Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8b6e61-63a0-3808-8aa7-8773bea863d1.roa
File:                     ee8b6e61-63a0-3808-8aa7-8773bea863d1.roa (raw, json)
Hash identifier:          S8mGcSbvhg0eHee6UQVeAdJwcJONHFP+HNYGj78pohI=
Subject key identifier:   C1:51:66:F3:4C:20:C2:5B:5C:4C:C3:61:19:5A:28:C3:49:1F:6E:0B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BEABE580385E9B17A3D96
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8b6e61-63a0-3808-8aa7-8773bea863d1.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     33309
IP address blocks:        2001:470:60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ea:be:58:03:85:e9:b1:7a:3d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=901f32bc-6192-428f-aac2-68ce35c63c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:e1:cc:7e:c8:ea:0e:31:65:33:37:02:97:
                    15:1c:7c:66:be:ff:e1:78:b7:24:0a:cc:fa:66:6a:
                    12:49:b1:24:50:fc:0b:2a:a5:67:fd:12:ef:03:00:
                    25:d9:81:76:02:42:11:fe:a4:81:1b:b7:5f:da:2f:
                    e1:e3:01:33:0a:4d:21:a1:00:9c:72:01:ea:81:23:
                    bb:17:d3:8f:7d:12:d2:00:72:7a:6b:43:00:44:26:
                    db:e4:9a:1e:de:a0:b5:d0:88:2d:c7:12:9a:88:c9:
                    51:b5:02:97:5c:41:e1:6c:7c:3b:0d:6b:c7:8b:4f:
                    e9:52:7b:b8:c9:8e:3a:7c:83:59:b4:3b:e5:7b:0a:
                    56:65:8f:bd:b0:58:6e:1b:e4:63:98:de:53:de:13:
                    06:75:15:ee:9a:6f:09:90:68:33:1e:5a:dd:2b:b7:
                    1e:f9:cb:10:3c:28:af:cc:77:3c:9b:d9:5d:52:f3:
                    74:b5:d2:74:93:60:ba:b4:d9:54:63:66:1f:bd:93:
                    81:85:74:8a:2d:ea:66:f1:65:be:a5:21:dc:73:35:
                    a1:b6:eb:ee:23:a9:62:38:75:95:02:97:c9:79:4c:
                    64:d5:38:a3:cb:22:83:8d:64:6c:de:4b:c2:46:3f:
                    d5:eb:19:44:ac:bf:e6:f3:a6:cd:69:03:06:c8:08:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:51:66:F3:4C:20:C2:5B:5C:4C:C3:61:19:5A:28:C3:49:1F:6E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8b6e61-63a0-3808-8aa7-8773bea863d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ff:9f:84:6b:c6:5a:32:8c:ae:29:dc:0b:3b:e2:d5:a7:05:
         9c:dc:aa:28:11:44:05:c6:98:cf:5e:67:61:d3:4e:3a:fe:ed:
         ef:05:03:40:d4:82:a8:ca:3f:7c:11:03:37:35:a5:6b:8e:e6:
         91:85:d8:a3:f6:c0:61:ed:d4:e7:d5:25:ab:d8:db:9c:6c:26:
         3c:ea:23:c7:55:4b:19:66:bb:73:35:7c:84:bc:7f:ab:e6:8a:
         40:ad:c6:d8:fb:a4:bb:44:4b:e0:95:59:65:54:cb:49:e1:47:
         c6:55:7e:57:29:a6:b2:fb:31:d8:6a:e2:49:00:a3:c5:e4:fd:
         99:55:ca:88:68:46:d7:4b:c7:16:f6:35:3a:0f:fe:62:ed:76:
         bc:b5:07:b5:db:c7:da:64:2a:35:35:1f:93:cd:e0:7d:c3:30:
         9f:e9:64:f9:af:63:43:a0:d0:86:94:20:96:69:4e:1c:15:c9:
         97:df:48:ba:7a:91:e5:1f:8e:38:83:a7:0b:34:14:ff:d7:a4:
         bd:17:01:84:5b:18:63:d3:a9:a7:5a:d8:11:05:84:c6:12:23:
         b6:74:27:dc:da:d7:75:43:e8:08:12:f8:e7:ad:a2:3d:49:1d:
         22:8d:d9:2c:24:12:0e:d9:69:a0:54:6b:87:75:ed:8a:a8:56:
         ef:67:51:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G+q+WAOF6bF6PZYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
OTAxZjMyYmMtNjE5Mi00MjhmLWFhYzItNjhjZTM1YzYzYzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozHhzH7I6g4xZTM3ApcVHHxmvv/heLckCsz6
ZmoSSbEkUPwLKqVn/RLvAwAl2YF2AkIR/qSBG7df2i/h4wEzCk0hoQCccgHqgSO7
F9OPfRLSAHJ6a0MARCbb5Joe3qC10IgtxxKaiMlRtQKXXEHhbHw7DWvHi0/pUnu4
yY46fINZtDvlewpWZY+9sFhuG+RjmN5T3hMGdRXumm8JkGgzHlrdK7ce+csQPCiv
zHc8m9ldUvN0tdJ0k2C6tNlUY2YfvZOBhXSKLepm8WW+pSHcczWhtuvuI6liOHWV
ApfJeUxk1TijyyKDjWRs3kvCRj/V6xlErL/m86bNaQMGyAhsRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMFRZvNMIMJbXEzDYRlaKMNJH24LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWU4YjZlNjEtNjNhMC0z
ODA4LThhYTctODc3M2JlYTg2M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJH/n4RrxloyjK4p3As74tWnBZzcqigRRAXGmM9eZ2HTTjr+7e8F
A0DUgqjKP3wRAzc1pWuO5pGF2KP2wGHt1OfVJavY25xsJjzqI8dVSxlmu3M1fIS8
f6vmikCtxtj7pLtES+CVWWVUy0nhR8ZVflcpprL7Mdhq4kkAo8Xk/ZlVyohoRtdL
xxb2NToP/mLtdry1B7Xbx9pkKjU1H5PN4H3DMJ/pZPmvY0Og0IaUIJZpThwVyZff
SLp6keUfjjiDpws0FP/XpL0XAYRbGGPTqada2BEFhMYSI7Z0J9za13VD6AgS+Oet
oj1JHSKN2SwkEg7ZaaBUa4d17YqoVu9nUUg=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:15 2025 by rpki-client