Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8a2fd88-dfbb-3a50-b278-29a7c9f94977.roa
File:                     a8a2fd88-dfbb-3a50-b278-29a7c9f94977.roa (raw, json)
Hash identifier:          GOuMLeIPMHXNzsjsD0ZQ8IWX/yZ9R7NJi83r62wJIsM=
Subject key identifier:   11:DE:54:4A:22:8B:E9:FC:9D:2E:BA:79:B5:12:44:85:92:1C:E1:9F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848DEA132D1677242748FED3D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8a2fd88-dfbb-3a50-b278-29a7c9f94977.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     58955
IP address blocks:        2001:470:37f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:32:d1:67:72:42:74:8f:ed:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=c520a07c-a592-47b9-8f0a-dc7df39c3f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:44:dc:c3:f5:68:2a:85:d6:98:f4:23:2d:ca:
                    95:82:2d:2f:8f:8d:fc:60:9b:b1:bc:07:a8:65:99:
                    d6:58:bc:c7:3a:08:b7:3d:63:f9:74:14:55:cf:9a:
                    c4:ce:ec:6d:a2:a9:be:b9:e3:a8:98:7a:0f:36:16:
                    59:8b:2a:1b:59:a3:a2:55:6d:c3:64:de:e1:f9:1f:
                    ba:c5:63:62:5c:e9:53:fa:34:44:0d:0c:a7:85:35:
                    6a:0a:4d:b7:20:64:8d:58:1d:85:78:2d:90:f3:79:
                    2f:d9:7b:fd:ab:d3:8b:9d:e8:0e:4d:74:13:89:6e:
                    9d:d0:3e:5c:03:66:71:24:d6:05:23:2b:80:8b:85:
                    c3:f4:d9:29:48:4b:c6:31:ac:39:65:63:4f:87:47:
                    e8:1a:4e:5a:b1:89:d6:6f:3b:77:9a:7d:68:10:54:
                    b1:87:e0:43:78:8d:23:9f:df:ba:b6:61:09:d8:7d:
                    83:57:e9:4f:75:43:2a:b1:98:9d:e3:cf:43:fb:28:
                    02:15:6d:93:df:d7:71:44:a0:f8:23:b6:bc:d5:b6:
                    d0:28:94:f9:e8:1f:e6:6e:1b:33:46:42:87:71:cf:
                    0e:5b:b4:09:ce:74:9d:77:18:d7:c0:8a:95:ec:db:
                    85:97:b0:63:89:55:2a:93:8b:1a:74:28:cb:cb:87:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:54:4A:22:8B:E9:FC:9D:2E:BA:79:B5:12:44:85:92:1C:E1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8a2fd88-dfbb-3a50-b278-29a7c9f94977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:db:89:0f:83:28:63:28:92:6a:32:7b:c4:ed:22:30:7b:24:
         e1:ad:bd:3f:63:41:f6:f6:19:49:e0:b3:50:d6:f0:10:39:1d:
         fd:cb:a6:8b:94:7d:f5:47:9a:7c:94:e4:75:24:30:1a:fc:8d:
         d6:d7:3c:54:e8:cb:1c:9e:74:ec:ef:89:f3:a6:0b:5b:21:ab:
         11:e1:b6:2d:74:f0:17:56:86:38:2c:e4:da:d1:19:61:14:7c:
         e3:dd:38:a9:3a:5d:40:42:3a:ea:ab:d2:d6:f7:38:9f:35:7d:
         a1:c8:79:ac:05:b9:49:d2:34:86:b9:02:d2:bb:c4:ba:b9:09:
         66:37:e9:a7:cc:7d:08:73:ea:4f:1a:20:07:bf:d0:2e:8e:12:
         33:33:9a:c9:30:ac:63:4c:2a:b4:bd:a9:39:a7:8d:96:2b:b3:
         98:60:3e:57:ee:f1:da:57:84:3d:3d:78:4e:70:56:8b:c3:56:
         1f:8f:0e:c2:b3:c2:09:ef:78:6c:d0:52:be:02:5a:bb:b0:ed:
         97:c4:2e:27:1b:2d:6b:93:2f:fd:c9:43:47:e7:1d:d0:1e:6b:
         07:eb:9c:1a:0b:d1:11:dc:9c:d1:c0:d5:1b:20:96:98:fe:e7:
         f8:58:81:e9:1f:e8:9e:82:ae:30:38:00:2f:d4:2d:b1:08:fd:
         6b:7f:86:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjeoTLRZ3JCdI/tPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
YzUyMGEwN2MtYTU5Mi00N2I5LThmMGEtZGM3ZGYzOWMzZjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UTcw/VoKoXWmPQjLcqVgi0vj438YJuxvAeo
ZZnWWLzHOgi3PWP5dBRVz5rEzuxtoqm+ueOomHoPNhZZiyobWaOiVW3DZN7h+R+6
xWNiXOlT+jREDQynhTVqCk23IGSNWB2FeC2Q83kv2Xv9q9OLnegOTXQTiW6d0D5c
A2ZxJNYFIyuAi4XD9NkpSEvGMaw5ZWNPh0foGk5asYnWbzt3mn1oEFSxh+BDeI0j
n9+6tmEJ2H2DV+lPdUMqsZid489D+ygCFW2T39dxRKD4I7a81bbQKJT56B/mbhsz
RkKHcc8OW7QJznSddxjXwIqV7NuFl7BjiVUqk4sadCjLy4e8pwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBHeVEoii+n8nS66ebUSRIWSHOGfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYThhMmZkODgtZGZiYi0z
YTUwLWIyNzgtMjlhN2M5Zjk0OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJnbiQ+DKGMokmoye8TtIjB7JOGtvT9jQfb2GUngs1DW8BA5Hf3L
pouUffVHmnyU5HUkMBr8jdbXPFToyxyedOzvifOmC1shqxHhti108BdWhjgs5NrR
GWEUfOPdOKk6XUBCOuqr0tb3OJ81faHIeawFuUnSNIa5AtK7xLq5CWY36afMfQhz
6k8aIAe/0C6OEjMzmskwrGNMKrS9qTmnjZYrs5hgPlfu8dpXhD09eE5wVovDVh+P
DsKzwgnveGzQUr4CWruw7ZfELicbLWuTL/3JQ0fnHdAeawfrnBoL0RHcnNHA1Rsg
lpj+5/hYgekf6J6CrjA4AC/ULbEI/Wt/hsM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:48:40 2025 by rpki-client