Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da224165-5cc2-3114-91a9-5910e4d8f8c5.roa
File:                     da224165-5cc2-3114-91a9-5910e4d8f8c5.roa (raw, json)
Hash identifier:          mAFGnyY1RTUxGmH8jGgmHaqKZ6xpLj+kfhrXWmLIV9c=
Subject key identifier:   B1:2F:49:45:60:6D:D5:57:32:D6:B7:52:84:C7:1E:A1:68:16:17:EC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846004C8ADA5269C1F245F77A10
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da224165-5cc2-3114-91a9-5910e4d8f8c5.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     29768
IP address blocks:        2001:470:1c1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:8a:da:52:69:c1:f2:45:f7:7a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=c06ed24e-48a7-474f-8870-2f25c7535d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:3b:50:99:e9:09:20:b6:da:06:70:d0:4d:
                    5a:a8:67:4c:31:db:a8:cb:92:ff:e9:ed:36:45:3e:
                    46:f7:f2:96:a3:2e:62:46:a3:9a:71:a6:74:dc:22:
                    8f:80:69:5f:bb:2b:db:95:6a:49:99:38:d9:8b:dd:
                    5f:f5:1d:1c:d1:61:2c:31:10:62:a9:b0:35:1d:a4:
                    e8:51:13:00:9f:a1:48:33:40:36:c3:36:76:41:29:
                    39:f5:c3:b8:ff:2c:05:fc:c2:82:2e:8e:7f:62:92:
                    60:d2:bc:28:1e:72:b7:cf:32:80:82:d1:3d:f5:a4:
                    c2:52:a1:25:03:be:35:cb:72:c4:af:81:e6:3e:09:
                    98:bb:a5:0b:ce:75:37:5a:c4:07:62:89:84:39:32:
                    8c:82:45:d5:c1:84:23:91:48:e8:ef:ab:b8:c2:07:
                    b5:d8:77:d5:d5:91:bb:00:f0:2c:e0:c0:80:3d:09:
                    35:b5:87:54:02:fe:1c:5c:fa:7c:99:36:96:e4:b6:
                    0c:74:e7:4d:d1:2a:80:a0:ff:57:c3:24:aa:37:0d:
                    c2:90:b5:aa:ba:1f:3c:de:6a:28:5b:c9:ae:3d:66:
                    8d:f4:8a:45:c5:f5:ce:e1:ee:60:f1:aa:c5:78:8c:
                    13:b0:d0:7f:83:cd:ee:77:8e:d2:6d:e9:25:67:72:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2F:49:45:60:6D:D5:57:32:D6:B7:52:84:C7:1E:A1:68:16:17:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da224165-5cc2-3114-91a9-5910e4d8f8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:15:69:de:77:11:b5:95:e9:fa:2f:bf:8f:fe:a9:00:82:
         8d:b2:95:0b:f1:b0:62:88:a8:2a:cc:3b:d6:58:50:f8:78:42:
         81:61:bd:22:0e:06:de:22:c4:4a:4a:13:51:46:e0:b8:9d:22:
         58:b9:7a:e1:2c:b3:da:b9:84:1d:a0:a9:7e:8e:50:03:ec:8c:
         bd:8b:d4:ac:fa:ea:80:76:3b:f9:a3:93:5a:e2:8d:4c:b9:7b:
         4b:6b:66:76:00:78:57:bb:97:32:a2:2e:d5:b9:4d:e9:f7:ef:
         d5:95:1d:5c:de:95:36:7a:83:df:be:00:23:d6:1a:53:a3:d2:
         a2:f0:cf:f5:9a:21:76:e8:8c:3a:b9:bc:95:aa:f8:c5:6c:10:
         d5:9b:fa:b3:4b:dc:93:43:36:96:5e:a5:16:e7:8c:52:d1:93:
         48:9a:02:8e:08:1b:2d:e8:2e:f3:54:cf:21:27:eb:a1:96:0a:
         fe:9a:2f:a4:7f:44:99:63:fd:15:7e:3b:6d:61:6d:52:8d:0e:
         af:18:40:56:cd:d2:ef:e2:d8:d4:ec:01:09:a7:ed:42:7b:47:
         e3:54:67:40:01:19:c1:66:16:38:cc:d1:85:30:27:3a:25:d0:
         c2:6f:ed:ea:6f:cb:ea:3d:b7:76:94:d1:4e:83:63:24:d1:de:
         75:da:a1:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYATIraUmnB8kX3ehAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
YzA2ZWQyNGUtNDhhNy00NzRmLTg4NzAtMmYyNWM3NTM1ZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFY7UJnpCSC22gZw0E1aqGdMMduoy5L/6e02
RT5G9/KWoy5iRqOacaZ03CKPgGlfuyvblWpJmTjZi91f9R0c0WEsMRBiqbA1HaTo
URMAn6FIM0A2wzZ2QSk59cO4/ywF/MKCLo5/YpJg0rwoHnK3zzKAgtE99aTCUqEl
A741y3LEr4HmPgmYu6ULznU3WsQHYomEOTKMgkXVwYQjkUjo76u4wge12HfV1ZG7
APAs4MCAPQk1tYdUAv4cXPp8mTaW5LYMdOdN0SqAoP9XwySqNw3CkLWquh883moo
W8muPWaN9IpFxfXO4e5g8arFeIwTsNB/g83ud47SbeklZ3IaOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLEvSUVgbdVXMta3UoTHHqFoFhfsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGEyMjQxNjUtNWNjMi0z
MTE0LTkxYTktNTkxMGU0ZDhmOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABe4FWnedxG1len6L7+P/qkAgo2ylQvxsGKIqCrMO9ZYUPh4QoFh
vSIOBt4ixEpKE1FG4LidIli5euEss9q5hB2gqX6OUAPsjL2L1Kz66oB2O/mjk1ri
jUy5e0trZnYAeFe7lzKiLtW5Ten379WVHVzelTZ6g9++ACPWGlOj0qLwz/WaIXbo
jDq5vJWq+MVsENWb+rNL3JNDNpZepRbnjFLRk0iaAo4IGy3oLvNUzyEn66GWCv6a
L6R/RJlj/RV+O21hbVKNDq8YQFbN0u/i2NTsAQmn7UJ7R+NUZ0ABGcFmFjjM0YUw
Jzol0MJv7epvy+o9t3aU0U6DYyTR3nXaobI=
-----END CERTIFICATE-----
Generated at Fri May 31 15:36:16 2024 by rpki-client on console-fra.rpki-client.org