Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06f45410-ba88-3e66-afe2-9e3e951d3702.roa
File:                     06f45410-ba88-3e66-afe2-9e3e951d3702.roa (raw, json)
Hash identifier:          OY1SRQMJUo/k85snQ3+9pDEBQsQDuON20QcTs1Ll9m8=
Subject key identifier:   9F:0F:90:2F:B5:5C:A7:C4:A5:AB:94:6A:D1:CA:A3:DE:6B:F1:1D:DA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584554A7343DDD2D09790748BC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06f45410-ba88-3e66-afe2-9e3e951d3702.roa
Signing time:             Tue 26 Mar 2024 01:30:52 +0000
ROA not before:           Tue 26 Mar 2024 01:30:52 +0000
ROA not after:            Mon 24 Jun 2024 01:30:52 +0000
asID:                     49461
IP address blocks:        2001:470:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:a7:34:3d:dd:2d:09:79:07:48:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 26 01:30:52 2024 GMT
            Not After : Jun 24 01:30:52 2024 GMT
        Subject: CN=832fc0fa-3b14-4299-8074-25ce1e0f3b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:f4:b2:39:63:d3:30:99:97:e4:f6:25:fd:
                    cc:c3:7c:9a:71:d6:0a:9c:38:7e:1a:6e:e7:ee:47:
                    81:75:01:27:67:00:83:10:d6:e6:a1:58:ab:b0:4f:
                    17:2a:c0:69:c9:fc:61:00:fb:30:c1:2f:b6:b2:cb:
                    0a:a9:ab:75:38:f2:0c:17:f5:51:d0:d4:16:69:c3:
                    6b:97:86:f4:0f:8f:05:be:66:dc:de:c5:f5:09:5b:
                    24:ca:fc:ed:75:28:2d:74:f3:89:07:04:ce:10:66:
                    b5:c6:64:5d:cd:4b:3d:81:45:77:02:22:59:10:cb:
                    1d:d3:d2:ca:3a:35:a2:0a:e6:10:38:d0:79:65:81:
                    f6:53:8e:b6:1a:c3:c2:6c:2c:6d:67:ec:af:21:b2:
                    f3:86:78:36:dd:0d:6f:d5:03:42:6f:e7:5a:c0:ed:
                    8d:95:00:9b:e8:4a:f5:50:d3:00:08:68:7d:9b:a4:
                    f9:da:15:52:09:a5:f1:9b:ee:29:15:8d:f9:db:c8:
                    cb:a2:ff:ec:7d:70:79:b6:78:72:25:be:b6:b4:0d:
                    39:f6:84:97:fa:7a:71:9d:8d:e2:62:e0:b5:88:2f:
                    f9:53:dd:e3:f9:a8:b8:34:dc:7e:e6:b4:3f:1c:92:
                    2a:ff:bf:c1:07:ec:da:32:89:3e:a9:f1:60:6b:20:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0F:90:2F:B5:5C:A7:C4:A5:AB:94:6A:D1:CA:A3:DE:6B:F1:1D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06f45410-ba88-3e66-afe2-9e3e951d3702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:4a:93:71:84:a1:b9:52:90:72:ab:c3:87:84:dc:f2:b2:
         f5:c2:dd:15:51:f7:0f:e1:80:38:d6:51:9d:3b:33:d0:45:1f:
         71:41:5e:b7:cf:59:12:38:2f:24:b1:8d:75:71:63:5b:e6:ca:
         f7:eb:46:3b:ad:a7:4c:1d:87:5d:80:cb:83:5a:5b:8d:69:de:
         17:4d:3d:37:67:9a:8f:7d:f0:74:d2:cf:ac:0f:99:26:29:ce:
         29:d4:6f:0e:18:60:08:4a:10:51:55:15:68:a5:c7:a5:45:a6:
         f1:2f:26:79:74:9a:f3:af:b2:d7:c0:fe:4c:65:76:9c:0f:fa:
         70:62:21:37:76:9f:f0:08:d0:e9:10:89:b7:4d:ce:60:5d:fa:
         9f:65:3c:6d:b5:18:59:dc:4d:c1:7b:ee:f7:07:0a:38:56:4e:
         2d:40:d1:6c:89:99:9d:b6:70:e1:aa:df:6b:09:22:33:bf:45:
         66:af:90:13:32:6c:64:0f:4c:4a:e2:31:26:ce:53:06:c9:bd:
         fb:24:5e:11:32:6b:e6:8b:78:6f:99:e8:8f:5e:d2:f4:7b:9f:
         b6:d3:ef:ce:3e:36:b8:e7:8f:99:25:6c:d3:2e:e2:84:69:d9:
         0f:03:4d:d4:f6:76:92:ad:82:a1:3c:78:07:fc:75:78:0f:b4:
         b4:ee:47:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVUpzQ93S0JeQdIvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDMyNjAxMzA1MloXDTI0MDYyNDAxMzA1MlowLzEtMCsGA1UEAxMk
ODMyZmMwZmEtM2IxNC00Mjk5LTgwNzQtMjVjZTFlMGYzYjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvX0sjlj0zCZl+T2Jf3Mw3yacdYKnDh+Gm7n
7keBdQEnZwCDENbmoVirsE8XKsBpyfxhAPswwS+2sssKqat1OPIMF/VR0NQWacNr
l4b0D48Fvmbc3sX1CVskyvztdSgtdPOJBwTOEGa1xmRdzUs9gUV3AiJZEMsd09LK
OjWiCuYQONB5ZYH2U462GsPCbCxtZ+yvIbLzhng23Q1v1QNCb+dawO2NlQCb6Er1
UNMACGh9m6T52hVSCaXxm+4pFY3528jLov/sfXB5tnhyJb62tA059oSX+npxnY3i
YuC1iC/5U93j+ai4NNx+5rQ/HJIq/7/BB+zaMok+qfFgayDLHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ8PkC+1XKfEpauUatHKo95r8R3aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDZmNDU0MTAtYmE4OC0z
ZTY2LWFmZTItOWUzZTk1MWQzNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB5pSpNxhKG5UpByq8OHhNzysvXC3RVR9w/hgDjWUZ07M9BFH3FB
XrfPWRI4LySxjXVxY1vmyvfrRjutp0wdh12Ay4NaW41p3hdNPTdnmo998HTSz6wP
mSYpzinUbw4YYAhKEFFVFWilx6VFpvEvJnl0mvOvstfA/kxldpwP+nBiITd2n/AI
0OkQibdNzmBd+p9lPG21GFncTcF77vcHCjhWTi1A0WyJmZ22cOGq32sJIjO/RWav
kBMybGQPTEriMSbOUwbJvfskXhEya+aLeG+Z6I9e0vR7n7bT784+Nrjnj5klbNMu
4oRp2Q8DTdT2dpKtgqE8eAf8dXgPtLTuRxE=
-----END CERTIFICATE-----
Generated at Mon May 6 12:02:15 2024 by rpki-client on console-fra.rpki-client.org