Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31ac12b3-45ad-31b3-a0e1-3edd36af652f.roa
File:                     31ac12b3-45ad-31b3-a0e1-3edd36af652f.roa (raw, json)
Hash identifier:          7YpiqpokTfIPbtU/6npdfwWEDSvw1kgD85PDasVEAnI=
Subject key identifier:   B1:58:83:A1:F7:36:94:1C:3C:05:7E:DF:A2:A3:BE:EF:89:85:7E:20
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89577619AF6131B75C20A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31ac12b3-45ad-31b3-a0e1-3edd36af652f.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     398273
IP address blocks:        2001:470:cd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:77:61:9a:f6:13:1b:75:c2:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=926c3bf7-e747-4671-8955-ea6984a8f0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:c1:96:d6:2f:91:17:14:c2:82:10:a6:cc:
                    28:a6:55:11:39:fd:5b:98:e0:d9:a6:e0:7f:8d:ad:
                    68:f6:65:c6:6d:e7:1e:7f:b3:7d:b8:18:0e:f8:37:
                    5d:2d:bd:6d:67:12:55:78:d0:61:95:8e:be:1d:36:
                    7f:83:2e:2b:7b:77:b3:b9:56:fd:0b:1d:d8:cc:e8:
                    e4:c1:54:a7:d0:24:44:d7:6a:da:58:f9:41:c7:4e:
                    71:3d:bf:69:e7:65:5f:7d:8e:c1:65:cb:8d:0f:3c:
                    0b:64:d2:d3:6c:92:77:0b:f1:eb:9b:6e:dc:1d:0c:
                    ad:0a:4c:c4:d5:7c:fb:c9:1d:17:56:04:a4:e8:db:
                    45:39:eb:4d:a5:15:37:08:65:64:57:ba:9d:20:8f:
                    48:31:63:da:25:72:f4:b9:18:8d:9c:83:62:05:ca:
                    78:f9:5a:16:e4:f0:10:d0:58:72:c1:db:1f:ec:1b:
                    45:aa:1e:24:1b:76:22:7f:0c:a3:6d:e1:16:bd:c1:
                    3c:11:b7:37:e0:2b:ae:11:5e:1d:15:b0:1c:a6:5e:
                    18:f1:3d:91:35:5f:11:67:dd:ac:1a:5a:d1:4a:3b:
                    61:e3:90:92:4e:17:67:67:78:91:f2:1a:ac:cc:08:
                    fb:59:fd:73:03:c5:2d:46:8c:65:7e:ae:3e:96:ec:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:58:83:A1:F7:36:94:1C:3C:05:7E:DF:A2:A3:BE:EF:89:85:7E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31ac12b3-45ad-31b3-a0e1-3edd36af652f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:cd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:67:7c:18:f3:9f:28:d2:89:ef:34:eb:e4:9a:e5:20:21:f4:
         e7:8a:13:27:40:dd:c2:bd:e9:58:48:6a:2f:70:e5:82:2f:f9:
         38:f1:08:10:a3:9c:0e:74:f9:0a:56:61:4b:04:e2:db:28:52:
         5d:ff:ff:cb:09:83:58:b2:9a:2c:07:64:7b:b6:b4:31:52:82:
         e4:6f:9f:8c:fe:ea:bb:d7:d1:be:dd:33:c9:18:4b:19:3b:51:
         96:e2:81:14:32:58:56:e8:30:87:7f:fe:f3:eb:e9:31:dc:ba:
         c1:43:d1:c9:37:74:3d:a0:7b:fe:42:21:48:28:26:73:7a:fd:
         a9:38:f1:a9:e2:14:c5:03:03:93:16:69:f2:66:56:73:1a:2f:
         59:7a:3f:0e:27:89:ab:ce:af:dc:b0:34:00:b9:a9:61:52:fc:
         5b:8f:eb:56:b1:80:d8:f9:df:42:0d:0b:39:11:10:6f:74:74:
         9c:ff:0e:62:27:4f:fe:04:de:0e:c6:a3:63:cc:84:a0:53:f9:
         ba:eb:ea:85:2a:b1:33:fb:4c:9e:5b:3b:6d:ad:cd:39:9f:21:
         75:ca:03:6e:c8:1f:fd:36:82:00:b0:c0:56:9d:1a:26:dd:19:
         c7:32:38:81:b2:65:0a:fd:7b:9e:fa:c5:e1:f6:4d:e5:54:05:
         4e:49:38:f5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET4lXdhmvYTG3XCCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
OTI2YzNiZjctZTc0Ny00NjcxLTg5NTUtZWE2OTg0YThmMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s3BltYvkRcUwoIQpswoplUROf1bmODZpuB/
ja1o9mXGbecef7N9uBgO+DddLb1tZxJVeNBhlY6+HTZ/gy4re3ezuVb9Cx3YzOjk
wVSn0CRE12raWPlBx05xPb9p52VffY7BZcuNDzwLZNLTbJJ3C/Hrm27cHQytCkzE
1Xz7yR0XVgSk6NtFOetNpRU3CGVkV7qdII9IMWPaJXL0uRiNnINiBcp4+VoW5PAQ
0Fhywdsf7BtFqh4kG3YifwyjbeEWvcE8Ebc34CuuEV4dFbAcpl4Y8T2RNV8RZ92s
GlrRSjth45CSThdnZ3iR8hqszAj7Wf1zA8UtRoxlfq4+luw1zQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLFYg6H3NpQcPAV+36Kjvu+JhX4gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzFhYzEyYjMtNDVhZC0z
MWIzLWEwZTEtM2VkZDM2YWY2NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZnfBjznyjSie806+Sa5SAh9OeKEydA3cK96VhIai9w5YIv+Tjx
CBCjnA50+QpWYUsE4tsoUl3//8sJg1iymiwHZHu2tDFSguRvn4z+6rvX0b7dM8kY
Sxk7UZbigRQyWFboMId//vPr6THcusFD0ck3dD2ge/5CIUgoJnN6/ak48aniFMUD
A5MWafJmVnMaL1l6Pw4niavOr9ywNAC5qWFS/FuP61axgNj530INCzkREG90dJz/
DmInT/4E3g7Go2PMhKBT+brr6oUqsTP7TJ5bO22tzTmfIXXKA27IH/02ggCwwFad
GibdGccyOIGyZQr9e576xeH2TeVUBU5JOPU=
-----END CERTIFICATE-----
Generated at Mon May 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org