Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c486f01c-d091-37c9-adb9-b949f7ec5308.roa
File:                     c486f01c-d091-37c9-adb9-b949f7ec5308.roa (raw, json)
Hash identifier:          cY1OPvmJay8OTY/1O79QCGetylOfCpKmwt0aGAojlW0=
Subject key identifier:   CF:C9:89:D4:8B:37:6B:D5:82:C7:BC:B5:91:C3:8F:4B:BC:37:0D:59
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849B42327AC62B1C99A47160740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c486f01c-d091-37c9-adb9-b949f7ec5308.roa
Signing time:             Thu 01 May 2025 01:30:10 +0000
ROA not before:           Thu 01 May 2025 01:30:10 +0000
ROA not after:            Wed 30 Jul 2025 01:30:10 +0000
asID:                     19661
IP address blocks:        2001:470:356::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b4:23:27:ac:62:b1:c9:9a:47:16:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  1 01:30:10 2025 GMT
            Not After : Jul 30 01:30:10 2025 GMT
        Subject: CN=bbffa0ba-cdc8-4f52-935b-316c02043b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:ba:87:07:c0:ee:39:2c:a9:8b:3d:d4:fc:
                    56:c7:76:5f:40:b0:5b:6b:3d:8e:e5:36:3f:f7:39:
                    8c:e2:a8:f3:b4:19:53:b5:5b:12:70:f4:ca:42:06:
                    f0:64:6e:19:c6:ad:a6:34:55:29:a4:8a:24:99:9a:
                    2b:dd:88:b5:09:b2:c6:53:41:a6:89:16:90:8d:60:
                    a8:b5:cc:fc:e0:2b:02:38:cd:67:eb:64:57:10:b6:
                    b7:bf:7d:60:63:ae:cd:6f:31:5f:5f:4a:82:79:82:
                    b7:5d:ea:bd:16:77:3f:f2:7f:e5:b3:cb:81:38:6c:
                    19:d7:1a:50:87:11:65:d4:5f:c2:e3:42:47:70:8c:
                    b6:14:d9:37:3b:ad:90:38:99:aa:da:84:c8:a7:69:
                    8c:d5:29:5b:97:26:7f:c4:c0:12:fe:bf:86:0c:02:
                    34:7e:79:40:62:3e:44:7e:8b:7e:63:29:71:04:b6:
                    82:f1:28:0c:de:7f:3f:1e:0f:e6:4d:a8:7c:a8:50:
                    ea:15:a9:87:cd:a1:d8:da:ac:f6:6d:b3:a5:2b:22:
                    2e:77:2b:58:70:fe:f5:02:7b:6d:f7:42:8b:c7:7d:
                    6a:de:07:11:c2:cc:90:39:b2:e5:1c:92:29:22:52:
                    cf:6a:d1:ab:60:18:eb:51:34:47:00:e9:af:7f:45:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C9:89:D4:8B:37:6B:D5:82:C7:BC:B5:91:C3:8F:4B:BC:37:0D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c486f01c-d091-37c9-adb9-b949f7ec5308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:356::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:89:67:8d:f4:d6:70:0f:bc:40:a8:cb:20:d7:da:f5:fa:c1:
         83:43:c9:50:65:0d:79:a6:32:b1:3d:09:fb:6a:52:b8:16:86:
         6a:1a:90:15:1c:1e:72:cc:8f:09:f2:b7:a9:cd:05:c5:f0:7c:
         1c:cb:6a:09:de:59:ad:d9:de:b2:52:72:df:6f:64:f4:7f:7c:
         29:41:8b:6e:40:28:58:5c:80:b9:e0:e6:03:80:ab:54:e4:ff:
         d5:79:24:c3:a0:e0:e6:23:ce:11:a8:55:2a:3b:c0:58:18:08:
         a7:89:6a:e3:e8:aa:29:71:ea:13:d2:be:03:c7:77:b8:4c:10:
         f7:c6:36:69:b1:6d:66:de:91:ba:af:92:98:c8:55:0f:69:30:
         79:70:3e:12:59:80:79:de:17:17:49:d6:b5:d5:3e:07:7b:89:
         d2:f7:6d:3c:25:6c:d3:4c:f9:77:e9:93:cc:4d:17:ef:7c:e4:
         3e:e9:97:f5:3d:6d:01:b1:b5:8f:a7:b3:16:a5:b2:7f:81:71:
         60:1c:c2:d2:61:ca:48:33:d0:7b:ad:33:55:90:de:54:ec:6b:
         fd:5f:36:83:76:82:a5:b7:40:c7:42:08:19:4d:f5:f2:4f:79:
         59:5c:49:2f:c4:0f:e5:71:0e:ce:25:76:1d:cc:4f:c1:72:19:
         e8:7f:cf:32
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm0IyesYrHJmkcWB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUwMTAxMzAxMFoXDTI1MDczMDAxMzAxMFowLzEtMCsGA1UEAxMk
YmJmZmEwYmEtY2RjOC00ZjUyLTkzNWItMzE2YzAyMDQzYjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7+6hwfA7jksqYs91PxWx3ZfQLBbaz2O5TY/
9zmM4qjztBlTtVsScPTKQgbwZG4Zxq2mNFUppIokmZor3Yi1CbLGU0GmiRaQjWCo
tcz84CsCOM1n62RXELa3v31gY67NbzFfX0qCeYK3Xeq9Fnc/8n/ls8uBOGwZ1xpQ
hxFl1F/C40JHcIy2FNk3O62QOJmq2oTIp2mM1SlblyZ/xMAS/r+GDAI0fnlAYj5E
fot+YylxBLaC8SgM3n8/Hg/mTah8qFDqFamHzaHY2qz2bbOlKyIudytYcP71Antt
90KLx31q3gcRwsyQObLlHJIpIlLPatGrYBjrUTRHAOmvf0UyzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM/JidSLN2vVgse8tZHDj0u8Nw1ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzQ4NmYwMWMtZDA5MS0z
N2M5LWFkYjktYjk0OWY3ZWM1MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHKJZ4301nAPvECoyyDX2vX6wYNDyVBlDXmmMrE9CftqUrgWhmoa
kBUcHnLMjwnyt6nNBcXwfBzLagneWa3Z3rJSct9vZPR/fClBi25AKFhcgLng5gOA
q1Tk/9V5JMOg4OYjzhGoVSo7wFgYCKeJauPoqilx6hPSvgPHd7hMEPfGNmmxbWbe
kbqvkpjIVQ9pMHlwPhJZgHneFxdJ1rXVPgd7idL3bTwlbNNM+Xfpk8xNF+985D7p
l/U9bQGxtY+nsxalsn+BcWAcwtJhykgz0HutM1WQ3lTsa/1fNoN2gqW3QMdCCBlN
9fJPeVlcSS/ED+VxDs4ldh3MT8FyGeh/zzI=
-----END CERTIFICATE-----
Generated at Wed May 7 10:35:27 2025 by rpki-client