Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/784cbf35-f4c6-3a57-a4a3-583abbafaa57.roa
File:                     784cbf35-f4c6-3a57-a4a3-583abbafaa57.roa (raw, json)
Hash identifier:          fYz4xz5UvuCFXLqS4JrWzLSX3mJIroTEFv8bxl/ivBE=
Subject key identifier:   FF:E4:96:0C:4A:F0:69:DB:C6:C0:8C:CF:9B:67:E8:58:CD:DB:21:B7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933C51725BFA70A904D2380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/784cbf35-f4c6-3a57-a4a3-583abbafaa57.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11282
IP address blocks:        2001:470:e3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:c5:17:25:bf:a7:0a:90:4d:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=8736475d-29a3-497e-afba-81faaa345401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:a3:47:9e:8f:4a:8c:a3:ca:f8:74:e2:46:
                    9b:fd:b0:f9:df:28:f4:5a:85:e3:ff:6c:21:7a:cf:
                    95:c2:a9:68:6d:5c:fe:ce:c5:cf:34:d6:3b:e1:91:
                    25:34:7a:e5:a9:7f:42:92:e9:fd:1f:c1:49:4c:52:
                    46:e7:9f:7c:4c:c6:53:51:01:3a:8f:22:36:ca:0d:
                    b3:66:16:f2:27:14:36:6e:3c:b5:00:47:ef:86:be:
                    3f:14:c6:10:7b:26:1a:69:28:50:6e:84:40:d7:0c:
                    e7:69:1b:a3:4d:c6:94:a2:a8:22:7f:84:1c:65:65:
                    50:e4:f9:13:8b:53:c1:e1:49:cb:bb:bf:78:be:43:
                    22:8f:0f:6d:bb:7d:f4:01:77:d6:2c:b6:d1:03:fb:
                    e2:cc:ee:4a:88:dc:a3:b3:4a:3d:d7:1b:55:61:d6:
                    1f:7b:f2:c7:8e:37:5f:12:99:74:be:d6:aa:0a:05:
                    2e:67:be:56:d5:9c:aa:2b:96:46:49:11:f1:7f:f1:
                    dc:d7:48:3a:ff:bc:06:bd:0f:98:54:cd:07:31:fc:
                    e7:51:d8:9f:55:4a:0b:a6:68:79:00:8d:fa:16:5b:
                    03:44:1b:6d:15:2d:29:62:b9:8e:43:7f:29:6e:8e:
                    6a:54:8d:aa:e1:72:cf:53:bd:34:9e:47:7d:42:34:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:96:0C:4A:F0:69:DB:C6:C0:8C:CF:9B:67:E8:58:CD:DB:21:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/784cbf35-f4c6-3a57-a4a3-583abbafaa57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:4c:14:77:a1:48:cd:32:36:8e:50:6e:b5:9f:98:72:46:
         dd:27:83:ec:44:8d:2e:e4:b8:12:d9:00:87:06:84:06:d9:b1:
         c9:b6:94:70:92:db:05:8d:d7:bc:e8:c6:f4:4a:79:ef:b4:0a:
         ef:ff:f5:db:7d:b1:aa:72:71:10:b8:d4:81:51:fd:a8:fe:7e:
         6c:b6:7b:6a:d3:d3:0c:83:2e:6c:ec:34:c8:fb:09:c5:62:1b:
         c0:93:06:05:8c:f4:56:4d:79:4b:e1:58:cf:6c:c3:c4:0d:d5:
         36:5f:52:49:33:4a:d8:b7:80:48:9b:c3:a8:50:d0:dd:90:19:
         fe:05:1c:a1:98:d7:18:68:da:33:47:ec:76:86:12:78:12:e7:
         09:61:29:68:f2:df:41:29:2c:b3:3e:e0:9e:8a:38:22:a5:2f:
         d5:58:d9:b4:01:54:82:6d:d4:2c:1e:ea:ee:58:b9:c8:03:bd:
         da:92:05:73:74:0c:b0:6c:2a:07:d0:37:93:c3:8e:6a:83:66:
         29:bc:b7:b8:db:06:89:23:0b:89:af:d2:90:f5:ef:c4:65:48:
         df:dc:02:6d:01:ab:aa:fe:fd:a0:0f:37:44:ca:2f:07:b6:2e:
         18:ac:95:97:3e:c9:44:d1:9a:52:2d:79:75:05:a1:d8:53:95:
         c0:47:a0:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXZM8UXJb+nCpBNI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
ODczNjQ3NWQtMjlhMy00OTdlLWFmYmEtODFmYWFhMzQ1NDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+KjR56PSoyjyvh04kab/bD53yj0WoXj/2wh
es+VwqlobVz+zsXPNNY74ZElNHrlqX9Ckun9H8FJTFJG5598TMZTUQE6jyI2yg2z
ZhbyJxQ2bjy1AEfvhr4/FMYQeyYaaShQboRA1wznaRujTcaUoqgif4QcZWVQ5PkT
i1PB4UnLu794vkMijw9tu330AXfWLLbRA/vizO5KiNyjs0o91xtVYdYfe/LHjjdf
Epl0vtaqCgUuZ75W1ZyqK5ZGSRHxf/Hc10g6/7wGvQ+YVM0HMfznUdifVUoLpmh5
AI36FlsDRBttFS0pYrmOQ38pbo5qVI2q4XLPU700nkd9QjRb5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP/klgxK8GnbxsCMz5tn6FjN2yG3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzg0Y2JmMzUtZjRjNi0z
YTU3LWE0YTMtNTgzYWJiYWZhYTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA4cTBR3oUjNMjaOUG61n5hyRt0ng+xEjS7kuBLZAIcGhAbZscm2
lHCS2wWN17zoxvRKee+0Cu//9dt9sapycRC41IFR/aj+fmy2e2rT0wyDLmzsNMj7
CcViG8CTBgWM9FZNeUvhWM9sw8QN1TZfUkkzSti3gEibw6hQ0N2QGf4FHKGY1xho
2jNH7HaGEngS5wlhKWjy30EpLLM+4J6KOCKlL9VY2bQBVIJt1Cwe6u5YucgDvdqS
BXN0DLBsKgfQN5PDjmqDZim8t7jbBokjC4mv0pD178RlSN/cAm0Bq6r+/aAPN0TK
Lwe2LhislZc+yUTRmlIteXUFodhTlcBHoCg=
-----END CERTIFICATE-----
Generated at Mon May 20 01:52:18 2024 by rpki-client on console-ams.rpki-client.org