Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b778e23e-e022-364e-8a68-aaf3dbdb8803.roa
File:                     b778e23e-e022-364e-8a68-aaf3dbdb8803.roa (raw, json)
Hash identifier:          +HvQAI8ctFUr5MeN/XdtulgEiHitXr0Zj3uEXLkvSEQ=
Subject key identifier:   F5:A7:2A:34:84:F9:EF:0A:AC:EC:0A:F7:42:EE:B6:B5:88:1C:AC:7F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845CF6E459BCCB9CD5D09FABD30
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b778e23e-e022-364e-8a68-aaf3dbdb8803.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     199518
IP address blocks:        2001:470:232::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:45:9b:cc:b9:cd:5d:09:fa:bd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=b78f1917-ee5b-4349-b96f-62e25684e88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:74:47:04:15:17:69:b4:c2:29:fa:a6:93:
                    c4:e0:b9:7e:de:2e:c0:d9:96:49:eb:fa:ae:d9:4b:
                    d3:9c:bf:53:0f:b4:39:25:75:ec:07:f3:77:86:5c:
                    ee:38:cc:47:b2:87:58:79:22:7f:f7:4b:47:b5:39:
                    b1:7d:ac:25:c4:6b:97:21:b4:4e:50:d9:ea:25:12:
                    1b:ae:47:6c:38:a9:d9:c2:21:e7:20:4e:02:9f:6b:
                    51:fc:a3:d3:43:db:27:f4:5e:77:4b:1f:86:b6:9f:
                    76:a4:5b:df:1e:11:2b:b3:88:a3:90:37:9f:77:88:
                    57:75:c5:10:a2:54:95:18:d8:fd:88:fa:2d:9e:3f:
                    04:10:42:5f:81:79:6b:0b:f2:60:93:e7:06:fe:31:
                    3d:8b:f0:ed:36:94:1e:47:d9:c2:ab:39:55:69:7b:
                    60:81:9f:38:63:93:c3:df:89:25:0e:b8:b4:ce:13:
                    2f:4b:d9:3f:0c:52:83:51:dc:95:81:7d:7f:1b:66:
                    2a:17:c5:4d:c3:04:02:e8:12:73:05:4c:9a:38:c9:
                    e5:be:2c:ee:b7:fd:a0:88:82:6c:e4:51:9d:98:f2:
                    17:66:7b:77:0a:06:e6:04:fb:f9:39:07:1a:fd:9e:
                    58:58:fa:0e:0b:51:e8:bd:9b:26:e4:c1:c4:78:16:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A7:2A:34:84:F9:EF:0A:AC:EC:0A:F7:42:EE:B6:B5:88:1C:AC:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b778e23e-e022-364e-8a68-aaf3dbdb8803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:232::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ca:32:11:f3:8f:e6:8e:a2:2c:1d:76:8c:45:7a:87:87:21:
         a6:8c:dd:17:01:45:20:a6:ef:d7:63:2a:94:ae:83:f9:e4:ec:
         14:3a:73:05:c3:69:e0:2a:4a:18:77:dd:11:9d:73:ef:e3:b6:
         6a:c8:50:6c:be:c2:69:19:34:74:75:50:92:8d:47:e4:d4:54:
         0f:16:b9:de:5a:5f:19:a2:7d:72:9c:c4:42:03:12:16:65:21:
         41:1d:b0:7c:e5:16:bc:8e:4f:09:70:80:34:95:99:76:e3:f9:
         d6:f0:41:90:c4:d9:0d:a2:07:8b:28:55:e5:d1:da:a0:fd:d7:
         37:ad:6b:90:b1:59:34:6d:31:32:ae:47:59:b6:54:dc:70:6c:
         c7:30:e5:31:d8:bf:de:5c:41:5a:bd:7e:1a:93:e3:f5:06:7b:
         16:75:70:81:d8:da:2e:37:74:f3:7a:2c:7d:bf:0c:46:77:52:
         a0:50:41:0d:55:23:57:7f:2f:69:98:e3:c0:c2:d4:9e:3f:dc:
         35:54:1d:4c:2b:cb:51:8f:c6:a2:79:0d:d3:5f:73:82:14:39:
         67:92:6b:40:68:88:f3:5c:3a:5a:69:34:db:7f:d1:f5:78:92:
         25:18:ae:2d:a3:85:19:05:b5:08:b1:62:fa:f1:a5:cb:36:fd:
         2f:15:96:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXPbkWbzLnNXQn6vTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUwOTAxMDAyNloXDTI0MDgwNzAxMDAyNlowLzEtMCsGA1UEAxMk
Yjc4ZjE5MTctZWU1Yi00MzQ5LWI5NmYtNjJlMjU2ODRlODhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOx0RwQVF2m0win6ppPE4Ll+3i7A2ZZJ6/qu
2UvTnL9TD7Q5JXXsB/N3hlzuOMxHsodYeSJ/90tHtTmxfawlxGuXIbROUNnqJRIb
rkdsOKnZwiHnIE4Cn2tR/KPTQ9sn9F53Sx+Gtp92pFvfHhErs4ijkDefd4hXdcUQ
olSVGNj9iPotnj8EEEJfgXlrC/Jgk+cG/jE9i/DtNpQeR9nCqzlVaXtggZ84Y5PD
34klDri0zhMvS9k/DFKDUdyVgX1/G2YqF8VNwwQC6BJzBUyaOMnlvizut/2giIJs
5FGdmPIXZnt3CgbmBPv5OQca/Z5YWPoOC1HovZsm5MHEeBYtKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPWnKjSE+e8KrOwK90LutrWIHKx/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjc3OGUyM2UtZTAyMi0z
NjRlLThhNjgtYWFmM2RiZGI4ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAHKMhHzj+aOoiwddoxFeoeHIaaM3RcBRSCm79djKpSug/nk7BQ6
cwXDaeAqShh33RGdc+/jtmrIUGy+wmkZNHR1UJKNR+TUVA8Wud5aXxmifXKcxEID
EhZlIUEdsHzlFryOTwlwgDSVmXbj+dbwQZDE2Q2iB4soVeXR2qD91zeta5CxWTRt
MTKuR1m2VNxwbMcw5THYv95cQVq9fhqT4/UGexZ1cIHY2i43dPN6LH2/DEZ3UqBQ
QQ1VI1d/L2mY48DC1J4/3DVUHUwry1GPxqJ5DdNfc4IUOWeSa0BoiPNcOlppNNt/
0fV4kiUYri2jhRkFtQixYvrxpcs2/S8VlpU=
-----END CERTIFICATE-----
Generated at Mon May 20 01:52:46 2024 by rpki-client on console-fra.rpki-client.org