Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e030487a-b7d1-308b-b35a-7be68066058e.roa
File:                     e030487a-b7d1-308b-b35a-7be68066058e.roa (raw, json)
Hash identifier:          7u4MccMgGaKfKDjRq/6zOHOxn1fwOUN3lOoOw8YZb+I=
Subject key identifier:   82:61:D8:1D:27:2F:CE:28:67:F2:B9:64:53:5B:3E:95:A9:99:F3:7E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849912F493F107E677D8C679580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e030487a-b7d1-308b-b35a-7be68066058e.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     147039
IP address blocks:        2001:470:3c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:49:3f:10:7e:67:7d:8c:67:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=ee5678f3-d499-44d6-9702-f1a95f663af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:6a:b8:cc:de:c2:c4:03:ae:01:01:aa:a6:
                    ab:c1:af:e9:7a:4c:d7:73:65:1c:97:5f:73:90:4f:
                    0d:9a:47:c7:05:a2:21:ca:be:22:d1:43:eb:b5:49:
                    ac:6b:af:d4:ba:e8:c2:72:87:88:3d:8a:f0:44:2e:
                    09:42:ce:4c:77:d7:6f:47:2f:2d:c6:e4:32:47:77:
                    ac:a9:db:15:77:7f:13:83:76:32:96:63:4c:11:6a:
                    36:54:1b:5e:dc:fb:4c:47:71:d0:59:f8:a8:19:a2:
                    cf:de:4a:0c:2d:f5:6f:5f:d7:a5:67:81:cf:9a:cc:
                    6d:fc:c7:aa:2b:0f:87:80:d7:be:ce:66:8c:d8:a6:
                    44:4d:d7:1a:b9:e3:fd:51:1f:3b:f6:c6:b4:ed:3c:
                    b2:84:20:9a:33:21:7d:39:eb:c4:89:b2:1a:c4:9c:
                    5f:d7:f9:0c:55:19:fc:56:42:34:cd:43:14:1e:c1:
                    1d:42:7e:bb:35:a1:20:76:f5:e5:9c:2b:af:95:b2:
                    35:b8:28:32:31:30:b6:0d:3f:f7:ea:dd:8a:aa:0c:
                    d6:7b:2e:b7:a7:ae:82:38:8b:c9:73:71:c3:c8:17:
                    e2:ee:da:09:aa:38:bf:f4:b2:84:8d:aa:79:95:d4:
                    a3:3c:7f:5d:26:9d:35:a0:1b:a6:36:d2:6c:42:27:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:D8:1D:27:2F:CE:28:67:F2:B9:64:53:5B:3E:95:A9:99:F3:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e030487a-b7d1-308b-b35a-7be68066058e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:df:5c:38:23:5d:6d:43:34:ed:33:56:ef:da:41:07:01:
         78:6a:f8:f1:1b:4b:6e:ab:e2:5b:d8:79:af:72:6c:9e:af:41:
         aa:28:d4:8e:65:f2:f4:a9:69:74:73:17:12:57:29:d8:f5:b2:
         9f:82:3b:b8:90:de:e1:80:04:17:93:b2:2e:47:80:13:b8:83:
         f4:d6:46:1b:79:f6:be:00:f2:c3:14:81:a3:b1:b8:f2:1f:5e:
         a2:85:9c:f5:80:b6:ac:aa:0c:1e:59:96:fe:a7:93:c1:1c:f7:
         ae:89:22:98:26:7b:0f:e8:8f:49:31:55:34:6d:81:ec:06:eb:
         b7:1a:c6:ef:f6:18:6a:0f:c1:cd:34:ef:23:ff:de:fa:c7:8c:
         27:1d:ff:7e:94:f9:f0:f8:b1:d9:57:78:a0:b0:24:b1:35:ac:
         f8:e5:18:24:7e:63:72:c2:26:12:17:ad:0c:3f:1d:b0:2f:57:
         d5:f3:57:4c:27:c1:db:4d:88:bd:aa:f2:a9:9a:16:bf:2f:ba:
         36:f6:bf:66:d3:96:da:19:ef:71:81:f7:15:a8:03:25:03:69:
         cf:99:24:df:fe:6a:06:83:cf:32:e8:fb:82:e2:6c:c0:c5:39:
         b3:f2:42:08:09:9e:1f:e7:be:38:08:54:50:e3:71:2e:3c:bb:
         75:da:23:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmRL0k/EH5nfYxnlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
ZWU1Njc4ZjMtZDQ5OS00NGQ2LTk3MDItZjFhOTVmNjYzYWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuolquMzewsQDrgEBqqarwa/pekzXc2Ucl19z
kE8NmkfHBaIhyr4i0UPrtUmsa6/UuujCcoeIPYrwRC4JQs5Md9dvRy8txuQyR3es
qdsVd38Tg3YylmNMEWo2VBte3PtMR3HQWfioGaLP3koMLfVvX9elZ4HPmsxt/Meq
Kw+HgNe+zmaM2KZETdcaueP9UR879sa07TyyhCCaMyF9OevEibIaxJxf1/kMVRn8
VkI0zUMUHsEdQn67NaEgdvXlnCuvlbI1uCgyMTC2DT/36t2KqgzWey63p66COIvJ
c3HDyBfi7toJqji/9LKEjap5ldSjPH9dJp01oBumNtJsQifDzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIJh2B0nL84oZ/K5ZFNbPpWpmfN+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTAzMDQ4N2EtYjdkMS0z
MDhiLWIzNWEtN2JlNjgwNjYwNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAzw31w4I11tQzTtM1bv2kEHAXhq+PEbS26r4lvYea9ybJ6vQaoo
1I5l8vSpaXRzFxJXKdj1sp+CO7iQ3uGABBeTsi5HgBO4g/TWRht59r4A8sMUgaOx
uPIfXqKFnPWAtqyqDB5Zlv6nk8Ec966JIpgmew/oj0kxVTRtgewG67caxu/2GGoP
wc007yP/3vrHjCcd/36U+fD4sdlXeKCwJLE1rPjlGCR+Y3LCJhIXrQw/HbAvV9Xz
V0wnwdtNiL2q8qmaFr8vujb2v2bTltoZ73GB9xWoAyUDac+ZJN/+agaDzzLo+4Li
bMDFObPyQggJnh/nvjgIVFDjcS48u3XaI5g=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:26 2025 by rpki-client