Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe98508f-8dcb-3687-98ca-80c18cab7e08.roa
File:                     fe98508f-8dcb-3687-98ca-80c18cab7e08.roa (raw, json)
Hash identifier:          9JQqkl+byyqttBjChTi9ouUzFbiBoYS4OwQVm3GpCus=
Subject key identifier:   BD:A3:86:2D:0A:7C:23:1A:F0:7C:81:5F:D2:13:6C:14:6B:4D:9D:16
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A61399374F14BDD05623F3440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe98508f-8dcb-3687-98ca-80c18cab7e08.roa
Signing time:             Wed 02 Jul 2025 01:30:11 +0000
ROA not before:           Wed 02 Jul 2025 01:30:11 +0000
ROA not after:            Tue 30 Sep 2025 01:30:11 +0000
asID:                     36360
IP address blocks:        2001:470:2c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:39:93:74:f1:4b:dd:05:62:3f:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  2 01:30:11 2025 GMT
            Not After : Sep 30 01:30:11 2025 GMT
        Subject: CN=e1f173c8-8f06-4bce-89bb-10a6cd2777fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:30:d4:1c:53:85:6b:05:8b:c5:20:51:97:
                    5f:43:1f:d1:51:8c:1f:10:83:67:c4:4f:8b:fb:cb:
                    ef:75:ef:ac:2a:6e:96:01:32:ec:e6:bd:05:2c:e6:
                    26:46:3a:df:1b:f2:71:c6:09:fe:37:10:84:ea:b4:
                    fe:2f:28:97:e1:1c:7b:68:ec:00:9c:b0:81:c1:5e:
                    a9:d9:c5:ed:8c:79:60:7f:1e:db:54:0c:b4:bf:90:
                    08:76:1f:d2:87:50:1b:4d:5f:ea:37:64:ef:4b:47:
                    5c:2c:b1:20:d6:03:7e:f4:32:03:1d:6c:e5:a4:0b:
                    39:ee:c4:86:f4:7a:e6:5e:31:e2:9f:75:35:f3:1e:
                    d7:ac:e3:25:cd:32:b0:41:c5:bf:01:f3:08:53:00:
                    f4:90:fe:65:63:d6:f8:a8:fd:7b:b6:b0:99:31:5a:
                    1a:ab:d1:ce:77:4c:ca:e1:80:bf:ad:a6:f6:80:f9:
                    f9:89:3b:3c:1c:2f:fa:b0:5c:94:bc:ce:d5:6e:d1:
                    84:1f:ae:3f:e0:84:33:da:e3:a1:3b:aa:b3:c2:db:
                    dd:15:54:5c:3b:48:c0:53:1c:f9:bc:d6:43:3a:2e:
                    58:47:22:eb:6f:63:87:7a:72:1c:37:a5:fe:9e:5f:
                    0c:aa:ed:1b:ee:a2:c9:39:b7:d8:76:52:6d:09:4f:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A3:86:2D:0A:7C:23:1A:F0:7C:81:5F:D2:13:6C:14:6B:4D:9D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe98508f-8dcb-3687-98ca-80c18cab7e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:26:f5:75:f3:f3:a3:4c:7f:84:3e:6a:6d:9a:a6:3e:92:2c:
         78:7d:6b:55:da:d3:ad:29:89:4f:3e:90:a2:21:de:d1:1e:b0:
         91:5c:8c:8e:ec:47:94:ac:f1:af:65:e0:88:5b:7c:9c:e8:55:
         ea:48:94:56:91:76:e1:d5:a6:1a:03:bb:5a:c1:20:75:95:0c:
         53:1e:65:7b:3f:08:de:fe:c2:21:84:be:34:0a:44:33:6d:ec:
         2d:3b:68:c5:7b:32:16:8f:04:76:6d:16:74:6c:87:a3:41:63:
         b8:7e:12:14:70:2b:19:4d:32:7a:18:01:c1:5d:12:2e:9f:ac:
         45:6d:28:b2:7d:24:c6:9a:eb:b7:8e:7a:8f:1d:93:b3:3c:8e:
         bc:76:e8:ed:fd:f3:fb:de:77:c8:d6:bd:ee:46:89:be:16:e8:
         fb:24:3b:c3:2a:07:39:2a:3e:b9:08:20:62:bf:51:85:31:dc:
         66:69:2e:5f:8e:9e:06:49:6e:56:34:de:ae:f6:b2:e0:b1:96:
         74:b3:04:77:b0:4e:0a:82:af:26:9f:1c:e7:01:84:33:c2:b5:
         36:59:95:b0:27:09:73:d5:fe:12:0a:02:cd:0f:da:1b:98:32:
         d9:bf:c2:db:b0:b6:9c:b7:33:91:e4:b3:7f:88:6d:41:e6:5c:
         50:3d:d6:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEphOZN08UvdBWI/NEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDcwMjAxMzAxMVoXDTI1MDkzMDAxMzAxMVowLzEtMCsGA1UEAxMk
ZTFmMTczYzgtOGYwNi00YmNlLTg5YmItMTBhNmNkMjc3N2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl60w1BxThWsFi8UgUZdfQx/RUYwfEINnxE+L
+8vvde+sKm6WATLs5r0FLOYmRjrfG/Jxxgn+NxCE6rT+LyiX4Rx7aOwAnLCBwV6p
2cXtjHlgfx7bVAy0v5AIdh/Sh1AbTV/qN2TvS0dcLLEg1gN+9DIDHWzlpAs57sSG
9HrmXjHin3U18x7XrOMlzTKwQcW/AfMIUwD0kP5lY9b4qP17trCZMVoaq9HOd0zK
4YC/rab2gPn5iTs8HC/6sFyUvM7VbtGEH64/4IQz2uOhO6qzwtvdFVRcO0jAUxz5
vNZDOi5YRyLrb2OHenIcN6X+nl8Mqu0b7qLJObfYdlJtCU/X7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL2jhi0KfCMa8HyBX9ITbBRrTZ0WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmU5ODUwOGYtOGRjYi0z
Njg3LTk4Y2EtODBjMThjYWI3ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAAm9XXz86NMf4Q+am2apj6SLHh9a1Xa060piU8+kKIh3tEesJFc
jI7sR5Ss8a9l4IhbfJzoVepIlFaRduHVphoDu1rBIHWVDFMeZXs/CN7+wiGEvjQK
RDNt7C07aMV7MhaPBHZtFnRsh6NBY7h+EhRwKxlNMnoYAcFdEi6frEVtKLJ9JMaa
67eOeo8dk7M8jrx26O398/ved8jWve5Gib4W6PskO8MqBzkqPrkIIGK/UYUx3GZp
Ll+OngZJblY03q72suCxlnSzBHewTgqCryafHOcBhDPCtTZZlbAnCXPV/hIKAs0P
2huYMtm/wtuwtpy3M5Hks3+IbUHmXFA91go=
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:28:59 2025 by rpki-client