Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15f61034-6bad-323a-af65-a80c02d626b8.roa
File:                     15f61034-6bad-323a-af65-a80c02d626b8.roa (raw, json)
Hash identifier:          ow3QR4moIZ689iMMD5LXSC0eHG4jAmzzbh06wJDTPQ4=
Subject key identifier:   64:9D:55:86:51:86:E8:D6:BF:AC:14:B3:FD:72:47:94:A5:55:7E:A8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844FCD47A73E6B509BC1FE8D100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15f61034-6bad-323a-af65-a80c02d626b8.roa
Signing time:             Fri 23 Feb 2024 14:30:58 +0000
ROA not before:           Fri 23 Feb 2024 14:30:58 +0000
ROA not after:            Thu 23 May 2024 13:30:58 +0000
asID:                     34187
IP address blocks:        2001:470:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:d4:7a:73:e6:b5:09:bc:1f:e8:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 14:30:58 2024 GMT
            Not After : May 23 13:30:58 2024 GMT
        Subject: CN=59dfac23-5600-4a0b-9d31-2e353825bb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:36:b3:ac:63:ef:d8:ff:31:2c:33:68:0c:
                    11:34:89:66:dc:64:44:b0:22:e7:e2:0e:3b:3f:14:
                    0d:ca:de:5f:0e:39:9a:de:c8:17:10:ec:71:99:21:
                    91:c8:f1:e3:5d:d1:54:75:f0:51:4f:03:85:ed:c1:
                    52:f6:ab:e5:c6:4c:ee:0e:a4:2c:86:af:43:bc:ab:
                    e0:f9:31:76:2b:ef:bf:16:64:e1:b5:71:97:08:fa:
                    c0:e7:70:14:2d:ca:40:1a:74:7f:f9:1c:f6:5c:c2:
                    66:4f:2a:bb:98:58:27:d2:7f:0d:80:b1:95:cf:dc:
                    2f:00:b2:12:d4:eb:a8:71:fc:9e:20:85:21:2e:14:
                    cd:62:c2:1c:3b:de:8c:ed:73:22:03:a4:cc:1f:95:
                    7a:7c:3d:37:e0:3e:c5:5b:21:64:ea:d5:84:74:f1:
                    4f:58:18:a8:a5:dc:47:d6:33:29:cd:be:27:10:bd:
                    e8:18:a5:69:3b:2c:3c:a0:a5:d6:0f:79:0b:f0:ab:
                    01:a3:e5:67:b1:72:28:78:2d:a8:bc:77:51:39:da:
                    8a:e4:c0:7e:fe:56:9d:0b:17:88:e8:75:96:69:61:
                    62:24:c6:5a:f7:e1:a9:86:67:21:6b:dd:16:16:23:
                    45:17:4e:ca:48:82:79:17:90:b1:39:5b:99:4e:2b:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:55:86:51:86:E8:D6:BF:AC:14:B3:FD:72:47:94:A5:55:7E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15f61034-6bad-323a-af65-a80c02d626b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:99:33:d7:bb:55:0e:08:96:78:c2:89:12:a7:a4:46:f4:bb:
         cb:a3:48:31:d2:a8:d8:d9:25:59:44:a8:e0:da:46:20:7e:aa:
         0a:79:15:f1:9e:2f:5b:ea:97:d7:b7:a1:c6:6e:0d:f7:6a:b7:
         e0:ca:9e:62:bd:57:b5:f8:a4:53:63:ae:6f:80:79:e3:b0:3a:
         f3:02:50:c3:4a:fe:d9:1a:30:3c:24:e7:a9:e9:9c:b7:e3:d7:
         34:81:78:3b:e2:0a:53:15:bb:15:a9:8f:ff:e1:34:b6:2d:a7:
         2a:e2:bf:74:f9:f4:2b:17:1d:93:73:e0:60:0a:26:c6:0e:c8:
         4e:34:45:84:4b:cd:6f:46:a8:c7:71:ab:8f:69:f5:b8:b3:bf:
         40:c9:92:85:26:68:8d:1d:97:ea:95:4b:d0:5a:22:ed:37:33:
         45:d8:a3:f5:da:84:89:e4:7e:51:07:83:74:a4:09:ab:21:a9:
         6c:d9:8e:c0:e9:69:2c:28:13:27:b4:3c:57:c5:18:4c:0d:76:
         05:c2:e5:2c:4e:07:ff:c7:6f:fc:30:e7:89:e0:6a:06:ed:f5:
         20:b4:29:06:7a:03:5a:55:51:b2:ca:ca:6d:98:d5:14:83:2b:
         38:e3:2c:b8:e1:05:85:93:af:bb:01:62:a8:d1:86:f0:73:4b:
         dc:9e:89:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET81Hpz5rUJvB/o0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMzE0MzA1OFoXDTI0MDUyMzEzMzA1OFowLzEtMCsGA1UEAxMk
NTlkZmFjMjMtNTYwMC00YTBiLTlkMzEtMmUzNTM4MjViYjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8I2s6xj79j/MSwzaAwRNIlm3GREsCLn4g47
PxQNyt5fDjma3sgXEOxxmSGRyPHjXdFUdfBRTwOF7cFS9qvlxkzuDqQshq9DvKvg
+TF2K++/FmThtXGXCPrA53AULcpAGnR/+Rz2XMJmTyq7mFgn0n8NgLGVz9wvALIS
1OuocfyeIIUhLhTNYsIcO96M7XMiA6TMH5V6fD034D7FWyFk6tWEdPFPWBiopdxH
1jMpzb4nEL3oGKVpOyw8oKXWD3kL8KsBo+VnsXIoeC2ovHdROdqK5MB+/ladCxeI
6HWWaWFiJMZa9+Gphmcha90WFiNFF07KSIJ5F5CxOVuZTivW4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGSdVYZRhujWv6wUs/1yR5SlVX6oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTVmNjEwMzQtNmJhZC0z
MjNhLWFmNjUtYTgwYzAyZDYyNmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGaZM9e7VQ4IlnjCiRKnpEb0u8ujSDHSqNjZJVlEqODaRiB+qgp5
FfGeL1vql9e3ocZuDfdqt+DKnmK9V7X4pFNjrm+AeeOwOvMCUMNK/tkaMDwk56np
nLfj1zSBeDviClMVuxWpj//hNLYtpyriv3T59CsXHZNz4GAKJsYOyE40RYRLzW9G
qMdxq49p9bizv0DJkoUmaI0dl+qVS9BaIu03M0XYo/XahInkflEHg3SkCashqWzZ
jsDpaSwoEye0PFfFGEwNdgXC5SxOB//Hb/ww54ngagbt9SC0KQZ6A1pVUbLKym2Y
1RSDKzjjLLjhBYWTr7sBYqjRhvBzS9yeiZQ=
-----END CERTIFICATE-----
Generated at Mon May 6 20:30:30 2024 by rpki-client on console-ams.rpki-client.org