Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ec390b-186d-3e56-9bef-b2d0d4ff5941.roa
File:                     76ec390b-186d-3e56-9bef-b2d0d4ff5941.roa (raw, json)
Hash identifier:          q6qs3GNaOg1OYBaF7bjW+muDO0DJpUQsYRJiMDqbvDo=
Subject key identifier:   4E:AA:04:58:FC:91:3D:1D:FC:E4:2C:4D:5C:41:78:AA:3F:45:E5:2B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926C213180DFF099CEAD4C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ec390b-186d-3e56-9bef-b2d0d4ff5941.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     22115
IP address blocks:        2001:470:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:c2:13:18:0d:ff:09:9c:ea:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=f46a1402-1ea6-45e1-939e-4dc64823bb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:f6:32:d2:13:f3:55:29:fe:48:30:72:10:
                    32:e8:32:37:6a:f6:9c:93:16:3b:70:0c:7a:d2:04:
                    5e:3b:bf:29:6e:14:95:37:82:98:31:06:4f:5c:52:
                    bd:47:a6:8e:bc:69:31:56:1c:40:47:bd:f7:c2:1b:
                    79:e7:9a:4e:fd:86:94:05:e1:eb:e0:72:ca:b5:f3:
                    45:fa:2c:c4:3b:5e:32:ce:1c:bd:c6:01:78:ea:3c:
                    cd:89:1c:f3:ba:e9:a8:5d:3c:e0:25:5d:17:ee:15:
                    1b:b1:70:66:f8:b7:66:8a:25:19:48:7a:0a:c2:62:
                    70:b8:9b:7d:b6:cb:f1:cc:a5:7a:01:fe:e5:ef:a2:
                    37:60:5d:66:f6:41:6e:66:df:42:c2:9f:9b:ac:8f:
                    18:a5:43:63:18:fe:cf:20:fb:a9:68:4d:d0:e5:e7:
                    29:9c:06:e3:29:0b:0b:0c:8f:24:ef:77:b5:cb:e0:
                    2b:4c:2b:6a:6b:ee:72:bc:4d:a4:98:f2:49:27:72:
                    dc:90:73:93:3b:b9:b7:c7:65:c8:1e:42:f8:73:bb:
                    9d:03:ec:08:90:a4:26:e7:c1:18:21:0c:70:14:2e:
                    85:cb:86:53:aa:7c:43:03:83:c5:64:10:95:c0:cb:
                    1d:83:66:78:74:d2:4d:4b:e2:37:08:29:4d:04:79:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AA:04:58:FC:91:3D:1D:FC:E4:2C:4D:5C:41:78:AA:3F:45:E5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ec390b-186d-3e56-9bef-b2d0d4ff5941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e4:98:62:4c:54:48:90:31:5c:b7:a5:6f:9e:04:3f:f5:36:
         e8:75:0a:ec:73:67:16:56:b9:8f:6a:5e:e8:bf:f7:fe:ea:bb:
         f8:4e:e1:eb:7d:93:71:bb:e8:ef:44:bc:de:04:b0:d1:ba:03:
         29:fd:d1:cb:b6:35:dd:d4:e6:3a:69:52:08:16:ac:92:4f:d1:
         da:d1:79:b5:00:8a:60:be:b1:fd:c8:b0:7f:d9:43:09:96:72:
         b5:63:78:ca:ef:ab:eb:32:73:06:72:69:d3:e4:b4:10:22:7e:
         d9:ff:c4:62:5d:7c:6c:b3:ce:03:aa:65:44:fb:ee:68:45:cd:
         6b:fd:45:78:e1:cd:74:83:65:92:8e:b8:9a:dd:45:68:15:50:
         41:52:f0:9b:a9:66:38:52:fc:57:28:b1:36:8b:5e:36:eb:8f:
         19:0d:18:49:aa:04:d6:ba:b1:90:8a:3e:22:92:98:28:36:64:
         85:ca:29:8b:e3:77:98:a0:68:5e:f8:7a:4b:8e:b4:d9:f8:9b:
         2f:cb:9f:dc:da:fc:03:3b:3f:c4:71:fe:89:6a:45:68:ce:63:
         8a:51:02:a1:73:97:68:b3:63:e2:95:12:39:af:7e:72:b7:6e:
         7a:3e:22:76:0e:e0:77:70:3d:64:28:2c:7c:05:94:14:59:e5:
         4d:3c:5f:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JsITGA3/CZzq1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjQ2YTE0MDItMWVhNi00NWUxLTkzOWUtNGRjNjQ4MjNiYjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuP2MtIT81Up/kgwchAy6DI3avackxY7cAx6
0gReO78pbhSVN4KYMQZPXFK9R6aOvGkxVhxAR733wht555pO/YaUBeHr4HLKtfNF
+izEO14yzhy9xgF46jzNiRzzuumoXTzgJV0X7hUbsXBm+LdmiiUZSHoKwmJwuJt9
tsvxzKV6Af7l76I3YF1m9kFuZt9Cwp+brI8YpUNjGP7PIPupaE3Q5ecpnAbjKQsL
DI8k73e1y+ArTCtqa+5yvE2kmPJJJ3LckHOTO7m3x2XIHkL4c7udA+wIkKQm58EY
IQxwFC6Fy4ZTqnxDA4PFZBCVwMsdg2Z4dNJNS+I3CClNBHlCBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE6qBFj8kT0d/OQsTVxBeKo/ReUrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzZlYzM5MGItMTg2ZC0z
ZTU2LTliZWYtYjJkMGQ0ZmY1OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD7kmGJMVEiQMVy3pW+eBD/1Nuh1CuxzZxZWuY9qXui/9/7qu/hO
4et9k3G76O9EvN4EsNG6Ayn90cu2Nd3U5jppUggWrJJP0drRebUAimC+sf3IsH/Z
QwmWcrVjeMrvq+sycwZyadPktBAiftn/xGJdfGyzzgOqZUT77mhFzWv9RXjhzXSD
ZZKOuJrdRWgVUEFS8JupZjhS/FcosTaLXjbrjxkNGEmqBNa6sZCKPiKSmCg2ZIXK
KYvjd5igaF74ekuOtNn4my/Ln9za/AM7P8Rx/olqRWjOY4pRAqFzl2izY+KVEjmv
fnK3bno+InYO4HdwPWQoLHwFlBRZ5U08X34=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:46 2025 by rpki-client