Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57799b33-5ffc-34cd-bd8f-596704d8e321.roa
File:                     57799b33-5ffc-34cd-bd8f-596704d8e321.roa (raw, json)
Hash identifier:          /b4F/SginQBEdMuF16MM4w2yurpIDzQ4A/J97HzoQF0=
Subject key identifier:   1F:7F:7E:DE:F4:CF:B9:B1:C9:33:8A:F5:E6:90:66:6A:0E:C2:3E:54
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858498A42E60D030E1AE49B14A440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57799b33-5ffc-34cd-bd8f-596704d8e321.roa
Signing time:             Wed 16 Apr 2025 01:30:10 +0000
ROA not before:           Wed 16 Apr 2025 01:30:10 +0000
ROA not after:            Tue 15 Jul 2025 01:30:10 +0000
asID:                     45557
IP address blocks:        2001:470:3d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:42:e6:0d:03:0e:1a:e4:9b:14:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 16 01:30:10 2025 GMT
            Not After : Jul 15 01:30:10 2025 GMT
        Subject: CN=4ae6c129-4a92-4d70-87e2-ce6ad2bd9e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:14:e5:9e:1c:36:36:99:9b:b6:60:2f:fe:
                    4e:89:74:a3:25:88:2f:37:33:3b:80:ff:30:bd:df:
                    77:81:33:02:bb:65:51:af:12:57:47:99:fc:86:4c:
                    5e:50:a0:7b:ba:55:84:79:6f:7c:d4:dd:c6:57:2e:
                    56:46:a3:29:f0:de:46:23:fb:56:7e:87:82:2f:bf:
                    b4:72:bb:f4:1a:9c:b3:78:4b:be:e9:e6:f8:ef:e9:
                    bb:ef:b0:db:de:8b:34:03:2f:51:46:ed:1f:17:1e:
                    eb:c9:ae:28:c8:0b:b9:a4:90:59:87:6c:68:0f:4e:
                    59:33:15:f9:02:f6:af:fb:00:1c:6b:4b:9f:9c:cb:
                    2f:45:62:e2:ce:3c:eb:28:1b:53:d5:33:73:86:d5:
                    c6:3a:7f:8f:bb:05:46:a9:ba:77:fa:2f:52:15:ba:
                    db:60:22:09:e2:51:b6:bc:aa:da:5b:2d:ea:4e:b1:
                    2e:3f:2b:75:f6:71:40:49:31:c6:62:5a:a5:31:d4:
                    56:06:03:df:2c:0c:5b:5a:a1:e8:a8:08:77:a3:ff:
                    d5:c3:19:fa:7b:2c:07:a1:8f:f4:5c:f8:f6:80:5a:
                    e4:65:32:3e:cf:72:5e:13:11:bb:a4:46:19:5e:ac:
                    69:47:c1:60:a4:68:be:7c:30:e7:d7:cf:2a:c8:2c:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7F:7E:DE:F4:CF:B9:B1:C9:33:8A:F5:E6:90:66:6A:0E:C2:3E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57799b33-5ffc-34cd-bd8f-596704d8e321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:39:e0:98:49:e7:bb:dc:e8:d2:43:8b:d5:ea:52:7d:fa:c6:
         e1:82:ce:8c:83:9c:7b:97:d4:3a:69:9d:ae:c8:7a:14:04:ca:
         c7:26:cb:00:39:90:b5:18:cb:15:81:6d:9c:5c:8d:df:17:22:
         fb:8d:ad:7c:bc:00:6c:00:59:80:34:6a:54:74:e2:bf:ee:6b:
         2f:f4:8b:04:e7:08:09:b2:06:84:7f:65:28:93:a2:8e:df:99:
         ed:7c:8e:5e:a3:63:89:48:4d:eb:91:b4:8a:ad:dc:bb:44:1c:
         58:53:18:0d:13:97:1f:ad:98:6e:77:f6:3c:31:8f:1c:6a:0b:
         3e:f2:61:48:27:93:5d:0d:a3:2f:3c:72:93:ea:20:a1:ab:04:
         78:e2:29:7f:32:61:76:da:3d:b6:95:bf:d1:5a:d9:c7:1a:da:
         e1:4d:c2:27:ec:38:01:c6:9e:39:4a:c5:1b:32:2e:bc:45:30:
         44:3a:d6:c3:57:ca:4f:3d:32:0e:cd:73:33:da:bc:c4:7a:88:
         69:d0:31:29:47:ad:3f:a4:c1:85:bf:50:22:6c:f2:d1:f2:8f:
         dc:42:84:b6:80:9c:5c:a2:f6:db:cd:16:8a:3e:85:65:be:2a:
         b7:3b:99:67:d4:81:35:7a:38:31:72:d5:d1:ac:2f:d1:5b:90:
         18:19:11:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmKQuYNAw4a5JsUpEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDQxNjAxMzAxMFoXDTI1MDcxNTAxMzAxMFowLzEtMCsGA1UEAxMk
NGFlNmMxMjktNGE5Mi00ZDcwLTg3ZTItY2U2YWQyYmQ5ZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIcU5Z4cNjaZm7ZgL/5OiXSjJYgvNzM7gP8w
vd93gTMCu2VRrxJXR5n8hkxeUKB7ulWEeW981N3GVy5WRqMp8N5GI/tWfoeCL7+0
crv0GpyzeEu+6eb47+m777Db3os0Ay9RRu0fFx7rya4oyAu5pJBZh2xoD05ZMxX5
Avav+wAca0ufnMsvRWLizjzrKBtT1TNzhtXGOn+PuwVGqbp3+i9SFbrbYCIJ4lG2
vKraWy3qTrEuPyt19nFASTHGYlqlMdRWBgPfLAxbWqHoqAh3o//Vwxn6eywHoY/0
XPj2gFrkZTI+z3JeExG7pEYZXqxpR8FgpGi+fDDn188qyCwfKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB9/ft70z7mxyTOK9eaQZmoOwj5UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTc3OTliMzMtNWZmYy0z
NGNkLWJkOGYtNTk2NzA0ZDhlMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJs54JhJ57vc6NJDi9XqUn36xuGCzoyDnHuX1Dppna7IehQEyscm
ywA5kLUYyxWBbZxcjd8XIvuNrXy8AGwAWYA0alR04r/uay/0iwTnCAmyBoR/ZSiT
oo7fme18jl6jY4lITeuRtIqt3LtEHFhTGA0Tlx+tmG539jwxjxxqCz7yYUgnk10N
oy88cpPqIKGrBHjiKX8yYXbaPbaVv9Fa2cca2uFNwifsOAHGnjlKxRsyLrxFMEQ6
1sNXyk89Mg7NczPavMR6iGnQMSlHrT+kwYW/UCJs8tHyj9xChLaAnFyi9tvNFoo+
hWW+Krc7mWfUgTV6ODFy1dGsL9FbkBgZESo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:54:56 2025 by rpki-client