Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/803d9352-bfd4-3e9e-9f55-964cc9ddef06.roa
File:                     803d9352-bfd4-3e9e-9f55-964cc9ddef06.roa (raw, json)
Hash identifier:          /oxJM0XFGq8t0QsG1ra/HrXfQH/C7qnH+zhoOsE8OSA=
Subject key identifier:   12:AC:97:10:3B:85:3D:5D:63:1F:5B:F5:B6:F2:E6:95:E5:00:64:A6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858491AB54E6083C3A5C6DDB04DC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/803d9352-bfd4-3e9e-9f55-964cc9ddef06.roa
Signing time:             Fri 07 Mar 2025 02:30:09 +0000
ROA not before:           Fri 07 Mar 2025 02:30:09 +0000
ROA not after:            Thu 05 Jun 2025 01:30:09 +0000
asID:                     264409
IP address blocks:        2001:470:112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:b5:4e:60:83:c3:a5:c6:dd:b0:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  7 02:30:09 2025 GMT
            Not After : Jun  5 01:30:09 2025 GMT
        Subject: CN=0745d0f8-3420-49cf-af99-8e32f0263e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:09:91:4e:d9:5b:e0:c6:ca:45:b4:98:9f:
                    62:58:3d:b7:3a:b8:07:69:7e:31:de:4b:f3:39:71:
                    c2:a4:20:d4:34:96:85:cc:31:26:c4:3d:43:6a:67:
                    2d:29:4d:da:9f:5a:dd:b3:ed:c8:0a:d5:42:94:75:
                    8a:ae:a1:8e:9e:99:ee:51:88:ef:64:ab:c5:82:58:
                    45:f8:22:14:4e:7f:03:08:07:89:98:dd:cc:71:89:
                    b1:c5:ef:ea:5a:81:ed:51:f6:d4:80:5d:48:54:7a:
                    82:9b:bf:ce:58:f8:69:8a:f8:4e:fa:3b:d5:fd:3b:
                    cd:e2:ea:2f:4b:7b:73:1f:09:9d:c5:e9:2b:da:48:
                    d5:79:0b:1b:89:26:e3:1a:b6:34:05:9c:99:a3:b3:
                    f3:ab:95:e2:b6:10:8b:1e:24:f3:87:33:02:65:dc:
                    72:c7:e6:c0:d3:90:ad:fd:13:b1:2f:93:2c:7a:06:
                    21:7d:17:89:be:f9:b6:8a:6b:42:96:3f:c6:cf:4e:
                    a0:45:b2:05:77:f0:f7:12:d9:9a:94:af:46:3b:75:
                    24:c4:c4:e4:38:22:e2:56:0c:66:a7:de:86:da:d4:
                    94:61:b1:ce:74:66:4b:fa:4e:08:6e:45:89:83:cc:
                    87:09:21:b7:a2:48:33:df:24:5e:4d:87:8b:b4:91:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AC:97:10:3B:85:3D:5D:63:1F:5B:F5:B6:F2:E6:95:E5:00:64:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/803d9352-bfd4-3e9e-9f55-964cc9ddef06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:56:b8:44:1f:c7:34:78:4a:9e:b4:31:3b:99:79:4c:92:5f:
         97:b0:8c:7e:a8:be:c0:05:85:7b:c9:92:10:55:07:fc:69:97:
         03:08:d5:62:5f:3d:b2:72:d2:b3:89:67:6c:49:16:be:2b:5f:
         10:7f:ae:a1:09:42:0f:9d:bb:fb:0d:0f:41:19:59:56:91:34:
         db:b9:54:f9:54:a7:df:3b:09:fa:b9:f8:ba:f6:30:e3:a2:e7:
         87:6c:8c:11:56:ed:f2:ba:57:0f:5d:61:3a:48:dc:a6:86:91:
         81:24:40:26:bc:2d:9d:d7:c2:24:73:29:e0:16:78:15:27:40:
         54:be:14:c7:b4:70:85:03:a4:84:4d:e2:87:07:32:7b:0d:a4:
         6e:f3:5b:32:47:dc:f8:c2:17:0c:cf:6d:97:e4:e4:6d:fb:55:
         79:de:75:af:8f:3e:85:a5:7b:ba:0d:00:79:0b:81:e6:dd:8c:
         b0:ad:86:ed:47:c3:52:4c:74:8d:b1:5d:43:ef:dc:ef:43:7a:
         86:e5:3f:f6:5c:0b:cc:ca:3a:dd:b9:a9:87:06:44:5a:c4:49:
         dd:25:f9:1c:62:37:38:92:56:ee:40:b1:bb:07:14:21:18:ee:
         05:78:72:a6:dd:d3:ea:d0:18:f5:90:7c:79:86:db:22:68:a5:
         c9:c4:6b:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkatU5gg8Olxt2wTcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMwNzAyMzAwOVoXDTI1MDYwNTAxMzAwOVowLzEtMCsGA1UEAxMk
MDc0NWQwZjgtMzQyMC00OWNmLWFmOTktOGUzMmYwMjYzZTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIMJkU7ZW+DGykW0mJ9iWD23OrgHaX4x3kvz
OXHCpCDUNJaFzDEmxD1DamctKU3an1rds+3ICtVClHWKrqGOnpnuUYjvZKvFglhF
+CIUTn8DCAeJmN3McYmxxe/qWoHtUfbUgF1IVHqCm7/OWPhpivhO+jvV/TvN4uov
S3tzHwmdxekr2kjVeQsbiSbjGrY0BZyZo7Pzq5XithCLHiTzhzMCZdxyx+bA05Ct
/ROxL5MsegYhfReJvvm2imtClj/Gz06gRbIFd/D3EtmalK9GO3UkxMTkOCLiVgxm
p96G2tSUYbHOdGZL+k4IbkWJg8yHCSG3okgz3yReTYeLtJHckQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBKslxA7hT1dYx9b9bby5pXlAGSmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODAzZDkzNTItYmZkNC0z
ZTllLTlmNTUtOTY0Y2M5ZGRlZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAES
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFVWuEQfxzR4Sp60MTuZeUySX5ewjH6ovsAFhXvJkhBVB/xplwMI
1WJfPbJy0rOJZ2xJFr4rXxB/rqEJQg+du/sND0EZWVaRNNu5VPlUp987Cfq5+Lr2
MOOi54dsjBFW7fK6Vw9dYTpI3KaGkYEkQCa8LZ3XwiRzKeAWeBUnQFS+FMe0cIUD
pIRN4ocHMnsNpG7zWzJH3PjCFwzPbZfk5G37VXneda+PPoWle7oNAHkLgebdjLCt
hu1Hw1JMdI2xXUPv3O9DeoblP/ZcC8zKOt25qYcGRFrESd0l+RxiNziSVu5AsbsH
FCEY7gV4cqbd0+rQGPWQfHmG2yJopcnEa1A=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:44 2025 by rpki-client