Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01985611-2c3c-3167-a56b-c0c85d196318.roa
File:                     01985611-2c3c-3167-a56b-c0c85d196318.roa (raw, json)
Hash identifier:          Uc1pRriGtpYfDA7SeAtH0VQitrJ2/5KEEg6/8Q2chho=
Subject key identifier:   F1:F2:41:E4:61:BE:EC:4F:D7:35:EA:E4:18:EE:BB:42:6B:49:3B:54
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926BDA6A5448A1F8B912940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01985611-2c3c-3167-a56b-c0c85d196318.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     54620
IP address blocks:        2001:470:e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:bd:a6:a5:44:8a:1f:8b:91:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=cf23a6fe-a717-4a98-b99d-e310ed896aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:00:c7:58:87:4b:80:26:50:12:67:73:34:
                    07:dc:c4:98:83:f3:87:63:34:e9:4b:75:8b:f7:99:
                    57:ee:6e:9d:43:d8:2c:4b:9c:48:be:92:05:c9:ce:
                    1c:b6:ee:fa:3d:4d:ef:e5:5e:fc:e0:f9:66:2f:57:
                    71:bc:a8:13:3a:09:fb:ff:ac:8e:dc:35:47:d4:97:
                    04:47:a7:65:4b:66:e1:68:d7:da:ac:14:21:7b:6c:
                    f1:13:59:07:71:45:3f:e7:84:d3:c1:01:02:5d:72:
                    6b:a4:13:60:25:e5:01:be:85:99:96:d8:93:e0:4e:
                    64:ef:6e:bc:ae:db:80:f9:00:5b:e4:70:4a:fd:50:
                    97:69:af:70:7f:e2:e0:9c:ad:95:51:ec:a3:3a:92:
                    52:6c:53:d1:9a:16:91:44:e1:0b:bd:5e:2a:6d:d9:
                    44:f1:5f:96:90:17:9c:ae:1b:31:09:69:79:58:dd:
                    f9:3f:02:8d:6a:33:93:fc:ce:18:ce:c2:81:01:5c:
                    df:d6:1c:30:b9:b2:37:86:cf:8d:9d:c5:b1:2c:37:
                    cb:2a:32:a3:c6:54:55:2a:5b:71:e5:71:2d:e3:59:
                    01:55:d5:05:b0:b0:a1:85:59:07:41:3d:56:e0:e2:
                    b8:b2:28:a3:f3:e4:1b:90:e1:e0:c7:f1:d8:b2:82:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:41:E4:61:BE:EC:4F:D7:35:EA:E4:18:EE:BB:42:6B:49:3B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01985611-2c3c-3167-a56b-c0c85d196318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:47:39:04:67:37:4c:6c:0f:59:73:23:98:d2:23:a7:b8:
         bb:8d:a4:3d:d9:f7:ee:1e:12:bd:e3:ac:35:af:b6:b9:67:e7:
         66:58:cf:33:de:a9:83:fc:cd:7f:fd:f8:15:46:e5:d0:ef:ca:
         c9:2b:e1:98:af:97:f0:ef:64:a4:3e:bd:09:a2:fc:2d:a5:74:
         aa:1f:6a:a1:78:71:91:06:06:26:35:f6:0c:39:71:71:ee:14:
         c4:46:c1:f5:fe:dc:51:bf:42:df:88:eb:00:86:e3:59:29:20:
         f4:46:b1:cf:96:b1:78:a3:3f:eb:2d:47:43:6e:fb:80:d9:3b:
         73:6d:36:2a:d6:6e:9f:56:dd:fb:48:6f:6a:1d:32:0a:34:55:
         cf:7d:ad:69:d6:bd:8f:da:bd:38:8f:56:6a:fc:ee:ed:ac:8e:
         ff:1f:03:7e:66:9f:de:5e:e5:97:0e:92:88:d3:3b:50:1f:55:
         5c:a9:8d:50:af:f0:20:35:18:f5:cb:4d:fe:e4:41:e3:61:b2:
         60:2a:b6:72:09:3c:4e:8c:f3:e7:ca:84:7e:5b:13:45:85:e0:
         b2:9f:74:c7:a6:1a:34:89:35:7d:f6:76:87:ad:c5:0a:e4:07:
         23:6c:52:77:b7:af:95:4e:14:17:5f:e1:9b:dc:cb:00:17:fc:
         68:63:76:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jr2mpUSKH4uRKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
Y2YyM2E2ZmUtYTcxNy00YTk4LWI5OWQtZTMxMGVkODk2YWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoEAx1iHS4AmUBJnczQH3MSYg/OHYzTpS3WL
95lX7m6dQ9gsS5xIvpIFyc4ctu76PU3v5V784PlmL1dxvKgTOgn7/6yO3DVH1JcE
R6dlS2bhaNfarBQhe2zxE1kHcUU/54TTwQECXXJrpBNgJeUBvoWZltiT4E5k7268
rtuA+QBb5HBK/VCXaa9wf+LgnK2VUeyjOpJSbFPRmhaRROELvV4qbdlE8V+WkBec
rhsxCWl5WN35PwKNajOT/M4YzsKBAVzf1hwwubI3hs+NncWxLDfLKjKjxlRVKltx
5XEt41kBVdUFsLChhVkHQT1W4OK4siij8+QbkOHgx/HYsoIErwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPHyQeRhvuxP1zXq5Bjuu0JrSTtUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDE5ODU2MTEtMmMzYy0z
MTY3LWE1NmItYzBjODVkMTk2MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADpjRzkEZzdMbA9ZcyOY0iOnuLuNpD3Z9+4eEr3jrDWvtrln52ZY
zzPeqYP8zX/9+BVG5dDvyskr4Zivl/DvZKQ+vQmi/C2ldKofaqF4cZEGBiY19gw5
cXHuFMRGwfX+3FG/Qt+I6wCG41kpIPRGsc+WsXijP+stR0Nu+4DZO3NtNirWbp9W
3ftIb2odMgo0Vc99rWnWvY/avTiPVmr87u2sjv8fA35mn95e5ZcOkojTO1AfVVyp
jVCv8CA1GPXLTf7kQeNhsmAqtnIJPE6M8+fKhH5bE0WF4LKfdMemGjSJNX32doet
xQrkByNsUne3r5VOFBdf4ZvcywAX/GhjdqM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:12 2025 by rpki-client