Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842dcb74-3ef3-3a84-9fd7-c9c3d4dc8e60.roa
File:                     842dcb74-3ef3-3a84-9fd7-c9c3d4dc8e60.roa (raw, json)
Hash identifier:          5+XZMaesXmg+w0TLE3kfVcub11K6xIBRyPzNVEMGgzg=
Subject key identifier:   C8:B9:A4:A4:B1:87:DE:BD:94:17:47:90:17:94:79:F6:19:84:99:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91C0188FEAA45EE8507AB40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842dcb74-3ef3-3a84-9fd7-c9c3d4dc8e60.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     22168
IP address blocks:        2001:470:2cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1c:01:88:fe:aa:45:ee:85:07:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=1e44a82e-b6ce-46d1-8ba3-07fe10c070e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:8e:a3:f6:20:cb:2c:96:53:d2:7a:df:98:
                    b1:a7:80:c9:b3:4e:94:d5:d3:f4:5c:a6:66:fd:da:
                    35:3a:c3:43:75:48:8b:94:a5:1b:0f:ff:82:7d:f5:
                    91:3e:7b:f9:00:22:ba:a9:bc:dd:c2:21:e3:c5:2d:
                    5f:31:bb:c0:a8:9c:10:ea:9f:a0:bb:72:31:8f:ce:
                    1e:a5:c4:eb:af:00:d4:9c:47:25:52:d7:c1:74:01:
                    6f:6d:57:ec:16:fe:e4:77:b6:b8:f5:08:8c:c8:20:
                    60:45:72:70:b3:fc:63:61:be:13:6e:8f:d6:e1:26:
                    9e:11:90:45:99:c7:62:41:8f:dd:3d:7a:94:4e:fc:
                    a7:c2:66:98:63:d9:73:e9:13:3e:31:02:4f:2c:6b:
                    2a:f7:2a:01:51:25:e5:df:ab:3c:1d:ae:58:a5:e6:
                    5c:1c:59:f1:dc:a5:cd:ab:6d:4b:f2:3e:97:ca:7a:
                    19:a6:55:86:50:b0:a0:b0:24:64:14:66:73:9e:e0:
                    e3:e4:7d:0d:62:9e:cd:3c:ca:8d:23:76:0b:67:6f:
                    07:7e:62:b8:f4:36:46:72:cc:88:b4:2a:31:43:b7:
                    7f:80:f4:20:e6:d6:61:04:0d:0c:05:6a:09:24:d5:
                    66:fc:bb:b8:e6:62:de:34:ad:5c:0a:dd:d8:b5:64:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:A4:A4:B1:87:DE:BD:94:17:47:90:17:94:79:F6:19:84:99:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842dcb74-3ef3-3a84-9fd7-c9c3d4dc8e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e8:ad:4d:b3:db:c1:59:6c:db:21:9c:58:4d:02:98:60:32:
         9d:66:9f:05:a3:e2:2c:75:8a:1d:c6:7a:32:55:05:d6:bc:92:
         86:fe:e8:13:44:dd:b3:64:e5:36:ff:f8:2e:dd:cc:9c:0e:c6:
         fc:e0:41:00:25:17:89:0f:19:48:66:9b:ec:14:31:88:3b:71:
         5b:ed:67:60:7a:94:be:78:e1:55:57:6b:bd:c6:cb:aa:6c:eb:
         98:79:7a:ff:88:97:f7:a8:20:0a:b3:1c:33:04:35:c7:c4:94:
         f8:11:3e:62:93:78:54:5e:b4:78:f3:c6:72:54:df:ae:9c:ee:
         b0:7e:75:39:d8:04:2a:9a:a7:0a:a3:16:99:b8:62:84:2b:55:
         1b:4a:43:02:96:06:b4:26:e5:d5:ed:5d:64:02:f6:53:4a:2c:
         c5:aa:97:2a:a0:53:64:8a:24:6a:9e:64:fc:fa:eb:ab:d2:04:
         38:af:86:52:43:11:1b:e9:7c:5c:74:54:90:29:cf:58:bd:53:
         7b:f3:ba:a9:51:c0:54:4f:8f:58:09:0a:79:2c:33:bd:5f:9b:
         7b:eb:c5:f6:59:aa:31:f1:b6:35:3a:1b:fd:73:4c:fd:e6:6b:
         55:d6:1b:16:28:13:15:f7:7b:2d:fb:d8:c0:81:f5:02:c5:3a:
         ea:f5:c6:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5HAGI/qpF7oUHq0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MWU0NGE4MmUtYjZjZS00NmQxLThiYTMtMDdmZTEwYzA3MGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQSOo/YgyyyWU9J635ixp4DJs06U1dP0XKZm
/do1OsNDdUiLlKUbD/+CffWRPnv5ACK6qbzdwiHjxS1fMbvAqJwQ6p+gu3Ixj84e
pcTrrwDUnEclUtfBdAFvbVfsFv7kd7a49QiMyCBgRXJws/xjYb4Tbo/W4SaeEZBF
mcdiQY/dPXqUTvynwmaYY9lz6RM+MQJPLGsq9yoBUSXl36s8Ha5YpeZcHFnx3KXN
q21L8j6XynoZplWGULCgsCRkFGZznuDj5H0NYp7NPMqNI3YLZ28HfmK49DZGcsyI
tCoxQ7d/gPQg5tZhBA0MBWoJJNVm/Lu45mLeNK1cCt3YtWT1GwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMi5pKSxh969lBdHkBeUefYZhJkGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQyZGNiNzQtM2VmMy0z
YTg0LTlmZDctYzljM2Q0ZGM4ZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKPorU2z28FZbNshnFhNAphgMp1mnwWj4ix1ih3GejJVBda8kob+
6BNE3bNk5Tb/+C7dzJwOxvzgQQAlF4kPGUhmm+wUMYg7cVvtZ2B6lL544VVXa73G
y6ps65h5ev+Il/eoIAqzHDMENcfElPgRPmKTeFRetHjzxnJU366c7rB+dTnYBCqa
pwqjFpm4YoQrVRtKQwKWBrQm5dXtXWQC9lNKLMWqlyqgU2SKJGqeZPz666vSBDiv
hlJDERvpfFx0VJApz1i9U3vzuqlRwFRPj1gJCnksM71fm3vrxfZZqjHxtjU6G/1z
TP3ma1XWGxYoExX3ey372MCB9QLFOur1xoo=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:35 2025 by rpki-client