Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8ea5a548-5056-332e-a8eb-92fc35fb1988.roa
File:                     8ea5a548-5056-332e-a8eb-92fc35fb1988.roa (raw, json)
Hash identifier:          KnppcQV+SqsJGZ83IOP1Te3++dIb4IQ52cs4byy8cMs=
Subject key identifier:   35:EF:E7:1B:9F:6C:DA:DF:72:5F:96:E1:DF:0A:71:92:7B:01:18:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00557D6D5C2610C3FB280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8ea5a548-5056-332e-a8eb-92fc35fb1988.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     400318
IP address blocks:        2001:470:2fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:05:57:d6:d5:c2:61:0c:3f:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=cbf01c91-cdf7-44b7-b379-6dc537471206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:29:57:08:f8:c8:e2:5f:a9:45:7e:c8:d6:
                    12:5e:61:b8:4a:37:fe:0a:d5:ce:63:a0:e0:73:61:
                    3d:b6:23:72:3a:31:97:5d:5f:89:77:36:d4:07:9d:
                    5a:b2:80:b4:98:b4:0c:70:20:cd:d1:19:18:c8:d7:
                    0b:b3:b6:b0:87:9e:35:64:17:ad:02:50:a4:36:87:
                    56:46:dd:45:2c:10:39:81:68:f8:c4:2e:ad:70:5c:
                    dd:61:58:8c:fd:2f:c0:ab:47:83:a2:a4:3e:4e:d3:
                    8d:d8:f2:80:a4:ef:91:1e:af:05:d3:49:2b:30:ac:
                    a9:6a:92:14:f3:29:68:01:e0:61:e3:37:fd:80:ac:
                    70:e7:86:c4:47:3b:29:8a:02:c1:9c:53:23:cd:17:
                    6e:e1:7a:f3:3b:30:8b:f8:0b:81:be:2c:14:99:02:
                    5b:88:16:ab:f0:3a:c0:29:89:69:ea:9b:c2:67:de:
                    0f:94:98:2d:b6:b0:d3:08:6d:9f:00:f6:02:3f:60:
                    96:90:5f:68:c1:f7:6a:8d:8f:df:6a:f2:31:90:3c:
                    7f:dc:27:d4:ae:eb:19:6e:de:46:a4:53:dd:6b:a6:
                    c4:1c:d0:22:cf:2c:8a:96:1e:af:4c:11:57:0e:db:
                    89:01:86:37:1d:07:f1:4f:3b:9c:a6:02:55:9b:01:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EF:E7:1B:9F:6C:DA:DF:72:5F:96:E1:DF:0A:71:92:7B:01:18:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8ea5a548-5056-332e-a8eb-92fc35fb1988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:5e:98:88:c7:c0:ab:0f:67:1c:17:f5:fa:3e:eb:3d:ae:
         3f:02:0c:48:b8:cd:f2:ec:2f:27:6e:a2:14:59:a7:48:38:e4:
         73:dd:37:87:ef:1d:d9:42:23:dc:c0:b9:d0:bd:49:36:bf:54:
         3e:66:f1:93:09:f4:6c:4f:bf:1f:56:99:84:7a:17:23:65:63:
         71:8b:f5:bf:23:ea:7f:50:9c:57:0f:04:0b:bb:3a:9d:22:9c:
         3f:52:85:95:59:09:d8:68:4e:2a:fd:47:36:4a:ed:55:f2:99:
         cd:6c:71:49:26:ae:ac:31:78:d6:e3:ce:c5:2a:5a:78:72:5d:
         1d:b6:36:72:7f:2e:6f:02:7f:f4:f4:f8:d6:e1:e3:ad:d0:b8:
         97:34:96:dd:86:0a:53:51:c3:94:6f:ff:32:42:0c:94:c8:6a:
         37:97:23:90:c2:ef:2d:ff:cd:38:2d:ae:8d:f3:c8:a0:02:be:
         b3:a5:20:ae:6c:6d:37:47:e3:73:fc:8c:ba:5c:ec:f7:6e:55:
         a4:fe:b9:5c:94:e5:45:e5:a8:d8:88:5f:7c:31:f2:1a:7d:23:
         b8:f4:bd:1a:67:49:d4:d3:7f:43:48:8c:f8:6f:b5:07:99:47:
         5c:05:aa:01:13:ea:fa:92:2b:c9:00:88:b6:9b:5c:25:fc:c9:
         27:7a:8f:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0AVX1tXCYQw/soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
Y2JmMDFjOTEtY2RmNy00NGI3LWIzNzktNmRjNTM3NDcxMjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLkpVwj4yOJfqUV+yNYSXmG4Sjf+CtXOY6Dg
c2E9tiNyOjGXXV+JdzbUB51asoC0mLQMcCDN0RkYyNcLs7awh541ZBetAlCkNodW
Rt1FLBA5gWj4xC6tcFzdYViM/S/Aq0eDoqQ+TtON2PKApO+RHq8F00krMKypapIU
8yloAeBh4zf9gKxw54bERzspigLBnFMjzRdu4XrzOzCL+AuBviwUmQJbiBar8DrA
KYlp6pvCZ94PlJgttrDTCG2fAPYCP2CWkF9owfdqjY/favIxkDx/3CfUrusZbt5G
pFPda6bEHNAizyyKlh6vTBFXDtuJAYY3HQfxTzucpgJVmwG1oQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDXv5xufbNrfcl+W4d8KcZJ7ARizMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGVhNWE1NDgtNTA1Ni0z
MzJlLWE4ZWItOTJmYzM1ZmIxOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAL8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHTNXpiIx8CrD2ccF/X6Pus9rj8CDEi4zfLsLyduohRZp0g45HPd
N4fvHdlCI9zAudC9STa/VD5m8ZMJ9GxPvx9WmYR6FyNlY3GL9b8j6n9QnFcPBAu7
Op0inD9ShZVZCdhoTir9RzZK7VXymc1scUkmrqwxeNbjzsUqWnhyXR22NnJ/Lm8C
f/T0+Nbh463QuJc0lt2GClNRw5Rv/zJCDJTIajeXI5DC7y3/zTgtro3zyKACvrOl
IK5sbTdH43P8jLpc7PduVaT+uVyU5UXlqNiIX3wx8hp9I7j0vRpnSdTTf0NIjPhv
tQeZR1wFqgET6vqSK8kAiLabXCX8ySd6j34=
-----END CERTIFICATE-----
Generated at Mon Feb 17 03:54:33 2025 by rpki-client