Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/162cae4c-d087-395e-99e6-7e5c57c11ea5.roa
File:                     162cae4c-d087-395e-99e6-7e5c57c11ea5.roa (raw, json)
Hash identifier:          OFe3eY1FmTPIomwsotbHYZwd8kJMFmQnSN9tiAVseic=
Subject key identifier:   45:82:9F:8F:B1:59:DC:A2:72:41:9E:87:C1:1D:EC:FF:F1:A9:62:F1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B6BD24FA4B0A6231E8C20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/162cae4c-d087-395e-99e6-7e5c57c11ea5.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     35384
IP address blocks:        2001:470:299::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:6b:d2:4f:a4:b0:a6:23:1e:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=8dcbc2bc-be50-4ebc-b701-7b56ecfeed6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:73:f2:ea:66:a5:52:47:e9:08:3d:28:96:
                    79:18:cb:14:2a:ae:44:fc:5d:3a:b2:fc:02:58:fa:
                    8a:d2:a4:c5:c2:f2:95:69:06:88:3f:4b:ef:d0:38:
                    e8:b7:fd:ce:b5:84:39:fb:a7:01:ba:36:77:f8:53:
                    e3:52:50:ee:46:e4:2c:ce:dd:21:d8:4b:85:08:a1:
                    8d:fa:70:aa:75:f4:41:df:7d:86:8c:72:55:64:9c:
                    44:b1:d8:4e:8c:15:87:e5:b1:03:e4:44:88:fa:00:
                    c4:3d:9c:eb:74:8b:22:4e:45:b7:ae:92:b7:e3:d1:
                    68:20:96:85:c2:2d:34:73:4b:5d:0a:21:92:df:57:
                    ea:15:a0:f8:50:27:d7:16:31:e7:40:68:e4:21:2b:
                    da:ec:4f:86:2c:66:44:ee:d6:92:08:ac:5c:37:01:
                    1e:bc:08:5a:4a:14:63:3d:bf:37:18:92:51:80:a9:
                    ed:e8:de:f4:bb:35:71:5e:53:a5:8f:43:99:ef:03:
                    05:5d:5b:b7:f0:4f:c4:b0:8b:c6:8c:a2:1b:e5:f2:
                    40:6f:e1:3a:b6:9f:8a:15:b0:14:fa:3a:72:4d:91:
                    38:a9:0a:c0:03:c2:bb:68:69:4d:8e:0d:67:b5:80:
                    a8:11:fa:7d:af:6a:90:ed:06:50:44:2c:00:5b:10:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:82:9F:8F:B1:59:DC:A2:72:41:9E:87:C1:1D:EC:FF:F1:A9:62:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/162cae4c-d087-395e-99e6-7e5c57c11ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:299::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:87:22:10:f4:ad:9f:64:b4:b1:38:3f:0b:b8:3e:14:d5:05:
         d6:70:7d:89:eb:d5:13:8f:4f:a1:34:d0:01:81:8a:64:58:65:
         bc:80:69:47:3f:df:82:26:4c:e5:0f:48:53:ee:a7:4f:6d:0a:
         ab:a7:a7:f0:57:f0:bd:e8:1c:67:e2:10:b5:eb:44:2e:3a:59:
         77:de:ee:ba:f0:a3:bf:aa:a8:04:59:53:d0:7b:57:c6:ca:11:
         e6:f9:58:a2:4c:58:42:cf:65:9d:b4:0e:4b:1f:a6:93:79:22:
         f1:1b:be:42:1d:ab:96:72:06:10:01:7b:e9:18:99:42:09:dc:
         99:cc:86:d6:70:3b:f9:4f:ef:09:86:fa:d2:61:18:e6:64:c5:
         46:92:a7:1d:7c:7e:c8:c8:de:4d:02:52:de:bb:c7:bb:28:0b:
         9d:a9:bc:0a:aa:9f:2e:bf:7e:c7:93:b4:04:0c:9b:d8:92:65:
         10:09:88:27:2d:04:3f:93:e1:fc:08:fe:64:48:89:e1:84:c3:
         32:aa:08:07:be:fd:36:5f:09:8e:b8:5e:b9:51:58:d3:b4:f5:
         75:cf:1a:bc:26:9e:df:2c:eb:d6:f7:5e:1b:93:4f:d2:58:99:
         91:82:0d:f2:03:d9:c2:5e:bc:9a:6a:d5:ff:2a:94:b9:4e:cc:
         42:67:42:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2vST6SwpiMejCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
OGRjYmMyYmMtYmU1MC00ZWJjLWI3MDEtN2I1NmVjZmVlZDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudRz8upmpVJH6Qg9KJZ5GMsUKq5E/F06svwC
WPqK0qTFwvKVaQaIP0vv0Djot/3OtYQ5+6cBujZ3+FPjUlDuRuQszt0h2EuFCKGN
+nCqdfRB332GjHJVZJxEsdhOjBWH5bED5ESI+gDEPZzrdIsiTkW3rpK349FoIJaF
wi00c0tdCiGS31fqFaD4UCfXFjHnQGjkISva7E+GLGZE7taSCKxcNwEevAhaShRj
Pb83GJJRgKnt6N70uzVxXlOlj0OZ7wMFXVu38E/EsIvGjKIb5fJAb+E6tp+KFbAU
+jpyTZE4qQrAA8K7aGlNjg1ntYCoEfp9r2qQ7QZQRCwAWxA2HwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEWCn4+xWdyickGeh8Ed7P/xqWLxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTYyY2FlNGMtZDA4Ny0z
OTVlLTk5ZTYtN2U1YzU3YzExZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI6HIhD0rZ9ktLE4Pwu4PhTVBdZwfYnr1ROPT6E00AGBimRYZbyA
aUc/34ImTOUPSFPup09tCqunp/BX8L3oHGfiELXrRC46WXfe7rrwo7+qqARZU9B7
V8bKEeb5WKJMWELPZZ20DksfppN5IvEbvkIdq5ZyBhABe+kYmUIJ3JnMhtZwO/lP
7wmG+tJhGOZkxUaSpx18fsjI3k0CUt67x7soC52pvAqqny6/fseTtAQMm9iSZRAJ
iCctBD+T4fwI/mRIieGEwzKqCAe+/TZfCY64XrlRWNO09XXPGrwmnt8s69b3XhuT
T9JYmZGCDfID2cJevJpq1f8qlLlOzEJnQg4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:34 2024 by rpki-client on console-fra.rpki-client.org