Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3acf572f-8477-3487-aa1c-2df98040c93d.roa
File:                     3acf572f-8477-3487-aa1c-2df98040c93d.roa (raw, json)
Hash identifier:          CoBWMii9r1/ok8BngU9Fw+j0JiOP/YGwonhUW2nV9j0=
Subject key identifier:   96:18:D6:73:2D:6A:79:D4:43:AE:A7:6A:A0:34:B4:AF:4C:84:49:85
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844FCD4696BC8D8D5775596DD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3acf572f-8477-3487-aa1c-2df98040c93d.roa
Signing time:             Fri 23 Feb 2024 14:30:49 +0000
ROA not before:           Fri 23 Feb 2024 14:30:49 +0000
ROA not after:            Thu 23 May 2024 13:30:49 +0000
asID:                     198408
IP address blocks:        2001:470:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:d4:69:6b:c8:d8:d5:77:55:96:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 14:30:49 2024 GMT
            Not After : May 23 13:30:49 2024 GMT
        Subject: CN=bf2f1575-99a1-40a3-ac47-25004cbe6290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:18:ee:8a:c7:c1:73:f1:ef:ac:c9:b7:9f:
                    61:9c:41:16:e8:81:09:77:ca:7f:d9:fa:85:d6:59:
                    36:61:97:ca:80:91:b6:90:bc:3a:1e:af:88:ee:5c:
                    ba:8b:ad:19:2e:61:34:4b:02:15:b1:79:4b:ab:71:
                    fb:26:d6:80:f2:c2:ab:d4:65:ec:6c:57:c2:56:2b:
                    4b:c3:e6:be:a7:97:cd:28:a8:71:f7:af:91:e4:ab:
                    04:db:f0:06:56:b6:2f:e4:41:ab:b1:d3:e7:ff:9e:
                    db:6c:76:7d:5c:61:79:a8:92:3d:03:46:4f:5a:d6:
                    cb:7f:d8:01:41:66:38:05:51:a5:0e:07:82:de:a2:
                    30:61:08:8c:c8:55:dd:f9:12:03:cb:0c:aa:d0:f1:
                    f8:2b:bf:db:fd:6f:8e:9d:42:ba:25:c8:87:6f:ce:
                    b6:01:28:ed:50:28:d7:dd:75:4a:20:f5:13:70:7f:
                    a9:7c:75:d2:21:fe:23:88:17:b9:3a:00:4a:84:5f:
                    56:94:27:f6:d0:23:aa:16:0b:4d:6f:4b:69:fc:19:
                    79:b8:81:00:83:7f:87:51:10:93:bf:92:f2:d0:31:
                    7d:ef:3c:30:66:9f:01:59:52:78:43:b9:bb:0d:cc:
                    b4:40:15:f3:72:d7:50:a9:5e:17:a5:9c:1d:59:ac:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:18:D6:73:2D:6A:79:D4:43:AE:A7:6A:A0:34:B4:AF:4C:84:49:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3acf572f-8477-3487-aa1c-2df98040c93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:03:e6:72:94:13:b9:7a:69:b1:77:27:4d:9e:ae:74:0a:7e:
         7b:9f:41:b0:9f:56:b2:2f:a5:d2:d4:81:a2:e4:4f:b8:62:26:
         71:e5:08:d4:e4:99:c6:1e:75:23:03:49:57:5c:24:f9:75:54:
         4d:20:62:73:52:8d:65:e8:dd:ae:34:3e:46:ae:a3:c2:58:c8:
         37:ec:c8:4d:31:51:30:00:f9:45:f8:37:52:ea:41:b4:fb:ec:
         7a:c8:8f:11:9a:8c:ac:11:41:7a:6b:42:72:08:2e:80:6b:df:
         d0:1e:21:c2:af:97:27:55:3b:16:a3:69:b4:0e:90:a2:35:e9:
         e4:d6:f2:db:70:1b:9f:d1:6a:af:a5:f0:7b:0f:8d:99:15:8a:
         31:41:14:62:39:d7:08:f4:79:69:2f:c8:90:5f:5c:86:49:78:
         cf:1b:a6:db:82:79:a4:33:9b:42:73:15:fb:f2:a4:41:04:ec:
         d8:7c:3f:1e:38:61:c4:ae:87:58:a6:c1:cd:2d:e6:ba:a8:78:
         46:0d:66:d3:86:3d:f7:69:f9:53:f2:40:f1:47:ec:72:59:fd:
         ed:6a:c9:92:a8:8b:56:6b:fb:97:8e:ac:48:6f:7d:98:1a:af:
         96:ae:53:18:90:32:d9:88:91:b2:f5:7c:d0:e2:ff:bb:5d:24:
         af:8e:04:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET81GlryNjVd1WW3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMzE0MzA0OVoXDTI0MDUyMzEzMzA0OVowLzEtMCsGA1UEAxMk
YmYyZjE1NzUtOTlhMS00MGEzLWFjNDctMjUwMDRjYmU2MjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWoY7orHwXPx76zJt59hnEEW6IEJd8p/2fqF
1lk2YZfKgJG2kLw6Hq+I7ly6i60ZLmE0SwIVsXlLq3H7JtaA8sKr1GXsbFfCVitL
w+a+p5fNKKhx96+R5KsE2/AGVrYv5EGrsdPn/57bbHZ9XGF5qJI9A0ZPWtbLf9gB
QWY4BVGlDgeC3qIwYQiMyFXd+RIDywyq0PH4K7/b/W+OnUK6JciHb862ASjtUCjX
3XVKIPUTcH+pfHXSIf4jiBe5OgBKhF9WlCf20COqFgtNb0tp/Bl5uIEAg3+HURCT
v5Ly0DF97zwwZp8BWVJ4Q7m7Dcy0QBXzctdQqV4XpZwdWaw0PwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJYY1nMtannUQ66naqA0tK9MhEmFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2FjZjU3MmYtODQ3Ny0z
NDg3LWFhMWMtMmRmOTgwNDBjOTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABYD5nKUE7l6abF3J02ernQKfnufQbCfVrIvpdLUgaLkT7hiJnHl
CNTkmcYedSMDSVdcJPl1VE0gYnNSjWXo3a40Pkauo8JYyDfsyE0xUTAA+UX4N1Lq
QbT77HrIjxGajKwRQXprQnIILoBr39AeIcKvlydVOxajabQOkKI16eTW8ttwG5/R
aq+l8HsPjZkVijFBFGI51wj0eWkvyJBfXIZJeM8bptuCeaQzm0JzFfvypEEE7Nh8
Px44YcSuh1imwc0t5rqoeEYNZtOGPfdp+VPyQPFH7HJZ/e1qyZKoi1Zr+5eOrEhv
fZgar5auUxiQMtmIkbL1fNDi/7tdJK+OBPI=
-----END CERTIFICATE-----
Generated at Mon May 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org