Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be89c4d5-150f-37b5-a9d8-d7cca2bd8719.roa
File:                     be89c4d5-150f-37b5-a9d8-d7cca2bd8719.roa (raw, json)
Hash identifier:          eOX+WEF3DBvFdAu50yLbM8KDevJedQ+CXBrN0XTqxv8=
Subject key identifier:   34:E8:97:3B:C1:D3:83:44:06:0E:90:F6:51:74:7F:4D:20:4F:DB:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933C9F3C765A747E61EE260
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be89c4d5-150f-37b5-a9d8-d7cca2bd8719.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     393259
IP address blocks:        2001:470:b7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:c9:f3:c7:65:a7:47:e6:1e:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=a68a976c-cd3b-4103-ace3-e185208cac95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:88:48:1c:a5:dc:c9:45:2f:0b:53:b4:18:
                    0d:b5:f4:7b:3a:cc:89:40:7c:dc:0f:da:11:3f:d6:
                    25:e0:ac:72:ce:9b:f2:0a:fe:8c:24:b1:07:86:37:
                    b8:6e:70:f3:f2:ca:7e:48:2c:71:a9:10:ec:99:3e:
                    82:f5:1a:15:ad:ed:27:28:97:f8:8c:5f:da:12:2a:
                    c4:6f:62:c7:24:0c:6f:04:e4:f7:3f:c8:15:ef:11:
                    fd:9d:82:00:f1:a0:fe:61:6a:ac:90:be:c8:09:6c:
                    06:a5:dc:ad:e4:38:15:80:cc:2c:99:48:2c:22:cc:
                    be:7d:d0:57:98:2d:fe:e4:e5:5d:70:27:d6:ad:3f:
                    fa:79:b8:de:2e:ec:03:6b:10:89:d2:c2:0e:ab:8b:
                    e3:ac:39:7c:25:39:1e:f8:81:c8:5f:47:b7:5e:4a:
                    49:fb:06:5c:87:63:fe:de:9b:16:ee:8e:bb:64:e8:
                    b9:3f:66:20:c4:65:9b:6a:8f:34:b4:f5:46:c2:c2:
                    2c:06:34:d4:3e:0b:40:33:20:5d:72:7e:33:6c:26:
                    02:83:4d:ca:4f:8f:d4:c8:57:ed:04:4c:92:c0:73:
                    20:fb:b5:c8:c6:d8:45:44:71:58:a1:9d:1e:22:e6:
                    3b:f0:35:1b:1f:b8:c0:14:8a:e4:53:36:0d:c7:2c:
                    81:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E8:97:3B:C1:D3:83:44:06:0E:90:F6:51:74:7F:4D:20:4F:DB:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be89c4d5-150f-37b5-a9d8-d7cca2bd8719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:f6:48:ec:88:37:be:c3:16:c6:30:b4:de:b2:35:fc:c7:
         8b:f3:7f:e0:86:96:33:79:dc:fe:d2:9f:32:df:4e:06:7d:ee:
         73:48:16:e0:b6:f7:b3:b3:20:de:b1:56:78:e2:fb:68:7a:0d:
         f0:0c:0a:c2:52:a5:1e:7d:aa:70:26:dc:b1:7b:85:16:cf:34:
         6d:a6:d9:f0:1f:9c:f7:10:0c:73:97:a0:fd:de:b1:fa:ff:b5:
         dc:21:88:f9:a2:16:f4:b6:97:0f:70:3a:e9:9e:58:36:50:76:
         99:f0:61:8f:3a:8b:1d:e0:4a:ec:6f:91:4a:cd:6d:a7:a5:28:
         33:0b:04:8a:b3:3f:2e:78:1a:e9:83:e5:8b:fd:85:11:ff:36:
         e0:71:c5:63:cc:dd:3b:08:17:c0:01:aa:ce:ad:c1:83:69:d2:
         5c:54:00:b7:10:d2:67:db:40:27:96:83:95:33:f0:72:31:19:
         14:30:72:05:16:cb:66:7c:57:42:6e:ec:d3:ce:55:1e:d3:b7:
         59:53:ac:17:47:99:a8:81:a5:94:90:9a:7d:ae:ed:2c:35:ad:
         b4:02:94:2c:d5:b9:f0:a5:f5:ad:63:25:f8:78:94:dc:6b:0c:
         f2:79:28:50:48:d3:df:9f:f1:6b:bd:34:f2:02:c5:4a:63:f5:
         ae:e6:7d:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXZM8nzx2WnR+Ye4mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
YTY4YTk3NmMtY2QzYi00MTAzLWFjZTMtZTE4NTIwOGNhYzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkWISByl3MlFLwtTtBgNtfR7OsyJQHzcD9oR
P9Yl4KxyzpvyCv6MJLEHhje4bnDz8sp+SCxxqRDsmT6C9RoVre0nKJf4jF/aEirE
b2LHJAxvBOT3P8gV7xH9nYIA8aD+YWqskL7ICWwGpdyt5DgVgMwsmUgsIsy+fdBX
mC3+5OVdcCfWrT/6ebjeLuwDaxCJ0sIOq4vjrDl8JTke+IHIX0e3XkpJ+wZch2P+
3psW7o67ZOi5P2YgxGWbao80tPVGwsIsBjTUPgtAMyBdcn4zbCYCg03KT4/UyFft
BEySwHMg+7XIxthFRHFYoZ0eIuY78DUbH7jAFIrkUzYNxyyBwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDTolzvB04NEBg6Q9lF0f00gT9veMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmU4OWM0ZDUtMTUwZi0z
N2I1LWE5ZDgtZDdjY2EyYmQ4NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGCp9kjsiDe+wxbGMLTesjX8x4vzf+CGljN53P7SnzLfTgZ97nNI
FuC297OzIN6xVnji+2h6DfAMCsJSpR59qnAm3LF7hRbPNG2m2fAfnPcQDHOXoP3e
sfr/tdwhiPmiFvS2lw9wOumeWDZQdpnwYY86ix3gSuxvkUrNbaelKDMLBIqzPy54
GumD5Yv9hRH/NuBxxWPM3TsIF8ABqs6twYNp0lxUALcQ0mfbQCeWg5Uz8HIxGRQw
cgUWy2Z8V0Ju7NPOVR7Tt1lTrBdHmaiBpZSQmn2u7Sw1rbQClCzVufCl9a1jJfh4
lNxrDPJ5KFBI09+f8Wu9NPICxUpj9a7mfT4=
-----END CERTIFICATE-----
Generated at Mon May 20 01:52:19 2024 by rpki-client on console-ams.rpki-client.org