Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa
File:                     0d727262-1bb0-3afb-9aee-5b0284aa0434.roa (raw, json)
Hash identifier:          GkVgoGCOb+KkMa6Fz+qMFx0K57UgXrjhyG9w/5MQi5E=
Subject key identifier:   E7:A9:AB:50:F1:EF:5E:93:A1:8C:7A:A5:DB:85:55:06:9E:1A:37:2D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B61684D84D89097B42B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     1008
IP address blocks:        2001:470:222::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:61:68:4d:84:d8:90:97:b4:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=421cbdf9-4f78-4f1b-89e4-37f3e24e5678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:a8:23:63:45:66:2a:b5:fd:64:60:ec:e3:
                    5a:0d:85:2e:75:61:f0:8e:eb:54:c8:22:fe:15:11:
                    ec:3b:78:d5:8f:36:f7:27:27:a8:e4:50:08:e3:ed:
                    c9:c4:73:7c:9e:8a:20:66:6e:74:5a:43:5e:b5:54:
                    69:cc:f9:e0:a4:5b:2f:3d:ea:e4:d7:ac:97:4c:b9:
                    4c:28:68:ca:4b:4c:b1:51:dd:ca:8c:41:46:b2:7b:
                    03:2a:3a:f5:0a:3a:7f:b8:ef:0e:4a:3e:08:c8:25:
                    09:50:6c:2b:e2:53:19:47:7e:50:e1:70:9e:4b:7a:
                    db:7a:14:3d:40:c9:93:12:cb:1d:85:3c:8f:77:0d:
                    d3:29:25:8c:89:bf:8a:8d:42:01:bc:62:21:5d:4a:
                    32:b2:30:83:74:3c:e1:51:4b:1a:eb:c0:d4:04:4a:
                    a7:a8:83:aa:21:50:f2:c6:fb:2f:4d:8f:8e:91:f3:
                    cb:4a:50:ea:74:72:f3:7d:cf:b4:78:02:5b:de:62:
                    b4:4a:ef:db:16:0c:d9:2c:02:7f:5a:04:37:3a:83:
                    1f:60:85:f7:bc:7b:89:19:21:0e:df:7c:68:a6:f9:
                    24:6d:21:e8:a4:fc:e0:d7:80:c6:27:6a:e9:36:7f:
                    97:a8:15:30:51:5e:8c:ec:14:b4:4d:e9:2f:e7:40:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A9:AB:50:F1:EF:5E:93:A1:8C:7A:A5:DB:85:55:06:9E:1A:37:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:222::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:7d:65:35:8b:6e:ec:d6:25:81:3f:0b:9e:1e:fe:da:f7:
         43:4e:2c:f5:c2:49:c3:89:78:46:74:19:b2:96:37:3f:b2:8b:
         51:0d:a2:b9:49:b2:41:44:97:0e:dc:26:cf:0b:6d:82:1f:bf:
         96:dd:7d:9b:db:7d:b4:3b:98:2b:16:af:39:e8:0e:f2:a9:22:
         b3:34:8e:94:fc:39:25:6b:c5:79:ce:fb:c1:ae:2f:f2:f1:ae:
         79:df:17:90:de:69:ea:11:a3:04:aa:5a:44:38:7a:3e:e2:df:
         5f:79:3a:69:e7:a9:c3:54:0d:25:05:16:f1:d1:c1:c7:c1:40:
         24:c4:ed:89:72:c9:e2:58:67:d3:e7:fb:38:89:9c:26:40:36:
         12:6b:75:3d:03:2d:65:35:ef:45:76:cb:34:77:8a:a2:18:e0:
         36:c7:b6:8b:cd:0e:81:b0:aa:10:51:02:b4:6b:34:04:a0:80:
         28:97:a9:d2:8c:36:a8:fd:31:1f:89:ba:91:4a:89:84:af:63:
         46:62:c5:ff:ba:96:94:c7:d8:23:33:7e:b7:f3:50:23:72:ec:
         bd:a1:7c:27:30:90:66:38:81:ed:ea:ba:11:de:96:e5:41:e2:
         81:78:aa:8d:51:6b:53:be:c4:88:66:39:d8:7c:8a:a4:3f:88:
         c2:d2:e7:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2FoTYTYkJe0K4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NDIxY2JkZjktNGY3OC00ZjFiLTg5ZTQtMzdmM2UyNGU1Njc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9yoI2NFZiq1/WRg7ONaDYUudWHwjutUyCL+
FRHsO3jVjzb3Jyeo5FAI4+3JxHN8noogZm50WkNetVRpzPngpFsvPerk16yXTLlM
KGjKS0yxUd3KjEFGsnsDKjr1Cjp/uO8OSj4IyCUJUGwr4lMZR35Q4XCeS3rbehQ9
QMmTEssdhTyPdw3TKSWMib+KjUIBvGIhXUoysjCDdDzhUUsa68DUBEqnqIOqIVDy
xvsvTY+OkfPLSlDqdHLzfc+0eAJb3mK0Su/bFgzZLAJ/WgQ3OoMfYIX3vHuJGSEO
33xopvkkbSHopPzg14DGJ2rpNn+XqBUwUV6M7BS0Tekv50A63wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOepq1Dx716ToYx6pduFVQaeGjctMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGQ3MjcyNjItMWJiMC0z
YWZiLTlhZWUtNWIwMjg0YWEwNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAIi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ7dfWU1i27s1iWBPwueHv7a90NOLPXCScOJeEZ0GbKWNz+yi1EN
orlJskFElw7cJs8LbYIfv5bdfZvbfbQ7mCsWrznoDvKpIrM0jpT8OSVrxXnO+8Gu
L/LxrnnfF5DeaeoRowSqWkQ4ej7i3195OmnnqcNUDSUFFvHRwcfBQCTE7YlyyeJY
Z9Pn+ziJnCZANhJrdT0DLWU170V2yzR3iqIY4DbHtovNDoGwqhBRArRrNASggCiX
qdKMNqj9MR+JupFKiYSvY0Zixf+6lpTH2CMzfrfzUCNy7L2hfCcwkGY4ge3quhHe
luVB4oF4qo1Ra1O+xIhmOdh8iqQ/iMLS56I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org