Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa
File:                     8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa (raw, json)
Hash identifier:          9/REOq4IqbcQWd7NMHwhslDOpfLoR7LKOkoEOyHby8k=
Subject key identifier:   93:AB:12:AE:0A:17:B0:61:E8:C5:C2:37:D6:6D:38:15:45:07:75:8E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A268AC9A5BCEB5A902F16EF40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     14371
IP address blocks:        2001:470:345::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c9:a5:bc:eb:5a:90:2f:16:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=49ec9910-6290-47de-a340-2c1ddaf93b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:64:e8:74:b6:fb:4f:3d:04:b1:4b:8d:66:
                    2f:ae:e8:e8:25:0e:14:21:15:83:5b:c4:43:6d:63:
                    ba:2c:9c:44:15:d0:a9:24:fe:a7:84:bf:b4:9b:21:
                    f2:3e:c9:34:9a:b4:d1:71:ae:93:33:e6:87:a1:52:
                    a9:6c:f3:46:6b:7d:f6:ab:d6:25:d9:fb:aa:08:e8:
                    aa:aa:83:23:9d:1f:c5:c6:2b:a2:40:82:2f:8a:27:
                    00:77:1a:a5:13:a6:22:56:e3:35:11:2c:8a:9d:01:
                    f3:89:46:78:c6:24:c2:cc:0e:95:2b:16:43:4b:2f:
                    11:4d:a8:da:24:ac:f2:08:8b:65:d2:cd:0a:bf:03:
                    31:ab:84:6f:5b:c9:08:a2:a2:b0:38:1e:3b:57:12:
                    41:0f:dc:bf:32:e4:57:b3:04:59:9e:4c:a1:27:b7:
                    f0:5e:6c:c4:05:61:fe:c2:61:19:5b:5f:db:f3:24:
                    e8:7a:bf:ff:0c:0e:50:e0:e4:d0:7c:ef:b6:9d:c4:
                    d3:1a:64:cc:2c:0a:99:67:fd:f5:90:c7:6f:59:23:
                    08:0c:21:69:6b:60:ed:b3:f8:8d:81:e9:55:4b:2b:
                    ad:c3:12:60:a3:77:07:e6:a3:a5:51:46:45:a4:ce:
                    e0:ea:3f:d9:07:81:f5:d6:5a:8c:10:e5:22:45:62:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:12:AE:0A:17:B0:61:E8:C5:C2:37:D6:6D:38:15:45:07:75:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:345::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:3f:d4:e4:a4:5e:1f:fc:ec:6f:01:fc:45:6b:2e:9b:26:
         45:3f:fc:9c:86:03:38:03:f3:5e:62:81:01:9a:e8:48:af:f6:
         20:95:56:70:dd:19:b5:1f:6b:40:ce:69:26:dd:9c:57:ab:94:
         2e:b1:69:6b:60:40:80:75:09:06:b5:84:1e:e7:74:35:cb:bd:
         64:b1:c5:28:a2:5d:92:58:84:41:94:2c:b3:ab:bb:7e:56:76:
         2e:e0:e2:b5:97:05:fb:9e:93:f1:97:a0:63:04:a8:d0:9e:10:
         66:62:a3:69:b1:25:44:7c:a8:d5:9b:19:9a:f2:95:5b:3f:4c:
         95:42:7d:48:5b:04:6a:9c:b7:c0:d2:19:80:18:60:c5:f5:c9:
         1e:12:e2:1b:a7:98:5f:05:14:96:6e:d1:54:01:a2:34:ee:db:
         d8:ef:eb:98:bf:c2:3a:2e:ff:e1:b2:57:55:41:3e:80:3c:f5:
         b0:cc:c7:59:21:5f:63:e3:aa:5f:d5:92:8f:46:bc:09:45:6f:
         89:a1:1a:59:b8:ef:44:58:4d:0b:ec:52:0f:0f:1e:78:be:6b:
         dd:e5:ca:79:21:62:aa:1d:c0:d2:5f:1e:56:1c:db:9e:fe:b4:
         bc:7e:d8:cd:93:61:db:be:3e:4e:90:05:dc:01:07:70:8b:9d:
         3c:3c:f1:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEomismlvOtakC8W70AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
NDllYzk5MTAtNjI5MC00N2RlLWEzNDAtMmMxZGRhZjkzYjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bxk6HS2+089BLFLjWYvrujoJQ4UIRWDW8RD
bWO6LJxEFdCpJP6nhL+0myHyPsk0mrTRca6TM+aHoVKpbPNGa332q9Yl2fuqCOiq
qoMjnR/FxiuiQIIviicAdxqlE6YiVuM1ESyKnQHziUZ4xiTCzA6VKxZDSy8RTaja
JKzyCItl0s0KvwMxq4RvW8kIoqKwOB47VxJBD9y/MuRXswRZnkyhJ7fwXmzEBWH+
wmEZW1/b8yToer//DA5Q4OTQfO+2ncTTGmTMLAqZZ/31kMdvWSMIDCFpa2Dts/iN
gelVSyutwxJgo3cH5qOlUUZFpM7g6j/ZB4H11lqMEOUiRWLcdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJOrEq4KF7Bh6MXCN9ZtOBVFB3WOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGU2YjUwMGItZDFkOS0z
M2ViLTlhZmUtMzJmMmJmNmEyZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGqWP9TkpF4f/OxvAfxFay6bJkU//JyGAzgD815igQGa6Eiv9iCV
VnDdGbUfa0DOaSbdnFerlC6xaWtgQIB1CQa1hB7ndDXLvWSxxSiiXZJYhEGULLOr
u35Wdi7g4rWXBfuek/GXoGMEqNCeEGZio2mxJUR8qNWbGZrylVs/TJVCfUhbBGqc
t8DSGYAYYMX1yR4S4hunmF8FFJZu0VQBojTu29jv65i/wjou/+GyV1VBPoA89bDM
x1khX2Pjql/Vko9GvAlFb4mhGlm470RYTQvsUg8PHni+a93lynkhYqodwNJfHlYc
257+tLx+2M2TYdu+Pk6QBdwBB3CLnTw88bs=
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:21:07 2025 by rpki-client