Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/488f16b3-9037-3a7d-9541-cb4e9eb993b1.roa
File:                     488f16b3-9037-3a7d-9541-cb4e9eb993b1.roa (raw, json)
Hash identifier:          cK2b5Lxl3j+qz5ld87ruQUcMNYerO3zxt0849+IBvfo=
Subject key identifier:   2E:28:76:11:B2:B8:85:E8:17:6C:86:CC:B5:6E:3A:82:20:5A:D8:26
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845DEC91754E3CDAE0115D04E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/488f16b3-9037-3a7d-9541-cb4e9eb993b1.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     22115
IP address blocks:        2001:470:41::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:17:54:e3:cd:ae:01:15:d0:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=fb1235f1-a455-40e0-85ba-6a4932d6a0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:44:65:d8:ea:4c:bf:84:e9:4a:2b:04:bb:
                    a3:3c:e6:cf:51:d2:4c:89:e9:b7:82:2c:13:31:b8:
                    3d:26:3f:74:26:15:5c:a7:b0:2f:b2:fa:4d:8c:af:
                    30:7d:b7:bf:32:81:9e:be:6c:49:ae:49:4c:f5:9e:
                    55:77:a5:b2:1e:71:ed:d3:59:2e:f4:f4:fd:b0:f2:
                    a8:f7:ad:7c:80:00:92:cb:7e:4b:4a:80:2d:13:d2:
                    c3:2c:25:88:df:3d:9e:82:93:5d:d0:a8:f8:f6:af:
                    7f:75:20:4f:9f:9b:78:12:2f:da:b9:96:f8:8d:c4:
                    d0:f2:fd:56:7a:33:95:c1:42:a5:84:95:22:51:c7:
                    e7:07:84:63:75:d6:59:b5:2f:50:e8:f7:5d:4b:0c:
                    a1:d5:b6:35:78:89:e0:02:95:0e:6d:05:dc:31:28:
                    c4:6b:ac:c6:ac:a4:88:dc:de:40:f1:da:2a:4f:b0:
                    82:3a:5b:19:73:35:5f:2b:ec:e8:14:4b:8d:7f:f3:
                    dc:9c:db:43:86:65:d4:f3:a6:24:02:8a:72:0d:79:
                    12:66:73:de:e6:8d:22:4c:fb:41:0b:da:a8:1b:b2:
                    d2:0c:c7:ad:4c:bd:99:d6:5e:d2:96:eb:4e:49:5f:
                    bb:cf:f2:d2:53:a9:38:d0:76:38:0a:3b:50:ab:ca:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:28:76:11:B2:B8:85:E8:17:6C:86:CC:B5:6E:3A:82:20:5A:D8:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/488f16b3-9037-3a7d-9541-cb4e9eb993b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:33:24:91:f6:a6:26:40:b7:bd:6f:41:4e:9d:d4:a2:77:b4:
         7a:6d:00:65:da:55:66:3a:e1:a9:5a:6a:37:f9:2e:b7:e7:1f:
         a0:af:85:ad:42:80:d3:25:bb:8d:4c:f1:01:0b:f7:f3:8b:cc:
         d1:5e:f2:74:4e:53:a5:87:8f:cb:9d:f9:ab:8a:43:32:90:2d:
         5f:70:6a:6b:c1:0e:64:68:a7:94:7f:bc:dd:32:16:30:d5:35:
         d1:e3:63:a0:02:42:e3:a1:ce:5c:0c:e9:76:68:30:4b:cc:95:
         c8:f0:3e:ea:27:16:84:31:3f:27:be:8a:97:1d:64:95:5e:23:
         ba:c9:bd:7a:34:49:9c:fe:52:c5:06:27:aa:45:cb:5e:f4:7d:
         c7:9d:05:39:aa:3b:fa:79:97:b0:5b:48:b9:0c:4c:35:03:c4:
         49:75:64:89:72:43:82:50:b4:8a:b6:31:f8:19:90:29:62:da:
         5f:88:94:d6:54:6d:73:80:93:29:46:fd:67:cc:e6:79:56:65:
         9c:1c:f1:b5:e8:1a:4d:3d:40:15:a1:70:79:4a:73:21:00:8f:
         d0:b2:1b:11:8a:21:f5:c7:8e:14:53:fa:0c:97:81:d8:f2:e3:
         c7:35:74:d0:d0:56:c1:87:ce:8d:99:71:84:04:b9:c0:b5:32:
         81:42:50:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXeyRdU482uARXQTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUxNDEzMDAzNFoXDTI0MDgxMjEzMDAzNFowLzEtMCsGA1UEAxMk
ZmIxMjM1ZjEtYTQ1NS00MGUwLTg1YmEtNmE0OTMyZDZhMGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhldEZdjqTL+E6UorBLujPObPUdJMiem3giwT
Mbg9Jj90JhVcp7AvsvpNjK8wfbe/MoGevmxJrklM9Z5Vd6WyHnHt01ku9PT9sPKo
9618gACSy35LSoAtE9LDLCWI3z2egpNd0Kj49q9/dSBPn5t4Ei/auZb4jcTQ8v1W
ejOVwUKlhJUiUcfnB4RjddZZtS9Q6PddSwyh1bY1eIngApUObQXcMSjEa6zGrKSI
3N5A8doqT7CCOlsZczVfK+zoFEuNf/PcnNtDhmXU86YkAopyDXkSZnPe5o0iTPtB
C9qoG7LSDMetTL2Z1l7SlutOSV+7z/LSU6k40HY4CjtQq8r4xwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC4odhGyuIXoF2yGzLVuOoIgWtgmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDg4ZjE2YjMtOTAzNy0z
YTdkLTk1NDEtY2I0ZTllYjk5M2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKAzJJH2piZAt71vQU6d1KJ3tHptAGXaVWY64alaajf5LrfnH6Cv
ha1CgNMlu41M8QEL9/OLzNFe8nROU6WHj8ud+auKQzKQLV9wamvBDmRop5R/vN0y
FjDVNdHjY6ACQuOhzlwM6XZoMEvMlcjwPuonFoQxPye+ipcdZJVeI7rJvXo0SZz+
UsUGJ6pFy170fcedBTmqO/p5l7BbSLkMTDUDxEl1ZIlyQ4JQtIq2MfgZkCli2l+I
lNZUbXOAkylG/WfM5nlWZZwc8bXoGk09QBWhcHlKcyEAj9CyGxGKIfXHjhRT+gyX
gdjy48c1dNDQVsGHzo2ZcYQEucC1MoFCUFg=
-----END CERTIFICATE-----
Generated at Mon May 20 01:52:17 2024 by rpki-client on console-ams.rpki-client.org