Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6473d530-2d48-3151-a87c-3506d759a816.roa
File:                     6473d530-2d48-3151-a87c-3506d759a816.roa (raw, json)
Hash identifier:          oSvtzQuactVJra7s9d6OoGehKSE/7ioxnaybTMYudK0=
Subject key identifier:   15:E8:A6:39:FC:6B:E8:7C:6C:2D:E8:02:8E:23:9D:0F:12:A9:BB:AE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E7167C32B5A5027FCE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6473d530-2d48-3151-a87c-3506d759a816.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     3242
IP address blocks:        2001:470:2bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e7:16:7c:32:b5:a5:02:7f:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=3f9cddf0-b373-4789-8522-ab5ae5396ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:7e:e1:22:96:7a:a5:6d:7d:48:f7:0e:17:
                    03:b5:76:a8:fd:f7:bb:de:60:c6:4f:04:9c:62:71:
                    db:28:74:46:a7:d1:ec:37:bd:4b:a8:d2:39:cd:1c:
                    dd:4d:c6:e4:68:eb:5a:3b:60:17:26:f0:5d:fc:49:
                    fc:28:4b:2b:97:80:2b:f2:f1:62:f5:12:5f:f8:0c:
                    b2:84:85:62:12:a1:38:49:66:35:41:f7:15:bd:32:
                    1a:aa:83:53:4d:92:2a:48:66:c7:e9:f2:24:d7:b1:
                    31:c9:c8:25:16:dc:59:7f:d2:b5:6e:ea:84:e4:70:
                    fe:b0:90:33:88:02:79:80:53:8e:c4:74:76:41:3e:
                    ad:2a:6c:dc:64:5e:82:dd:22:45:14:71:d1:51:46:
                    02:6b:f5:14:7c:0d:08:11:4b:ce:3e:99:9e:70:04:
                    b3:f8:3d:ad:d6:37:d3:0e:76:d2:8b:a5:65:04:4b:
                    23:7f:3d:8b:7e:5c:79:af:23:2a:03:35:1a:5a:1c:
                    b9:d1:f4:fe:82:fe:73:19:2e:e2:6b:3d:41:7d:8c:
                    e0:f3:87:5c:e4:7b:da:59:8b:1f:c3:e6:ba:75:3e:
                    94:d0:c8:1a:51:96:5f:06:5c:c4:8e:75:08:14:ed:
                    d3:60:3f:de:a4:d7:2e:f9:a1:cc:c8:6c:71:49:ed:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E8:A6:39:FC:6B:E8:7C:6C:2D:E8:02:8E:23:9D:0F:12:A9:BB:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6473d530-2d48-3151-a87c-3506d759a816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:68:79:13:6d:55:94:23:16:7d:a7:9d:a5:66:ae:f0:74:96:
         e6:f6:dd:13:41:e8:e1:c4:76:ac:dd:c2:24:f9:ea:f7:f1:fe:
         5a:a4:c5:95:b9:9f:eb:50:5f:c2:d2:3a:ad:81:48:ff:62:3d:
         eb:17:49:45:18:3c:33:9d:fd:c1:06:2a:64:f5:32:8f:1d:bb:
         0d:68:e0:f0:6a:b0:eb:46:cc:12:31:4c:2a:97:83:51:df:50:
         d1:32:d3:df:06:d6:45:f7:3d:60:d4:5a:18:77:08:7a:d0:18:
         c0:4a:79:af:e4:91:d2:dc:3f:66:d4:35:a8:cf:a4:dc:1a:07:
         a2:9e:61:c0:05:26:07:14:4c:64:f4:39:1b:1f:1b:b1:ec:62:
         fc:18:48:0f:d3:2b:10:7d:64:25:c6:4a:c6:d2:09:0b:3c:b1:
         30:73:18:a7:83:b5:c8:ec:27:b2:6a:98:55:50:8b:82:64:46:
         00:6f:9c:d4:da:da:1d:8a:c2:59:20:7b:b1:d1:99:e6:7b:40:
         0a:ba:a9:b5:a4:f9:df:32:cd:df:dc:4f:dd:9e:2b:f1:ba:b9:
         73:87:fa:cf:0a:00:79:e5:3d:2d:60:ca:ab:f0:3d:84:dc:b8:
         0f:eb:b4:bb:41:a3:97:d7:43:e6:9d:bd:93:8a:0d:45:71:f6:
         80:af:46:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JucWfDK1pQJ/zgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
M2Y5Y2RkZjAtYjM3My00Nzg5LTg1MjItYWI1YWU1Mzk2ZWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnN+4SKWeqVtfUj3DhcDtXao/fe73mDGTwSc
YnHbKHRGp9HsN71LqNI5zRzdTcbkaOtaO2AXJvBd/En8KEsrl4Ar8vFi9RJf+Ayy
hIViEqE4SWY1QfcVvTIaqoNTTZIqSGbH6fIk17ExycglFtxZf9K1buqE5HD+sJAz
iAJ5gFOOxHR2QT6tKmzcZF6C3SJFFHHRUUYCa/UUfA0IEUvOPpmecASz+D2t1jfT
DnbSi6VlBEsjfz2Lflx5ryMqAzUaWhy50fT+gv5zGS7iaz1BfYzg84dc5HvaWYsf
w+a6dT6U0MgaUZZfBlzEjnUIFO3TYD/epNcu+aHMyGxxSe0FrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBXopjn8a+h8bC3oAo4jnQ8SqbuuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjQ3M2Q1MzAtMmQ0OC0z
MTUxLWE4N2MtMzUwNmQ3NTlhODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJpoeRNtVZQjFn2nnaVmrvB0lub23RNB6OHEdqzdwiT56vfx/lqk
xZW5n+tQX8LSOq2BSP9iPesXSUUYPDOd/cEGKmT1Mo8duw1o4PBqsOtGzBIxTCqX
g1HfUNEy098G1kX3PWDUWhh3CHrQGMBKea/kkdLcP2bUNajPpNwaB6KeYcAFJgcU
TGT0ORsfG7HsYvwYSA/TKxB9ZCXGSsbSCQs8sTBzGKeDtcjsJ7JqmFVQi4JkRgBv
nNTa2h2Kwlkge7HRmeZ7QAq6qbWk+d8yzd/cT92eK/G6uXOH+s8KAHnlPS1gyqvw
PYTcuA/rtLtBo5fXQ+advZOKDUVx9oCvRhU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:50 2025 by rpki-client