Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ae36ea0-0c3d-331e-94f7-c8f7e2f4a99f.roa
File:                     0ae36ea0-0c3d-331e-94f7-c8f7e2f4a99f.roa (raw, json)
Hash identifier:          amDqMcoXaARwKGb5DQ7CGECXNQxcZftifZtaAOprN8I=
Subject key identifier:   B3:37:47:9F:4E:26:A4:B6:ED:17:29:72:3C:68:95:54:81:F2:60:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933CB6AF359C0C047C7A480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ae36ea0-0c3d-331e-94f7-c8f7e2f4a99f.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     395681
IP address blocks:        2001:470:a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:cb:6a:f3:59:c0:c0:47:c7:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=d223a56b-cbcc-404e-88c5-c8cbdb174923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:eb:66:5a:ba:af:d2:d2:42:13:8b:a6:b5:
                    1c:fc:54:ed:d7:e3:e0:79:fe:76:a9:49:28:d4:5b:
                    46:49:bb:ae:91:0f:aa:49:cf:f1:c7:50:b4:f2:c9:
                    e9:b0:8e:32:d7:e9:3f:b1:82:30:2c:95:e0:0e:38:
                    45:af:83:4a:cf:c2:d1:fd:e0:a7:8a:78:54:1f:e1:
                    1d:a2:4a:f3:ff:58:c1:12:79:aa:2b:6b:8e:e2:76:
                    fd:8e:4e:29:f9:cf:5f:5c:30:2c:f0:18:36:b5:46:
                    d0:1e:93:a6:cd:d7:ea:7e:52:33:4b:3d:33:2d:36:
                    6f:08:d6:bc:d8:5d:d5:13:98:9a:bc:a1:a2:8a:bc:
                    0d:b9:75:d4:5a:0f:6b:23:ac:ce:a3:93:bc:2a:79:
                    c5:37:83:48:f7:29:e4:67:87:37:06:91:c6:92:1c:
                    97:31:a6:24:93:04:64:ab:5a:be:cb:50:09:69:53:
                    35:f5:33:03:26:d7:78:eb:34:dc:e3:c3:dc:c5:37:
                    e3:60:ff:31:c0:dd:34:ad:70:c9:db:4c:5a:84:74:
                    be:22:18:64:c8:6a:e6:25:07:a8:0f:a7:3e:f6:37:
                    53:75:c1:53:fa:d9:e5:26:92:12:81:ec:18:0c:00:
                    6a:f5:54:1c:4d:2e:a9:ec:4c:20:ac:dd:3f:ca:eb:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:47:9F:4E:26:A4:B6:ED:17:29:72:3C:68:95:54:81:F2:60:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0ae36ea0-0c3d-331e-94f7-c8f7e2f4a99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:44:73:32:24:1f:0b:f8:8f:54:d3:11:f6:c2:4a:b6:ba:76:
         58:fb:0e:9c:8e:a7:d4:22:41:77:6c:98:7e:c3:59:f1:a4:b5:
         6c:c6:1f:8b:f8:3c:cc:22:de:6d:a8:14:ee:72:80:18:73:9c:
         30:71:5b:1e:b9:59:7f:51:a3:d5:7a:9b:ea:57:da:81:1d:ce:
         7b:76:f7:35:f0:e1:fe:5e:ef:2c:4f:b5:7d:63:5b:65:9b:e9:
         93:d1:8b:a4:63:c4:46:13:8c:88:7b:ec:81:af:8d:92:c6:07:
         79:90:7c:20:5d:48:59:e1:76:e5:5d:b6:74:7a:f2:ee:ec:23:
         7b:a7:6e:fc:b9:0a:6d:2b:73:9b:f3:0b:ab:4d:2c:ee:ea:34:
         25:43:68:54:fa:27:07:74:02:95:3c:53:17:1e:23:94:c7:92:
         87:1d:f3:6c:b7:67:80:bf:95:b7:9d:ba:6f:31:b1:74:3f:60:
         0d:9d:d7:5a:0e:d4:4d:9d:66:d4:94:2a:71:aa:aa:2a:67:4a:
         bb:c7:0e:a7:0c:7a:b0:e9:1b:4e:d3:91:1d:e4:ce:50:17:49:
         2a:2b:93:68:18:55:65:fe:0d:78:00:a6:aa:b5:70:9e:2d:71:
         52:54:09:f7:98:8b:8e:50:d7:20:e8:75:00:6d:8f:99:94:01:
         0b:16:04:8d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXZM8tq81nAwEfHpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
ZDIyM2E1NmItY2JjYy00MDRlLTg4YzUtYzhjYmRiMTc0OTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHHrZlq6r9LSQhOLprUc/FTt1+Pgef52qUko
1FtGSbuukQ+qSc/xx1C08snpsI4y1+k/sYIwLJXgDjhFr4NKz8LR/eCninhUH+Ed
okrz/1jBEnmqK2uO4nb9jk4p+c9fXDAs8Bg2tUbQHpOmzdfqflIzSz0zLTZvCNa8
2F3VE5iavKGiirwNuXXUWg9rI6zOo5O8KnnFN4NI9ynkZ4c3BpHGkhyXMaYkkwRk
q1q+y1AJaVM19TMDJtd46zTc48PcxTfjYP8xwN00rXDJ20xahHS+IhhkyGrmJQeo
D6c+9jdTdcFT+tnlJpISgewYDABq9VQcTS6p7EwgrN0/yuvERwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLM3R59OJqS27RcpcjxolVSB8mAGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGFlMzZlYTAtMGMzZC0z
MzFlLTk0ZjctYzhmN2UyZjRhOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFlEczIkHwv4j1TTEfbCSra6dlj7DpyOp9QiQXdsmH7DWfGktWzG
H4v4PMwi3m2oFO5ygBhznDBxWx65WX9Ro9V6m+pX2oEdznt29zXw4f5e7yxPtX1j
W2Wb6ZPRi6RjxEYTjIh77IGvjZLGB3mQfCBdSFnhduVdtnR68u7sI3unbvy5Cm0r
c5vzC6tNLO7qNCVDaFT6Jwd0ApU8UxceI5THkocd82y3Z4C/lbedum8xsXQ/YA2d
11oO1E2dZtSUKnGqqipnSrvHDqcMerDpG07TkR3kzlAXSSork2gYVWX+DXgApqq1
cJ4tcVJUCfeYi45Q1yDodQBtj5mUAQsWBI0=
-----END CERTIFICATE-----
Generated at Mon May 20 01:52:42 2024 by rpki-client on console-fra.rpki-client.org