Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04237ee3-b626-3a9d-8ab0-e20aa758a5cb.roa
File:                     04237ee3-b626-3a9d-8ab0-e20aa758a5cb.roa (raw, json)
Hash identifier:          EcE/da6hz+mEQ3ZsJCAJMagEDmUG8+DL+Li4sIW4M3E=
Subject key identifier:   CA:C0:9C:85:A0:2B:F4:DD:48:9D:8F:8E:52:AC:1C:8B:4E:66:BA:40
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848B634AD3030EF69D1427B9A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04237ee3-b626-3a9d-8ab0-e20aa758a5cb.roa
Signing time:             Thu 30 Jan 2025 02:30:09 +0000
ROA not before:           Thu 30 Jan 2025 02:30:09 +0000
ROA not after:            Wed 30 Apr 2025 01:30:09 +0000
asID:                     399204
IP address blocks:        2001:470:407::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:34:ad:30:30:ef:69:d1:42:7b:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 30 02:30:09 2025 GMT
            Not After : Apr 30 01:30:09 2025 GMT
        Subject: CN=c70ccf09-86a7-45e2-bc3a-f3424f36855e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:7c:79:0a:63:f7:56:df:57:81:7b:ee:54:
                    c4:3b:69:17:b1:a2:49:c8:08:85:1e:e7:bf:d7:66:
                    a9:f4:0a:52:17:e0:c4:94:9a:8a:c8:56:73:81:56:
                    d8:3b:53:92:93:09:13:06:9b:58:36:a7:4e:a5:53:
                    50:18:34:d6:fb:24:bf:1e:93:4e:95:14:ae:39:1c:
                    d7:a7:34:40:6b:57:cc:d3:29:b5:b1:6e:51:ba:7f:
                    9b:28:64:4e:55:b0:0f:dd:51:59:4f:50:e7:5f:35:
                    ec:7d:16:0f:a9:1a:95:3c:ee:d0:97:40:09:18:f6:
                    26:71:2d:34:f1:53:c3:f9:f7:59:01:18:64:db:77:
                    53:8a:e4:0a:eb:c9:cf:19:4d:a5:27:07:76:c6:4a:
                    e0:f5:52:96:2c:36:e8:21:61:f7:20:27:e6:36:b1:
                    86:1e:c2:69:a8:3f:bd:a1:5f:8f:80:71:89:dd:a0:
                    64:c1:49:94:d9:28:b2:d4:aa:9e:b6:3e:0c:db:d0:
                    24:d1:a4:3f:91:65:49:87:33:be:a9:69:f5:f3:09:
                    06:f9:09:4c:c1:af:4c:5a:d6:1d:68:ec:4a:0a:9f:
                    8a:f5:23:e6:60:8e:08:88:3b:e2:ea:18:3c:ae:81:
                    ae:90:25:61:47:d6:0a:87:50:81:70:2b:04:50:74:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C0:9C:85:A0:2B:F4:DD:48:9D:8F:8E:52:AC:1C:8B:4E:66:BA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/04237ee3-b626-3a9d-8ab0-e20aa758a5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:407::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:f7:30:d3:10:7d:83:4d:e2:9f:4d:f1:ce:9f:9b:7a:56:
         a8:a3:5c:c2:f3:8b:65:20:d2:f8:d1:ad:0b:cc:cf:fb:ad:e4:
         05:6c:c0:5c:19:ed:38:7a:8e:18:31:96:84:24:4d:ce:09:f5:
         ea:bd:00:e5:37:4f:e6:a0:36:ae:fa:9b:7d:f1:19:64:37:96:
         54:25:20:18:5a:e9:c1:52:82:ba:19:fd:a4:ab:a2:0d:0f:fc:
         43:d2:4e:02:76:d9:ee:6f:4c:2a:18:15:c1:e5:45:2b:7f:b3:
         9b:db:b9:a7:d1:d3:d8:3d:7b:65:59:26:00:58:bb:e6:0c:3d:
         c7:46:37:59:13:cc:0b:e4:ce:94:bc:36:f6:d7:14:22:cd:a1:
         c2:a7:51:f2:f0:52:d2:4b:98:f0:e8:00:b3:37:17:a2:73:21:
         81:e3:e9:e1:89:d5:7d:96:9a:86:9c:0b:ed:8a:2a:33:76:2d:
         c9:95:d5:d4:72:ed:db:75:6b:3d:34:4a:cc:24:be:d7:cd:3c:
         60:a6:96:eb:e1:7b:07:23:93:da:b8:05:97:6b:41:77:f5:2b:
         ae:81:17:5b:ca:6a:b9:8a:f3:61:54:8d:5c:c4:ed:85:54:f5:
         14:6e:44:6b:40:52:04:01:99:57:fe:c2:07:58:44:93:92:b1:
         61:e6:e0:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi2NK0wMO9p0UJ7mgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDEzMDAyMzAwOVoXDTI1MDQzMDAxMzAwOVowLzEtMCsGA1UEAxMk
YzcwY2NmMDktODZhNy00NWUyLWJjM2EtZjM0MjRmMzY4NTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApid8eQpj91bfV4F77lTEO2kXsaJJyAiFHue/
12ap9ApSF+DElJqKyFZzgVbYO1OSkwkTBptYNqdOpVNQGDTW+yS/HpNOlRSuORzX
pzRAa1fM0ym1sW5Run+bKGROVbAP3VFZT1DnXzXsfRYPqRqVPO7Ql0AJGPYmcS00
8VPD+fdZARhk23dTiuQK68nPGU2lJwd2xkrg9VKWLDboIWH3ICfmNrGGHsJpqD+9
oV+PgHGJ3aBkwUmU2Siy1Kqetj4M29Ak0aQ/kWVJhzO+qWn18wkG+QlMwa9MWtYd
aOxKCp+K9SPmYI4IiDvi6hg8roGukCVhR9YKh1CBcCsEUHR/XwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMrAnIWgK/TdSJ2PjlKsHItOZrpAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDQyMzdlZTMtYjYyNi0z
YTlkLThhYjAtZTIwYWE3NThhNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEy69zDTEH2DTeKfTfHOn5t6VqijXMLzi2Ug0vjRrQvMz/ut5AVs
wFwZ7Th6jhgxloQkTc4J9eq9AOU3T+agNq76m33xGWQ3llQlIBha6cFSgroZ/aSr
og0P/EPSTgJ22e5vTCoYFcHlRSt/s5vbuafR09g9e2VZJgBYu+YMPcdGN1kTzAvk
zpS8NvbXFCLNocKnUfLwUtJLmPDoALM3F6JzIYHj6eGJ1X2WmoacC+2KKjN2LcmV
1dRy7dt1az00SswkvtfNPGCmluvhewcjk9q4BZdrQXf1K66BF1vKarmK82FUjVzE
7YVU9RRuRGtAUgQBmVf+wgdYRJOSsWHm4Ek=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:35:25 2025 by rpki-client