Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e58b474-23b8-3481-836e-b99d65bb89f8.roa
File:                     8e58b474-23b8-3481-836e-b99d65bb89f8.roa (raw, json)
Hash identifier:          u2t78g2Ieh/Pjgw7DyQxq6MdoHU4zYVSx2EkLBGG6P4=
Subject key identifier:   CC:DA:86:D8:16:1F:4C:E2:0E:5C:81:DB:8E:B1:8A:78:70:6F:6F:A5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FD6C8BEB8F3E1CD907F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e58b474-23b8-3481-836e-b99d65bb89f8.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     12266
IP address blocks:        2001:470:be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d6:c8:be:b8:f3:e1:cd:90:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=983009d5-16d7-4662-ad5c-6cdd517b2753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:24:4c:44:56:4c:6f:4e:bc:fd:4f:7d:ed:
                    19:c5:7c:44:ad:2e:0d:f1:b3:73:f8:f1:39:18:7c:
                    20:c8:29:ae:b3:ce:02:38:c9:8e:b5:5a:98:cc:a6:
                    b7:85:ed:28:62:b0:7c:75:34:e4:e7:96:94:73:62:
                    38:db:d8:7b:ea:b2:e5:fa:01:2c:90:fa:ed:20:2f:
                    06:dd:a8:52:26:7a:53:f5:bc:72:fc:0b:e0:b2:d6:
                    07:ce:23:af:ac:cb:84:d8:a6:fc:52:80:97:b6:56:
                    a2:d8:06:8f:0b:76:77:1a:78:5c:b1:c9:6d:fb:0b:
                    65:ec:37:21:7c:32:26:ef:bb:99:92:e2:25:2f:ce:
                    8b:bc:7f:e2:ec:c9:c7:2d:ac:5e:db:47:a9:90:73:
                    ef:75:91:e4:6b:ad:3a:59:66:fe:2f:98:ac:01:5b:
                    c0:35:3a:04:0b:0a:64:3e:5c:92:b8:40:c2:5f:de:
                    55:6c:5b:02:3d:44:68:14:a1:7d:69:9d:59:5b:6d:
                    33:fa:8a:74:a4:60:43:0d:4d:04:23:ab:22:05:79:
                    53:35:31:39:e0:37:35:ee:f6:a8:a2:69:66:97:ca:
                    38:d8:a6:32:1d:56:68:c2:ee:53:d8:a4:be:ca:6a:
                    f8:c4:a3:3e:7a:97:35:31:74:23:10:72:38:47:c2:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DA:86:D8:16:1F:4C:E2:0E:5C:81:DB:8E:B1:8A:78:70:6F:6F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e58b474-23b8-3481-836e-b99d65bb89f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:1d:bd:1f:ce:b9:9d:d5:a5:a3:d3:1d:8c:62:f3:7e:8f:
         18:ee:c7:a8:e9:f2:d4:48:b5:43:18:ea:01:01:f9:3e:0c:af:
         e5:cb:c3:0f:ec:d0:71:81:2e:6b:2d:ba:46:f7:fd:ef:8c:76:
         6c:8d:df:1b:bb:6b:78:62:37:6f:96:de:93:d6:1f:b8:f8:de:
         d5:87:47:68:85:47:e8:35:75:61:ac:4c:15:9d:b5:c2:91:9e:
         02:a2:7c:17:8b:ca:64:cb:c1:6d:cf:72:78:6b:8b:5c:58:fb:
         1f:c9:4f:c7:0d:80:95:c8:ed:ba:02:dc:cf:d0:e4:b6:c3:b6:
         77:a8:eb:0c:33:95:2c:8f:81:99:0b:d9:41:1f:26:90:e8:6c:
         bf:65:a6:31:39:b9:09:76:10:06:32:29:aa:11:a7:ef:19:20:
         b2:c2:38:2e:6a:4d:4a:49:1e:56:72:37:44:80:91:61:b2:00:
         fe:69:d1:2e:64:6a:c8:b0:a6:ab:96:52:1f:b2:1a:00:e9:87:
         51:5c:29:53:17:ad:38:a3:1b:9b:b3:a6:59:23:aa:f2:4f:f6:
         2c:7a:93:fa:b3:83:40:05:5a:fd:c1:d7:b7:69:bf:5a:07:9b:
         19:77:dc:8c:5d:97:3d:34:f3:af:ca:a1:83:45:bf:50:7f:b4:
         da:94:fe:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX9bIvrjz4c2Qf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
OTgzMDA5ZDUtMTZkNy00NjYyLWFkNWMtNmNkZDUxN2IyNzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdUkTERWTG9OvP1Pfe0ZxXxErS4N8bNz+PE5
GHwgyCmus84COMmOtVqYzKa3he0oYrB8dTTk55aUc2I429h76rLl+gEskPrtIC8G
3ahSJnpT9bxy/AvgstYHziOvrMuE2Kb8UoCXtlai2AaPC3Z3Gnhcsclt+wtl7Dch
fDIm77uZkuIlL86LvH/i7MnHLaxe20epkHPvdZHka606WWb+L5isAVvANToECwpk
PlySuEDCX95VbFsCPURoFKF9aZ1ZW20z+op0pGBDDU0EI6siBXlTNTE54Dc17vao
omlml8o42KYyHVZowu5T2KS+ymr4xKM+epc1MXQjEHI4R8LXDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMzahtgWH0ziDlyB246xinhwb2+lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGU1OGI0NzQtMjNiOC0z
NDgxLTgzNmUtYjk5ZDY1YmI4OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKVJHb0fzrmd1aWj0x2MYvN+jxjux6jp8tRItUMY6gEB+T4Mr+XL
ww/s0HGBLmstukb3/e+MdmyN3xu7a3hiN2+W3pPWH7j43tWHR2iFR+g1dWGsTBWd
tcKRngKifBeLymTLwW3Pcnhri1xY+x/JT8cNgJXI7boC3M/Q5LbDtneo6wwzlSyP
gZkL2UEfJpDobL9lpjE5uQl2EAYyKaoRp+8ZILLCOC5qTUpJHlZyN0SAkWGyAP5p
0S5kasiwpquWUh+yGgDph1FcKVMXrTijG5uzplkjqvJP9ix6k/qzg0AFWv3B17dp
v1oHmxl33Ixdlz0086/KoYNFv1B/tNqU/lY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:26 2025 by rpki-client