Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
File:                     fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa (raw, json)
Hash identifier:          1l8daOerlw1AzOgf659dIVkX21pQHenebY3o96x4D6c=
Subject key identifier:   3E:52:F8:05:4A:7E:DA:0D:FC:37:1F:25:73:A5:F9:5F:57:5B:4D:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC1B98CBD04AAE98A87C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     210222
IP address blocks:        2001:470:1b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c1:b9:8c:bd:04:aa:e9:8a:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=fc691e4d-a3d2-4839-8b81-a45a2ff3e182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:9d:aa:75:18:da:29:c6:90:a5:e2:a1:00:
                    a5:e5:cc:a8:e1:ab:15:f3:85:1d:7d:21:d4:99:4f:
                    be:47:e0:71:93:85:8a:5d:eb:81:ee:de:b6:37:23:
                    5e:ae:12:df:8b:64:ee:e5:8b:8e:dd:3f:e1:db:90:
                    62:31:ef:f9:95:48:cc:b0:45:10:c1:b5:25:57:aa:
                    87:3a:56:92:03:47:7d:c1:5b:35:df:6b:c0:3b:ec:
                    18:6a:43:58:70:06:32:5e:e6:27:6b:4b:1c:5e:88:
                    0f:8d:e6:39:b6:56:17:49:81:78:f4:44:bf:81:71:
                    63:18:b6:10:3a:c0:ed:7f:4f:38:35:d1:de:07:13:
                    4c:97:95:e4:a4:5a:52:d9:2e:09:21:df:39:58:7e:
                    aa:ae:ee:10:8b:f4:a4:dd:34:96:53:fc:f7:30:f2:
                    6d:31:5f:75:6e:53:5c:f9:71:07:ea:2b:af:aa:69:
                    0e:93:73:e8:ae:a5:2d:f9:4b:22:b3:00:de:11:09:
                    0a:1f:58:e3:f0:63:40:63:e8:38:07:8c:dd:93:00:
                    8c:66:47:14:f3:b6:cf:79:a6:19:8a:da:82:05:8d:
                    6d:b7:60:0a:e8:a2:d3:97:48:4d:6d:06:cb:98:be:
                    b7:3e:19:27:18:3b:60:cf:09:b1:68:9f:97:c6:6d:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:52:F8:05:4A:7E:DA:0D:FC:37:1F:25:73:A5:F9:5F:57:5B:4D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe971c9f-5156-3f88-ba63-55b6d6dca8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:3b:cb:dd:40:be:68:cb:f7:d2:d2:ae:30:ee:ec:49:93:d2:
         a5:76:81:0a:a7:51:3b:e5:b1:0c:dd:58:31:db:4a:94:27:be:
         46:4e:db:fc:60:93:cb:41:39:27:42:41:b9:2b:1d:bf:40:36:
         6e:4b:f2:dd:ab:1d:ff:ac:e0:93:63:37:ff:90:b9:ee:86:6b:
         8d:56:64:64:fb:38:80:1f:6c:18:be:cc:75:ac:2c:e6:b0:e2:
         05:66:9a:71:65:ef:67:8a:4a:2d:0a:09:a7:f0:6d:a5:f9:88:
         b8:b1:d3:38:0d:25:80:32:2b:90:00:5b:d6:ac:4b:2e:6c:38:
         94:c8:d5:b6:52:c6:d9:75:86:1d:31:49:55:8c:36:cb:8b:47:
         a4:91:b7:75:0c:ee:0c:6b:2f:9d:8a:cf:66:56:5f:a1:51:92:
         7d:6e:7b:70:7b:d4:8e:c7:5b:0e:07:58:8f:fc:04:95:7e:f9:
         66:e7:5c:45:5d:e2:b7:26:2e:6f:7f:4b:74:49:9a:09:b7:f1:
         d9:04:bf:50:7b:02:3f:c6:8b:b2:be:8a:6b:80:81:c4:cd:98:
         7d:71:08:90:bd:06:b2:29:6d:d3:2c:bd:f8:15:6e:a7:c8:b4:
         44:7f:a7:1b:85:83:14:00:65:f5:4c:df:3a:1f:7d:0e:16:77:
         9b:b9:a4:ab
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX8G5jL0EqumKh8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
ZmM2OTFlNGQtYTNkMi00ODM5LThiODEtYTQ1YTJmZjNlMTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJSdqnUY2inGkKXioQCl5cyo4asV84UdfSHU
mU++R+Bxk4WKXeuB7t62NyNerhLfi2Tu5YuO3T/h25BiMe/5lUjMsEUQwbUlV6qH
OlaSA0d9wVs132vAO+wYakNYcAYyXuYna0scXogPjeY5tlYXSYF49ES/gXFjGLYQ
OsDtf084NdHeBxNMl5XkpFpS2S4JId85WH6qru4Qi/Sk3TSWU/z3MPJtMV91blNc
+XEH6iuvqmkOk3PorqUt+UsiswDeEQkKH1jj8GNAY+g4B4zdkwCMZkcU87bPeaYZ
itqCBY1tt2AK6KLTl0hNbQbLmL63PhknGDtgzwmxaJ+Xxm1BlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD5S+AVKftoN/DcfJXOl+V9XW03uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmU5NzFjOWYtNTE1Ni0z
Zjg4LWJhNjMtNTViNmQ2ZGNhOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALQ7y91AvmjL99LSrjDu7EmT0qV2gQqnUTvlsQzdWDHbSpQnvkZO
2/xgk8tBOSdCQbkrHb9ANm5L8t2rHf+s4JNjN/+Que6Ga41WZGT7OIAfbBi+zHWs
LOaw4gVmmnFl72eKSi0KCafwbaX5iLix0zgNJYAyK5AAW9asSy5sOJTI1bZSxtl1
hh0xSVWMNsuLR6SRt3UM7gxrL52Kz2ZWX6FRkn1ue3B71I7HWw4HWI/8BJV++Wbn
XEVd4rcmLm9/S3RJmgm38dkEv1B7Aj/Gi7K+imuAgcTNmH1xCJC9BrIpbdMsvfgV
bqfItER/pxuFgxQAZfVM3zoffQ4Wd5u5pKs=
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:32:02 2025 by rpki-client