Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e6c3017c-3d9c-3592-a8cb-a35442fcf9ed.roa
File:                     e6c3017c-3d9c-3592-a8cb-a35442fcf9ed.roa (raw, json)
Hash identifier:          ne4+nCAnH7vPmD+R1RvJ+/WjFcMwd6TO2Ij+UyP/FP8=
Subject key identifier:   A5:0B:B8:A9:97:FC:2B:19:69:2B:87:F0:F9:F5:EF:23:05:B0:DC:CE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE48F17FCD8231928F480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e6c3017c-3d9c-3592-a8cb-a35442fcf9ed.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     211156
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e4:8f:17:fc:d8:23:19:28:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=57330649-4ca4-4629-bc0d-26f30707ebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:d7:07:67:f9:87:4c:af:aa:09:e2:79:76:
                    89:e2:14:e3:f0:a0:38:d7:e6:39:0b:c7:df:56:1c:
                    59:0d:91:10:45:27:c3:93:45:d1:92:d1:96:31:00:
                    22:32:54:13:38:54:ce:ba:a5:6e:75:b6:fe:1e:2f:
                    bc:df:7b:64:fb:66:9e:c7:d9:07:e5:f2:4d:a0:0f:
                    64:a6:97:3e:66:c1:3f:f6:29:1f:e8:26:53:31:d5:
                    64:4d:95:8a:76:51:6c:95:52:cd:c3:63:95:0e:6a:
                    50:70:a9:2e:78:07:0e:ab:74:a2:b0:5f:5b:94:b3:
                    50:fc:5e:7c:d2:cb:bb:ca:73:c7:1b:d7:18:15:dc:
                    06:25:f2:5e:37:ae:d7:d7:3b:e1:bf:9f:ba:b6:20:
                    76:04:cd:42:e6:ab:9e:a4:0a:89:26:2b:72:6c:10:
                    ab:2e:92:75:e3:f6:24:ae:0f:7b:1e:7f:4e:49:92:
                    0f:84:64:0b:24:c9:2a:1b:57:79:f6:de:24:fe:47:
                    4d:20:1a:49:08:af:5d:0e:02:b4:24:9c:56:d6:be:
                    8d:98:9b:38:46:66:4e:46:7d:f5:ea:1f:a4:a7:87:
                    06:54:79:d8:dd:4a:88:e4:25:3f:ce:7a:0e:55:f6:
                    cb:f7:33:f1:19:3d:fe:e9:cd:6b:d9:99:c4:5a:d8:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0B:B8:A9:97:FC:2B:19:69:2B:87:F0:F9:F5:EF:23:05:B0:DC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e6c3017c-3d9c-3592-a8cb-a35442fcf9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:70:5e:bf:5d:b7:e9:78:64:6b:ba:11:78:71:be:86:9e:
         f1:38:30:ef:8b:a6:92:ff:63:8d:0e:af:db:37:12:c3:b5:ca:
         88:2a:8e:c5:48:be:cd:3a:9c:24:d7:ca:d9:d5:7a:00:95:52:
         bb:52:fa:97:2e:de:23:8d:4f:6c:01:a8:31:5f:8e:cf:13:d1:
         f9:3b:c4:31:71:c0:f2:96:e6:cc:ba:be:f8:92:c1:0f:65:e7:
         68:39:0a:17:f7:91:b4:68:2c:7e:5d:9d:ba:51:8b:fd:be:eb:
         ae:1c:57:bd:bb:27:53:7c:0b:d4:04:49:90:e7:16:2e:a4:a1:
         e5:13:09:7c:51:94:d3:b3:20:79:91:02:7b:8f:a2:39:fd:9f:
         75:21:1b:51:46:38:62:57:f7:3c:53:9c:bf:4e:c2:03:65:ec:
         2b:c6:b8:7d:14:01:e8:be:07:aa:c3:1e:c7:61:b1:55:cc:57:
         c0:aa:7b:37:ce:eb:81:98:da:f2:c6:0f:94:18:6a:2a:d3:81:
         10:a2:f4:07:26:15:b8:19:50:93:38:97:1a:ac:0f:6b:5c:a6:
         1c:bd:b3:01:b7:33:ff:09:0f:94:41:d4:d0:2c:66:7f:d9:cc:
         3b:42:71:05:43:93:3e:4f:f6:2f:b3:bf:fc:65:90:e2:4c:87:
         4d:5c:3e:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+SPF/zYIxko9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
NTczMzA2NDktNGNhNC00NjI5LWJjMGQtMjZmMzA3MDdlYmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9nXB2f5h0yvqgnieXaJ4hTj8KA41+Y5C8ff
VhxZDZEQRSfDk0XRktGWMQAiMlQTOFTOuqVudbb+Hi+833tk+2aex9kH5fJNoA9k
ppc+ZsE/9ikf6CZTMdVkTZWKdlFslVLNw2OVDmpQcKkueAcOq3SisF9blLNQ/F58
0su7ynPHG9cYFdwGJfJeN67X1zvhv5+6tiB2BM1C5quepAqJJitybBCrLpJ14/Yk
rg97Hn9OSZIPhGQLJMkqG1d59t4k/kdNIBpJCK9dDgK0JJxW1r6NmJs4RmZORn31
6h+kp4cGVHnY3UqI5CU/znoOVfbL9zPxGT3+6c1r2ZnEWtg5ZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKULuKmX/CsZaSuH8Pn17yMFsNzOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTZjMzAxN2MtM2Q5Yy0z
NTkyLWE4Y2ItYTM1NDQyZmNmOWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEO4cF6/XbfpeGRruhF4cb6GnvE4MO+LppL/Y40Or9s3EsO1yogq
jsVIvs06nCTXytnVegCVUrtS+pcu3iONT2wBqDFfjs8T0fk7xDFxwPKW5sy6vviS
wQ9l52g5Chf3kbRoLH5dnbpRi/2+664cV727J1N8C9QESZDnFi6koeUTCXxRlNOz
IHmRAnuPojn9n3UhG1FGOGJX9zxTnL9OwgNl7CvGuH0UAei+B6rDHsdhsVXMV8Cq
ezfO64GY2vLGD5QYairTgRCi9AcmFbgZUJM4lxqsD2tcphy9swG3M/8JD5RB1NAs
Zn/ZzDtCcQVDkz5P9i+zv/xlkOJMh01cPvY=
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:55:36 2025 by rpki-client