Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa
File:                     ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa (raw, json)
Hash identifier:          gkXaN4Fb3SYLQ3spNrp2uUrcmMUJn8twv/wIqjU1h8U=
Subject key identifier:   9B:62:10:D4:E1:1C:79:55:F0:18:39:0D:21:D7:E9:2E:03:C8:2B:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B4E773B8A11CADEBE4D58F780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     46632
IP address blocks:        2001:470:3c2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:3b:8a:11:ca:de:be:4d:58:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=1e3c7b4b-183d-49b8-a4fd-2468dcb41db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f0:b5:9b:f8:fd:ec:78:b9:77:77:59:12:ed:
                    3f:87:8a:a1:fc:9d:16:37:23:ac:2e:53:87:9b:77:
                    5a:77:62:d2:39:5a:7c:44:0e:26:03:87:14:f6:84:
                    12:a1:94:60:83:a3:e7:d5:08:72:42:64:46:2d:06:
                    98:42:c4:7e:7e:96:43:b4:7c:0b:34:f4:66:a6:5c:
                    d2:b2:60:9f:4d:b2:bb:29:48:5b:25:90:fc:5c:f6:
                    65:9e:f0:21:2c:70:80:cb:46:0e:42:43:af:01:90:
                    01:af:40:72:bc:a3:e9:37:3b:f2:3a:d2:a3:eb:e6:
                    31:2f:b5:9a:45:46:44:b0:9f:67:58:e8:68:f1:7e:
                    51:97:df:80:bb:63:d1:76:57:28:2a:3d:e4:c0:96:
                    e1:15:59:56:7a:99:14:0d:40:05:a5:46:f5:fd:a1:
                    d3:58:f8:bb:1e:bc:c5:2b:fe:c5:b7:10:ad:38:1d:
                    70:4a:ab:d2:10:77:30:23:4b:90:db:aa:1f:47:da:
                    21:8e:50:00:80:76:98:ec:85:25:d9:88:01:91:d7:
                    07:20:f6:2e:74:47:66:81:c2:14:0e:f8:c2:7c:ab:
                    5b:9d:4a:bb:ab:fd:24:f3:f5:98:00:44:b8:56:49:
                    04:74:5c:14:7d:91:36:55:3b:5b:2d:1f:8c:98:d7:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:10:D4:E1:1C:79:55:F0:18:39:0D:21:D7:E9:2E:03:C8:2B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff6736a2-70b6-36dd-931d-fc3a5356fa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:5e:b0:e7:c5:37:ba:30:e0:0f:28:5b:29:d6:82:65:1e:
         e5:02:22:80:f3:9a:bb:2a:08:9b:c8:5a:f6:18:0d:59:89:d8:
         ed:11:44:88:96:85:45:5c:a8:a4:2b:bf:9f:96:07:d6:96:a8:
         e9:be:28:bb:29:30:62:62:f0:cb:15:9f:df:b9:0c:12:d9:a1:
         5f:b7:c6:e8:1e:cb:56:94:40:67:da:79:ea:e2:8d:dd:08:ca:
         34:39:16:d8:6c:c6:6a:a8:6f:a8:c4:7c:69:3a:f7:c9:c3:2b:
         c0:f3:67:2f:b4:ee:9d:bc:f9:37:3b:68:d9:b1:72:4c:de:ce:
         1b:fd:ef:5a:dd:e8:e5:7f:7a:91:3b:49:fd:e5:65:ad:05:f0:
         0f:90:df:51:e6:f4:df:f1:1e:08:ce:d1:e9:f7:f0:99:fd:00:
         ab:9c:ae:f5:67:bb:37:1b:8c:ee:22:c9:77:b4:14:81:41:b8:
         3d:ac:dc:2f:c7:f7:ee:93:a0:b0:86:48:f5:60:51:6d:33:2f:
         0e:d0:f1:fe:cd:fd:2d:7e:c0:55:2e:62:b2:b6:be:8e:06:98:
         c8:c3:ad:69:50:d2:bd:28:93:08:7d:21:c7:6c:92:93:29:2a:
         ea:1f:39:41:49:6f:ff:c2:84:c2:22:2e:20:ad:a3:ce:d2:80:
         3a:33:c4:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtOdzuKEcrevk1Y94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
MWUzYzdiNGItMTgzZC00OWI4LWE0ZmQtMjQ2OGRjYjQxZGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivC1m/j97Hi5d3dZEu0/h4qh/J0WNyOsLlOH
m3dad2LSOVp8RA4mA4cU9oQSoZRgg6Pn1QhyQmRGLQaYQsR+fpZDtHwLNPRmplzS
smCfTbK7KUhbJZD8XPZlnvAhLHCAy0YOQkOvAZABr0ByvKPpNzvyOtKj6+YxL7Wa
RUZEsJ9nWOho8X5Rl9+Au2PRdlcoKj3kwJbhFVlWepkUDUAFpUb1/aHTWPi7HrzF
K/7FtxCtOB1wSqvSEHcwI0uQ26ofR9ohjlAAgHaY7IUl2YgBkdcHIPYudEdmgcIU
DvjCfKtbnUq7q/0k8/WYAES4VkkEdFwUfZE2VTtbLR+MmNc0kQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJtiENThHHlV8Bg5DSHX6S4DyCsfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY2NzM2YTItNzBiNi0z
NmRkLTkzMWQtZmMzYTUzNTZmYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJZrXrDnxTe6MOAPKFsp1oJlHuUCIoDzmrsqCJvIWvYYDVmJ2O0R
RIiWhUVcqKQrv5+WB9aWqOm+KLspMGJi8MsVn9+5DBLZoV+3xugey1aUQGfaeeri
jd0IyjQ5Fthsxmqob6jEfGk698nDK8DzZy+07p28+Tc7aNmxckzezhv971rd6OV/
epE7Sf3lZa0F8A+Q31Hm9N/xHgjO0en38Jn9AKucrvVnuzcbjO4iyXe0FIFBuD2s
3C/H9+6ToLCGSPVgUW0zLw7Q8f7N/S1+wFUuYrK2vo4GmMjDrWlQ0r0okwh9Icds
kpMpKuofOUFJb//ChMIiLiCto87SgDozxA8=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:49 2025 by rpki-client