Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa
File:                     3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa (raw, json)
Hash identifier:          ywF0YHhaavOadk4yecT2K0+KJJU9DYuSzWG+rDhSDFo=
Subject key identifier:   9A:EE:85:D4:8D:F3:D2:F1:67:8F:90:27:DA:75:1C:E8:99:2F:FF:F2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B7812F2B4CAE10613AF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     23703
IP address blocks:        2001:470:314::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:78:12:f2:b4:ca:e1:06:13:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=3359ba2f-0d75-449c-9c6a-3cc9ff2d20d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:ea:46:68:df:84:29:d7:6a:b9:17:a3:d3:
                    b7:56:3e:15:0d:26:3f:86:39:05:91:02:0d:ee:ac:
                    7c:8d:1e:d8:68:51:43:7f:0b:d2:cb:0a:60:ce:2c:
                    dc:65:e9:23:af:f5:5f:4d:fc:1b:81:ae:f4:ef:e2:
                    f7:8c:26:c0:af:16:f5:1f:d9:f5:3f:15:07:70:6e:
                    7c:bf:20:ce:e4:86:3f:e1:23:03:88:28:6e:b6:ee:
                    9d:7e:4f:fd:8d:be:bf:a4:a8:0c:cd:fc:ec:be:c8:
                    64:17:9f:60:a7:fb:3e:9d:8b:4c:f6:f2:1d:08:91:
                    32:8d:51:03:37:1f:f3:fe:8f:c1:f9:4f:04:91:35:
                    60:2e:df:07:cf:e1:6c:c8:d1:fc:f2:94:e7:d3:28:
                    ac:f2:a4:07:3a:0a:83:02:ed:59:af:49:bb:33:63:
                    ca:89:ff:f6:c7:a6:0a:2f:a9:18:98:00:28:c9:f4:
                    8b:f9:ed:c9:09:a1:86:db:5f:d6:13:8d:45:55:21:
                    23:ba:58:8a:82:e1:76:0f:00:64:34:a9:87:7b:26:
                    ce:c8:80:8a:1f:63:47:3b:cd:87:87:f2:a4:f0:aa:
                    01:f2:75:94:a6:c5:7c:7c:93:c6:d7:16:1f:36:14:
                    a1:20:af:8c:6d:fa:08:9f:17:3d:f7:a9:60:e6:f6:
                    3a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EE:85:D4:8D:F3:D2:F1:67:8F:90:27:DA:75:1C:E8:99:2F:FF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e5c3382-e2ca-32ab-a1a5-4f012a07a2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:314::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:d1:17:2f:42:c7:ac:a0:d8:22:b9:ce:09:7f:a5:ce:2d:
         bc:61:32:61:38:f7:a8:36:4b:93:0f:a3:74:95:94:19:e3:07:
         49:70:c9:5f:bb:f8:b0:f4:95:80:a7:1a:79:8d:cc:16:a7:ca:
         e7:6f:37:44:70:71:a5:ed:7a:5b:5a:9d:65:a4:ed:b0:44:f6:
         82:89:ec:3e:72:f3:46:20:ea:1d:39:3b:60:e8:c7:88:c5:25:
         74:25:17:6f:2f:35:99:51:51:f1:75:4c:f8:39:43:ec:f2:b0:
         d3:47:83:d5:b4:73:7d:a6:a6:6c:80:32:5c:72:b5:a4:de:68:
         f2:84:cf:b6:cf:e2:7b:ad:ef:b3:fd:06:94:63:03:ff:d1:27:
         41:ca:31:64:ca:63:55:8e:89:10:0a:f3:4f:ef:36:73:a1:a5:
         47:34:87:22:f2:c8:6d:7b:ae:f2:66:8a:e5:3f:50:ae:94:53:
         d7:16:1e:22:df:8b:e0:9c:f2:c4:01:64:02:05:37:e3:ce:5f:
         68:b6:0d:b5:b2:5c:6b:4a:1a:3f:82:7e:58:0e:0e:a6:93:7a:
         6b:0e:a1:23:63:a3:6e:41:ec:bc:d6:7f:b3:01:5e:d7:b2:46:
         fc:9f:85:43:45:1f:bb:2b:e7:67:ee:bc:95:d6:ea:96:cf:e3:
         4c:e7:4e:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3gS8rTK4QYTrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
MzM1OWJhMmYtMGQ3NS00NDljLTljNmEtM2NjOWZmMmQyMGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH3qRmjfhCnXarkXo9O3Vj4VDSY/hjkFkQIN
7qx8jR7YaFFDfwvSywpgzizcZekjr/VfTfwbga707+L3jCbArxb1H9n1PxUHcG58
vyDO5IY/4SMDiChutu6dfk/9jb6/pKgMzfzsvshkF59gp/s+nYtM9vIdCJEyjVED
Nx/z/o/B+U8EkTVgLt8Hz+FsyNH88pTn0yis8qQHOgqDAu1Zr0m7M2PKif/2x6YK
L6kYmAAoyfSL+e3JCaGG21/WE41FVSEjuliKguF2DwBkNKmHeybOyICKH2NHO82H
h/Kk8KoB8nWUpsV8fJPG1xYfNhShIK+MbfoInxc996lg5vY6MwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJruhdSN89LxZ4+QJ9p1HOiZL//yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2U1YzMzODItZTJjYS0z
MmFiLWExYTUtNGYwMTJhMDdhMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC4M0RcvQsesoNgiuc4Jf6XOLbxhMmE496g2S5MPo3SVlBnjB0lw
yV+7+LD0lYCnGnmNzBanyudvN0RwcaXteltanWWk7bBE9oKJ7D5y80Yg6h05O2Do
x4jFJXQlF28vNZlRUfF1TPg5Q+zysNNHg9W0c32mpmyAMlxytaTeaPKEz7bP4nut
77P9BpRjA//RJ0HKMWTKY1WOiRAK80/vNnOhpUc0hyLyyG17rvJmiuU/UK6UU9cW
HiLfi+Cc8sQBZAIFN+POX2i2DbWyXGtKGj+CflgODqaTemsOoSNjo25B7LzWf7MB
XteyRvyfhUNFH7sr52fuvJXW6pbP40znTtc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org