Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b2af871-bf75-3520-96f9-907ce9cdc0d6.roa
File:                     3b2af871-bf75-3520-96f9-907ce9cdc0d6.roa (raw, json)
Hash identifier:          4qyQiinKSV4eZzPGcE7iTnFAebMAT+YjG1CSlQUCcYk=
Subject key identifier:   EF:E8:DD:22:80:7E:AA:F2:3F:D9:FE:C9:97:45:D0:85:E1:A5:C4:F0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584511C487FCD4A5A02502633100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b2af871-bf75-3520-96f9-907ce9cdc0d6.roa
Signing time:             Sat 02 Mar 2024 02:30:48 +0000
ROA not before:           Sat 02 Mar 2024 02:30:48 +0000
ROA not after:            Fri 31 May 2024 01:30:48 +0000
asID:                     396003
IP address blocks:        2001:470:289::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:c4:87:fc:d4:a5:a0:25:02:63:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  2 02:30:48 2024 GMT
            Not After : May 31 01:30:48 2024 GMT
        Subject: CN=c09b2e0e-a3d5-4d9c-bdf4-44f64f239338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:96:b4:20:46:10:2c:78:28:d1:49:09:d9:
                    1f:85:e1:5e:55:0e:e1:e6:70:70:eb:cf:73:5c:2f:
                    d5:f4:0c:24:28:96:96:17:97:80:eb:62:38:6e:5a:
                    7f:11:14:dc:1b:42:22:36:78:a7:bd:e1:25:83:fe:
                    16:cc:47:a6:78:42:e8:a2:c4:6b:c6:d5:95:f9:0a:
                    d9:96:6b:c0:1a:95:04:f6:c3:ca:f2:58:69:24:2b:
                    2f:15:6b:af:9e:42:0d:d9:12:2d:04:fa:6f:11:fc:
                    33:70:d2:cb:5c:b1:ce:b0:21:8f:e7:d8:71:36:70:
                    8e:bb:e3:3e:45:44:b6:b8:6f:35:7d:f5:b1:5c:32:
                    f9:f6:73:e1:0d:72:88:73:a7:11:a5:3a:34:a8:c8:
                    08:24:2b:1c:c0:18:a8:82:00:04:6f:f1:4f:09:db:
                    c7:a4:f1:af:da:5d:c4:27:6c:6f:55:a6:79:c1:0b:
                    88:bf:63:ba:98:b4:72:31:cf:bf:e4:ee:33:9f:13:
                    6d:78:f9:4b:a4:d0:85:ca:cf:fb:11:d2:80:7d:94:
                    4c:fa:6f:ca:d9:ff:70:b9:a0:a7:96:08:fc:b3:80:
                    ea:91:08:f5:65:08:e3:ec:8f:a9:ee:6d:75:4b:94:
                    bf:7d:8e:2c:45:44:44:05:9e:92:4f:d0:9d:62:27:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E8:DD:22:80:7E:AA:F2:3F:D9:FE:C9:97:45:D0:85:E1:A5:C4:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b2af871-bf75-3520-96f9-907ce9cdc0d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:289::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:be:24:e0:8f:a9:77:d7:29:2f:37:66:eb:60:a8:2c:82:64:
         47:c1:d1:10:69:f0:14:f4:29:a2:78:59:dc:b0:4f:8a:87:9c:
         b8:3a:a5:95:97:42:2c:1e:91:82:b0:3b:d5:76:24:e8:0a:36:
         1c:12:4b:ea:62:f3:32:4c:b9:76:f7:9e:dc:eb:4a:64:50:ca:
         b1:11:6f:c3:da:30:54:06:5a:e8:82:6d:86:e8:d2:92:59:19:
         a0:38:52:9e:ff:36:f7:d3:cc:9a:57:fa:8c:39:1f:f9:46:72:
         4f:12:c2:af:49:0c:80:4d:f2:2f:6b:19:aa:5e:1c:a4:2d:8c:
         a9:19:d7:51:1b:f7:04:00:64:31:47:2f:12:da:c8:ea:ef:9d:
         1c:6b:30:f7:de:26:88:19:70:fd:cf:c8:01:e1:e4:9e:1d:24:
         a2:bc:c1:f3:82:19:1e:f2:7a:f6:a1:e2:42:b3:43:0f:0a:fa:
         e3:e8:f0:6a:24:b1:ea:3c:ed:53:6e:7a:ad:fe:ba:bf:64:0b:
         e6:a9:03:3f:fc:ef:36:9d:6d:44:68:42:f9:6a:a6:30:6e:c3:
         f9:c0:46:51:88:5d:74:34:62:52:3f:f5:85:fc:e9:15:9b:9d:
         17:d1:5f:1c:fc:ed:56:f8:5d:c6:23:bc:e6:7b:44:c4:4b:eb:
         99:14:60:3b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEURxIf81KWgJQJjMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDMwMjAyMzA0OFoXDTI0MDUzMTAxMzA0OFowLzEtMCsGA1UEAxMk
YzA5YjJlMGUtYTNkNS00ZDljLWJkZjQtNDRmNjRmMjM5MzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5KWtCBGECx4KNFJCdkfheFeVQ7h5nBw689z
XC/V9AwkKJaWF5eA62I4blp/ERTcG0IiNninveElg/4WzEemeELoosRrxtWV+QrZ
lmvAGpUE9sPK8lhpJCsvFWuvnkIN2RItBPpvEfwzcNLLXLHOsCGP59hxNnCOu+M+
RUS2uG81ffWxXDL59nPhDXKIc6cRpTo0qMgIJCscwBioggAEb/FPCdvHpPGv2l3E
J2xvVaZ5wQuIv2O6mLRyMc+/5O4znxNtePlLpNCFys/7EdKAfZRM+m/K2f9wuaCn
lgj8s4DqkQj1ZQjj7I+p7m11S5S/fY4sRUREBZ6ST9CdYicD5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO/o3SKAfqryP9n+yZdF0IXhpcTwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2IyYWY4NzEtYmY3NS0z
NTIwLTk2ZjktOTA3Y2U5Y2RjMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFG+JOCPqXfXKS83ZutgqCyCZEfB0RBp8BT0KaJ4WdywT4qHnLg6
pZWXQiwekYKwO9V2JOgKNhwSS+pi8zJMuXb3ntzrSmRQyrERb8PaMFQGWuiCbYbo
0pJZGaA4Up7/NvfTzJpX+ow5H/lGck8Swq9JDIBN8i9rGapeHKQtjKkZ11Eb9wQA
ZDFHLxLayOrvnRxrMPfeJogZcP3PyAHh5J4dJKK8wfOCGR7yevah4kKzQw8K+uPo
8Gokseo87VNueq3+ur9kC+apAz/87zadbURoQvlqpjBuw/nARlGIXXQ0YlI/9YX8
6RWbnRfRXxz87Vb4XcYjvOZ7RMRL65kUYDs=
-----END CERTIFICATE-----
Generated at Mon May 6 15:20:36 2024 by rpki-client on console-ams.rpki-client.org