Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/303f2d8a-87a6-3d73-bd73-d64936c0f57f.roa
File:                     303f2d8a-87a6-3d73-bd73-d64936c0f57f.roa (raw, json)
Hash identifier:          F0pd10k2z5S0CvT87gbSIukh62+rXxmBdIe6C0jYYO4=
Subject key identifier:   57:7B:D0:87:EC:A5:1E:5E:DE:65:DD:62:A4:BF:C5:37:7D:8E:EA:13
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858455A2D7B87BD16A9DD021EF5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/303f2d8a-87a6-3d73-bd73-d64936c0f57f.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     48971
IP address blocks:        2001:470:15f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:7b:87:bd:16:a9:dd:02:1e:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=fab19644-8bfb-4979-9b45-eb324cc9b395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:c7:b1:1a:39:eb:54:3e:11:23:33:de:01:
                    e2:4e:b6:1d:03:99:88:66:22:d1:d0:f8:dc:14:3c:
                    fa:2c:6c:5f:54:bf:c8:a5:a3:75:14:4e:b0:e4:1b:
                    9b:07:34:8a:e6:6d:d6:cb:f5:d3:29:74:24:d2:af:
                    ae:8b:c8:31:9e:98:9d:91:50:44:34:6a:bb:bd:f4:
                    69:d1:22:42:84:40:24:9e:1f:40:3b:3c:70:b5:12:
                    a1:93:76:c1:ff:02:17:47:96:58:f5:b5:ab:a5:02:
                    58:27:e8:69:e4:94:c6:74:2e:9d:e4:07:12:ac:c5:
                    37:55:42:82:94:4e:f2:60:f4:37:44:8e:a8:7e:20:
                    19:ca:2d:8c:74:57:ca:b3:e4:b1:c2:34:3b:8f:a3:
                    5a:cc:20:49:b7:b8:3a:25:83:8d:87:1c:c4:94:5d:
                    78:90:de:f8:1a:a9:18:3e:f5:d3:52:e7:77:e7:f9:
                    a7:e4:f0:16:bf:ee:cf:c5:55:28:a8:1c:b8:6f:ee:
                    c3:6b:dd:2b:d2:2c:c8:19:cc:e1:f5:d8:63:01:ef:
                    82:59:4f:d2:12:b6:c5:22:d9:50:04:43:14:25:6f:
                    7f:a8:ff:4b:d3:8d:bc:ea:ff:a2:e2:e5:96:2e:ee:
                    8a:64:1f:d5:55:11:16:e8:36:77:61:f1:86:31:13:
                    bb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7B:D0:87:EC:A5:1E:5E:DE:65:DD:62:A4:BF:C5:37:7D:8E:EA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/303f2d8a-87a6-3d73-bd73-d64936c0f57f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:92:09:ce:71:b5:37:81:ca:c1:cd:52:b3:ea:19:90:37:64:
         c8:00:e5:16:77:90:16:df:1c:6c:27:de:0f:0b:63:36:26:5d:
         df:60:7c:a1:17:b8:56:29:a7:16:52:b2:08:8e:f1:4b:d1:3d:
         9a:cd:10:48:04:96:d1:0b:5e:7f:e7:a2:dc:d4:52:9b:a9:55:
         ea:f6:71:7b:f9:67:78:e7:5d:d7:0e:ae:89:d0:23:e6:2b:8b:
         69:dc:45:ce:a9:e7:cc:ae:18:29:80:3a:68:fa:b6:8c:9f:b4:
         c5:72:77:c2:49:29:30:1f:99:61:ca:bd:cc:1b:b7:11:18:9e:
         f8:7f:79:26:1b:51:83:50:dd:f9:da:59:d3:67:aa:9f:eb:9b:
         f1:90:da:4c:ad:5a:ff:07:f9:0e:af:02:15:28:c9:5a:b6:13:
         d0:bb:d9:9f:5d:53:1a:5f:2f:ae:a1:33:e4:d6:a2:e0:e1:5b:
         00:fb:b5:60:dc:db:6b:8d:f9:81:5b:89:8e:50:5a:86:1c:ec:
         be:7a:d7:0a:40:7d:f1:3a:e5:20:a8:36:df:8d:f0:6a:22:2b:
         35:ff:09:f4:fb:ed:42:36:ad:f6:a9:08:0e:9a:95:b4:e1:0e:
         59:52:41:b9:d0:f2:8f:b3:97:77:4f:e0:07:9b:23:7c:04:55:
         d3:b1:07:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVaLXuHvRap3QIe9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
ZmFiMTk2NDQtOGJmYi00OTc5LTliNDUtZWIzMjRjYzliMzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovHHsRo561Q+ESMz3gHiTrYdA5mIZiLR0Pjc
FDz6LGxfVL/IpaN1FE6w5BubBzSK5m3Wy/XTKXQk0q+ui8gxnpidkVBENGq7vfRp
0SJChEAknh9AOzxwtRKhk3bB/wIXR5ZY9bWrpQJYJ+hp5JTGdC6d5AcSrMU3VUKC
lE7yYPQ3RI6ofiAZyi2MdFfKs+SxwjQ7j6NazCBJt7g6JYONhxzElF14kN74GqkY
PvXTUud35/mn5PAWv+7PxVUoqBy4b+7Da90r0izIGczh9dhjAe+CWU/SErbFItlQ
BEMUJW9/qP9L04286v+i4uWWLu6KZB/VVREW6DZ3YfGGMRO7rQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFd70IfspR5e3mXdYqS/xTd9juoTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzAzZjJkOGEtODdhNi0z
ZDczLWJkNzMtZDY0OTM2YzBmNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALWSCc5xtTeBysHNUrPqGZA3ZMgA5RZ3kBbfHGwn3g8LYzYmXd9g
fKEXuFYppxZSsgiO8UvRPZrNEEgEltELXn/notzUUpupVer2cXv5Z3jnXdcOronQ
I+Yri2ncRc6p58yuGCmAOmj6toyftMVyd8JJKTAfmWHKvcwbtxEYnvh/eSYbUYNQ
3fnaWdNnqp/rm/GQ2kytWv8H+Q6vAhUoyVq2E9C72Z9dUxpfL66hM+TWouDhWwD7
tWDc22uN+YFbiY5QWoYc7L561wpAffE65SCoNt+N8GoiKzX/CfT77UI2rfapCA6a
lbThDllSQbnQ8o+zl3dP4AebI3wEVdOxB4A=
-----END CERTIFICATE-----
Generated at Mon May 6 12:02:16 2024 by rpki-client on console-fra.rpki-client.org