Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d94846-24f1-3b7e-9fcf-d4ce36448b9d.roa
File:                     b7d94846-24f1-3b7e-9fcf-d4ce36448b9d.roa (raw, json)
Hash identifier:          AKIRpAc600EZASgaIXw8K4+jUqW4TvS786l513+Rnu8=
Subject key identifier:   15:3F:2A:D2:8D:0F:19:59:80:69:80:3B:EF:D1:CF:E0:1F:1B:E7:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A189554BDA2F6CA7F56181500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d94846-24f1-3b7e-9fcf-d4ce36448b9d.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     207821
IP address blocks:        2001:470:3a5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:54:bd:a2:f6:ca:7f:56:18:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=565a9e15-e598-4081-aeab-9aa1590c400c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c5:78:37:f7:81:ea:c5:69:24:16:9e:01:4e:
                    d2:d0:a4:a4:74:e7:0a:aa:dd:ef:51:c6:c0:29:24:
                    d7:f8:35:7f:3d:93:1c:8b:4f:f3:08:5b:05:87:11:
                    fe:f7:64:d0:66:29:32:10:9e:20:9f:16:16:7c:58:
                    98:c7:49:b0:85:f6:f1:ad:11:be:63:1d:f4:b0:68:
                    6e:a6:3b:cf:ad:0d:ee:bd:b8:a4:fd:64:5d:fd:ec:
                    7e:bd:0c:b8:b7:c8:99:2c:f0:3c:1f:95:20:8c:f1:
                    9d:bd:fe:63:69:ee:7c:99:7e:00:a9:d0:29:51:8a:
                    61:e7:97:27:6d:22:2b:6f:5b:d5:d0:2d:77:de:87:
                    8e:32:58:4e:e2:dc:52:3c:9a:26:aa:08:34:05:a6:
                    1d:41:d4:52:7c:3d:51:83:6b:19:00:bc:45:d0:00:
                    13:ba:16:ad:7d:5e:a8:61:5d:e1:80:a0:8a:da:67:
                    39:83:44:93:b2:05:7f:f3:7b:72:6e:c1:6e:02:5a:
                    8f:54:84:17:4d:b7:86:bc:ae:c0:f1:4a:f9:c1:92:
                    6b:e8:6f:8a:f2:a3:cd:0c:fd:54:a2:ab:55:2c:64:
                    7c:07:1c:52:77:13:79:8c:4c:fb:9f:c3:d0:95:f3:
                    b6:2d:cf:72:22:a3:5a:4a:0f:0a:ad:ce:10:b0:8b:
                    87:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3F:2A:D2:8D:0F:19:59:80:69:80:3B:EF:D1:CF:E0:1F:1B:E7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d94846-24f1-3b7e-9fcf-d4ce36448b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3a5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:d0:57:7c:21:a5:97:34:22:df:76:cb:ab:50:90:fb:9b:
         ea:c2:6b:b7:70:7c:0b:33:0c:3b:fa:ac:15:72:97:82:de:a9:
         cf:d5:17:9c:87:bf:fd:90:92:f7:0e:22:6b:39:b1:de:a0:5d:
         ea:6d:2e:d0:77:13:45:a0:4e:08:b9:ff:0d:b8:d3:01:3a:00:
         35:5c:8c:48:0f:65:4a:4f:89:4a:e4:a7:6c:f1:29:a6:19:97:
         e3:2a:c9:0f:d0:58:f5:41:14:8a:54:c7:f6:86:15:51:60:49:
         10:12:db:92:fb:96:8a:82:de:b1:4e:89:0e:eb:d3:b2:7b:c8:
         e0:45:a5:48:d6:54:9c:64:4b:06:d5:93:b3:34:93:28:61:7f:
         7c:47:dc:44:22:86:5d:3d:0a:67:44:1a:c4:69:13:9d:0f:4b:
         22:1a:c6:a8:90:2e:c4:1c:cb:41:1f:d8:a1:84:ba:ff:21:46:
         e3:fd:11:3f:e9:db:7c:df:0b:04:3c:91:d1:83:32:78:b0:90:
         f0:dc:34:76:95:12:ad:de:6a:6c:89:0d:d2:f5:09:1d:b1:86:
         c5:3e:dd:c6:a5:5f:34:92:cf:3c:6a:94:ba:70:20:0e:c1:93:
         dc:c9:94:4d:2e:95:df:10:5c:ae:9b:08:76:24:3b:2d:da:d3:
         03:ad:68:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoYlVS9ovbKf1YYFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
NTY1YTllMTUtZTU5OC00MDgxLWFlYWItOWFhMTU5MGM0MDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8V4N/eB6sVpJBaeAU7S0KSkdOcKqt3vUcbA
KSTX+DV/PZMci0/zCFsFhxH+92TQZikyEJ4gnxYWfFiYx0mwhfbxrRG+Yx30sGhu
pjvPrQ3uvbik/WRd/ex+vQy4t8iZLPA8H5UgjPGdvf5jae58mX4AqdApUYph55cn
bSIrb1vV0C133oeOMlhO4txSPJomqgg0BaYdQdRSfD1Rg2sZALxF0AATuhatfV6o
YV3hgKCK2mc5g0STsgV/83tybsFuAlqPVIQXTbeGvK7A8Ur5wZJr6G+K8qPNDP1U
oqtVLGR8BxxSdxN5jEz7n8PQlfO2Lc9yIqNaSg8Krc4QsIuHLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBU/KtKNDxlZgGmAO+/Rz+AfG+dxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjdkOTQ4NDYtMjRmMS0z
YjdlLTlmY2YtZDRjZTM2NDQ4YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEHW0Fd8IaWXNCLfdsurUJD7m+rCa7dwfAszDDv6rBVyl4Leqc/V
F5yHv/2QkvcOIms5sd6gXeptLtB3E0WgTgi5/w240wE6ADVcjEgPZUpPiUrkp2zx
KaYZl+MqyQ/QWPVBFIpUx/aGFVFgSRAS25L7loqC3rFOiQ7r07J7yOBFpUjWVJxk
SwbVk7M0kyhhf3xH3EQihl09CmdEGsRpE50PSyIaxqiQLsQcy0Ef2KGEuv8hRuP9
ET/p23zfCwQ8kdGDMniwkPDcNHaVEq3eamyJDdL1CR2xhsU+3calXzSSzzxqlLpw
IA7Bk9zJlE0uld8QXK6bCHYkOy3a0wOtaJs=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:28:46 2025 by rpki-client