Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d6980ff-ee22-37c6-81d9-cf6d1a425051.roa
File:                     0d6980ff-ee22-37c6-81d9-cf6d1a425051.roa (raw, json)
Hash identifier:          d1WRiT8ogZYvrBmUfcznr7ewBd+VWQJ3zIFeLjfg2bM=
Subject key identifier:   1B:CB:D1:CB:E8:30:2B:C5:9E:37:28:F2:76:B1:B7:7F:41:3B:AE:59
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A07E3AA90960A5A7EA988AE60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d6980ff-ee22-37c6-81d9-cf6d1a425051.roa
Signing time:             Sat 31 May 2025 01:30:08 +0000
ROA not before:           Sat 31 May 2025 01:30:08 +0000
ROA not after:            Fri 29 Aug 2025 01:30:08 +0000
asID:                     59322
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:e3:aa:90:96:0a:5a:7e:a9:88:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 31 01:30:08 2025 GMT
            Not After : Aug 29 01:30:08 2025 GMT
        Subject: CN=f4c3aacb-9d7e-4919-ae90-2731d9ec2b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:b2:76:b3:2c:2e:72:ee:bb:1c:a0:82:e0:
                    bb:42:c7:9a:25:e9:0c:6a:74:80:22:70:a9:c6:71:
                    ce:c5:00:26:03:cd:ad:58:65:84:f9:55:b8:de:28:
                    39:c3:99:be:14:74:ee:3c:06:ca:91:74:51:45:65:
                    64:3b:fc:4e:f6:1a:88:34:01:0b:74:5f:27:fc:3e:
                    5e:eb:8e:23:14:36:f5:2d:53:b9:da:20:1a:59:69:
                    1d:86:25:f2:46:02:4f:d3:68:d3:a5:c9:4c:e7:4e:
                    e6:a0:71:ee:06:db:9c:7f:c1:e8:b9:ae:16:2c:2c:
                    00:be:dc:6e:f8:60:5e:a8:46:ac:bb:f8:5e:77:c7:
                    24:d8:f1:cc:3b:57:b2:34:73:be:c4:70:fb:cb:c8:
                    aa:e7:65:fd:69:bf:9b:45:35:70:4f:ac:4e:f4:c1:
                    5d:c9:20:a9:0f:c8:20:8a:4f:8a:3a:1d:9b:93:1e:
                    b0:65:04:a0:19:06:04:6f:c9:39:25:3f:b1:c8:71:
                    f0:3e:d6:6e:4b:db:0c:47:28:77:37:bc:88:76:8a:
                    0b:4f:a1:90:26:fa:52:db:66:ba:93:2c:76:5c:05:
                    e2:57:8a:6c:11:5c:8e:4a:06:47:d2:84:a3:e5:ac:
                    14:cf:b9:4a:69:67:52:8d:aa:32:3f:29:58:64:db:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:D1:CB:E8:30:2B:C5:9E:37:28:F2:76:B1:B7:7F:41:3B:AE:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d6980ff-ee22-37c6-81d9-cf6d1a425051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:b6:90:7d:64:c7:df:21:29:23:ff:32:a6:1b:eb:17:8f:
         25:b5:97:99:25:30:5f:05:08:82:2b:c0:9d:b9:d8:72:da:82:
         1e:a8:fc:19:07:a8:73:69:32:d5:51:f5:ce:0b:32:b1:27:37:
         c7:5c:0a:38:1f:8e:24:65:f0:53:59:77:03:f4:64:51:94:60:
         40:58:e7:6d:26:10:17:d3:f5:76:b4:b3:0b:8e:f6:b2:ae:f7:
         f5:27:e9:34:b2:e8:8d:82:28:d1:9d:34:ef:43:c6:3a:36:66:
         b5:a6:1f:d4:35:41:5d:a8:9a:f2:ac:a7:ec:f8:7c:06:ef:68:
         d2:1a:5c:45:91:b8:e5:73:84:e3:a8:57:ee:5c:c2:3f:56:ad:
         06:2f:6a:4e:6f:ac:d9:6e:34:39:a4:a6:b3:ce:46:e2:1f:b0:
         9f:2d:82:8e:86:29:a2:9a:6c:45:87:3d:d8:43:38:8e:1a:8c:
         f9:bd:29:c5:2a:5a:79:15:e1:fb:b5:f4:77:76:65:71:7f:8d:
         86:a3:c6:ac:96:60:5f:44:a7:14:a0:30:6e:38:2d:1c:52:a7:
         49:a3:9b:20:53:69:69:65:fd:78:9a:a9:a6:05:fc:6d:8e:0f:
         d8:67:f0:e8:83:3c:5f:14:4e:ef:62:7e:83:00:38:27:a1:fa:
         7c:d8:39:3b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoH46qQlgpafqmIrmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUzMTAxMzAwOFoXDTI1MDgyOTAxMzAwOFowLzEtMCsGA1UEAxMk
ZjRjM2FhY2ItOWQ3ZS00OTE5LWFlOTAtMjczMWQ5ZWMyYjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYmydrMsLnLuuxygguC7QseaJekManSAInCp
xnHOxQAmA82tWGWE+VW43ig5w5m+FHTuPAbKkXRRRWVkO/xO9hqINAELdF8n/D5e
644jFDb1LVO52iAaWWkdhiXyRgJP02jTpclM507moHHuBtucf8Houa4WLCwAvtxu
+GBeqEasu/hed8ck2PHMO1eyNHO+xHD7y8iq52X9ab+bRTVwT6xO9MFdySCpD8gg
ik+KOh2bkx6wZQSgGQYEb8k5JT+xyHHwPtZuS9sMRyh3N7yIdooLT6GQJvpS22a6
kyx2XAXiV4psEVyOSgZH0oSj5awUz7lKaWdSjaoyPylYZNs/hwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBvL0cvoMCvFnjco8naxt39BO65ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGQ2OTgwZmYtZWUyMi0z
N2M2LTgxZDktY2Y2ZDFhNDI1MDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACQLtpB9ZMffISkj/zKmG+sXjyW1l5klMF8FCIIrwJ252HLagh6o
/BkHqHNpMtVR9c4LMrEnN8dcCjgfjiRl8FNZdwP0ZFGUYEBY520mEBfT9Xa0swuO
9rKu9/Un6TSy6I2CKNGdNO9Dxjo2ZrWmH9Q1QV2omvKsp+z4fAbvaNIaXEWRuOVz
hOOoV+5cwj9WrQYvak5vrNluNDmkprPORuIfsJ8tgo6GKaKabEWHPdhDOI4ajPm9
KcUqWnkV4fu19Hd2ZXF/jYajxqyWYF9EpxSgMG44LRxSp0mjmyBTaWll/XiaqaYF
/G2OD9hn8OiDPF8UTu9ifoMAOCeh+nzYOTs=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:42 2025 by rpki-client