Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842dcb74-3ef3-3a84-9fd7-c9c3d4dc8e60.roa
File:                     842dcb74-3ef3-3a84-9fd7-c9c3d4dc8e60.roa (raw, json)
Hash identifier:          8FoE7M8afRAqEa5liubl3Rr52+lBWo6AT2/XJW7N2L8=
Subject key identifier:   73:2C:0E:9A:CF:B5:37:20:55:06:69:4B:67:6E:EF:64:71:F7:A4:CF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE981FD782E2DBC069B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842dcb74-3ef3-3a84-9fd7-c9c3d4dc8e60.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     22168
IP address blocks:        2001:470:2cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e9:81:fd:78:2e:2d:bc:06:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=e09e3d7d-d9d5-4212-adda-f684af4176b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:07:31:11:c7:5c:68:3f:df:e1:d1:d2:d0:
                    c3:50:9d:0d:72:f7:9a:b1:43:a0:df:c1:53:0a:50:
                    c7:34:df:c4:38:26:ff:75:61:5f:78:42:30:85:d2:
                    56:20:f8:97:17:f5:ee:c5:57:a2:71:bc:f7:38:b2:
                    40:4d:a2:47:b8:95:72:2a:bb:4d:7e:09:e2:5f:63:
                    8f:cf:c3:f3:c9:a9:8b:84:65:48:b3:2d:4d:2f:e8:
                    97:48:15:be:b3:5f:2d:09:a5:62:7d:21:34:20:2d:
                    21:50:af:c5:8d:53:56:20:5a:68:ec:00:30:b6:26:
                    de:89:7e:85:f8:dd:f2:9d:53:33:1b:74:4f:c1:7d:
                    ac:ae:6e:bb:37:88:89:a1:83:99:59:ff:c2:c3:63:
                    30:9e:03:37:81:12:6e:98:6b:40:4d:83:f8:e0:23:
                    e9:d0:f4:22:c1:01:06:41:64:cd:eb:ea:a8:fc:ce:
                    e7:06:6a:ad:a6:f4:3f:15:a0:12:b5:de:b6:6a:df:
                    d1:49:13:39:5f:4a:1a:37:33:a0:a4:33:71:4b:e7:
                    15:af:9d:44:d0:18:97:03:fb:8a:a1:74:3c:90:41:
                    0a:36:6b:35:4b:a6:56:0d:45:ef:19:14:bf:cd:f8:
                    b1:70:c5:cc:da:ba:bb:3c:2b:00:e4:db:fb:91:d9:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2C:0E:9A:CF:B5:37:20:55:06:69:4B:67:6E:EF:64:71:F7:A4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842dcb74-3ef3-3a84-9fd7-c9c3d4dc8e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1d:ce:5f:51:54:ea:1c:9a:75:14:ae:c2:f1:76:4c:8d:2e:
         4a:61:76:15:8b:a4:cd:39:b6:bd:7e:d7:8e:25:a2:f9:01:33:
         dc:43:df:b6:26:02:05:5c:fa:76:9d:93:25:1f:be:cb:d8:f5:
         22:95:39:ee:c4:0d:70:1a:93:da:04:11:71:2c:ce:10:e0:07:
         10:4e:8c:9b:b5:a3:a6:f2:48:18:6f:8f:b7:00:ae:cd:9d:6a:
         63:1c:77:f4:68:73:9a:4d:c2:b7:a8:49:2b:07:63:ea:22:54:
         91:98:da:5f:07:8b:ca:5b:8c:14:26:1e:48:8c:4d:f5:b5:8d:
         b9:97:ba:9e:24:27:91:b8:de:2b:b6:ab:86:2c:4c:27:e4:0c:
         71:4a:22:56:ea:1f:01:72:d0:e8:cd:9a:94:35:86:4b:3e:bb:
         95:d0:67:04:d7:90:bb:c1:d4:2d:48:a5:30:4d:7b:5d:90:2a:
         b0:84:d4:6e:dc:91:57:d1:ac:2b:a1:03:20:f3:b5:01:5f:2b:
         91:cf:9f:f7:ed:3a:7c:4a:e3:1e:21:8a:ea:3a:c7:70:00:36:
         71:7e:dd:d8:ba:92:eb:e3:b7:cc:8f:e0:67:c5:93:97:93:d7:
         07:5c:f6:fd:72:8c:63:ff:b4:d8:cb:fc:81:80:05:27:ce:c4:
         82:bf:2b:d6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+mB/XguLbwGmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
ZTA5ZTNkN2QtZDlkNS00MjEyLWFkZGEtZjY4NGFmNDE3NmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3MHMRHHXGg/3+HR0tDDUJ0NcveasUOg38FT
ClDHNN/EOCb/dWFfeEIwhdJWIPiXF/XuxVeicbz3OLJATaJHuJVyKrtNfgniX2OP
z8PzyamLhGVIsy1NL+iXSBW+s18tCaVifSE0IC0hUK/FjVNWIFpo7AAwtibeiX6F
+N3ynVMzG3RPwX2srm67N4iJoYOZWf/Cw2MwngM3gRJumGtATYP44CPp0PQiwQEG
QWTN6+qo/M7nBmqtpvQ/FaAStd62at/RSRM5X0oaNzOgpDNxS+cVr51E0BiXA/uK
oXQ8kEEKNms1S6ZWDUXvGRS/zfixcMXM2rq7PCsA5Nv7kdmr1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHMsDprPtTcgVQZpS2du72Rx96TPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQyZGNiNzQtM2VmMy0z
YTg0LTlmZDctYzljM2Q0ZGM4ZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF8dzl9RVOocmnUUrsLxdkyNLkphdhWLpM05tr1+144lovkBM9xD
37YmAgVc+nadkyUfvsvY9SKVOe7EDXAak9oEEXEszhDgBxBOjJu1o6bySBhvj7cA
rs2damMcd/Roc5pNwreoSSsHY+oiVJGY2l8Hi8pbjBQmHkiMTfW1jbmXup4kJ5G4
3iu2q4YsTCfkDHFKIlbqHwFy0OjNmpQ1hks+u5XQZwTXkLvB1C1IpTBNe12QKrCE
1G7ckVfRrCuhAyDztQFfK5HPn/ftOnxK4x4hiuo6x3AANnF+3di6kuvjt8yP4GfF
k5eT1wdc9v1yjGP/tNjL/IGABSfOxIK/K9Y=
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:58:51 2025 by rpki-client