Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
File:                     fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa (raw, json)
Hash identifier:          BfDGTa0HAKpZKrw0n0HlKZACSX2vvbHZ/9MlMsHjHNA=
Subject key identifier:   FF:98:38:38:B9:BC:B0:95:75:50:33:25:CC:A5:4B:A4:82:09:4F:AE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BCE05544CCDE5B3924A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     210222
IP address blocks:        2001:470:1b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ce:05:54:4c:cd:e5:b3:92:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=6d5662d1-8942-47fd-817a-2f85fdac7066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:96:2b:45:0f:f0:10:d9:3d:97:69:e4:50:
                    d5:14:0a:fc:8c:00:2c:58:4c:ca:0c:f1:4f:21:73:
                    62:ff:e4:ec:4d:2d:26:b3:77:90:68:55:bf:68:2a:
                    63:dd:68:d6:8a:36:b7:22:4f:ee:f4:ab:5f:a6:0a:
                    91:5b:78:f1:1f:28:cc:50:47:f4:20:2b:81:75:3d:
                    df:3d:b6:80:41:90:79:16:52:ed:5b:7f:d5:8c:cd:
                    71:0d:25:67:64:d3:e9:de:f3:cb:5c:c5:5a:37:4a:
                    f1:68:bd:73:9e:cb:4f:3b:3c:71:13:59:65:b2:30:
                    d0:bf:56:53:2d:15:c1:d7:8a:f5:83:b6:17:f5:b7:
                    62:f9:70:26:8b:52:ee:5e:d0:b5:1c:f9:3c:eb:1a:
                    aa:30:a8:6b:f8:fe:89:4a:5d:9f:29:b1:ba:66:8c:
                    2a:fd:77:e8:b1:cc:e6:16:83:e4:6b:eb:fb:74:fa:
                    08:8e:9a:2b:b1:22:64:ae:e3:f4:a2:95:46:61:c9:
                    e8:ef:38:4f:b8:50:6d:b1:f3:7a:b4:30:40:00:7e:
                    e7:7b:48:c1:f1:5b:6f:f7:4e:2e:16:28:33:9c:3e:
                    1e:aa:38:77:af:01:e9:1d:38:41:be:c8:43:55:7e:
                    30:b0:11:e6:5f:fc:b2:27:38:c8:12:ce:3f:9e:e4:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:98:38:38:B9:BC:B0:95:75:50:33:25:CC:A5:4B:A4:82:09:4F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:61:e9:79:0a:4e:c9:72:9d:10:37:5d:0b:ae:d4:51:af:3c:
         b3:5b:2b:84:60:aa:c9:c0:05:aa:5c:8f:37:96:59:7b:8c:97:
         38:db:0c:76:c0:3b:5c:9b:58:13:20:89:cb:59:b6:a0:52:1c:
         d8:9b:6a:3c:37:4b:12:5a:a5:37:57:51:84:99:f5:08:16:07:
         39:b7:af:d0:f8:8c:02:7b:7d:98:06:b0:12:42:c6:bd:9e:d5:
         8d:9f:88:9d:0c:d0:c6:51:8e:bf:d2:69:41:f2:36:d9:67:28:
         30:02:cb:3a:d3:07:df:88:44:26:d9:79:f0:63:af:61:f0:1c:
         a1:cd:f5:6c:a2:ac:45:50:1d:c7:eb:13:6c:5f:8a:43:d5:08:
         9b:d7:59:1f:fb:3c:e6:b8:b8:2c:7e:26:f0:c7:a5:28:f8:5c:
         cd:33:d8:e9:4d:d8:05:7f:38:0c:be:09:62:49:cc:c3:ce:73:
         a6:c7:5a:e0:0d:d5:ca:cd:30:a7:73:8c:62:bd:cf:39:09:be:
         53:3d:ee:eb:08:9b:75:3d:d5:e0:02:35:59:8c:0a:19:93:01:
         97:6d:61:5c:1e:85:cb:b6:5e:1e:de:21:3b:6b:3f:e7:9d:f2:
         cb:bf:d8:45:a6:74:39:88:4d:a7:17:cf:b0:29:3c:66:2f:78:
         a6:81:c3:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G84FVEzN5bOSSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
NmQ1NjYyZDEtODk0Mi00N2ZkLTgxN2EtMmY4NWZkYWM3MDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnviWK0UP8BDZPZdp5FDVFAr8jAAsWEzKDPFP
IXNi/+TsTS0ms3eQaFW/aCpj3WjWija3Ik/u9KtfpgqRW3jxHyjMUEf0ICuBdT3f
PbaAQZB5FlLtW3/VjM1xDSVnZNPp3vPLXMVaN0rxaL1znstPOzxxE1llsjDQv1ZT
LRXB14r1g7YX9bdi+XAmi1LuXtC1HPk86xqqMKhr+P6JSl2fKbG6Zowq/Xfosczm
FoPka+v7dPoIjporsSJkruP0opVGYcno7zhPuFBtsfN6tDBAAH7ne0jB8Vtv904u
FigznD4eqjh3rwHpHThBvshDVX4wsBHmX/yyJzjIEs4/nuShawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP+YODi5vLCVdVAzJcylS6SCCU+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmU5NzFjOWYtNTE1Ni0z
Zjg4LWJhNjMtNTViNmQ2ZGNhOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAENh6XkKTslynRA3XQuu1FGvPLNbK4RgqsnABapcjzeWWXuMlzjb
DHbAO1ybWBMgictZtqBSHNibajw3SxJapTdXUYSZ9QgWBzm3r9D4jAJ7fZgGsBJC
xr2e1Y2fiJ0M0MZRjr/SaUHyNtlnKDACyzrTB9+IRCbZefBjr2HwHKHN9WyirEVQ
HcfrE2xfikPVCJvXWR/7POa4uCx+JvDHpSj4XM0z2OlN2AV/OAy+CWJJzMPOc6bH
WuAN1crNMKdzjGK9zzkJvlM97usIm3U91eACNVmMChmTAZdtYVwehcu2Xh7eITtr
P+ed8su/2EWmdDmITacXz7ApPGYveKaBwwc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:16 2025 by rpki-client