Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44d31869-48ff-3661-82c6-e553c1bf59e6.roa
File:                     44d31869-48ff-3661-82c6-e553c1bf59e6.roa (raw, json)
Hash identifier:          wg/LckRugo5z47Rq0Ng8it29JvB1T/2gXNvPiEOeyp0=
Subject key identifier:   E8:C8:0F:59:A8:FC:44:33:FC:54:E6:AE:BB:DA:9A:1B:C4:16:E9:61
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844EC05426AEAC9DCFC240EFC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44d31869-48ff-3661-82c6-e553c1bf59e6.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     37057
IP address blocks:        2001:470:1eb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:42:6a:ea:c9:dc:fc:24:0e:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=966fdc91-ce54-45f8-803e-713a6e96e2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9c:22:ae:4f:92:c4:52:bf:fc:80:df:ba:51:
                    7c:94:4c:44:6f:43:1f:c4:8a:0a:6e:d0:6e:18:06:
                    52:bd:c2:54:c1:14:87:5b:6d:bf:46:45:46:37:8a:
                    f3:c5:dc:8d:b8:a9:3e:d5:7d:39:da:4e:c2:ce:91:
                    52:c0:73:d7:03:23:92:d5:6a:07:ef:2d:be:0d:52:
                    d1:41:ab:b3:25:c5:0b:69:b2:ab:a3:3d:1f:24:59:
                    98:9b:b5:ac:dc:35:a4:13:21:ba:e7:e6:ca:33:7a:
                    e5:ed:a4:5a:31:c6:da:cb:e0:d3:2e:82:7d:e4:ed:
                    ff:f6:20:f3:8c:83:c4:54:79:94:82:ca:c4:62:59:
                    6c:0d:8c:08:a5:e8:7d:bf:8f:71:0f:5b:df:4d:d6:
                    e5:af:da:a3:e9:eb:2c:dc:da:18:e3:23:6c:98:37:
                    45:d6:3b:39:b4:2c:66:65:2f:2f:ae:a5:e2:cc:f4:
                    cc:17:95:e9:11:19:0e:53:f3:4d:a2:2d:85:f6:42:
                    e5:8b:17:6b:5e:90:bb:ab:3e:c0:16:07:99:e9:1e:
                    59:1f:b4:b6:bc:ac:c1:24:57:19:0c:43:f3:8e:e8:
                    04:8c:0b:4b:4b:8f:5b:8f:e6:8e:a8:1d:a5:5e:d7:
                    32:5e:82:f5:b0:82:a1:9a:17:2c:fe:8e:8f:15:e1:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:0F:59:A8:FC:44:33:FC:54:E6:AE:BB:DA:9A:1B:C4:16:E9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/44d31869-48ff-3661-82c6-e553c1bf59e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:52:36:0b:79:e8:2d:37:81:8b:9f:d3:64:fd:92:ad:c7:44:
         b7:92:d5:e6:46:40:1b:a9:ab:5b:31:ad:6f:95:ca:2d:7f:51:
         b1:47:15:38:b8:cb:ba:09:ed:fc:b1:87:00:b7:82:2f:cc:70:
         e8:6f:c2:c2:3e:3a:06:5f:b5:e0:7e:be:3d:f8:2d:1d:26:eb:
         98:f6:82:fb:11:31:a9:84:0a:fb:20:0b:93:17:fc:69:f6:44:
         21:9c:1f:60:45:ef:e4:ef:03:97:a6:21:24:1b:78:a8:01:f6:
         97:df:72:f6:a3:03:c5:c4:54:bd:06:1c:1b:60:61:c6:62:ee:
         49:e0:5e:9e:89:67:1e:cf:5b:5f:97:78:1b:f1:1b:c6:27:92:
         7b:24:db:c8:8f:f2:87:b5:c0:3c:a0:f9:dd:1c:ef:31:fc:7e:
         95:f3:50:29:50:fa:8a:2f:c6:2d:12:97:f8:14:4e:ef:fb:ef:
         d5:9a:96:92:d2:7f:81:b0:77:1c:44:9c:97:b1:f3:00:de:34:
         e4:a9:1b:2b:45:3b:08:8d:ca:a0:a9:b2:de:d7:82:9a:a9:30:
         40:27:7a:38:96:c8:9b:8a:a7:f1:64:74:63:27:3f:f8:d0:83:
         ec:6e:05:0e:0c:09:77:5c:fc:1f:57:96:15:0e:fb:1f:1a:0f:
         01:87:cc:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETsBUJq6snc/CQO/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIxNzE0MDAzMFoXDTI0MDUxNzEzMDAzMFowLzEtMCsGA1UEAxMk
OTY2ZmRjOTEtY2U1NC00NWY4LTgwM2UtNzEzYTZlOTZlMmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5wirk+SxFK//IDfulF8lExEb0MfxIoKbtBu
GAZSvcJUwRSHW22/RkVGN4rzxdyNuKk+1X052k7CzpFSwHPXAyOS1WoH7y2+DVLR
QauzJcULabKroz0fJFmYm7Ws3DWkEyG65+bKM3rl7aRaMcbay+DTLoJ95O3/9iDz
jIPEVHmUgsrEYllsDYwIpeh9v49xD1vfTdblr9qj6ess3NoY4yNsmDdF1js5tCxm
ZS8vrqXizPTMF5XpERkOU/NNoi2F9kLlixdrXpC7qz7AFgeZ6R5ZH7S2vKzBJFcZ
DEPzjugEjAtLS49bj+aOqB2lXtcyXoL1sIKhmhcs/o6PFeFGkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOjID1mo/EQz/FTmrrvamhvEFulhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDRkMzE4NjktNDhmZi0z
NjYxLTgyYzYtZTU1M2MxYmY1OWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMBSNgt56C03gYuf02T9kq3HRLeS1eZGQBupq1sxrW+Vyi1/UbFH
FTi4y7oJ7fyxhwC3gi/McOhvwsI+OgZfteB+vj34LR0m65j2gvsRMamECvsgC5MX
/Gn2RCGcH2BF7+TvA5emISQbeKgB9pffcvajA8XEVL0GHBtgYcZi7kngXp6JZx7P
W1+XeBvxG8Ynknsk28iP8oe1wDyg+d0c7zH8fpXzUClQ+oovxi0Sl/gUTu/779Wa
lpLSf4GwdxxEnJex8wDeNOSpGytFOwiNyqCpst7XgpqpMEAnejiWyJuKp/FkdGMn
P/jQg+xuBQ4MCXdc/B9XlhUO+x8aDwGHzK0=
-----END CERTIFICATE-----
Generated at Mon May 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org