Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e7767ef-c568-3f55-88dd-6394c24c754e.roa
File:                     1e7767ef-c568-3f55-88dd-6394c24c754e.roa (raw, json)
Hash identifier:          pW/OulZGuShSLE8OzYieB1uuByg66SW0ST/3VTcCtzU=
Subject key identifier:   10:ED:D2:53:9A:3A:5A:6A:C5:32:49:FD:04:B3:05:99:E5:E1:2F:34
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858452D82849DC579D97E634A4800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e7767ef-c568-3f55-88dd-6394c24c754e.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     399606
IP address blocks:        2001:470:48::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:84:9d:c5:79:d9:7e:63:4a:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=4eb79b08-934a-43b6-8c95-1809d725d6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:79:d7:e7:b6:50:aa:60:b9:3c:6f:95:3d:
                    c4:36:58:69:57:8d:07:26:42:bb:7f:6a:19:b4:d3:
                    ea:13:49:a2:f5:38:ef:37:56:49:1d:5a:7a:f1:bf:
                    50:15:7e:e4:b3:a1:35:a9:6e:e5:06:6b:5f:32:9b:
                    40:6e:3b:df:84:79:ec:c8:ba:a1:7a:8f:61:b8:26:
                    cf:8b:49:8b:4e:4d:48:ca:f7:bd:a5:96:c7:45:05:
                    69:f4:ef:b8:cf:7d:b7:8a:ec:67:4d:c7:4c:88:fd:
                    f3:d1:fc:2a:2e:74:8d:ae:42:ac:c9:0c:c7:08:5b:
                    3d:df:92:04:70:bc:5e:37:d2:4d:83:bf:f8:e2:82:
                    e6:8f:2d:60:c8:9d:e9:09:69:62:f7:b8:71:cf:4f:
                    22:c5:00:7f:e6:56:93:e0:34:7c:43:f3:cc:25:13:
                    6f:39:eb:c9:3d:aa:91:3f:9b:e7:62:26:72:36:9c:
                    3c:77:7b:a4:83:e8:17:16:a2:b3:f4:6a:3c:7d:f8:
                    db:bf:7e:d8:a1:99:11:1f:f3:de:99:f3:44:94:d6:
                    ca:40:31:78:f6:21:9b:21:4f:57:38:18:ca:2f:f1:
                    62:cf:5e:68:73:14:4c:20:57:53:ad:09:6c:e7:49:
                    11:3e:e0:cd:74:07:a0:c8:a2:df:35:cf:df:22:ca:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:ED:D2:53:9A:3A:5A:6A:C5:32:49:FD:04:B3:05:99:E5:E1:2F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e7767ef-c568-3f55-88dd-6394c24c754e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:48::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:dd:f2:99:56:2e:c8:90:63:9f:9a:18:4c:65:71:ba:7b:
         f4:e2:c6:e9:80:30:79:b2:86:bc:d9:dc:db:1c:a9:3f:36:44:
         e2:03:dc:c7:f4:a8:b9:43:dd:52:7f:db:0e:9e:53:5a:30:cb:
         3a:90:7b:b9:ea:99:80:24:73:fa:c4:a0:6d:cf:2b:a5:b3:33:
         26:5a:ca:bd:25:af:01:7d:1f:12:52:7c:f7:f1:9d:20:73:4e:
         c7:38:b0:63:4a:1c:fd:b4:b7:3a:b4:74:f9:a1:45:41:b6:ce:
         7e:9d:ba:67:21:64:c0:95:6a:71:ad:07:3d:b2:07:d5:25:fb:
         df:a2:58:b4:b1:26:a1:fc:ea:1e:06:aa:fb:7b:8e:40:4f:3d:
         57:22:f4:04:b8:7c:5f:4c:0c:92:e1:64:89:45:ba:d1:b2:9e:
         94:b0:f7:2c:8e:e0:3a:70:61:38:b8:af:2e:66:9c:e2:37:c1:
         2f:25:78:13:88:34:6a:f5:ba:21:fd:c9:37:0c:78:7d:f6:b5:
         90:f8:e2:70:63:ab:39:27:01:86:27:f8:78:71:5c:d6:91:a1:
         18:19:64:69:22:bf:dd:07:f5:3e:31:62:ea:6b:a4:40:e7:d7:
         f2:e5:b6:3f:2d:71:61:20:4a:f0:8b:4e:6a:fe:79:e7:62:6e:
         33:6b:36:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUtgoSdxXnZfmNKSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDMxMjAxMDAyNVoXDTI0MDYxMDAxMDAyNVowLzEtMCsGA1UEAxMk
NGViNzliMDgtOTM0YS00M2I2LThjOTUtMTgwOWQ3MjVkNmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUB51+e2UKpguTxvlT3ENlhpV40HJkK7f2oZ
tNPqE0mi9TjvN1ZJHVp68b9QFX7ks6E1qW7lBmtfMptAbjvfhHnsyLqheo9huCbP
i0mLTk1Iyve9pZbHRQVp9O+4z323iuxnTcdMiP3z0fwqLnSNrkKsyQzHCFs935IE
cLxeN9JNg7/44oLmjy1gyJ3pCWli97hxz08ixQB/5laT4DR8Q/PMJRNvOevJPaqR
P5vnYiZyNpw8d3ukg+gXFqKz9Go8ffjbv37YoZkRH/PemfNElNbKQDF49iGbIU9X
OBjKL/Fiz15ocxRMIFdTrQls50kRPuDNdAegyKLfNc/fIspQEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBDt0lOaOlpqxTJJ/QSzBZnl4S80MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWU3NzY3ZWYtYzU2OC0z
ZjU1LTg4ZGQtNjM5NGMyNGM3NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+33fKZVi7IkGOfmhhMZXG6e/TixumAMHmyhrzZ3NscqT82ROID
3Mf0qLlD3VJ/2w6eU1owyzqQe7nqmYAkc/rEoG3PK6WzMyZayr0lrwF9HxJSfPfx
nSBzTsc4sGNKHP20tzq0dPmhRUG2zn6dumchZMCVanGtBz2yB9Ul+9+iWLSxJqH8
6h4Gqvt7jkBPPVci9AS4fF9MDJLhZIlFutGynpSw9yyO4DpwYTi4ry5mnOI3wS8l
eBOINGr1uiH9yTcMeH32tZD44nBjqzknAYYn+HhxXNaRoRgZZGkiv90H9T4xYupr
pEDn1/Lltj8tcWEgSvCLTmr+eedibjNrNu8=
-----END CERTIFICATE-----
Generated at Mon May 6 14:56:11 2024 by rpki-client on console-fra.rpki-client.org