Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e941f9e3-9166-3d56-97a5-2f46044951de.roa
File:                     e941f9e3-9166-3d56-97a5-2f46044951de.roa (raw, json)
Hash identifier:          /XUY8YwyPrZJiBafQKwmb67iP7TptjMDFHWYJp5MGks=
Subject key identifier:   21:F9:34:8E:5C:59:07:A7:95:6B:6B:D6:F5:28:32:C4:64:3D:BA:26
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849F87A77B5FB0892760B85C180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e941f9e3-9166-3d56-97a5-2f46044951de.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     153466
IP address blocks:        2001:470:29a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:77:b5:fb:08:92:76:0b:85:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=5dfc738b-8b87-4ef7-a2df-5e0b4244677a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:e6:e0:98:37:d7:4b:2c:76:88:51:12:e6:
                    58:db:4c:4c:11:53:4b:5e:51:f3:78:de:9f:20:99:
                    d8:a8:2f:0b:0b:14:74:31:df:1d:e3:35:9c:ce:8c:
                    14:aa:4e:bd:95:56:71:f1:0e:c7:1c:27:c9:bf:75:
                    4f:92:d9:e7:0b:fc:b5:9f:74:19:6f:a7:96:ad:46:
                    f1:89:94:6e:c6:87:ee:f6:36:b1:b2:25:77:09:2e:
                    f2:3a:df:5b:b2:22:47:e8:6a:af:ba:0f:5f:ff:b1:
                    40:0a:1a:8e:6f:6e:89:fe:15:71:94:f7:66:ea:9a:
                    43:eb:57:29:22:e0:82:3d:c9:d0:13:34:af:38:42:
                    b0:be:01:ba:26:a3:ad:9b:90:f6:a7:d6:03:ed:0e:
                    87:65:70:8f:af:7e:b9:34:a3:4d:49:64:5f:64:69:
                    00:aa:ed:6d:98:4b:85:56:d5:69:a2:72:6a:d4:0e:
                    f1:39:91:48:4e:20:ad:cb:ae:57:82:f4:05:1d:5e:
                    f6:f4:fa:63:2b:c2:31:29:14:bd:fb:df:a7:51:67:
                    14:cb:fe:f6:ab:f8:f4:d9:9f:2a:73:d3:ba:1a:9e:
                    42:23:80:97:8f:d4:58:4b:ba:a3:23:32:a2:2c:c7:
                    11:9c:9c:5e:6f:c1:ef:ba:1c:0d:53:41:86:e8:bc:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F9:34:8E:5C:59:07:A7:95:6B:6B:D6:F5:28:32:C4:64:3D:BA:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e941f9e3-9166-3d56-97a5-2f46044951de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:29a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:5e:f5:8b:a4:48:da:50:b1:d9:ed:4b:6a:99:2b:43:6b:
         b3:c8:61:75:98:d2:e1:00:b7:cc:8a:3f:19:ae:dd:5b:4b:66:
         1c:4a:1d:fb:3c:23:a2:40:cc:27:ba:ab:26:97:de:de:c8:b1:
         5b:2b:19:ef:31:27:d2:5d:c0:de:c8:eb:80:25:e5:5e:36:fd:
         35:7e:96:05:2a:ec:b3:db:8d:28:6d:24:a5:87:d8:34:5b:61:
         da:1b:b6:dc:ba:d9:0a:f4:31:a9:be:c6:05:5f:49:fd:03:0d:
         df:61:3f:89:04:c9:cc:f9:11:19:5d:ab:56:40:00:12:42:b9:
         8f:ce:36:92:a9:c9:88:31:3c:34:b5:18:9a:7d:b2:c2:0a:67:
         e4:39:c7:b8:87:26:76:3b:fc:6a:25:48:96:c7:02:c4:40:23:
         e2:8f:e3:2d:8e:9a:2e:36:8a:39:9e:f7:8a:e8:8f:62:69:30:
         fd:75:9a:45:ac:e9:04:f8:76:17:3c:da:10:62:19:df:a8:e4:
         a6:44:4e:54:16:91:f7:f4:e4:79:fc:bb:59:90:3b:df:c2:74:
         f8:3c:f4:2d:b8:08:4a:c5:2d:5f:92:f0:a3:4c:72:3a:ab:31:
         fa:b5:1f:3a:fb:56:fa:75:bd:d7:ae:db:3c:83:f0:84:8d:2b:
         a1:f3:37:f1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn4ene1+wiSdguFwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
NWRmYzczOGItOGI4Ny00ZWY3LWEyZGYtNWUwYjQyNDQ2NzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mvm4Jg310ssdohREuZY20xMEVNLXlHzeN6f
IJnYqC8LCxR0Md8d4zWczowUqk69lVZx8Q7HHCfJv3VPktnnC/y1n3QZb6eWrUbx
iZRuxofu9jaxsiV3CS7yOt9bsiJH6Gqvug9f/7FAChqOb26J/hVxlPdm6ppD61cp
IuCCPcnQEzSvOEKwvgG6JqOtm5D2p9YD7Q6HZXCPr365NKNNSWRfZGkAqu1tmEuF
VtVponJq1A7xOZFITiCty65XgvQFHV729PpjK8IxKRS9+9+nUWcUy/72q/j02Z8q
c9O6Gp5CI4CXj9RYS7qjIzKiLMcRnJxeb8HvuhwNU0GG6LyNIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCH5NI5cWQenlWtr1vUoMsRkPbomMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTk0MWY5ZTMtOTE2Ni0z
ZDU2LTk3YTUtMmY0NjA0NDk1MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADPjXvWLpEjaULHZ7UtqmStDa7PIYXWY0uEAt8yKPxmu3VtLZhxK
Hfs8I6JAzCe6qyaX3t7IsVsrGe8xJ9JdwN7I64Al5V42/TV+lgUq7LPbjShtJKWH
2DRbYdobtty62Qr0Mam+xgVfSf0DDd9hP4kEycz5ERldq1ZAABJCuY/ONpKpyYgx
PDS1GJp9ssIKZ+Q5x7iHJnY7/GolSJbHAsRAI+KP4y2Omi42ijme94roj2JpMP11
mkWs6QT4dhc82hBiGd+o5KZETlQWkff05Hn8u1mQO9/CdPg89C24CErFLV+S8KNM
cjqrMfq1Hzr7Vvp1vdeu2zyD8ISNK6HzN/E=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:11 2025 by rpki-client