Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7ca869b-dd26-3608-879f-11e364e3a5d0.roa
File:                     e7ca869b-dd26-3608-879f-11e364e3a5d0.roa (raw, json)
Hash identifier:          xG6PoJhVQto2SFkkmjYXCdEG0q72Pb+6Obdj3DfX6Vk=
Subject key identifier:   78:8D:C4:9C:4B:89:75:8D:0A:15:50:A9:FF:A2:99:7E:A6:65:08:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845E193D4BBC0B18B5F2DA097C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7ca869b-dd26-3608-879f-11e364e3a5d0.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     61986
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:d4:bb:c0:b1:8b:5f:2d:a0:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=9da6e61a-72ff-4921-969f-8499a130a042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:1a:2a:82:ac:94:da:68:a3:7b:08:6c:c8:
                    8d:3d:89:3f:9f:94:26:4c:04:51:07:6e:c0:75:72:
                    49:d6:40:62:cd:3b:17:ae:9b:dd:b2:74:65:b4:78:
                    08:50:1f:60:08:05:b5:fd:7e:64:19:3a:d8:11:69:
                    6c:d7:91:77:e6:45:24:98:38:f8:a7:e5:22:2b:34:
                    a4:d9:f8:52:1d:18:b0:7b:0d:64:60:4f:0b:d2:43:
                    84:51:99:ca:3b:fb:94:80:3b:27:3d:56:3c:f3:4d:
                    a5:cb:b1:61:61:23:55:2f:0c:60:6f:41:ea:b3:3e:
                    cc:74:0e:03:16:55:6d:18:34:c6:87:c3:da:32:19:
                    75:f8:b7:0c:20:f0:ba:27:a0:a2:32:64:23:0e:a5:
                    77:8f:3f:ef:9b:0f:84:31:29:85:97:3c:aa:e5:ef:
                    ca:67:d4:95:1e:07:09:aa:80:4d:a8:7e:09:67:a2:
                    ad:35:a0:89:13:de:f8:7b:5f:c1:dd:6e:30:39:55:
                    c6:86:a5:d9:f8:2a:84:a0:56:0a:0b:2d:22:ae:e5:
                    37:82:7b:4b:2d:ae:4e:10:9d:af:93:de:30:44:9a:
                    57:e1:7c:e6:6b:b0:2f:bd:9c:00:52:83:b6:9e:37:
                    6f:af:91:22:bc:30:9a:59:86:68:c5:0a:b1:66:7c:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8D:C4:9C:4B:89:75:8D:0A:15:50:A9:FF:A2:99:7E:A6:65:08:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7ca869b-dd26-3608-879f-11e364e3a5d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:8f:a9:9b:2a:4d:eb:0b:95:46:d6:bb:c2:a5:95:22:30:bf:
         6f:3a:92:23:24:d0:d8:da:f3:dd:b6:7b:19:5d:9a:d6:2f:59:
         16:dc:41:ba:68:b6:03:79:24:6f:25:9e:69:1f:21:47:4b:b5:
         55:75:7e:11:0e:20:08:22:e4:0b:c4:03:8e:3a:b6:19:07:ca:
         19:41:73:e3:35:c1:c0:45:5f:11:91:0c:a0:c4:32:ef:f6:0c:
         93:ca:43:30:17:30:4a:0b:fe:0a:bc:3b:85:69:10:0d:f2:9c:
         8d:90:62:e5:8f:f2:ae:04:78:de:a8:70:fc:84:4c:62:9d:9d:
         28:a3:19:96:db:85:88:48:74:bd:aa:f8:ed:1d:46:3d:00:40:
         dd:39:90:01:25:89:5e:10:57:d9:7b:e4:8c:97:b3:5f:89:5a:
         1b:c2:1e:a1:3c:f7:e5:3d:94:18:3a:63:bc:61:74:3a:d5:17:
         bd:b2:dc:8d:ef:3c:55:72:99:61:f5:51:ac:57:f3:ad:de:87:
         f3:b6:fd:32:6d:bc:59:23:4a:e8:0a:67:f2:ab:2c:8b:ce:42:
         d2:10:40:69:7d:b2:a0:a8:cf:ef:0d:7b:d1:b4:4d:62:d5:b5:
         5f:d5:15:5f:a8:c8:f5:b3:49:ed:bd:5a:5b:2b:a1:f3:3e:fa:
         e0:09:78:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXhk9S7wLGLXy2gl8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDUxNTEzMDAzNFoXDTI0MDgxMzEzMDAzNFowLzEtMCsGA1UEAxMk
OWRhNmU2MWEtNzJmZi00OTIxLTk2OWYtODQ5OWExMzBhMDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gQaKoKslNpoo3sIbMiNPYk/n5QmTARRB27A
dXJJ1kBizTsXrpvdsnRltHgIUB9gCAW1/X5kGTrYEWls15F35kUkmDj4p+UiKzSk
2fhSHRiwew1kYE8L0kOEUZnKO/uUgDsnPVY8802ly7FhYSNVLwxgb0Hqsz7MdA4D
FlVtGDTGh8PaMhl1+LcMIPC6J6CiMmQjDqV3jz/vmw+EMSmFlzyq5e/KZ9SVHgcJ
qoBNqH4JZ6KtNaCJE974e1/B3W4wOVXGhqXZ+CqEoFYKCy0iruU3gntLLa5OEJ2v
k94wRJpX4Xzma7AvvZwAUoO2njdvr5EivDCaWYZoxQqxZnzlTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHiNxJxLiXWNChVQqf+imX6mZQi9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTdjYTg2OWItZGQyNi0z
NjA4LTg3OWYtMTFlMzY0ZTNhNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKyPqZsqTesLlUbWu8KllSIwv286kiMk0Nja8922exldmtYvWRbc
QbpotgN5JG8lnmkfIUdLtVV1fhEOIAgi5AvEA446thkHyhlBc+M1wcBFXxGRDKDE
Mu/2DJPKQzAXMEoL/gq8O4VpEA3ynI2QYuWP8q4EeN6ocPyETGKdnSijGZbbhYhI
dL2q+O0dRj0AQN05kAEliV4QV9l75IyXs1+JWhvCHqE89+U9lBg6Y7xhdDrVF72y
3I3vPFVymWH1UaxX863eh/O2/TJtvFkjSugKZ/KrLIvOQtIQQGl9sqCoz+8Ne9G0
TWLVtV/VFV+oyPWzSe29WlsrofM++uAJeEY=
-----END CERTIFICATE-----
Generated at Mon May 20 01:52:20 2024 by rpki-client on console-ams.rpki-client.org