Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cb4b190-f857-32c1-aeb0-032993756101.roa
File:                     1cb4b190-f857-32c1-aeb0-032993756101.roa (raw, json)
Hash identifier:          VH1adD4UtCJaVUj8liiHfKAd22bVLIQqrVn+8UNxP2g=
Subject key identifier:   44:F5:06:49:33:35:C2:15:79:0F:D1:FB:F4:A1:86:35:42:D6:75:E6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847C4A9F467E63338087CFD0A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cb4b190-f857-32c1-aeb0-032993756101.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     30383
IP address blocks:        2001:470:36a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:a9:f4:67:e6:33:38:08:7c:fd:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=41a1c6d4-6854-49a6-b4d3-90143221f619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:6e:e3:90:c2:d9:bc:0b:ba:98:4f:25:31:
                    db:db:f7:89:a6:35:cf:af:b0:f9:d6:2f:09:1e:a9:
                    02:8b:1f:f8:f9:ae:0a:4c:f1:6e:c9:36:d4:51:cf:
                    be:0c:2b:93:cd:03:2e:ee:34:66:b8:44:99:4d:d0:
                    56:bb:70:f6:da:19:ee:6c:10:eb:0e:81:d4:c1:5a:
                    35:92:de:b1:b5:f6:6c:9e:22:f3:46:14:4e:ad:e0:
                    a3:53:b3:0a:25:a4:9b:4e:d8:9b:28:42:0f:5b:f4:
                    c2:11:e0:6b:80:1d:ec:f6:86:cc:cc:dd:f0:36:f0:
                    23:cf:79:08:63:7b:e8:c0:67:41:a3:c5:03:e8:12:
                    14:c4:8b:1a:d4:9e:c8:94:9e:cb:36:9a:3c:94:ff:
                    d3:0b:ab:ea:85:83:e2:f2:9e:73:4b:e3:8a:0c:cb:
                    04:06:95:e3:02:99:dd:a0:a1:45:99:8e:eb:60:6e:
                    e2:4b:ee:df:ea:67:20:17:16:7e:dc:a4:e8:74:b4:
                    b7:ff:44:4e:40:a5:b7:4e:37:42:1a:bc:84:82:de:
                    62:71:d3:da:d0:f8:30:f1:a6:43:ae:a1:c0:01:25:
                    fe:84:13:e8:3c:6e:fd:ee:a6:21:f8:de:8f:1d:1c:
                    f8:67:f3:7a:47:a5:59:f6:84:64:c6:2a:31:b7:7e:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:06:49:33:35:C2:15:79:0F:D1:FB:F4:A1:86:35:42:D6:75:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cb4b190-f857-32c1-aeb0-032993756101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:36a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:c6:4d:85:a8:07:fb:36:1a:64:0f:5b:2b:dc:84:dc:a2:
         1f:96:af:0e:73:ac:7b:46:bc:1e:4a:f6:3e:10:f2:63:3e:8b:
         e1:10:ce:09:10:e9:ba:5f:f1:eb:56:73:f0:3e:4a:6f:e9:59:
         70:ae:d9:71:bd:9a:72:97:90:81:8a:23:cc:a3:65:46:9f:f3:
         23:ef:5b:04:2d:f1:9f:20:c9:8c:ce:c4:b4:2f:15:7d:0f:0a:
         da:c3:c2:2c:94:c0:19:8a:74:80:92:ac:6c:99:67:3e:00:ac:
         30:6f:9e:10:f0:8e:c7:a4:ad:50:29:d9:88:25:41:35:d0:6c:
         d1:fd:46:2b:40:64:a6:51:c5:7b:a6:b9:68:db:49:b4:41:2f:
         67:5a:73:d4:21:86:4e:20:7d:0a:c3:df:63:53:2f:ae:72:4d:
         2f:10:5c:b7:f7:04:9c:ab:66:65:8c:40:02:1d:6e:71:d0:9f:
         7b:f4:ae:b0:01:3b:1c:b2:e6:72:51:93:0a:ad:4a:0c:f8:7b:
         e8:62:7c:79:7f:5c:37:ef:a3:56:29:cd:75:01:58:5a:18:21:
         a5:90:b8:f2:33:dc:51:ef:4f:7e:d4:5e:35:00:d6:85:2f:cf:
         ba:82:20:64:35:10:e6:55:0e:09:e0:1a:7e:ee:17:0b:db:22:
         01:92:f3:74
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqfRn5jM4CHz9CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
NDFhMWM2ZDQtNjg1NC00OWE2LWI0ZDMtOTAxNDMyMjFmNjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrdu45DC2bwLuphPJTHb2/eJpjXPr7D51i8J
HqkCix/4+a4KTPFuyTbUUc++DCuTzQMu7jRmuESZTdBWu3D22hnubBDrDoHUwVo1
kt6xtfZsniLzRhROreCjU7MKJaSbTtibKEIPW/TCEeBrgB3s9obMzN3wNvAjz3kI
Y3vowGdBo8UD6BIUxIsa1J7IlJ7LNpo8lP/TC6vqhYPi8p5zS+OKDMsEBpXjApnd
oKFFmY7rYG7iS+7f6mcgFxZ+3KTodLS3/0ROQKW3TjdCGryEgt5icdPa0Pgw8aZD
rqHAASX+hBPoPG797qYh+N6PHRz4Z/N6R6VZ9oRkxioxt34dgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFET1BkkzNcIVeQ/R+/ShhjVC1nXmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWNiNGIxOTAtZjg1Ny0z
MmMxLWFlYjAtMDMyOTkzNzU2MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJj0xk2FqAf7NhpkD1sr3ITcoh+Wrw5zrHtGvB5K9j4Q8mM+i+EQ
zgkQ6bpf8etWc/A+Sm/pWXCu2XG9mnKXkIGKI8yjZUaf8yPvWwQt8Z8gyYzOxLQv
FX0PCtrDwiyUwBmKdICSrGyZZz4ArDBvnhDwjsekrVAp2YglQTXQbNH9RitAZKZR
xXumuWjbSbRBL2dac9Qhhk4gfQrD32NTL65yTS8QXLf3BJyrZmWMQAIdbnHQn3v0
rrABOxyy5nJRkwqtSgz4e+hifHl/XDfvo1YpzXUBWFoYIaWQuPIz3FHvT37UXjUA
1oUvz7qCIGQ1EOZVDgngGn7uFwvbIgGS83Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org