Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02eea31e-c640-3718-85aa-533ae8f21ea3.roa
File:                     02eea31e-c640-3718-85aa-533ae8f21ea3.roa (raw, json)
Hash identifier:          6xnh8Jmc8tf0RfZWwYGapabtUpiU2sooYpckNnxvYH0=
Subject key identifier:   04:5E:2B:E0:6D:CB:E5:21:72:93:7F:0E:F2:23:62:83:41:16:07:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B4677A806FEB1752D2940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02eea31e-c640-3718-85aa-533ae8f21ea3.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     54371
IP address blocks:        2001:470:82::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:46:77:a8:06:fe:b1:75:2d:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=df42afa3-ad16-481a-9c11-389dec3f9ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:9d:92:2a:40:cb:74:be:97:4b:67:a2:49:
                    32:b4:53:a3:30:4c:f1:d8:3a:54:63:21:58:3b:39:
                    28:e0:46:c9:67:f0:03:54:d9:8b:9d:1d:d6:5a:2d:
                    ab:1b:36:a3:25:4b:19:ec:c1:32:15:4e:4e:8b:79:
                    b2:78:5a:42:83:bb:b2:d1:3c:48:98:69:ed:f2:f3:
                    43:f0:9e:96:af:db:dc:41:bf:a2:2e:f7:39:c2:5f:
                    b8:75:f8:0c:8d:13:9c:fd:05:ee:f6:ca:ee:bc:5d:
                    b2:6c:1b:a2:87:eb:a4:97:bd:a5:14:57:e8:a7:e9:
                    3b:69:f0:e6:38:80:6c:12:f0:7b:6f:3c:f0:b3:80:
                    2e:25:ef:10:c7:73:80:37:99:c4:5d:57:54:a3:36:
                    35:6b:c4:47:bf:35:53:14:a8:d1:9a:88:ca:5d:62:
                    e4:0a:ec:41:7c:88:e9:51:1a:57:0b:0a:13:ce:ac:
                    24:0d:bf:2f:ad:4f:bc:28:8a:43:f7:17:56:b1:94:
                    ed:71:c3:9c:98:81:36:5e:0d:40:82:3f:f2:5b:e1:
                    e6:5c:2a:21:97:18:9c:a7:6f:ee:af:9e:c6:7c:2c:
                    66:bc:b2:f5:3c:0d:30:96:15:63:5b:01:0b:70:1d:
                    1c:18:dd:5a:47:19:34:fb:4d:7a:22:16:b6:b7:5f:
                    2c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5E:2B:E0:6D:CB:E5:21:72:93:7F:0E:F2:23:62:83:41:16:07:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02eea31e-c640-3718-85aa-533ae8f21ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:81:40:42:08:27:ee:97:0b:ce:b0:fe:23:74:65:10:81:fb:
         4e:5e:04:18:6a:d0:a3:3f:74:72:00:8a:2b:a5:f4:49:f2:cb:
         c4:13:f3:a6:50:fe:c6:bb:9e:30:9b:78:e3:40:2a:0b:be:6f:
         58:9e:86:e7:cc:b9:32:e0:68:ad:8e:10:35:3e:1d:ea:8b:82:
         7b:aa:8f:df:d1:c9:a8:4d:9f:5e:cb:f0:82:d1:7e:b3:7f:28:
         65:be:a6:86:f8:ca:05:c5:f1:21:3b:2b:7f:5b:cb:97:20:45:
         f9:c8:0b:ce:07:67:cc:34:ca:ff:43:8f:68:57:8c:74:03:9b:
         88:2b:35:37:13:5f:cf:4f:45:dc:3c:b5:bb:0b:47:21:ad:1c:
         e7:b6:df:53:3e:7e:eb:cd:f2:85:25:11:de:11:bd:b0:1f:d6:
         02:9c:72:f2:98:3d:be:87:c1:e2:1c:43:77:ce:24:de:dd:5f:
         c7:d2:91:9f:0b:4a:e2:8e:03:72:7e:7a:b6:de:8f:0d:05:eb:
         a7:a5:a6:63:55:00:b7:91:5f:9a:f5:93:1f:06:e7:c0:b0:f1:
         37:84:ba:56:1f:26:6f:a2:07:da:c2:1f:73:f2:c1:08:9f:ff:
         5a:d4:8d:74:35:b8:c7:2d:aa:9d:dd:c4:f8:28:ce:7c:db:09:
         23:e9:6a:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W0Z3qAb+sXUtKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZGY0MmFmYTMtYWQxNi00ODFhLTljMTEtMzg5ZGVjM2Y5YWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH+dkipAy3S+l0tnokkytFOjMEzx2DpUYyFY
Ozko4EbJZ/ADVNmLnR3WWi2rGzajJUsZ7MEyFU5Oi3myeFpCg7uy0TxImGnt8vND
8J6Wr9vcQb+iLvc5wl+4dfgMjROc/QXu9sruvF2ybBuih+ukl72lFFfop+k7afDm
OIBsEvB7bzzws4AuJe8Qx3OAN5nEXVdUozY1a8RHvzVTFKjRmojKXWLkCuxBfIjp
URpXCwoTzqwkDb8vrU+8KIpD9xdWsZTtccOcmIE2Xg1Agj/yW+HmXCohlxicp2/u
r57GfCxmvLL1PA0wlhVjWwELcB0cGN1aRxk0+016Iha2t18siwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAReK+Bty+UhcpN/DvIjYoNBFgfEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDJlZWEzMWUtYzY0MC0z
NzE4LTg1YWEtNTMzYWU4ZjIxZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADeBQEIIJ+6XC86w/iN0ZRCB+05eBBhq0KM/dHIAiiul9Enyy8QT
86ZQ/sa7njCbeONAKgu+b1iehufMuTLgaK2OEDU+HeqLgnuqj9/RyahNn17L8ILR
frN/KGW+pob4ygXF8SE7K39by5cgRfnIC84HZ8w0yv9Dj2hXjHQDm4grNTcTX89P
Rdw8tbsLRyGtHOe231M+fuvN8oUlEd4RvbAf1gKccvKYPb6HweIcQ3fOJN7dX8fS
kZ8LSuKOA3J+erbejw0F66elpmNVALeRX5r1kx8G58Cw8TeEulYfJm+iB9rCH3Py
wQif/1rUjXQ1uMctqp3dxPgoznzbCSPpaqk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:20 2024 by rpki-client on console-ams.rpki-client.org