Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a280199-671e-3015-85af-6f8e964d86e3.roa
File:                     9a280199-671e-3015-85af-6f8e964d86e3.roa (raw, json)
Hash identifier:          qY28tU9Og9UBqOA2Al54EGmr5vXfixM2m8ZQCfiwB00=
Subject key identifier:   CF:9C:2F:7C:76:70:3C:0A:09:74:E8:CA:AE:B9:B0:DF:36:52:F1:8D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB22170BABBDB56B957820200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a280199-671e-3015-85af-6f8e964d86e3.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     62371
IP address blocks:        2001:470:325::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:70:ba:bb:db:56:b9:57:82:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=4b955842-bcfc-43b2-9512-52b42aed415e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:1a:18:8d:90:0e:aa:54:25:90:88:44:0f:
                    40:43:d3:0f:da:fe:2a:bd:d7:b5:5c:57:5f:1d:7b:
                    2c:80:34:5c:e3:8e:d5:b2:e0:83:7d:e2:da:ce:af:
                    0c:07:53:ec:12:74:de:c3:83:c8:4c:e4:f2:0a:75:
                    d0:ca:46:9d:d5:20:ba:08:ef:a7:7e:8c:c8:0d:7e:
                    da:5d:a6:21:99:c4:b2:f4:1d:be:b4:39:b9:7e:40:
                    c4:98:ca:5f:79:44:9e:5e:ea:38:6e:57:58:e0:af:
                    c5:5a:35:a8:06:7f:fa:f8:b6:de:fb:d9:46:09:d3:
                    ee:66:d2:dc:0d:ee:7e:63:b3:fa:7f:91:12:67:77:
                    38:3a:47:50:b5:fe:67:b7:8d:67:67:a8:a1:94:ca:
                    a4:18:7a:ea:30:57:12:1f:c8:09:18:0f:36:de:4c:
                    83:38:4a:16:53:10:f3:f3:2e:8c:d8:33:4c:7d:f8:
                    cc:65:12:e5:2f:60:f2:89:25:1a:61:aa:be:0f:11:
                    b9:a1:be:8d:63:73:52:ec:9b:1a:37:e0:a1:da:34:
                    3d:7b:e6:48:49:e4:b0:62:2a:c5:52:a4:27:66:76:
                    70:7e:cf:4b:6a:af:95:bd:06:d7:9e:cd:71:5d:8a:
                    90:d6:ab:8f:37:11:73:ed:a9:08:3f:78:16:2a:2a:
                    fd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:2F:7C:76:70:3C:0A:09:74:E8:CA:AE:B9:B0:DF:36:52:F1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a280199-671e-3015-85af-6f8e964d86e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:325::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8e:c0:8c:54:cf:7c:e0:52:71:43:40:d0:46:f3:63:41:7e:
         82:e4:33:9a:7d:60:dc:82:0e:d2:01:c3:33:a9:d4:a2:ff:11:
         af:79:2c:d6:3d:e4:99:d8:a6:e0:30:11:19:d7:1d:cc:45:1c:
         92:8e:ea:a5:d5:b2:8a:a1:c4:52:51:76:1d:68:65:60:6f:7c:
         eb:89:43:81:ff:66:96:57:3e:8a:62:34:29:ab:5e:d6:2a:f6:
         4c:fe:33:93:eb:85:40:16:3b:5b:33:4b:b4:d3:8e:66:dc:42:
         5c:63:54:72:14:ce:17:0c:36:62:5c:c4:14:eb:d1:2a:02:69:
         ae:89:52:c2:36:47:e0:e4:7b:56:ea:20:99:57:f3:ed:11:41:
         ee:c3:ec:05:03:c7:e3:9e:e1:d3:79:b7:0e:94:93:47:51:87:
         f0:32:eb:05:bf:3f:e9:f7:94:f2:39:1f:2a:a8:8b:d4:80:bb:
         c6:5e:dd:3f:3a:94:b4:92:77:66:90:9f:cb:ef:c1:4d:76:9d:
         d3:3c:07:83:7f:c5:52:a6:48:3c:b2:77:0d:42:2e:14:19:d9:
         d9:17:f6:68:82:6b:1a:a3:c9:0a:6c:43:2c:0b:9b:ec:22:0f:
         39:8b:00:06:94:db:85:42:35:b6:8b:d8:02:c2:82:16:63:7b:
         6c:d4:52:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqyIXC6u9tWuVeCAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NGI5NTU4NDItYmNmYy00M2IyLTk1MTItNTJiNDJhZWQ0MTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitgaGI2QDqpUJZCIRA9AQ9MP2v4qvde1XFdf
HXssgDRc447VsuCDfeLazq8MB1PsEnTew4PITOTyCnXQykad1SC6CO+nfozIDX7a
XaYhmcSy9B2+tDm5fkDEmMpfeUSeXuo4bldY4K/FWjWoBn/6+Lbe+9lGCdPuZtLc
De5+Y7P6f5ESZ3c4OkdQtf5nt41nZ6ihlMqkGHrqMFcSH8gJGA823kyDOEoWUxDz
8y6M2DNMffjMZRLlL2DyiSUaYaq+DxG5ob6NY3NS7JsaN+Ch2jQ9e+ZISeSwYirF
UqQnZnZwfs9Laq+VvQbXns1xXYqQ1quPNxFz7akIP3gWKir9twIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM+cL3x2cDwKCXToyq65sN82UvGNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWEyODAxOTktNjcxZS0z
MDE1LTg1YWYtNmY4ZTk2NGQ4NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGaOwIxUz3zgUnFDQNBG82NBfoLkM5p9YNyCDtIBwzOp1KL/Ea95
LNY95JnYpuAwERnXHcxFHJKO6qXVsoqhxFJRdh1oZWBvfOuJQ4H/ZpZXPopiNCmr
XtYq9kz+M5PrhUAWO1szS7TTjmbcQlxjVHIUzhcMNmJcxBTr0SoCaa6JUsI2R+Dk
e1bqIJlX8+0RQe7D7AUDx+Oe4dN5tw6Uk0dRh/Ay6wW/P+n3lPI5Hyqoi9SAu8Ze
3T86lLSSd2aQn8vvwU12ndM8B4N/xVKmSDyydw1CLhQZ2dkX9miCaxqjyQpsQywL
m+wiDzmLAAaU24VCNbaL2ALCghZje2zUUo8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:04 2025 by rpki-client