Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbe5deb0-b0ba-314b-97ce-69f143c0da65.roa
File:                     cbe5deb0-b0ba-314b-97ce-69f143c0da65.roa (raw, json)
Hash identifier:          YeygZQQvU36CaIBEFQ0DSpj8TInE2nk9CqI2DhsvWTQ=
Subject key identifier:   B2:39:BF:EF:07:F8:10:30:CC:94:C8:4D:2E:EF:07:98:6F:D2:90:51
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE688E68F1E3A2B2C6000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbe5deb0-b0ba-314b-97ce-69f143c0da65.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     46766
IP address blocks:        2001:470:232::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e6:88:e6:8f:1e:3a:2b:2c:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=7d30a983-81d5-4d86-94d2-9db593c73695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:2f:87:bb:18:0d:c4:36:75:57:a4:b0:74:
                    64:a6:ec:f7:60:15:3f:43:eb:cd:a3:64:29:c7:c7:
                    77:ec:a8:bb:2b:c3:f9:12:75:86:b8:b9:bf:cc:c5:
                    c8:10:6b:b2:23:02:a5:19:5f:ed:1f:bd:08:74:91:
                    78:68:2e:31:71:31:ab:bc:5c:4e:33:af:65:59:66:
                    fe:15:7c:e3:bd:da:cd:df:00:46:8e:4b:4e:8e:5d:
                    3f:1d:44:c4:5f:3d:67:2b:f8:51:16:77:a4:09:34:
                    77:2f:2c:ae:ae:a4:2f:3b:66:42:d1:34:5f:e4:99:
                    3f:a2:9b:13:9a:26:59:ab:5c:a9:51:bc:ff:b2:19:
                    aa:76:fb:e5:a6:8d:16:3e:2a:2c:10:0c:20:1e:77:
                    f0:4f:a7:c2:02:e0:f1:26:88:4a:64:55:11:3b:91:
                    6e:f3:f9:50:c6:3a:4e:fb:b1:6a:d6:6f:9f:87:23:
                    9b:0a:84:d4:d2:25:bd:b6:54:b4:19:7d:7a:dd:08:
                    aa:41:be:25:41:af:6d:35:98:1d:41:0a:20:43:46:
                    ae:1f:c4:1f:19:00:39:c9:2c:71:63:a5:54:42:84:
                    42:f2:a5:19:0d:d1:fa:55:aa:ad:14:55:2a:d1:02:
                    61:89:c2:1f:e2:c4:60:77:d0:97:ad:e9:1d:1c:9e:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:39:BF:EF:07:F8:10:30:CC:94:C8:4D:2E:EF:07:98:6F:D2:90:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbe5deb0-b0ba-314b-97ce-69f143c0da65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:232::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:99:79:b6:f4:f7:e8:a4:ae:6d:d2:ea:31:ae:3c:32:d0:5b:
         d3:ab:10:13:72:e3:cd:bf:dc:dc:0c:ab:e8:e3:ec:81:05:4b:
         c5:44:ef:45:8f:c9:02:39:7e:4f:76:7e:34:29:55:f3:57:4e:
         10:ea:27:6a:87:ee:2a:77:ec:3e:6a:4a:9f:03:bd:b2:15:7d:
         22:47:0a:0b:49:e3:71:cd:59:3e:27:97:5c:85:f6:a0:54:b1:
         26:b6:ac:f2:ab:71:87:21:74:32:4b:d6:52:3e:60:89:a0:c1:
         54:e1:d3:71:01:3f:b2:22:92:10:75:75:ba:90:79:eb:3a:e8:
         7b:1f:e7:0e:99:d5:95:b5:83:47:a7:7d:f5:5f:f4:ae:20:ce:
         84:fc:55:bd:f9:4b:89:07:90:8c:d8:88:05:42:d1:ee:8e:85:
         00:27:b9:b9:09:b1:6a:12:2d:9d:a7:4b:ca:4e:e5:34:ce:3d:
         a9:89:a3:01:ad:45:93:35:df:eb:c9:f7:3a:0d:d5:13:d1:67:
         eb:9a:a3:6d:da:04:43:f6:2b:9d:20:cb:df:ed:ee:a5:6a:39:
         13:9a:a3:54:d1:0d:e1:e6:fe:6e:b3:4b:70:b4:1e:b9:08:74:
         4a:66:ee:61:5a:b8:58:6a:3f:14:2c:69:9e:be:c8:57:75:7c:
         f9:92:06:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+aI5o8eOissYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
N2QzMGE5ODMtODFkNS00ZDg2LTk0ZDItOWRiNTkzYzczNjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHQvh7sYDcQ2dVeksHRkpuz3YBU/Q+vNo2Qp
x8d37Ki7K8P5EnWGuLm/zMXIEGuyIwKlGV/tH70IdJF4aC4xcTGrvFxOM69lWWb+
FXzjvdrN3wBGjktOjl0/HUTEXz1nK/hRFnekCTR3LyyurqQvO2ZC0TRf5Jk/opsT
miZZq1ypUbz/shmqdvvlpo0WPiosEAwgHnfwT6fCAuDxJohKZFURO5Fu8/lQxjpO
+7Fq1m+fhyObCoTU0iW9tlS0GX163QiqQb4lQa9tNZgdQQogQ0auH8QfGQA5ySxx
Y6VUQoRC8qUZDdH6VaqtFFUq0QJhicIf4sRgd9CXrekdHJ53WwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLI5v+8H+BAwzJTITS7vB5hv0pBRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2JlNWRlYjAtYjBiYS0z
MTRiLTk3Y2UtNjlmMTQzYzBkYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEeZebb09+ikrm3S6jGuPDLQW9OrEBNy482/3NwMq+jj7IEFS8VE
70WPyQI5fk92fjQpVfNXThDqJ2qH7ip37D5qSp8DvbIVfSJHCgtJ43HNWT4nl1yF
9qBUsSa2rPKrcYchdDJL1lI+YImgwVTh03EBP7IikhB1dbqQees66Hsf5w6Z1ZW1
g0enffVf9K4gzoT8Vb35S4kHkIzYiAVC0e6OhQAnubkJsWoSLZ2nS8pO5TTOPamJ
owGtRZM13+vJ9zoN1RPRZ+uao23aBEP2K50gy9/t7qVqOROao1TRDeHm/m6zS3C0
HrkIdEpm7mFauFhqPxQsaZ6+yFd1fPmSBsY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:36 2025 by rpki-client