Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79217232-f6be-3cd1-852b-c3d43e6dc168.roa
File:                     79217232-f6be-3cd1-852b-c3d43e6dc168.roa (raw, json)
Hash identifier:          X3izyuGeVYT75aBks1kchB01gAmaDektIrPZn5JNsKM=
Subject key identifier:   F6:2C:C7:F2:E1:88:8E:94:D1:44:26:4D:B9:70:47:B6:B3:6B:8A:9F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE4B2EB25C90BD6D2A200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79217232-f6be-3cd1-852b-c3d43e6dc168.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     3255
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e4:b2:eb:25:c9:0b:d6:d2:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a69dad71-4e5d-40b2-b365-4d50c106e762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:6b:48:78:9a:ee:94:da:44:a3:a7:d3:6f:
                    cf:9a:5d:90:53:36:c5:47:9a:f8:6e:48:4e:07:2b:
                    a1:e9:b8:8a:ee:b6:95:7e:ea:52:81:dd:6d:11:8b:
                    69:6c:3f:46:e4:0c:d5:e5:5e:d7:e4:b6:84:a3:00:
                    81:9b:d6:01:bd:f3:3f:d8:49:61:c4:9c:45:20:8a:
                    c4:77:45:8d:d5:d6:83:98:3c:cd:5b:97:e9:bb:7c:
                    66:93:3a:42:bf:6f:2b:6e:d2:41:8b:44:f7:86:4b:
                    a5:ee:49:60:a0:4b:67:72:29:2f:74:7f:79:78:71:
                    de:99:36:ff:52:8c:82:64:6a:f7:22:ac:8f:80:3d:
                    a2:c0:bb:dc:08:24:ce:0e:e0:d6:57:7c:ee:29:c7:
                    01:69:04:b5:d7:77:16:01:18:a2:1d:19:13:80:36:
                    99:d5:32:08:70:31:b7:59:db:d1:84:4f:b5:d1:4c:
                    57:6c:1c:3a:ea:a4:5d:ad:f5:31:c7:bf:b9:db:68:
                    09:0b:2f:5f:37:ba:48:85:0e:8e:1a:6d:28:61:04:
                    26:90:8a:89:d7:d2:03:c9:99:0e:8b:4f:64:be:7e:
                    3c:43:1b:1f:90:4d:a6:66:a0:83:20:25:d0:09:68:
                    de:44:fc:8d:23:ac:db:61:a3:46:42:18:53:35:eb:
                    aa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2C:C7:F2:E1:88:8E:94:D1:44:26:4D:B9:70:47:B6:B3:6B:8A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79217232-f6be-3cd1-852b-c3d43e6dc168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:44:88:23:da:a5:9f:4b:a8:71:4a:b1:36:42:aa:c7:d6:d6:
         64:6f:f4:f1:31:3c:dd:6d:a8:0a:b0:26:64:d4:fc:68:23:b7:
         9b:65:3f:65:0b:63:2f:34:08:ab:59:99:ef:17:26:9b:d1:ce:
         5b:a9:a9:54:ab:9b:78:e0:8c:3c:18:f4:12:4b:72:2a:36:e7:
         29:6e:25:bb:06:61:d0:59:e9:d8:b1:c9:a8:30:cf:66:e5:67:
         13:91:0e:bd:b4:18:20:c5:04:f0:69:6a:53:96:6b:8e:14:f5:
         6f:3f:ea:26:fc:0f:41:21:02:62:57:cc:df:c7:01:0b:74:7b:
         ce:ba:30:e4:94:8f:25:4e:61:00:7a:a5:a2:0b:96:51:b2:f0:
         34:58:2c:5c:20:41:ac:10:2d:18:f5:32:79:0b:2c:a1:f8:ff:
         87:22:15:75:a2:2b:a2:ff:48:a5:90:f6:9c:47:f9:a1:03:82:
         cf:a6:75:75:0c:d2:48:36:d1:36:46:a1:12:1c:14:67:87:3d:
         ac:ed:9b:0b:b0:6d:fe:b5:cd:96:7f:33:57:5a:61:ae:16:35:
         c7:e3:ce:d4:09:94:b5:73:93:ca:ec:47:13:98:2d:5a:97:90:
         61:57:f7:f3:82:83:4a:b9:cc:a7:fa:e8:40:e8:a3:56:58:b6:
         c7:a1:6b:96
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+Sy6yXJC9bSogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YTY5ZGFkNzEtNGU1ZC00MGIyLWIzNjUtNGQ1MGMxMDZlNzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoxrSHia7pTaRKOn02/Pml2QUzbFR5r4bkhO
Byuh6biK7raVfupSgd1tEYtpbD9G5AzV5V7X5LaEowCBm9YBvfM/2ElhxJxFIIrE
d0WN1daDmDzNW5fpu3xmkzpCv28rbtJBi0T3hkul7klgoEtncikvdH95eHHemTb/
UoyCZGr3IqyPgD2iwLvcCCTODuDWV3zuKccBaQS113cWARiiHRkTgDaZ1TIIcDG3
WdvRhE+10UxXbBw66qRdrfUxx7+522gJCy9fN7pIhQ6OGm0oYQQmkIqJ19IDyZkO
i09kvn48QxsfkE2mZqCDICXQCWjeRPyNI6zbYaNGQhhTNeuqhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPYsx/LhiI6U0UQmTblwR7aza4qfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzkyMTcyMzItZjZiZS0z
Y2QxLTg1MmItYzNkNDNlNmRjMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADhEiCPapZ9LqHFKsTZCqsfW1mRv9PExPN1tqAqwJmTU/Ggjt5tl
P2ULYy80CKtZme8XJpvRzlupqVSrm3jgjDwY9BJLcio25yluJbsGYdBZ6dixyagw
z2blZxORDr20GCDFBPBpalOWa44U9W8/6ib8D0EhAmJXzN/HAQt0e866MOSUjyVO
YQB6paILllGy8DRYLFwgQawQLRj1MnkLLKH4/4ciFXWiK6L/SKWQ9pxH+aEDgs+m
dXUM0kg20TZGoRIcFGeHPaztmwuwbf61zZZ/M1daYa4WNcfjztQJlLVzk8rsRxOY
LVqXkGFX9/OCg0q5zKf66EDoo1ZYtseha5Y=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:35 2025 by rpki-client