Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8bfbff86-eeb2-34c1-ab4c-c10bb32e15fb.roa
File:                     8bfbff86-eeb2-34c1-ab4c-c10bb32e15fb.roa (raw, json)
Hash identifier:          XDrkLuWnmRX4XcWGA3m/uPs0Y5KSxREsqgkadhisR0U=
Subject key identifier:   47:FD:01:3D:6E:17:F0:33:37:BE:00:9B:27:AB:B6:3E:1A:40:DC:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FEACFECA8449321914900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8bfbff86-eeb2-34c1-ab4c-c10bb32e15fb.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     62874
IP address blocks:        2001:470:107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ea:cf:ec:a8:44:93:21:91:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=532418ef-c2b1-431f-be52-49d7314462c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:1e:6a:7f:05:15:d1:36:b9:00:ee:6c:c3:
                    b2:1e:e3:5b:96:92:32:23:e4:64:49:57:49:db:ad:
                    b8:af:76:d8:fb:c1:5a:e5:97:ef:4a:98:ca:e9:d7:
                    b0:6c:94:bd:6d:c0:1d:22:71:f0:b6:3d:03:b9:29:
                    10:c3:d0:58:54:a9:03:08:c8:a7:72:7c:d9:1a:8c:
                    0f:93:b6:90:f2:8c:73:81:fa:80:97:ed:6a:e8:4f:
                    12:16:ec:4d:18:21:39:11:20:3d:ba:fa:1b:36:3a:
                    81:e6:e9:d8:69:bb:df:ff:60:44:b2:94:12:c2:bc:
                    64:7f:35:53:e4:0b:db:e9:a1:9a:da:1a:53:eb:2e:
                    57:48:b3:43:60:93:77:77:95:e5:34:c2:70:a2:2a:
                    84:93:c6:43:25:d2:a1:6f:92:1c:18:d4:98:21:ef:
                    dd:ba:93:11:3c:f9:90:55:d6:df:ab:54:1e:91:72:
                    11:d6:94:29:62:99:0f:a8:ec:cf:23:57:b9:82:1d:
                    7d:c9:5a:98:3c:ad:57:bb:53:94:08:2a:7e:e1:94:
                    9c:77:ea:72:eb:ea:57:4f:1b:af:c1:0e:29:02:0a:
                    8d:60:fd:d2:87:83:bf:a3:83:2b:6a:74:1f:b3:7e:
                    6c:99:46:30:5c:b4:7d:49:8a:95:0b:66:e1:df:c0:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FD:01:3D:6E:17:F0:33:37:BE:00:9B:27:AB:B6:3E:1A:40:DC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8bfbff86-eeb2-34c1-ab4c-c10bb32e15fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:107::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:ce:48:73:f1:47:78:b7:3f:b8:95:cb:e2:47:37:da:97:
         54:be:2a:4e:2b:70:1d:c8:22:d7:d2:a3:ce:f4:31:54:77:d8:
         80:9c:b7:85:65:12:2c:e4:83:8c:72:27:e1:2f:58:52:41:64:
         8c:0f:44:43:fe:02:c2:ad:7c:09:53:45:9b:60:d0:77:a2:fc:
         92:09:50:24:22:12:63:b2:ae:59:3d:36:6a:3a:ec:21:84:fd:
         00:bd:4a:c5:0c:8f:92:69:65:4d:5d:7d:d9:88:5e:ca:e9:24:
         c0:40:b7:c3:a7:68:f6:17:ea:19:27:e6:e7:9c:3e:ee:72:73:
         84:69:3f:91:84:9f:b9:de:fc:72:69:86:4a:c0:a7:a8:69:50:
         68:07:f8:66:ac:85:c3:8a:95:07:ee:66:2b:b2:50:df:1f:7d:
         ed:28:0a:32:a7:96:c1:39:b4:66:8e:73:e5:1f:d1:9b:83:e1:
         bb:ec:83:a8:56:3b:83:e9:a3:07:1e:43:6a:91:86:67:74:79:
         ce:0d:f2:c6:2a:1f:53:70:a5:38:81:4a:c9:aa:4e:76:24:e3:
         e2:60:ef:e9:2e:86:f5:11:28:df:2d:c2:cf:d2:e4:f5:3e:d4:
         62:9f:82:83:06:04:60:58:64:e7:5f:aa:a7:eb:ad:52:06:69:
         4d:88:88:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+rP7KhEkyGRSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
NTMyNDE4ZWYtYzJiMS00MzFmLWJlNTItNDlkNzMxNDQ2MmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lUean8FFdE2uQDubMOyHuNblpIyI+RkSVdJ
2624r3bY+8Fa5ZfvSpjK6dewbJS9bcAdInHwtj0DuSkQw9BYVKkDCMincnzZGowP
k7aQ8oxzgfqAl+1q6E8SFuxNGCE5ESA9uvobNjqB5unYabvf/2BEspQSwrxkfzVT
5Avb6aGa2hpT6y5XSLNDYJN3d5XlNMJwoiqEk8ZDJdKhb5IcGNSYIe/dupMRPPmQ
Vdbfq1QekXIR1pQpYpkPqOzPI1e5gh19yVqYPK1Xu1OUCCp+4ZScd+py6+pXTxuv
wQ4pAgqNYP3Sh4O/o4MranQfs35smUYwXLR9SYqVC2bh38ASdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEf9AT1uF/AzN74Amyertj4aQNwwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGJmYmZmODYtZWViMi0z
NGMxLWFiNGMtYzEwYmIzMmUxNWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6nzkhz8Ud4tz+4lcviRzfal1S+Kk4rcB3IItfSo870MVR32ICc
t4VlEizkg4xyJ+EvWFJBZIwPREP+AsKtfAlTRZtg0Hei/JIJUCQiEmOyrlk9Nmo6
7CGE/QC9SsUMj5JpZU1dfdmIXsrpJMBAt8OnaPYX6hkn5uecPu5yc4RpP5GEn7ne
/HJphkrAp6hpUGgH+GashcOKlQfuZiuyUN8ffe0oCjKnlsE5tGaOc+Uf0ZuD4bvs
g6hWO4PpowceQ2qRhmd0ec4N8sYqH1NwpTiBSsmqTnYk4+Jg7+kuhvURKN8tws/S
5PU+1GKfgoMGBGBYZOdfqqfrrVIGaU2IiOo=
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:00:40 2025 by rpki-client