Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00107759-6e8e-3975-92d6-fc28f5299042.roa
File:                     00107759-6e8e-3975-92d6-fc28f5299042.roa (raw, json)
Hash identifier:          zx2Y6K/BVslfSGqhkWbp/7xfQ6foOAvIEQEyOu+5BhA=
Subject key identifier:   D5:5F:47:95:39:D9:0C:9A:F9:3B:4B:88:22:92:52:30:86:CC:C7:53
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A03A5710EC8C99174A0990700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00107759-6e8e-3975-92d6-fc28f5299042.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     35598
IP address blocks:        2001:470:212::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:71:0e:c8:c9:91:74:a0:99:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=d74afe73-a568-4d73-8264-b5203d9ac51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:23:8f:e9:d0:95:54:3b:4c:17:65:1b:a8:34:
                    fc:3a:8a:09:51:08:61:16:2b:98:04:67:8c:a1:64:
                    61:08:93:29:7c:e8:f7:08:3b:b9:e0:72:ed:ad:54:
                    56:03:06:e0:88:48:a9:dc:8d:3b:de:89:87:ea:72:
                    b3:b5:33:3b:46:b4:6c:ab:e0:82:e1:ac:20:b5:b6:
                    7a:eb:07:99:50:63:86:3b:cf:f7:d6:2a:27:2a:b9:
                    0b:8a:82:31:4a:8b:26:2b:be:78:be:37:16:f1:36:
                    bd:a2:e9:7a:d1:27:e6:44:8f:e8:10:bf:55:90:94:
                    91:69:b8:65:c7:bc:05:70:67:f1:b8:13:c4:0d:48:
                    8c:c8:c5:9c:34:b1:05:0d:ee:f8:3a:87:8e:51:4b:
                    c3:1a:c6:b6:ed:9a:f3:6b:54:57:20:17:87:ef:f6:
                    5f:1f:37:cc:d1:ad:83:8a:27:2e:bb:bf:d1:88:94:
                    01:ee:08:0a:b5:95:99:70:02:79:ad:7c:1b:ae:cb:
                    95:21:e7:64:bf:8e:45:35:b7:68:3f:2b:63:2c:60:
                    2b:d4:3c:b7:7a:86:65:52:f7:da:54:fa:33:ae:58:
                    c2:d8:f5:df:38:b1:2a:53:65:c1:f7:25:87:d2:da:
                    c2:7c:20:f8:80:50:48:77:19:21:ba:ad:9e:21:d0:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5F:47:95:39:D9:0C:9A:F9:3B:4B:88:22:92:52:30:86:CC:C7:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00107759-6e8e-3975-92d6-fc28f5299042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:212::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:89:c9:f4:49:74:01:ca:a3:27:94:a3:b8:e1:cc:b2:71:2c:
         44:5e:4c:35:8b:56:df:56:87:21:8a:37:1b:d5:b5:9d:64:66:
         71:a9:47:de:09:b7:d7:7c:ec:7b:a6:71:dd:1a:e6:c4:9c:6f:
         73:14:df:ca:bd:4a:8f:00:28:de:b7:4b:9f:49:bf:1a:1a:1d:
         d5:cb:b0:9f:0a:8b:71:12:38:ed:17:ee:35:53:e3:17:30:f7:
         67:9f:1e:69:d1:39:b5:86:04:6b:fd:4a:fc:ea:66:74:5f:0a:
         5a:e9:a6:36:00:2b:ee:46:66:d3:d1:8c:e5:ef:f8:45:55:a0:
         b9:35:6c:43:20:be:3f:64:aa:cb:58:e5:ed:67:f3:3b:de:2d:
         fe:61:02:16:8f:b1:e2:6b:3a:2c:fb:cc:86:d7:9e:02:03:c2:
         88:ca:6a:3c:70:05:a3:1b:c6:92:86:75:2c:bd:0e:d1:ed:b5:
         8b:61:d4:a8:47:70:0d:2d:72:52:70:eb:bc:77:03:03:fa:fa:
         d2:81:4f:b8:d3:f9:97:dc:6f:be:c4:f9:d8:6c:24:a1:cf:64:
         54:1e:fb:4c:b0:78:43:b5:22:1d:3e:8b:b7:36:e8:40:d0:0c:
         5e:43:82:05:b0:3f:46:c0:df:4f:a5:b7:7b:4e:e5:2d:e8:b4:
         49:8c:51:c0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoDpXEOyMmRdKCZBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
ZDc0YWZlNzMtYTU2OC00ZDczLTgyNjQtYjUyMDNkOWFjNTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iOP6dCVVDtMF2UbqDT8OooJUQhhFiuYBGeM
oWRhCJMpfOj3CDu54HLtrVRWAwbgiEip3I073omH6nKztTM7RrRsq+CC4awgtbZ6
6weZUGOGO8/31ionKrkLioIxSosmK754vjcW8Ta9oul60SfmRI/oEL9VkJSRabhl
x7wFcGfxuBPEDUiMyMWcNLEFDe74OoeOUUvDGsa27Zrza1RXIBeH7/ZfHzfM0a2D
iicuu7/RiJQB7ggKtZWZcAJ5rXwbrsuVIedkv45FNbdoPytjLGAr1Dy3eoZlUvfa
VPozrljC2PXfOLEqU2XB9yWH0trCfCD4gFBIdxkhuq2eIdCy7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNVfR5U52Qya+TtLiCKSUjCGzMdTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDAxMDc3NTktNmU4ZS0z
OTc1LTkyZDYtZmMyOGY1Mjk5MDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADyJyfRJdAHKoyeUo7jhzLJxLEReTDWLVt9WhyGKNxvVtZ1kZnGp
R94Jt9d87Humcd0a5sScb3MU38q9So8AKN63S59JvxoaHdXLsJ8Ki3ESOO0X7jVT
4xcw92efHmnRObWGBGv9SvzqZnRfClrppjYAK+5GZtPRjOXv+EVVoLk1bEMgvj9k
qstY5e1n8zveLf5hAhaPseJrOiz7zIbXngIDwojKajxwBaMbxpKGdSy9DtHttYth
1KhHcA0tclJw67x3AwP6+tKBT7jT+Zfcb77E+dhsJKHPZFQe+0yweEO1Ih0+i7c2
6EDQDF5DggWwP0bA30+lt3tO5S3otEmMUcA=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:44:46 2025 by rpki-client