Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f058a927-1424-3706-8837-15b526d866a7.roa
File:                     f058a927-1424-3706-8837-15b526d866a7.roa (raw, json)
Hash identifier:          Gyn/WfjcM5xXlIKUKkZ39OKX1FC93KrvEGfPyGGQu20=
Subject key identifier:   DC:2A:92:CB:15:26:58:94:69:06:B8:BA:C2:FB:B4:CC:9D:90:F0:91
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE633CC21A699A98F4000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f058a927-1424-3706-8837-15b526d866a7.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     8540
IP address blocks:        2001:470:26b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e6:33:cc:21:a6:99:a9:8f:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=58b529fc-897b-44c7-8aa5-650290d35811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:9e:3d:d2:cf:88:ea:88:c7:c7:29:69:74:
                    01:e4:93:95:77:77:eb:9b:c5:6f:a2:22:8e:dc:86:
                    f0:c3:de:c0:0a:f5:a2:84:cd:aa:16:d0:0c:90:d1:
                    f5:45:40:82:2c:36:e6:3c:18:d2:a4:3c:47:31:0a:
                    6e:9b:bd:c0:c4:d4:d9:80:f0:41:38:85:00:cc:d6:
                    dd:ea:0b:ac:14:70:c3:0e:2d:ac:92:ab:a6:30:17:
                    38:0c:35:cb:35:a7:d3:2c:29:81:37:6f:ff:27:af:
                    aa:bc:1e:c1:a2:eb:68:94:51:89:a9:78:83:39:0a:
                    90:50:1d:b7:84:b5:e3:84:f7:a6:d7:17:a2:4f:47:
                    97:e0:85:27:47:9d:81:99:b7:60:7f:97:c9:ff:51:
                    73:99:b8:f1:97:07:0b:a9:67:96:89:82:b5:6a:09:
                    ad:51:90:0a:89:85:4a:e4:8b:ea:2b:53:6e:21:a5:
                    da:3d:61:93:a3:45:11:8e:fa:53:2d:0d:02:b4:0e:
                    52:03:ce:55:74:09:c6:95:24:03:f6:7a:87:f0:b6:
                    f4:7e:00:0a:49:f8:a6:3f:8b:99:30:ca:26:f1:be:
                    d5:7c:a5:de:0e:39:94:2f:5b:4a:d8:52:a8:e6:ac:
                    30:e7:37:09:4b:60:65:0e:18:0c:09:aa:6c:b5:ba:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2A:92:CB:15:26:58:94:69:06:B8:BA:C2:FB:B4:CC:9D:90:F0:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f058a927-1424-3706-8837-15b526d866a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:26b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:03:d3:ff:d6:f6:5d:b8:6f:ce:18:c4:51:78:26:6e:39:
         83:2c:fc:ec:a2:39:1e:f6:c2:17:b0:65:52:4e:04:6a:99:d6:
         21:8f:8f:a9:20:cb:5e:80:48:97:ab:56:9c:e4:86:65:94:18:
         63:fd:5d:c5:86:63:35:26:3e:9e:83:b4:ad:ba:fb:99:8f:95:
         98:2f:8c:60:82:04:e4:3c:65:e2:e6:0a:6a:79:04:9c:82:a1:
         ee:fe:57:df:53:42:41:be:fa:96:1e:e1:93:d7:97:48:93:4f:
         b7:fb:8a:cc:43:ca:28:28:64:7b:98:58:25:9b:2e:45:9c:95:
         0d:b8:25:f3:cf:16:9b:79:00:4c:79:3d:ad:17:bd:21:f6:91:
         34:97:30:fd:6b:f9:6b:bd:5f:61:9f:2d:77:ca:7f:a0:e2:37:
         4f:b6:af:e9:26:e2:8f:d7:5f:ea:5a:26:9c:21:93:f6:37:75:
         bf:58:8b:a4:c5:07:41:5a:37:2c:7d:ef:01:0e:52:28:58:8e:
         3a:28:53:a5:0b:02:a2:c1:b2:f7:cd:12:3a:63:77:21:ae:58:
         bd:76:6d:79:35:a7:53:cc:41:43:bb:a4:80:b8:87:92:f2:ef:
         db:06:a8:dc:a6:91:8d:ef:3d:bb:81:cc:10:31:21:ef:05:15:
         12:5b:2b:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+YzzCGmmamPQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
NThiNTI5ZmMtODk3Yi00NGM3LThhYTUtNjUwMjkwZDM1ODExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf2ePdLPiOqIx8cpaXQB5JOVd3frm8VvoiKO
3Ibww97ACvWihM2qFtAMkNH1RUCCLDbmPBjSpDxHMQpum73AxNTZgPBBOIUAzNbd
6gusFHDDDi2skqumMBc4DDXLNafTLCmBN2//J6+qvB7BoutolFGJqXiDOQqQUB23
hLXjhPem1xeiT0eX4IUnR52Bmbdgf5fJ/1FzmbjxlwcLqWeWiYK1agmtUZAKiYVK
5IvqK1NuIaXaPWGTo0URjvpTLQ0CtA5SA85VdAnGlSQD9nqH8Lb0fgAKSfimP4uZ
MMom8b7VfKXeDjmUL1tK2FKo5qww5zcJS2BlDhgMCapstbo+twIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNwqkssVJliUaQa4usL7tMydkPCRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjA1OGE5MjctMTQyNC0z
NzA2LTg4MzctMTViNTI2ZDg2NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6gA9P/1vZduG/OGMRReCZuOYMs/OyiOR72whewZVJOBGqZ1iGP
j6kgy16ASJerVpzkhmWUGGP9XcWGYzUmPp6DtK26+5mPlZgvjGCCBOQ8ZeLmCmp5
BJyCoe7+V99TQkG++pYe4ZPXl0iTT7f7isxDyigoZHuYWCWbLkWclQ24JfPPFpt5
AEx5Pa0XvSH2kTSXMP1r+Wu9X2GfLXfKf6DiN0+2r+km4o/XX+paJpwhk/Y3db9Y
i6TFB0FaNyx97wEOUihYjjooU6ULAqLBsvfNEjpjdyGuWL12bXk1p1PMQUO7pIC4
h5Ly79sGqNymkY3vPbuBzBAxIe8FFRJbK18=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:33 2025 by rpki-client