Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d4d74de-4990-3c0a-bf17-e4fdf7ae47fb.roa
File:                     7d4d74de-4990-3c0a-bf17-e4fdf7ae47fb.roa (raw, json)
Hash identifier:          hDDlIoYs6sMmm4rIKoL89AuXC/y+UNERgieqdced82M=
Subject key identifier:   2A:D4:73:11:DF:60:07:75:C6:D3:F0:6A:19:C2:08:1E:57:B0:1A:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A51D07AB43BB6C79AFE2F3240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d4d74de-4990-3c0a-bf17-e4fdf7ae47fb.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     400779
IP address blocks:        2001:470:3b7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:7a:b4:3b:b6:c7:9a:fe:2f:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=b3b9af22-b2c6-4603-a805-353f1500061d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:fa:1e:81:af:c4:0a:61:cd:6f:dc:d2:83:
                    dc:1b:df:cd:8a:1a:b6:5e:ac:60:3d:52:1c:51:b4:
                    64:90:8b:ff:d5:e4:9e:d4:ce:c4:4b:a9:05:6f:44:
                    d1:b7:d1:fa:b1:0e:a5:61:49:05:71:69:39:6b:e3:
                    e1:ef:f9:3b:f1:29:eb:e9:7e:67:73:a5:3a:79:c7:
                    b1:03:a7:45:08:a6:db:e3:5b:83:1d:ea:da:af:36:
                    e7:af:02:2d:6a:b7:e7:69:1d:cb:3c:d3:2e:3c:12:
                    10:5a:49:8d:f2:0a:7e:32:f6:83:82:73:4a:57:43:
                    47:b2:4b:dd:b6:76:bf:18:15:de:94:e8:62:47:0f:
                    d8:9f:9f:e6:aa:bc:39:65:7d:75:9d:a7:e5:b0:53:
                    fc:54:e5:ed:05:7f:d9:c1:4d:f9:1d:f5:16:41:a5:
                    d6:34:91:0b:46:9d:66:36:12:40:95:2b:7d:a1:8c:
                    8b:08:f6:99:d8:73:d1:32:b1:f5:ac:af:34:16:e3:
                    12:bf:0b:d0:2f:1f:da:04:f2:8b:54:3e:8e:6f:8e:
                    25:a8:1e:bd:39:2c:6f:12:08:39:a1:84:5b:ab:d0:
                    d2:ca:d9:9f:98:f1:08:b5:9d:d5:f0:7d:0c:26:5b:
                    a5:cd:84:8a:53:eb:1e:e5:36:c2:40:71:eb:b4:6e:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D4:73:11:DF:60:07:75:C6:D3:F0:6A:19:C2:08:1E:57:B0:1A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d4d74de-4990-3c0a-bf17-e4fdf7ae47fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:46:b8:95:44:7f:38:6c:5f:23:2c:bf:c3:b5:2a:c7:89:
         7a:af:64:09:2d:b0:e8:ff:51:5f:c0:08:59:d9:c0:94:d3:b0:
         ae:4c:a2:10:ee:3c:ef:8a:90:f1:c3:70:70:7d:70:5f:7f:e8:
         56:14:ae:9a:94:b5:6e:b2:9f:76:99:49:f1:80:12:59:35:05:
         bc:5d:8b:8b:69:52:a2:eb:8d:6b:18:74:c9:34:30:16:80:e9:
         e5:78:dc:21:ea:33:4c:ec:1d:82:dc:96:5f:4d:12:92:2d:e4:
         14:a9:15:af:82:95:08:96:e6:e2:b3:24:b4:e6:52:e9:6f:10:
         b8:67:6c:01:b4:09:bf:a7:8d:c7:03:17:96:a1:e8:c6:41:5e:
         0a:39:37:9e:7f:00:c0:78:16:91:32:63:aa:47:c5:e5:c8:73:
         ca:91:aa:c1:2f:f2:5f:8a:84:68:50:9c:25:26:5e:e7:ca:cc:
         a0:17:3c:c2:74:ea:ba:8f:1b:99:5a:ec:55:6e:ac:45:48:42:
         6c:27:2f:34:1c:47:a0:aa:36:fc:ee:c1:07:30:77:6a:25:5e:
         8a:0e:b3:27:46:3d:4b:36:71:60:ea:22:b4:27:24:4e:63:47:
         d8:b4:8d:fc:4f:36:d2:6f:f6:c1:36:34:22:ba:75:9c:b9:c2:
         37:df:97:16
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpR0Hq0O7bHmv4vMkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
YjNiOWFmMjItYjJjNi00NjAzLWE4MDUtMzUzZjE1MDAwNjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl76HoGvxAphzW/c0oPcG9/Nihq2XqxgPVIc
UbRkkIv/1eSe1M7ES6kFb0TRt9H6sQ6lYUkFcWk5a+Ph7/k78Snr6X5nc6U6ecex
A6dFCKbb41uDHerarzbnrwItarfnaR3LPNMuPBIQWkmN8gp+MvaDgnNKV0NHskvd
tna/GBXelOhiRw/Yn5/mqrw5ZX11naflsFP8VOXtBX/ZwU35HfUWQaXWNJELRp1m
NhJAlSt9oYyLCPaZ2HPRMrH1rK80FuMSvwvQLx/aBPKLVD6Ob44lqB69OSxvEgg5
oYRbq9DSytmfmPEItZ3V8H0MJlulzYSKU+se5TbCQHHrtG53gwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCrUcxHfYAd1xtPwahnCCB5XsBreMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2Q0ZDc0ZGUtNDk5MC0z
YzBhLWJmMTctZTRmZGY3YWU0N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKQzRriVRH84bF8jLL/DtSrHiXqvZAktsOj/UV/ACFnZwJTTsK5M
ohDuPO+KkPHDcHB9cF9/6FYUrpqUtW6yn3aZSfGAElk1Bbxdi4tpUqLrjWsYdMk0
MBaA6eV43CHqM0zsHYLcll9NEpIt5BSpFa+ClQiW5uKzJLTmUulvELhnbAG0Cb+n
jccDF5ah6MZBXgo5N55/AMB4FpEyY6pHxeXIc8qRqsEv8l+KhGhQnCUmXufKzKAX
PMJ06rqPG5la7FVurEVIQmwnLzQcR6CqNvzuwQcwd2olXooOsydGPUs2cWDqIrQn
JE5jR9i0jfxPNtJv9sE2NCK6dZy5wjfflxY=
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:41:59 2025 by rpki-client