Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/038ea414-e340-3045-94e0-39ae37c3678f.roa
File:                     038ea414-e340-3045-94e0-39ae37c3678f.roa (raw, json)
Hash identifier:          h7dkExPjN85z7rQfpwbvwIyl+CHmRXBiRD5LRQKpzcY=
Subject key identifier:   C4:C3:55:1D:C5:2C:52:B1:0C:57:F2:7F:F3:5C:7B:2E:1C:27:13:86
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845105F2DBCE99685E1D6724300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/038ea414-e340-3045-94e0-39ae37c3678f.roa
Signing time:             Fri 01 Mar 2024 14:30:47 +0000
ROA not before:           Fri 01 Mar 2024 14:30:47 +0000
ROA not after:            Thu 30 May 2024 13:30:47 +0000
asID:                     56971
IP address blocks:        2001:470:2ac::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:5f:2d:bc:e9:96:85:e1:d6:72:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  1 14:30:47 2024 GMT
            Not After : May 30 13:30:47 2024 GMT
        Subject: CN=e512ddc4-0961-49cb-bd54-4e40b026c3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:9e:97:3c:0c:9e:c1:d9:ce:b0:d1:04:96:
                    14:81:34:7e:7f:37:28:d4:27:2f:ab:a3:67:42:52:
                    9d:4d:fe:de:bc:80:35:e2:5d:c2:15:d0:bd:d1:4e:
                    76:ae:1c:49:57:e6:64:74:46:41:8b:78:ec:e1:2a:
                    c2:1e:9d:22:ed:47:df:ea:a7:b7:2d:33:1a:2a:dc:
                    5d:fe:77:49:f9:49:3b:f5:38:e9:28:2e:d1:dd:bc:
                    68:36:25:c2:0b:61:61:f2:a6:88:b1:05:dc:50:47:
                    b4:43:68:0a:0f:f6:82:6b:50:1d:01:59:15:4c:aa:
                    e1:4f:68:8b:87:fa:5c:c9:f9:13:57:af:f8:0c:39:
                    62:0b:ab:be:ae:cc:3a:f9:1c:e7:67:09:2b:8e:2f:
                    28:ed:f0:81:d4:7f:1f:38:d9:3d:60:0b:ef:e7:1c:
                    c6:fe:f3:21:7b:12:9d:81:11:34:b1:c3:67:1b:3c:
                    53:4d:64:27:4a:ff:28:c1:eb:f7:8f:38:42:44:7d:
                    a5:f9:88:5d:eb:57:bd:ba:a2:60:79:fa:4c:02:1a:
                    9a:03:43:61:42:f3:65:f2:ab:87:0f:aa:e4:0f:62:
                    69:f3:a5:39:7d:b5:2e:3f:ab:b7:f9:0e:0c:4e:d4:
                    8b:e8:a7:ab:ac:d3:f1:5a:60:f6:6b:ea:2a:f8:f5:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C3:55:1D:C5:2C:52:B1:0C:57:F2:7F:F3:5C:7B:2E:1C:27:13:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/038ea414-e340-3045-94e0-39ae37c3678f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:42:4c:3f:96:4e:36:27:99:5f:43:15:fa:95:92:26:e3:96:
         7c:4d:54:d0:ea:7e:a0:c5:8c:51:9c:5e:ad:03:a1:de:88:12:
         dc:bd:01:26:4d:0e:ac:92:e4:4e:c6:6b:7c:ad:85:98:8d:a4:
         99:e9:a5:de:60:93:fa:69:b5:3d:4a:ae:fd:ad:a9:62:c4:2b:
         b9:3d:c8:6e:0f:b5:fa:c3:a0:6f:3d:82:e6:b6:89:b6:05:30:
         b5:f1:82:72:cb:83:65:4d:1b:12:23:93:02:a8:14:0d:df:9e:
         29:8b:ce:f3:7f:0d:d0:df:a0:59:11:96:7a:a9:d3:f6:2c:4b:
         e2:2b:bd:a0:5c:34:8e:02:d4:d5:6a:7e:83:aa:87:0a:2c:87:
         ae:f3:c3:be:cc:d7:ec:8e:cf:d5:a1:d6:90:14:f3:e3:9b:88:
         73:b5:54:25:d8:6a:39:12:c7:a7:11:9e:5a:df:2d:e8:b8:ba:
         f0:81:b0:a1:54:77:20:fc:70:27:9a:5c:df:63:1d:70:02:62:
         04:58:76:b9:eb:64:a6:00:cb:59:d0:5b:1a:77:05:f7:7a:bd:
         5a:05:e3:8d:d5:c6:1a:0a:3a:c4:13:b2:ca:34:8d:20:4b:cd:
         a8:f2:06:eb:e1:d3:d4:71:30:30:e8:f9:6c:c4:b6:02:25:b2:
         ac:12:95:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUQXy286ZaF4dZyQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDMwMTE0MzA0N1oXDTI0MDUzMDEzMzA0N1owLzEtMCsGA1UEAxMk
ZTUxMmRkYzQtMDk2MS00OWNiLWJkNTQtNGU0MGIwMjZjM2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRuelzwMnsHZzrDRBJYUgTR+fzco1Ccvq6Nn
QlKdTf7evIA14l3CFdC90U52rhxJV+ZkdEZBi3js4SrCHp0i7Uff6qe3LTMaKtxd
/ndJ+Uk79TjpKC7R3bxoNiXCC2Fh8qaIsQXcUEe0Q2gKD/aCa1AdAVkVTKrhT2iL
h/pcyfkTV6/4DDliC6u+rsw6+RznZwkrji8o7fCB1H8fONk9YAvv5xzG/vMhexKd
gRE0scNnGzxTTWQnSv8owev3jzhCRH2l+Yhd61e9uqJgefpMAhqaA0NhQvNl8quH
D6rkD2Jp86U5fbUuP6u3+Q4MTtSL6KerrNPxWmD2a+oq+PVByQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMTDVR3FLFKxDFfyf/Ncey4cJxOGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDM4ZWE0MTQtZTM0MC0z
MDQ1LTk0ZTAtMzlhZTM3YzM2NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEVCTD+WTjYnmV9DFfqVkibjlnxNVNDqfqDFjFGcXq0Dod6IEty9
ASZNDqyS5E7Ga3ythZiNpJnppd5gk/pptT1Krv2tqWLEK7k9yG4PtfrDoG89gua2
ibYFMLXxgnLLg2VNGxIjkwKoFA3fnimLzvN/DdDfoFkRlnqp0/YsS+IrvaBcNI4C
1NVqfoOqhwosh67zw77M1+yOz9Wh1pAU8+ObiHO1VCXYajkSx6cRnlrfLei4uvCB
sKFUdyD8cCeaXN9jHXACYgRYdrnrZKYAy1nQWxp3Bfd6vVoF443VxhoKOsQTsso0
jSBLzajyBuvh09RxMDDo+WzEtgIlsqwSlWE=
-----END CERTIFICATE-----
Generated at Mon May 6 23:17:07 2024 by rpki-client on console-fra.rpki-client.org