e4:71:17:dc:00:50:ee:14:52:d6:f7:c8:
                    16:fc:ef:bd:0d:95:9d:bf:50:2a:d8:e5:59:3a:ab:
                    ca:a3:4e:9d:20:51:5d:64:86:77:e0:2e:56:df:2f:
                    f0:a7:c3:04:fe:55:8c:f1:e2:d6:9a:24:61:23:5a:
                    8b:ed:25:20:15:79:df:31:89:ac:de:a0:20:ad:95:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C9:EB:6B:8D:48:B8:16:49:44:0D:2D:AB:B7:27:6B:91:DD:FE:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:c2:51:86:69:29:32:8b:7b:37:57:fe:9e:a7:2c:ad:2d:
         f0:7c:e2:0c:87:68:ad:54:61:40:18:57:02:a3:c4:9c:97:07:
         bc:0a:60:ca:1d:42:71:2e:b5:1e:ba:fd:6b:a8:9e:32:a5:66:
         bd:1a:93:ad:ad:fc:1f:9b:76:48:ae:b3:5d:9e:15:78:19:ea:
         b0:e4:19:b1:1e:57:ee:f9:a6:35:37:02:3f:25:81:13:72:e8:
         da:5b:19:f1:c8:73:59:c0:07:67:13:e9:e3:87:3f:14:6e:8d:
         48:4b:6e:72:ad:5f:39:c0:b7:8a:b3:48:e2:7e:56:9c:21:9e:
         e0:7f:b1:b8:5c:da:01:3c:eb:61:ec:84:92:e8:c0:f9:d5:5a:
         34:ec:2c:ba:28:8a:92:02:a1:8c:61:5c:f1:a9:75:aa:bb:b7:
         6c:e8:d1:81:bd:00:d2:c4:f0:91:92:33:e4:a8:18:95:e6:a6:
         4f:cc:7f:04:a4:77:e6:23:22:7c:d2:1b:77:1a:c8:cf:2a:73:
         fa:25:08:3c:af:50:ec:45:8f:c4:ba:6f:6b:b8:97:46:c1:2a:
         4f:49:0f:db:a6:a0:36:08:ac:80:a5:bc:81:b2:6f:5b:3b:36:
         2d:a0:54:62:e5:81:8d:e7:8d:01:b9:14:1a:29:81:b1:d8:09:
         3c:00:81:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9zLk4gESUgVWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
N2FlYzEzZDQtMTVlYi00Mjk4LTk1ZjgtMDlmZmU4NGJhYWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNfzwBhsNzxFlm8Ks60nXWJSCM66H0PXSWld
qJH7aHJmoePq+UfN+d/1ljVid2/TChwI8BfiGocKBb5YkX8Ga+DT9gNK+Gv8WVZi
mYSFxFMXtZAwSsJs7sHLyJFu1u0F0NXjxkKcXNH+huX0961G/8TkYddI85hpFcCn
GblQLXwdlvb/0SEaBKoc+1tNFoSs0+BhQDLINt+ToaMcQTH1CPjqEdPfErgAdLi4
0+06mt5ZvQO4KPTkcRfcAFDuFFLW98gW/O+9DZWdv1Aq2OVZOqvKo06dIFFdZIZ3
4C5W3y/wp8ME/lWM8eLWmiRhI1qL7SUgFXnfMYms3qAgrZXN9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFALJ62uNSLgWSUQNLau3J2uR3f5MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzdjOWFkZGYtN2I4Zi0z
M2E1LTk2ZWItYWZiYTQxZTcyM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD2lwlGGaSkyi3s3V/6epyytLfB84gyHaK1UYUAYVwKjxJyXB7wK
YModQnEutR66/WuonjKlZr0ak62t/B+bdkius12eFXgZ6rDkGbEeV+75pjU3Aj8l
gRNy6NpbGfHIc1nAB2cT6eOHPxRujUhLbnKtXznAt4qzSOJ+VpwhnuB/sbhc2gE8
62HshJLowPnVWjTsLLooipICoYxhXPGpdaq7t2zo0YG9ANLE8JGSM+SoGJXmpk/M
fwSkd+YjInzSG3cayM8qc/olCDyvUOxFj8S6b2u4l0bBKk9JD9umoDYIrIClvIGy
b1s7Ni2gVGLlgY3njQG5FBopgbHYCTwAgRk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:41:20 2025 by rpki-client