Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83c8a5b4-8ae2-3c5e-ba54-fbf0fe477f61.roa
File:                     83c8a5b4-8ae2-3c5e-ba54-fbf0fe477f61.roa (raw, json)
Hash identifier:          hh0RpzyyAOCAMSXZGSFKtLGFNQE4Gv8S6Iv4z19d9c0=
Subject key identifier:   4A:AE:D3:48:B7:98:10:49:AC:F7:8C:FD:89:3B:E2:76:8C:F1:C0:5C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926B800D91409F6B733C6E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83c8a5b4-8ae2-3c5e-ba54-fbf0fe477f61.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     17197
IP address blocks:        2001:470:9a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:b8:00:d9:14:09:f6:b7:33:c6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=4824917a-f1c8-45c2-ba98-59986fd82a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:25:4f:bc:1d:55:3d:bb:78:4c:f6:fc:43:
                    e4:3d:87:0a:11:cd:e3:a6:c4:3e:98:1f:f3:c8:84:
                    3d:d6:86:a9:5e:43:c7:50:2b:57:42:a9:c6:69:fb:
                    61:81:c6:41:d8:73:89:19:16:fc:ac:ec:a7:8e:bc:
                    86:de:5a:2a:da:7c:40:df:e3:d8:d9:63:f6:19:b3:
                    98:d1:82:b4:48:1f:53:04:c0:09:3f:29:d5:3a:64:
                    92:2a:15:e7:50:25:26:36:40:ad:66:3c:88:c4:bb:
                    e7:a6:b1:ae:61:8e:6f:97:0b:60:8c:f0:07:64:b0:
                    66:54:28:25:d6:bb:9b:e5:ad:d1:db:f8:54:b5:d3:
                    c6:ad:3c:17:9e:d6:35:21:18:fb:2a:f0:9b:08:84:
                    e7:f1:ff:e0:ac:ea:e4:06:25:ac:8a:86:9c:a1:81:
                    03:25:ac:56:59:26:c0:1b:77:e3:b2:6b:44:f4:fe:
                    b6:ba:31:e0:ac:3c:ac:a7:8a:39:85:ae:9b:ca:22:
                    79:97:4b:66:12:e9:77:52:5e:6d:ea:8f:d5:e6:86:
                    8a:21:f9:d8:d1:14:5c:f7:ba:c3:2b:1a:91:15:ec:
                    ea:87:95:ba:22:50:98:47:13:d0:f5:25:a9:dd:0b:
                    a3:38:8a:c1:65:98:d7:1f:10:1e:bd:5d:ac:3a:a4:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AE:D3:48:B7:98:10:49:AC:F7:8C:FD:89:3B:E2:76:8C:F1:C0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83c8a5b4-8ae2-3c5e-ba54-fbf0fe477f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:9a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:ec:b9:32:84:a8:46:82:dd:c5:2b:11:05:b7:1b:e2:b0:
         57:cd:ca:8c:0c:ae:04:f1:3c:b8:4b:e1:02:59:ce:54:07:11:
         e7:4f:f5:25:53:d1:02:9b:76:4f:23:fb:4a:39:0d:cb:92:4b:
         24:b3:b0:45:50:4b:3a:b7:5b:6e:8f:d7:fd:1f:4c:46:99:ba:
         42:58:33:98:e0:43:42:de:5f:40:f9:79:7c:c9:2b:6f:2e:28:
         8e:be:14:78:b6:75:86:bc:35:2a:71:7c:73:23:03:fd:a3:72:
         25:19:dc:f7:f7:bf:ab:14:e3:b2:b1:71:68:57:ef:ef:28:39:
         21:1d:f6:bd:7f:21:bd:39:2c:4a:2f:b6:c0:7c:78:06:8d:3d:
         d8:a0:79:76:84:3d:ef:00:1d:fa:36:1f:2b:ed:ce:b1:29:a9:
         2f:b7:bf:f9:3c:f1:8e:b9:af:ce:b3:fc:01:cf:eb:af:0e:8f:
         6c:8a:81:8c:21:6f:78:b7:50:12:73:14:3f:e6:50:a1:e0:3b:
         c9:78:6c:9b:5a:a4:03:04:b9:f9:d1:6f:ba:cc:5a:6b:ba:82:
         50:32:d8:f4:82:de:de:6e:f3:e0:21:a3:e8:0d:cc:8b:f9:7e:
         ba:9f:b5:9a:de:a2:5b:9c:81:bb:9d:9f:6a:32:33:04:8e:f0:
         39:c5:2c:89
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JrgA2RQJ9rczxuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDgyNDkxN2EtZjFjOC00NWMyLWJhOTgtNTk5ODZmZDgyYTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwklT7wdVT27eEz2/EPkPYcKEc3jpsQ+mB/z
yIQ91oapXkPHUCtXQqnGafthgcZB2HOJGRb8rOynjryG3loq2nxA3+PY2WP2GbOY
0YK0SB9TBMAJPynVOmSSKhXnUCUmNkCtZjyIxLvnprGuYY5vlwtgjPAHZLBmVCgl
1rub5a3R2/hUtdPGrTwXntY1IRj7KvCbCITn8f/grOrkBiWsioacoYEDJaxWWSbA
G3fjsmtE9P62ujHgrDysp4o5ha6byiJ5l0tmEul3Ul5t6o/V5oaKIfnY0RRc97rD
KxqRFezqh5W6IlCYRxPQ9SWp3QujOIrBZZjXHxAevV2sOqQgbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEqu00i3mBBJrPeM/Yk74naM8cBcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODNjOGE1YjQtOGFlMi0z
YzVlLWJhNTQtZmJmMGZlNDc3ZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABxj7LkyhKhGgt3FKxEFtxvisFfNyowMrgTxPLhL4QJZzlQHEedP
9SVT0QKbdk8j+0o5DcuSSySzsEVQSzq3W26P1/0fTEaZukJYM5jgQ0LeX0D5eXzJ
K28uKI6+FHi2dYa8NSpxfHMjA/2jciUZ3Pf3v6sU47KxcWhX7+8oOSEd9r1/Ib05
LEovtsB8eAaNPdigeXaEPe8AHfo2HyvtzrEpqS+3v/k88Y65r86z/AHP668Oj2yK
gYwhb3i3UBJzFD/mUKHgO8l4bJtapAMEufnRb7rMWmu6glAy2PSC3t5u8+Aho+gN
zIv5frqftZreolucgbudn2oyMwSO8DnFLIk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:38 2025 by rpki-client