Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f695794-621b-37f6-bc0e-d73fb258ccb9.roa
File:                     8f695794-621b-37f6-bc0e-d73fb258ccb9.roa (raw, json)
Hash identifier:          9t4V1HHNJKNuJHgTvsygqA0kiw/eNoipYoGpKzYla90=
Subject key identifier:   02:62:9D:1E:DC:B5:45:57:09:7D:9F:7A:AF:7B:12:F2:74:FE:02:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849AFF31F2BC12F75AA683EE030
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f695794-621b-37f6-bc0e-d73fb258ccb9.roa
Signing time:             Tue 29 Apr 2025 13:30:09 +0000
ROA not before:           Tue 29 Apr 2025 13:30:09 +0000
ROA not after:            Mon 28 Jul 2025 13:30:09 +0000
asID:                     14574
IP address blocks:        2001:470:44e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:f3:1f:2b:c1:2f:75:aa:68:3e:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 29 13:30:09 2025 GMT
            Not After : Jul 28 13:30:09 2025 GMT
        Subject: CN=ecb1c33b-4e74-422b-9953-92775e8b0215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0d:84:a4:fb:3a:98:91:87:e5:9c:10:c0:cd:
                    4e:e3:81:92:eb:b1:79:33:d8:f1:6d:92:70:73:0c:
                    26:00:96:18:4b:13:d8:c8:2d:88:f4:56:f9:30:83:
                    38:23:ef:56:62:e8:8a:4d:9c:dc:3f:d7:87:c0:77:
                    7e:bc:3f:30:76:e4:43:94:d8:50:8a:42:1f:40:47:
                    9d:99:96:64:f9:9e:0f:73:78:9c:35:34:e3:27:66:
                    58:0d:6f:e4:39:64:71:bd:f1:4f:d6:50:e6:7e:ce:
                    b5:68:34:9b:95:59:4a:d7:fa:04:85:6b:7e:9d:b1:
                    b5:99:d2:7e:13:73:c1:55:16:15:bc:96:d9:e4:23:
                    93:aa:2f:64:a2:bc:30:70:95:5e:91:96:7a:8c:f5:
                    f0:cf:bf:f9:f1:7e:0b:7f:70:67:1f:22:c8:75:7c:
                    73:2d:89:41:56:01:09:e4:47:dc:9f:8f:89:c8:94:
                    4b:98:18:d4:b8:a9:7d:45:73:85:53:40:eb:b5:5b:
                    b0:0d:4e:d5:37:b4:02:32:bd:f1:39:aa:e3:a2:3e:
                    2c:05:fa:0a:1e:cf:14:7f:b0:97:93:d2:b7:6c:09:
                    46:95:87:3f:00:0d:42:76:02:2b:bc:67:0c:b3:48:
                    9a:c4:0a:00:6e:b9:09:ea:5f:61:70:8b:60:c9:a4:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:62:9D:1E:DC:B5:45:57:09:7D:9F:7A:AF:7B:12:F2:74:FE:02:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f695794-621b-37f6-bc0e-d73fb258ccb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:76:4a:15:49:8b:c3:a2:04:27:c1:69:d3:12:8f:a0:61:
         11:23:02:a7:36:49:ca:6a:91:f8:be:05:61:a4:e5:d4:0a:f4:
         db:43:4d:f1:88:c8:1f:8c:82:ce:4a:7b:02:28:57:10:f7:e8:
         99:b3:97:08:f4:4b:e5:46:21:c8:c3:20:7e:86:4f:2a:0a:4c:
         d9:a1:28:8d:e2:48:8c:8c:7e:8d:f2:ee:9c:fe:12:49:33:2d:
         5f:75:0d:62:67:ca:d7:21:9c:47:93:68:8e:b3:16:8b:bb:55:
         8d:08:e3:5b:24:c1:f7:c5:86:55:40:d4:09:c2:b3:b3:e5:cf:
         3e:6c:40:c6:3d:f1:d9:e5:ee:46:0e:8a:23:aa:76:0b:13:46:
         29:9f:bd:38:c2:f4:d1:8b:19:30:18:9d:be:b6:3c:42:3b:12:
         60:aa:6b:92:1c:d6:de:2d:0a:07:3e:94:70:17:7c:35:21:b8:
         95:a0:c9:24:2d:c5:16:4a:5d:6e:b9:01:53:5a:a4:a3:c3:63:
         0e:bb:78:eb:83:2a:84:bb:ba:0f:83:84:6d:33:04:96:35:60:
         82:ea:67:21:39:d5:31:7f:36:35:62:c9:62:e0:11:c2:b3:71:
         c2:1a:a3:77:5b:53:2c:a1:f3:a7:ac:ec:af:14:78:99:84:28:
         bc:1a:56:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmv8x8rwS91qmg+4DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDQyOTEzMzAwOVoXDTI1MDcyODEzMzAwOVowLzEtMCsGA1UEAxMk
ZWNiMWMzM2ItNGU3NC00MjJiLTk5NTMtOTI3NzVlOGIwMjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA2EpPs6mJGH5ZwQwM1O44GS67F5M9jxbZJw
cwwmAJYYSxPYyC2I9Fb5MIM4I+9WYuiKTZzcP9eHwHd+vD8wduRDlNhQikIfQEed
mZZk+Z4Pc3icNTTjJ2ZYDW/kOWRxvfFP1lDmfs61aDSblVlK1/oEhWt+nbG1mdJ+
E3PBVRYVvJbZ5COTqi9korwwcJVekZZ6jPXwz7/58X4Lf3BnHyLIdXxzLYlBVgEJ
5Efcn4+JyJRLmBjUuKl9RXOFU0DrtVuwDU7VN7QCMr3xOarjoj4sBfoKHs8Uf7CX
k9K3bAlGlYc/AA1CdgIrvGcMs0iaxAoAbrkJ6l9hcItgyaS80QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAJinR7ctUVXCX2feq97EvJ0/gIfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGY2OTU3OTQtNjIxYi0z
N2Y2LWJjMGUtZDczZmIyNThjY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAASedkoVSYvDogQnwWnTEo+gYREjAqc2Scpqkfi+BWGk5dQK9NtD
TfGIyB+Mgs5KewIoVxD36Jmzlwj0S+VGIcjDIH6GTyoKTNmhKI3iSIyMfo3y7pz+
EkkzLV91DWJnytchnEeTaI6zFou7VY0I41skwffFhlVA1AnCs7Plzz5sQMY98dnl
7kYOiiOqdgsTRimfvTjC9NGLGTAYnb62PEI7EmCqa5Ic1t4tCgc+lHAXfDUhuJWg
ySQtxRZKXW65AVNapKPDYw67eOuDKoS7ug+DhG0zBJY1YILqZyE51TF/NjViyWLg
EcKzccIao3dbUyyh86es7K8UeJmEKLwaVp4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:26 2025 by rpki-client