Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f0e04d-a36c-320f-9a58-2d5d2431ce69.roa
File:                     95f0e04d-a36c-320f-9a58-2d5d2431ce69.roa (raw, json)
Hash identifier:          Hg6RpyA71AySfdyqh3lKSxupF0U1cpafCWyk73ADq0A=
Subject key identifier:   B4:B4:B5:BF:B8:DA:BB:03:3F:81:88:15:14:99:2F:5A:F9:D8:E3:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845B0C7C2F3AF2D8B8DA9A50D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f0e04d-a36c-320f-9a58-2d5d2431ce69.roa
Signing time:             Sun 28 Apr 2024 01:30:50 +0000
ROA not before:           Sun 28 Apr 2024 01:30:50 +0000
ROA not after:            Sat 27 Jul 2024 01:30:50 +0000
asID:                     265389
IP address blocks:        2001:470:230::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b0:c7:c2:f3:af:2d:8b:8d:a9:a5:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 28 01:30:50 2024 GMT
            Not After : Jul 27 01:30:50 2024 GMT
        Subject: CN=43071957-eb3d-442d-8d2a-b271f13ad886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:a9:69:31:b7:4e:db:6d:21:84:c8:5a:f6:
                    0e:a8:12:53:a3:59:a4:f7:d0:9a:03:00:be:1c:b0:
                    8e:e5:be:ae:9e:1e:9e:98:29:31:3e:39:de:90:7b:
                    60:9d:76:e5:2d:77:ed:79:8f:10:9d:42:90:a9:22:
                    70:f0:2e:2d:30:2d:45:ec:f8:a3:65:4b:37:f0:62:
                    1b:12:e7:0e:f4:93:3b:77:b8:69:d1:fa:fa:86:52:
                    d3:ca:3a:e2:61:52:a7:94:15:89:fc:ef:7b:ea:27:
                    9b:60:54:59:f1:98:80:d9:b2:a7:c3:ea:b4:6b:1a:
                    f9:88:ea:23:f3:67:de:a9:54:8b:b2:d7:8e:46:2b:
                    58:57:38:ad:04:13:3f:c9:fe:5b:11:9c:c6:f4:ee:
                    35:89:78:0e:e4:b8:79:f3:f8:8b:90:7e:81:08:fa:
                    19:ec:1a:ba:76:ad:d7:a6:3b:bd:c5:c8:81:65:cf:
                    fb:a0:ed:cd:be:6f:7b:d1:61:09:97:09:94:34:07:
                    85:b5:5e:c7:f4:72:8e:20:02:c5:86:50:0b:c4:47:
                    fa:de:60:b8:13:28:dd:a2:a2:9e:fa:bd:7e:52:60:
                    85:77:4d:db:84:b3:9f:c4:a3:6c:62:e3:54:6e:25:
                    57:30:a3:ba:a6:49:f0:c5:f5:aa:47:a4:aa:db:c0:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B4:B5:BF:B8:DA:BB:03:3F:81:88:15:14:99:2F:5A:F9:D8:E3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95f0e04d-a36c-320f-9a58-2d5d2431ce69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:230::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b2:9c:8d:b3:35:80:f0:44:d9:44:09:03:94:22:e9:34:d5:
         60:62:80:53:9c:57:d4:72:cf:f9:08:3a:92:00:6c:2d:66:9c:
         ba:0f:b1:25:79:38:4e:e8:b7:ea:37:6d:25:87:bc:e7:8d:47:
         09:31:19:d6:33:fd:c4:84:ff:5e:26:3b:70:9f:cd:d9:ba:6b:
         31:6d:e5:1e:6d:c1:72:f8:4a:e8:eb:ba:f1:4a:42:bd:9a:bf:
         da:01:99:67:88:ca:52:f5:9d:17:6b:8d:b1:3f:c9:80:13:55:
         d5:d5:f5:ac:d9:37:59:e6:24:20:1a:73:25:b5:c3:42:88:86:
         85:d1:0d:47:0f:db:3e:ba:f5:94:d4:30:0e:a9:88:cd:06:2c:
         3d:3d:46:0d:20:31:da:df:f2:bb:8f:a5:2f:07:e7:3b:73:7d:
         58:08:38:ba:43:09:d2:2b:3d:d1:be:36:1e:0e:25:c5:45:78:
         19:99:ea:df:98:ef:41:3a:5c:2c:22:80:15:76:2c:d4:73:30:
         bd:5f:a5:08:18:d6:90:7d:1d:0a:f7:ba:f1:8b:fe:ff:6e:f3:
         27:87:24:e3:36:ff:75:9e:93:97:68:40:3e:a2:5e:2e:6e:f0:
         82:b8:c7:f1:e6:da:32:ca:db:07:c6:11:bd:e6:38:32:a7:f2:
         87:70:35:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWwx8Lzry2LjamlDUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDQyODAxMzA1MFoXDTI0MDcyNzAxMzA1MFowLzEtMCsGA1UEAxMk
NDMwNzE5NTctZWIzZC00NDJkLThkMmEtYjI3MWYxM2FkODg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifGpaTG3TtttIYTIWvYOqBJTo1mk99CaAwC+
HLCO5b6unh6emCkxPjnekHtgnXblLXfteY8QnUKQqSJw8C4tMC1F7PijZUs38GIb
EucO9JM7d7hp0fr6hlLTyjriYVKnlBWJ/O976iebYFRZ8ZiA2bKnw+q0axr5iOoj
82feqVSLsteORitYVzitBBM/yf5bEZzG9O41iXgO5Lh58/iLkH6BCPoZ7Bq6dq3X
pju9xciBZc/7oO3Nvm970WEJlwmUNAeFtV7H9HKOIALFhlALxEf63mC4EyjdoqKe
+r1+UmCFd03bhLOfxKNsYuNUbiVXMKO6pknwxfWqR6Sq28BYlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLS0tb+42rsDP4GIFRSZL1r52OMfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTVmMGUwNGQtYTM2Yy0z
MjBmLTlhNTgtMmQ1ZDI0MzFjZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHCynI2zNYDwRNlECQOUIuk01WBigFOcV9Ryz/kIOpIAbC1mnLoP
sSV5OE7ot+o3bSWHvOeNRwkxGdYz/cSE/14mO3Cfzdm6azFt5R5twXL4SujruvFK
Qr2av9oBmWeIylL1nRdrjbE/yYATVdXV9azZN1nmJCAacyW1w0KIhoXRDUcP2z66
9ZTUMA6piM0GLD09Rg0gMdrf8ruPpS8H5ztzfVgIOLpDCdIrPdG+Nh4OJcVFeBmZ
6t+Y70E6XCwigBV2LNRzML1fpQgY1pB9HQr3uvGL/v9u8yeHJOM2/3Wek5doQD6i
Xi5u8IK4x/Hm2jLK2wfGEb3mODKn8odwNak=
-----END CERTIFICATE-----
Generated at Mon May 20 01:52:19 2024 by rpki-client on console-ams.rpki-client.org