Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb25a2f6-c2ef-3fa6-98bd-0631736edaff.roa
File:                     bb25a2f6-c2ef-3fa6-98bd-0631736edaff.roa (raw, json)
Hash identifier:          EV1cSkYm0RxJkRsJGxCpbAfzuoJFLe2nYGtD9dt68n0=
Subject key identifier:   05:7C:DD:4B:8D:91:18:68:5E:BD:DE:88:3C:66:00:51:56:77:CB:E5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858492B57A1FC4ACCE02B85559360
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb25a2f6-c2ef-3fa6-98bd-0631736edaff.roa
Signing time:             Thu 13 Mar 2025 01:30:09 +0000
ROA not before:           Thu 13 Mar 2025 01:30:09 +0000
ROA not after:            Wed 11 Jun 2025 01:30:09 +0000
asID:                     29430
IP address blocks:        2001:470:424::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2b:57:a1:fc:4a:cc:e0:2b:85:55:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 13 01:30:09 2025 GMT
            Not After : Jun 11 01:30:09 2025 GMT
        Subject: CN=501c8046-ff8f-4c8d-a141-a3203546b643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:a8:a7:f1:17:f6:29:be:ff:c4:1c:54:6f:
                    72:1c:ed:9f:ac:58:08:6e:79:9a:47:2b:63:2d:a2:
                    73:c5:8a:62:97:ad:2f:58:8b:7b:b9:d4:dd:4c:20:
                    70:2a:5c:2a:18:ca:2f:7f:57:7d:68:0d:34:1a:fa:
                    80:f3:02:db:fe:ae:90:92:95:fe:6d:fc:30:00:14:
                    7a:f3:6a:20:eb:c8:98:b5:5a:4c:83:ff:89:bd:98:
                    e1:b8:4e:e1:8c:3d:2f:6e:3d:7b:5d:cc:1c:84:e9:
                    19:ca:67:30:71:6d:8d:2a:c3:7f:a6:8a:8f:28:1b:
                    e8:9a:c1:68:c3:ab:a7:67:5e:90:02:0f:f7:f6:5c:
                    2b:96:d8:60:ff:bd:7e:f7:1e:16:84:8a:07:8e:6f:
                    aa:ef:67:a2:fb:1a:c1:d8:81:65:fd:66:34:58:5d:
                    c8:4a:30:ca:a5:80:78:53:ee:3e:5d:86:b9:c5:15:
                    83:d2:7e:f4:94:dc:dc:93:df:0f:85:d3:1f:2e:fb:
                    73:0b:b1:e3:75:1d:88:b0:1d:a5:dd:58:db:1f:aa:
                    c4:94:dd:8c:f2:08:c1:63:7d:9d:8f:d3:0b:b8:2a:
                    33:ce:9e:3d:c8:5a:0d:4b:4f:bc:4c:ea:0d:2a:17:
                    5e:91:47:53:f6:dd:5f:9b:be:56:00:04:9f:49:0b:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7C:DD:4B:8D:91:18:68:5E:BD:DE:88:3C:66:00:51:56:77:CB:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb25a2f6-c2ef-3fa6-98bd-0631736edaff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:424::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:f9:8e:49:a7:17:15:87:59:27:96:4a:9e:a9:7e:4e:35:
         2f:ff:4f:0a:17:af:e7:42:8b:64:ef:67:a5:ad:01:9d:75:0f:
         bc:55:07:ea:e9:72:29:32:57:69:2f:52:8c:72:ed:51:42:47:
         83:c1:19:e4:7b:d6:8d:04:dc:7a:56:3c:75:5d:54:f6:ad:d0:
         8b:54:ba:c7:87:0c:5d:61:b5:73:31:b1:64:e5:ea:5c:a3:8f:
         0e:84:55:2c:39:56:09:13:cf:e6:0f:50:37:d0:dc:85:9f:d0:
         91:8d:f8:17:db:07:60:f6:cf:06:fe:19:8e:6b:fc:8b:94:2b:
         d6:bf:f7:da:70:6d:9a:74:b6:81:30:4b:71:56:7b:c0:95:13:
         7b:cc:24:2d:bf:a5:12:f0:34:dc:47:c0:b1:a8:04:16:1d:d2:
         d1:1a:17:c8:1d:8d:89:cb:fc:a4:6a:2c:48:0d:92:0c:1e:5d:
         05:64:45:45:2f:85:44:a6:d5:44:f1:7a:05:bb:ba:60:8e:25:
         7f:6b:29:1b:c2:7a:51:97:f9:60:ac:3a:b6:01:8d:7f:e1:c9:
         f7:20:3b:67:18:fa:f0:63:91:fb:d2:53:bd:79:b4:12:6f:8f:
         46:73:05:a3:b3:3a:08:ae:24:1b:70:b4:9b:da:f5:df:d8:2a:
         3d:27:bf:e0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkrV6H8SszgK4VVk2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDMxMzAxMzAwOVoXDTI1MDYxMTAxMzAwOVowLzEtMCsGA1UEAxMk
NTAxYzgwNDYtZmY4Zi00YzhkLWExNDEtYTMyMDM1NDZiNjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM6op/EX9im+/8QcVG9yHO2frFgIbnmaRytj
LaJzxYpil60vWIt7udTdTCBwKlwqGMovf1d9aA00GvqA8wLb/q6QkpX+bfwwABR6
82og68iYtVpMg/+JvZjhuE7hjD0vbj17XcwchOkZymcwcW2NKsN/poqPKBvomsFo
w6unZ16QAg/39lwrlthg/71+9x4WhIoHjm+q72ei+xrB2IFl/WY0WF3ISjDKpYB4
U+4+XYa5xRWD0n70lNzck98PhdMfLvtzC7HjdR2IsB2l3VjbH6rElN2M8gjBY32d
j9MLuCozzp49yFoNS0+8TOoNKhdekUdT9t1fm75WAASfSQtTkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAV83UuNkRhoXr3eiDxmAFFWd8vlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmIyNWEyZjYtYzJlZi0z
ZmE2LTk4YmQtMDYzMTczNmVkYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKlj+Y5JpxcVh1knlkqeqX5ONS//TwoXr+dCi2TvZ6WtAZ11D7xV
B+rpcikyV2kvUoxy7VFCR4PBGeR71o0E3HpWPHVdVPat0ItUuseHDF1htXMxsWTl
6lyjjw6EVSw5VgkTz+YPUDfQ3IWf0JGN+BfbB2D2zwb+GY5r/IuUK9a/99pwbZp0
toEwS3FWe8CVE3vMJC2/pRLwNNxHwLGoBBYd0tEaF8gdjYnL/KRqLEgNkgweXQVk
RUUvhUSm1UTxegW7umCOJX9rKRvCelGX+WCsOrYBjX/hyfcgO2cY+vBjkfvSU715
tBJvj0ZzBaOzOgiuJBtwtJva9d/YKj0nv+A=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:33 2025 by rpki-client