Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b488382e-a393-3d24-9466-74aa93ea650a.roa
File:                     b488382e-a393-3d24-9466-74aa93ea650a.roa (raw, json)
Hash identifier:          XzhqYfdVN3rBIFVPJ0eO40SQI+lLmdD3F/R8GrJ8O9o=
Subject key identifier:   04:68:E3:5D:C2:4A:CE:1C:A0:F1:15:32:A1:94:B3:BD:E6:2C:CE:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848A2A9EDADA1019FC69A14BB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b488382e-a393-3d24-9466-74aa93ea650a.roa
Signing time:             Thu 23 Jan 2025 02:30:13 +0000
ROA not before:           Thu 23 Jan 2025 02:30:13 +0000
ROA not after:            Wed 23 Apr 2025 01:30:13 +0000
asID:                     18248
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:a9:ed:ad:a1:01:9f:c6:9a:14:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 23 02:30:13 2025 GMT
            Not After : Apr 23 01:30:13 2025 GMT
        Subject: CN=017cb9e2-40ea-45e4-b9dd-e83398686035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:a2:2c:9c:40:4b:cc:f3:7b:eb:bf:ee:2f:
                    1d:a9:fd:45:57:3e:71:29:93:7e:b8:2c:de:0d:13:
                    fe:c7:2e:7c:24:1e:25:af:fa:37:84:3f:1f:a3:ed:
                    99:13:e7:67:c3:54:a1:4b:83:48:11:82:74:b0:c3:
                    68:3a:fb:90:71:3b:37:dd:66:0d:eb:18:d5:73:4f:
                    b0:01:1f:db:5e:24:df:cb:c1:11:f3:e3:77:9a:06:
                    8f:8c:c2:71:81:bd:03:a9:bc:0f:a9:80:5c:a5:ac:
                    fd:45:79:6d:5f:74:04:76:c8:b6:58:6d:df:a9:80:
                    71:ea:42:10:da:77:f5:5b:d8:3f:03:84:c4:7e:d0:
                    93:d4:95:ad:28:be:3a:a5:42:84:e6:12:04:fe:29:
                    f4:15:2d:02:91:5c:eb:e1:39:b0:69:a5:41:58:a3:
                    e6:af:7d:e1:14:2c:79:d2:03:d7:77:c8:c2:6a:79:
                    2a:9e:16:57:9c:6d:af:d1:aa:d9:a8:5e:05:b0:ed:
                    1e:a1:97:92:cc:e9:d7:bc:59:46:f4:52:9d:1b:f1:
                    a5:dd:62:3d:d3:55:e4:ed:2f:32:25:f9:e7:15:25:
                    02:b7:08:24:cf:96:0a:12:64:21:37:bb:db:9e:6c:
                    d1:15:44:06:ff:7c:33:76:5b:5d:ca:46:6d:f9:ae:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:68:E3:5D:C2:4A:CE:1C:A0:F1:15:32:A1:94:B3:BD:E6:2C:CE:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b488382e-a393-3d24-9466-74aa93ea650a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:7a:af:7e:8c:c2:3f:85:26:55:47:c6:c0:ad:b7:33:39:
         7e:b9:44:b9:6c:be:e3:1a:bb:cc:bf:9f:1f:00:d1:7d:ea:61:
         38:06:be:80:d8:19:58:25:f6:1f:e9:84:ba:b4:22:a4:42:9c:
         36:ad:04:16:5f:9c:9f:9f:ec:c6:2d:01:7a:04:44:d9:7f:b8:
         bd:88:4b:3b:4e:38:b6:bd:66:2a:18:06:89:ec:ee:65:9d:d8:
         8d:2c:de:18:d4:00:18:c0:6f:11:8f:bb:a2:27:9c:eb:f6:e9:
         53:9b:bd:8c:bc:e7:44:11:46:93:a6:df:80:5a:f8:db:46:e2:
         57:11:a3:17:9f:ed:f7:b1:01:fc:2a:5f:8a:db:54:51:76:e4:
         3a:22:de:ac:11:bb:2c:6d:82:92:87:3b:85:69:25:05:1f:c7:
         6a:5e:ef:bc:78:b2:da:f2:d8:ef:05:06:f2:65:2e:be:89:1e:
         6c:5d:4e:77:c2:a8:70:95:9b:b3:cc:0f:25:76:ab:1e:00:ab:
         ad:82:14:09:d3:d0:e9:1e:22:52:35:9c:1b:72:86:0d:f3:8a:
         30:bd:08:c5:61:4f:4d:62:1c:a5:5e:d1:9f:9f:bc:84:76:51:
         02:1d:81:a5:2d:c1:30:d6:7a:dd:7b:81:99:26:f8:ff:08:97:
         ec:02:54:54
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiiqe2toQGfxpoUuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDEyMzAyMzAxM1oXDTI1MDQyMzAxMzAxM1owLzEtMCsGA1UEAxMk
MDE3Y2I5ZTItNDBlYS00NWU0LWI5ZGQtZTgzMzk4Njg2MDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpyiLJxAS8zze+u/7i8dqf1FVz5xKZN+uCze
DRP+xy58JB4lr/o3hD8fo+2ZE+dnw1ShS4NIEYJ0sMNoOvuQcTs33WYN6xjVc0+w
AR/bXiTfy8ER8+N3mgaPjMJxgb0DqbwPqYBcpaz9RXltX3QEdsi2WG3fqYBx6kIQ
2nf1W9g/A4TEftCT1JWtKL46pUKE5hIE/in0FS0CkVzr4TmwaaVBWKPmr33hFCx5
0gPXd8jCankqnhZXnG2v0arZqF4FsO0eoZeSzOnXvFlG9FKdG/Gl3WI901Xk7S8y
JfnnFSUCtwgkz5YKEmQhN7vbnmzRFUQG/3wzdltdykZt+a4arwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFARo413CSs4coPEVMqGUs73mLM7LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjQ4ODM4MmUtYTM5My0z
ZDI0LTk0NjYtNzRhYTkzZWE2NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADR7eq9+jMI/hSZVR8bArbczOX65RLlsvuMau8y/nx8A0X3qYTgG
voDYGVgl9h/phLq0IqRCnDatBBZfnJ+f7MYtAXoERNl/uL2ISztOOLa9ZioYBons
7mWd2I0s3hjUABjAbxGPu6InnOv26VObvYy850QRRpOm34Ba+NtG4lcRoxef7fex
AfwqX4rbVFF25Doi3qwRuyxtgpKHO4VpJQUfx2pe77x4stry2O8FBvJlLr6JHmxd
TnfCqHCVm7PMDyV2qx4Aq62CFAnT0OkeIlI1nBtyhg3zijC9CMVhT01iHKVe0Z+f
vIR2UQIdgaUtwTDWet17gZkm+P8Il+wCVFQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:50:36 2025 by rpki-client