Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a572edb-9aea-3387-8dc3-6b212f65d77a.roa
File:                     7a572edb-9aea-3387-8dc3-6b212f65d77a.roa (raw, json)
Hash identifier:          fYyqnrLLRnRlSMs7QlruWD+KbPwseJVZR4Cby/Rbffo=
Subject key identifier:   B2:7A:74:75:F6:68:62:C9:A2:4D:AB:88:82:80:E9:9D:EF:6E:5A:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F65BF35727E77F1B883D2300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a572edb-9aea-3387-8dc3-6b212f65d77a.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     12759
IP address blocks:        2001:470:7e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:f3:57:27:e7:7f:1b:88:3d:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=b4b28070-dbea-4d87-8393-917dea75c1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:4d:15:f1:6c:5b:43:aa:79:57:33:3d:07:
                    bb:ce:ed:b6:45:35:53:06:d0:f8:c0:2f:4c:cc:04:
                    53:79:0e:35:0a:10:6f:c1:8d:06:b0:63:ee:70:20:
                    5f:b3:9a:b7:66:e9:05:7e:69:98:95:8f:d2:aa:09:
                    c6:80:7c:ca:8e:0a:43:9e:ea:b9:51:79:69:f5:5b:
                    14:a5:00:37:51:ec:e6:03:79:66:fc:67:11:3e:60:
                    93:05:8d:26:ab:8e:4e:9e:da:e4:51:4f:cf:c0:fd:
                    28:ac:46:2f:eb:0f:6a:af:e6:b2:ea:69:c8:c4:83:
                    82:01:38:19:41:8a:ef:d4:1e:83:b6:5c:fd:9b:9a:
                    9b:9d:4c:b3:da:a7:16:00:fd:79:5a:57:54:9b:83:
                    1a:38:3c:26:d8:23:aa:1d:0a:93:11:4e:c3:f5:87:
                    19:52:38:93:0f:06:59:a2:aa:e0:a1:90:4c:6c:ab:
                    42:ea:a8:f4:5c:1b:f5:ae:ef:4c:68:59:56:65:68:
                    77:54:66:8b:0b:ae:d0:ca:92:8d:8d:ca:aa:37:8e:
                    1f:b0:d4:9b:0f:b3:d9:78:21:83:95:79:cf:b8:38:
                    3c:4f:33:89:75:22:b0:63:21:ba:75:c1:75:36:4c:
                    18:f3:b5:d2:a9:d5:ad:0e:ce:06:69:05:f0:3f:60:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7A:74:75:F6:68:62:C9:A2:4D:AB:88:82:80:E9:9D:EF:6E:5A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a572edb-9aea-3387-8dc3-6b212f65d77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:7e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:69:72:e4:31:69:34:1e:bc:3c:cd:be:c8:62:90:6a:a4:
         4b:bc:a3:55:f7:3c:2a:06:df:bf:50:30:55:77:e1:d2:9c:67:
         7f:79:4b:e2:96:e4:71:ff:c5:ee:48:f9:fa:4d:d4:74:6f:67:
         ca:af:68:c0:b8:5d:65:b9:73:28:a3:bc:d9:38:44:c0:2e:03:
         81:6b:14:f5:56:b5:a1:2c:6d:0f:54:c6:17:cf:26:59:53:a8:
         cb:50:ae:79:b9:06:31:f6:68:18:04:a9:fe:19:de:cb:c5:80:
         53:8c:fe:d7:6f:1f:48:dc:9f:0e:90:42:02:db:18:96:06:a8:
         e8:38:2c:84:d5:04:06:e5:3d:cf:6a:ef:90:12:35:2f:f9:d5:
         45:eb:65:23:cb:53:86:8e:95:67:3a:bd:e4:1f:46:91:8f:19:
         52:bd:44:b2:48:e1:eb:31:71:0b:c8:0b:d1:ba:b3:06:f2:80:
         af:68:c4:fa:73:d5:77:6c:21:50:82:2f:40:2a:81:d2:ff:3b:
         f6:51:10:ad:f4:1b:92:dd:b7:74:87:35:04:40:e5:f1:2a:0e:
         ac:17:51:51:ea:50:3a:c2:50:08:3c:be:2b:3a:c1:63:c2:c2:
         b8:cb:b5:52:d5:f7:2d:9f:f0:94:4b:3c:7b:80:6b:2f:dc:fa:
         b1:ad:82:d0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W/NXJ+d/G4g9IwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
YjRiMjgwNzAtZGJlYS00ZDg3LTgzOTMtOTE3ZGVhNzVjMWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNFNFfFsW0OqeVczPQe7zu22RTVTBtD4wC9M
zARTeQ41ChBvwY0GsGPucCBfs5q3ZukFfmmYlY/SqgnGgHzKjgpDnuq5UXlp9VsU
pQA3UezmA3lm/GcRPmCTBY0mq45OntrkUU/PwP0orEYv6w9qr+ay6mnIxIOCATgZ
QYrv1B6Dtlz9m5qbnUyz2qcWAP15WldUm4MaODwm2COqHQqTEU7D9YcZUjiTDwZZ
oqrgoZBMbKtC6qj0XBv1ru9MaFlWZWh3VGaLC67QypKNjcqqN44fsNSbD7PZeCGD
lXnPuDg8TzOJdSKwYyG6dcF1NkwY87XSqdWtDs4GaQXwP2AbswIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLJ6dHX2aGLJok2riIKA6Z3vblq9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2E1NzJlZGItOWFlYS0z
Mzg3LThkYzMtNmIyMTJmNjVkNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAB+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJKyaXLkMWk0Hrw8zb7IYpBqpEu8o1X3PCoG379QMFV34dKcZ395
S+KW5HH/xe5I+fpN1HRvZ8qvaMC4XWW5cyijvNk4RMAuA4FrFPVWtaEsbQ9UxhfP
JllTqMtQrnm5BjH2aBgEqf4Z3svFgFOM/tdvH0jcnw6QQgLbGJYGqOg4LITVBAbl
Pc9q75ASNS/51UXrZSPLU4aOlWc6veQfRpGPGVK9RLJI4esxcQvIC9G6swbygK9o
xPpz1XdsIVCCL0AqgdL/O/ZREK30G5Ldt3SHNQRA5fEqDqwXUVHqUDrCUAg8vis6
wWPCwrjLtVLV9y2f8JRLPHuAay/c+rGtgtA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:06 2025 by rpki-client