Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b9d17cd-37e2-3b0b-b60a-aa69656de437.roa
File:                     4b9d17cd-37e2-3b0b-b60a-aa69656de437.roa (raw, json)
Hash identifier:          eqKG6Jb44kmjDiU+ieYWV13SqfFw8nwsoBHNEhqhJSk=
Subject key identifier:   2C:ED:55:B1:26:C9:43:AA:93:AB:DE:20:50:9F:C4:67:47:18:3B:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845B21E33E2FFD668214C01AFC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b9d17cd-37e2-3b0b-b60a-aa69656de437.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     207327
IP address blocks:        2001:470:225::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:33:e2:ff:d6:68:21:4c:01:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=6d0dc4c1-f186-4401-b493-f86b9c1ceb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:1e:9f:ea:e5:25:87:f2:f7:e9:7a:1f:44:
                    a8:68:30:60:63:b2:aa:41:b4:50:f5:12:62:ef:0c:
                    b8:cb:01:cb:6c:ef:7c:80:bc:f7:13:98:77:77:aa:
                    60:84:10:7b:d6:80:4a:7a:d6:fa:d8:62:c1:3b:95:
                    5f:67:53:a4:e2:63:b5:3e:d7:ad:02:36:dc:3d:d8:
                    14:c9:fc:5a:78:b2:1b:fc:28:7d:26:b5:5a:d2:6b:
                    4c:71:f5:32:53:c3:b3:13:e4:84:fd:4f:47:77:a4:
                    58:25:09:33:e5:da:67:14:b5:b5:86:d1:b9:7d:7e:
                    5f:c4:10:ca:e4:48:21:6e:c7:3e:7c:24:ea:7a:40:
                    5f:6e:dc:f2:e1:24:ae:24:7e:c2:cd:5b:43:57:cd:
                    b1:0e:b4:3d:9f:02:df:78:ec:c4:43:a7:62:6d:a9:
                    b7:2d:c6:a6:5d:31:ff:bf:7a:66:42:9b:ef:4e:01:
                    e7:89:21:0a:ba:19:e6:a4:09:81:9b:27:d5:33:e4:
                    6c:61:35:0c:0d:e7:2c:87:84:ac:c4:ed:4b:92:72:
                    99:b9:f2:a4:c5:f5:bf:16:ac:61:b4:d3:e3:95:82:
                    73:36:aa:9f:f4:c7:79:ab:57:7f:e7:31:b1:10:11:
                    77:7a:e2:20:13:7f:0a:4e:e3:0f:0c:61:19:04:58:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:ED:55:B1:26:C9:43:AA:93:AB:DE:20:50:9F:C4:67:47:18:3B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b9d17cd-37e2-3b0b-b60a-aa69656de437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:225::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:af:77:e5:89:35:b4:e2:88:e1:96:3e:01:df:84:06:21:87:
         e7:ac:92:b8:57:89:72:48:52:73:4c:2a:52:7c:b9:89:a3:c6:
         de:d3:d8:a1:af:75:0c:36:ef:95:9c:99:e2:7f:a7:53:6f:0f:
         d4:e7:6d:e2:b4:84:40:31:aa:3b:1b:69:85:94:0b:f5:56:6c:
         35:a9:db:8a:b2:3f:1a:0c:b6:30:5e:65:2a:96:f8:33:a2:ed:
         b8:ee:90:e6:d1:9f:4f:61:8a:6e:54:25:06:3e:fe:a1:9a:a0:
         fc:d0:dd:e8:0c:15:43:c9:47:a6:a2:2a:7e:ef:e5:1d:31:ae:
         71:47:38:f5:36:a7:4d:7a:e8:e6:56:6a:fa:3a:1f:f0:e8:dd:
         90:42:82:61:59:89:8b:62:fe:70:3a:d7:94:f1:3e:77:fc:b5:
         15:2d:46:1a:6d:21:8a:75:32:58:31:22:0c:c9:f9:ff:45:75:
         27:52:3e:a5:cf:05:9b:80:6e:80:42:e8:cd:89:66:46:69:94:
         16:07:c8:64:16:0a:03:ac:e7:4a:75:09:56:89:b6:98:27:89:
         6f:74:e7:ca:5f:dd:54:22:07:f0:80:e3:1f:7e:62:74:d6:92:
         f6:d3:12:a1:70:95:b9:4f:b5:74:b6:62:65:c2:a5:14:62:15:
         01:1d:2a:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWyHjPi/9ZoIUwBr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk
NmQwZGM0YzEtZjE4Ni00NDAxLWI0OTMtZjg2YjljMWNlYjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL8en+rlJYfy9+l6H0SoaDBgY7KqQbRQ9RJi
7wy4ywHLbO98gLz3E5h3d6pghBB71oBKetb62GLBO5VfZ1Ok4mO1PtetAjbcPdgU
yfxaeLIb/Ch9JrVa0mtMcfUyU8OzE+SE/U9Hd6RYJQkz5dpnFLW1htG5fX5fxBDK
5Eghbsc+fCTqekBfbtzy4SSuJH7CzVtDV82xDrQ9nwLfeOzEQ6dibam3LcamXTH/
v3pmQpvvTgHniSEKuhnmpAmBmyfVM+RsYTUMDecsh4SsxO1LknKZufKkxfW/Fqxh
tNPjlYJzNqqf9Md5q1d/5zGxEBF3euIgE38KTuMPDGEZBFhziwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCztVbEmyUOqk6veIFCfxGdHGDscMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGI5ZDE3Y2QtMzdlMi0z
YjBiLWI2MGEtYWE2OTY1NmRlNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABqvd+WJNbTiiOGWPgHfhAYhh+eskrhXiXJIUnNMKlJ8uYmjxt7T
2KGvdQw275WcmeJ/p1NvD9TnbeK0hEAxqjsbaYWUC/VWbDWp24qyPxoMtjBeZSqW
+DOi7bjukObRn09him5UJQY+/qGaoPzQ3egMFUPJR6aiKn7v5R0xrnFHOPU2p016
6OZWavo6H/Do3ZBCgmFZiYti/nA615TxPnf8tRUtRhptIYp1MlgxIgzJ+f9FdSdS
PqXPBZuAboBC6M2JZkZplBYHyGQWCgOs50p1CVaJtpgniW9058pf3VQiB/CA4x9+
YnTWkvbTEqFwlblPtXS2YmXCpRRiFQEdKjY=
-----END CERTIFICATE-----
Generated at Mon May 6 20:30:31 2024 by rpki-client on console-ams.rpki-client.org