Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
File:                     02510d32-350c-313e-936b-3ebdbbc8f953.roa (raw, json)
Hash identifier:          xUqhEwqPQ1RVcokt2Rh43A+ArZ1aALV8fVK+W1b2WSs=
Subject key identifier:   52:E5:4D:FB:83:F0:9C:4E:0E:94:20:BF:7F:BF:52:DC:63:C6:02:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D006CE72973224AC680280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     401117
IP address blocks:        2001:470:323::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:06:ce:72:97:32:24:ac:68:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=ba57ad63-2a82-495f-a727-7e89b0ad1275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cf:b9:ce:e6:ea:59:bc:45:59:79:81:42:8e:
                    f1:26:2e:b0:a2:9a:d3:40:97:f1:77:04:f5:a5:f4:
                    b1:f8:7c:f1:6b:42:1e:10:52:ea:d7:7e:fb:c2:25:
                    e7:13:44:a0:1e:c6:33:cb:34:29:fc:fc:ec:41:fc:
                    04:21:c0:31:87:c8:4c:df:a9:22:59:37:e7:d9:d4:
                    9f:e8:03:f5:64:22:0a:24:53:3e:07:fe:73:22:19:
                    28:db:f9:27:7c:25:52:12:0c:0d:fd:1a:53:22:86:
                    d8:1e:40:84:25:12:ca:2c:35:d1:f8:08:cc:23:b7:
                    05:a8:30:c9:55:00:ce:f2:24:01:3e:47:26:69:b7:
                    d5:10:9d:19:93:db:a0:44:f5:ca:8f:e0:a0:e4:43:
                    fe:44:41:ad:f8:f1:65:40:02:7d:9f:78:83:38:28:
                    70:c3:39:5d:1c:1b:65:0e:45:3a:0a:dd:54:af:3b:
                    ef:26:ae:7a:8a:1a:cd:d5:d6:b5:83:46:bf:ff:02:
                    03:6f:73:49:f5:58:6b:4a:51:07:ff:20:8a:8d:38:
                    c1:c6:04:a6:a8:a5:0b:26:cd:7c:64:90:f0:8a:ae:
                    ba:9c:fe:6a:29:2f:e2:b6:f5:63:ac:76:af:8f:b6:
                    4c:38:98:b4:f3:63:62:01:d0:34:be:7e:30:b5:b0:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E5:4D:FB:83:F0:9C:4E:0E:94:20:BF:7F:BF:52:DC:63:C6:02:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:323::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ef:a5:99:6a:29:c9:72:ca:66:c3:4f:ca:4c:10:66:a4:8a:
         ba:6c:f7:7c:c9:e9:a1:6b:e1:77:b7:6e:c2:b1:4f:22:8f:5d:
         5e:bb:f2:8f:22:98:cd:51:d7:47:cf:a3:c5:1a:ab:55:b6:13:
         25:30:f0:ba:f5:b7:70:b8:4f:f8:91:42:7e:49:7c:0c:cc:ba:
         ea:7e:63:d5:8f:12:9c:e7:26:14:1e:ea:31:aa:28:9e:b0:57:
         1d:bb:dc:c4:15:69:29:5f:fd:23:e4:10:d4:50:bc:35:82:04:
         eb:4a:12:7f:27:48:ac:a6:42:63:94:e1:69:a9:50:5b:b9:ab:
         59:e7:93:8e:ed:24:65:84:9e:54:7a:cc:3a:92:71:67:26:f1:
         f9:48:71:c4:c0:6d:07:e6:14:62:e8:5e:a8:80:53:2b:54:cd:
         ac:17:09:0f:2f:5f:c9:de:0d:31:ec:51:b9:eb:92:3f:aa:9c:
         cd:77:65:34:73:c7:5d:14:18:1b:1b:22:73:95:83:7c:20:47:
         4f:f0:49:b7:61:b7:ad:29:79:c4:c4:8f:de:74:09:7e:a1:66:
         07:44:42:d8:17:05:2b:a0:7b:de:f8:03:da:fd:f9:7c:98:53:
         77:33:bc:0c:50:40:71:89:1c:c5:c4:e3:30:e6:f8:a1:21:60:
         6d:06:d6:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZ0AbOcpcyJKxoAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YmE1N2FkNjMtMmE4Mi00OTVmLWE3MjctN2U4OWIwYWQxMjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs+5zubqWbxFWXmBQo7xJi6woprTQJfxdwT1
pfSx+Hzxa0IeEFLq1377wiXnE0SgHsYzyzQp/PzsQfwEIcAxh8hM36kiWTfn2dSf
6AP1ZCIKJFM+B/5zIhko2/knfCVSEgwN/RpTIobYHkCEJRLKLDXR+AjMI7cFqDDJ
VQDO8iQBPkcmabfVEJ0Zk9ugRPXKj+Cg5EP+REGt+PFlQAJ9n3iDOChwwzldHBtl
DkU6Ct1UrzvvJq56ihrN1da1g0a//wIDb3NJ9VhrSlEH/yCKjTjBxgSmqKULJs18
ZJDwiq66nP5qKS/itvVjrHavj7ZMOJi082NiAdA0vn4wtbAmcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFLlTfuD8JxODpQgv3+/UtxjxgK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDI1MTBkMzItMzUwYy0z
MTNlLTkzNmItM2ViZGJiYzhmOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ7vpZlqKclyymbDT8pMEGakirps93zJ6aFr4Xe3bsKxTyKPXV67
8o8imM1R10fPo8Uaq1W2EyUw8Lr1t3C4T/iRQn5JfAzMuup+Y9WPEpznJhQe6jGq
KJ6wVx273MQVaSlf/SPkENRQvDWCBOtKEn8nSKymQmOU4WmpUFu5q1nnk47tJGWE
nlR6zDqScWcm8flIccTAbQfmFGLoXqiAUytUzawXCQ8vX8neDTHsUbnrkj+qnM13
ZTRzx10UGBsbInOVg3wgR0/wSbdht60pecTEj950CX6hZgdEQtgXBSuge974A9r9
+XyYU3czvAxQQHGJHMXE4zDm+KEhYG0G1lE=
-----END CERTIFICATE-----
Generated at Fri Feb 7 17:46:42 2025 by rpki-client