Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890b31ea-42af-365c-9eb2-856d65078e43.roa
File:                     890b31ea-42af-365c-9eb2-856d65078e43.roa (raw, json)
Hash identifier:          bCd8b2iWrDEY8Z+MyWsz7Px7u/+FmW3ug9PkLMHlhd4=
Subject key identifier:   B9:6B:9E:1B:7D:D7:DC:F2:24:74:78:0A:B7:22:FE:87:63:D1:86:B1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849E224FE506CE15DBC8F928200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890b31ea-42af-365c-9eb2-856d65078e43.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     4128
IP address blocks:        2001:470:1eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:24:fe:50:6c:e1:5d:bc:8f:92:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=6d83e52e-10b2-469e-ad61-16b30cf1a3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:07:b7:96:ad:00:62:73:af:bd:87:90:8e:
                    7f:5e:f1:94:6d:e8:af:ae:8f:df:bd:d9:e1:fd:ef:
                    2e:e1:c9:c7:bc:7f:d1:44:1c:e1:1b:32:7e:7d:c0:
                    b3:0b:a8:4b:df:48:7b:05:e9:43:45:1e:01:03:87:
                    21:05:53:bb:fa:bc:42:36:fa:ab:ac:2f:ac:89:4a:
                    36:99:32:9a:cc:7e:e0:3d:2e:3b:bb:74:ef:36:ed:
                    75:86:d8:3c:c5:d2:08:36:56:79:10:48:a1:4f:4e:
                    fc:b9:f1:d4:4c:35:8d:fe:52:3a:44:7b:e3:ce:62:
                    05:39:c1:f4:88:39:10:26:b1:75:e0:08:f2:69:35:
                    39:35:28:1b:f9:98:30:3f:7e:69:ca:e8:9c:7f:68:
                    d5:cb:f5:bf:23:d3:cf:61:b7:1a:ff:83:65:54:0b:
                    57:22:81:20:f3:c2:58:2c:18:46:96:01:58:7e:13:
                    74:d5:61:61:98:aa:96:78:16:d7:3b:66:2b:f7:0d:
                    78:2d:93:6e:a1:a7:5c:6b:b3:93:d5:a9:ea:82:bd:
                    b4:98:c9:36:ef:c6:8f:fe:24:81:73:b1:2e:b7:fc:
                    71:39:70:a7:8c:13:6a:48:51:b0:46:b3:55:68:44:
                    22:74:a3:60:85:bc:19:8d:72:36:1f:c4:82:8b:19:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6B:9E:1B:7D:D7:DC:F2:24:74:78:0A:B7:22:FE:87:63:D1:86:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/890b31ea-42af-365c-9eb2-856d65078e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:48:12:03:33:a5:3e:0d:11:a7:eb:61:e2:fb:a2:dc:62:54:
         a0:e8:31:63:a1:61:99:7c:ba:7b:63:dc:16:7b:74:04:6e:dc:
         15:cd:d9:f0:3a:96:d5:3e:1c:1f:0b:e5:b2:56:06:67:3c:57:
         16:49:cb:ec:c7:5c:59:f5:0d:b3:36:02:c6:d6:7b:38:93:a2:
         f7:8d:a8:c2:15:e4:27:68:4b:7b:53:1a:32:6d:58:e3:56:0a:
         d8:3f:3f:69:1d:b3:68:78:c5:2d:4f:4c:4a:47:c6:73:91:1b:
         a4:2b:7d:d1:16:3f:b7:9d:27:c1:46:d7:cd:f0:e8:ee:e3:d1:
         ea:0c:ec:29:44:c6:17:e0:aa:50:20:da:0b:02:41:a8:0c:7d:
         35:8e:07:90:3e:ef:d3:ad:3b:32:83:ce:9a:ae:dd:9a:9d:74:
         4e:5c:8b:ca:7c:b5:7a:32:7c:d2:36:3a:8f:fd:18:23:45:aa:
         d0:2f:3f:5e:fa:96:ab:d7:ca:c8:ee:78:d0:a0:ad:2e:12:5d:
         80:15:ed:c2:8a:d2:cb:fb:42:a3:4a:cf:c3:87:4a:cd:6a:71:
         01:b2:66:88:15:9e:9f:4c:c3:8d:b1:61:a1:74:b7:40:cb:94:
         32:fd:29:f2:db:f6:b1:2d:7f:44:b4:83:c8:4b:4e:e6:b3:d7:
         91:e7:c8:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJP5QbOFdvI+SggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
NmQ4M2U1MmUtMTBiMi00NjllLWFkNjEtMTZiMzBjZjFhM2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/cHt5atAGJzr72HkI5/XvGUbeivro/fvdnh
/e8u4cnHvH/RRBzhGzJ+fcCzC6hL30h7BelDRR4BA4chBVO7+rxCNvqrrC+siUo2
mTKazH7gPS47u3TvNu11htg8xdIINlZ5EEihT078ufHUTDWN/lI6RHvjzmIFOcH0
iDkQJrF14AjyaTU5NSgb+ZgwP35pyuicf2jVy/W/I9PPYbca/4NlVAtXIoEg88JY
LBhGlgFYfhN01WFhmKqWeBbXO2Yr9w14LZNuoadca7OT1anqgr20mMk278aP/iSB
c7Eut/xxOXCnjBNqSFGwRrNVaEQidKNghbwZjXI2H8SCixkrxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLlrnht919zyJHR4Crci/odj0YaxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODkwYjMxZWEtNDJhZi0z
NjVjLTllYjItODU2ZDY1MDc4ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKRIEgMzpT4NEafrYeL7otxiVKDoMWOhYZl8untj3BZ7dARu3BXN
2fA6ltU+HB8L5bJWBmc8VxZJy+zHXFn1DbM2AsbWeziToveNqMIV5CdoS3tTGjJt
WONWCtg/P2kds2h4xS1PTEpHxnORG6QrfdEWP7edJ8FG183w6O7j0eoM7ClExhfg
qlAg2gsCQagMfTWOB5A+79OtOzKDzpqu3ZqddE5ci8p8tXoyfNI2Oo/9GCNFqtAv
P176lqvXysjueNCgrS4SXYAV7cKK0sv7QqNKz8OHSs1qcQGyZogVnp9Mw42xYaF0
t0DLlDL9KfLb9rEtf0S0g8hLTuaz15HnyEY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:39 2025 by rpki-client