Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/548381c2-3590-3e84-a1f1-c847d343d5f2.roa
File:                     548381c2-3590-3e84-a1f1-c847d343d5f2.roa (raw, json)
Hash identifier:          oSwmPlRZYm9RFoMyRADJoLnw42HRyzaUScnRWrfP8Io=
Subject key identifier:   D6:78:AF:ED:7D:44:B6:48:5C:87:BB:01:04:E0:F1:55:FE:C8:98:7E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F8956AA93BA5BF941FC83300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/548381c2-3590-3e84-a1f1-c847d343d5f2.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     395127
IP address blocks:        2001:470:e9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:6a:a9:3b:a5:bf:94:1f:c8:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=256a5c4f-8dad-472a-9d57-3c19be496a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:b5:0e:88:cd:87:d4:18:0a:9e:26:60:f3:
                    a1:cf:6e:f1:12:55:42:40:75:54:e4:41:67:ea:a2:
                    67:6a:fd:0f:d1:65:52:c3:24:cf:a2:00:48:25:06:
                    c3:9a:a1:8d:67:51:d3:3f:e0:35:96:f9:cf:ba:2e:
                    b0:45:1f:2d:80:12:00:00:25:ce:2e:28:4d:41:e9:
                    f4:a3:bc:59:43:98:83:fa:97:68:4a:32:37:7d:30:
                    b2:4c:9d:d9:44:d5:cf:28:6c:06:bf:e8:25:5d:c2:
                    8c:6b:d2:0c:b2:5b:c4:09:e1:15:e8:76:ac:ab:2d:
                    70:fa:58:77:9f:e9:fb:bd:8a:cf:43:46:4a:89:20:
                    3e:5a:9d:a8:47:6e:50:93:0a:83:17:06:d9:52:4e:
                    8b:1c:0e:3f:a1:3d:e8:db:17:24:e8:2b:5a:71:53:
                    9e:29:aa:f1:2e:95:ec:a4:63:8e:47:17:ba:ac:fc:
                    b6:b4:51:a2:7e:3b:5e:be:d9:50:05:fe:ec:d4:f2:
                    f1:e8:70:44:0d:9c:ea:6e:87:37:6c:9c:c7:d1:a3:
                    7b:db:2f:dd:6d:b4:62:a4:27:cc:77:06:9b:15:63:
                    5e:e3:a9:81:87:79:e8:35:03:48:ff:e5:22:93:94:
                    46:45:e3:d3:a3:b5:09:84:83:c2:6f:5c:2b:00:2f:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:78:AF:ED:7D:44:B6:48:5C:87:BB:01:04:E0:F1:55:FE:C8:98:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/548381c2-3590-3e84-a1f1-c847d343d5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:66:11:fe:65:61:da:bf:94:7e:05:ce:8c:51:18:82:f5:9f:
         44:b3:32:c3:23:bc:0e:3c:8c:c6:ba:ae:da:11:87:c9:19:af:
         70:90:7a:d7:9d:a3:7b:54:e7:12:37:83:a9:db:8e:62:5c:d6:
         4c:a6:82:f6:ed:d8:0a:c1:f6:b8:6b:19:6a:23:55:6d:81:5f:
         1e:9d:85:73:27:6d:94:da:bb:9a:ed:f0:5b:29:10:75:b6:bb:
         f5:e1:e5:82:31:38:19:83:e4:a4:0d:d3:2c:c9:a6:50:d7:a8:
         a5:98:39:9d:e0:ad:6f:6d:cd:34:3a:1f:6d:25:7a:08:ca:c4:
         ce:24:59:ca:4b:b4:e5:4c:23:72:04:28:8e:2b:c9:c5:ca:8a:
         8e:f1:e9:df:17:c6:29:11:39:09:a1:29:62:e8:55:ab:59:f7:
         76:5f:d0:4a:99:3a:e6:65:9f:45:0c:31:92:f9:07:de:e3:0e:
         65:d1:a1:ee:4d:d5:c2:62:9a:96:7b:24:8f:6b:6d:f3:f6:6c:
         b5:20:89:d2:f5:eb:97:a7:75:07:d6:34:d2:44:17:d0:27:d2:
         32:5d:10:bc:ca:ad:fa:46:b2:30:7e:80:19:1e:ae:7e:1b:2b:
         58:01:34:92:dc:ac:3f:27:03:a5:e3:0f:bf:51:70:d2:77:c8:
         6b:a6:9b:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET4lWqpO6W/lB/IMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
MjU2YTVjNGYtOGRhZC00NzJhLTlkNTctM2MxOWJlNDk2YTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYi1DojNh9QYCp4mYPOhz27xElVCQHVU5EFn
6qJnav0P0WVSwyTPogBIJQbDmqGNZ1HTP+A1lvnPui6wRR8tgBIAACXOLihNQen0
o7xZQ5iD+pdoSjI3fTCyTJ3ZRNXPKGwGv+glXcKMa9IMslvECeEV6Hasqy1w+lh3
n+n7vYrPQ0ZKiSA+Wp2oR25QkwqDFwbZUk6LHA4/oT3o2xck6CtacVOeKarxLpXs
pGOORxe6rPy2tFGifjtevtlQBf7s1PLx6HBEDZzqboc3bJzH0aN72y/dbbRipCfM
dwabFWNe46mBh3noNQNI/+Uik5RGRePTo7UJhIPCb1wrAC+hywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNZ4r+19RLZIXIe7AQTg8VX+yJh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTQ4MzgxYzItMzU5MC0z
ZTg0LWExZjEtYzg0N2QzNDNkNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKRmEf5lYdq/lH4FzoxRGIL1n0SzMsMjvA48jMa6rtoRh8kZr3CQ
etedo3tU5xI3g6nbjmJc1kymgvbt2ArB9rhrGWojVW2BXx6dhXMnbZTau5rt8Fsp
EHW2u/Xh5YIxOBmD5KQN0yzJplDXqKWYOZ3grW9tzTQ6H20legjKxM4kWcpLtOVM
I3IEKI4rycXKio7x6d8XxikROQmhKWLoVatZ93Zf0EqZOuZln0UMMZL5B97jDmXR
oe5N1cJimpZ7JI9rbfP2bLUgidL165endQfWNNJEF9An0jJdELzKrfpGsjB+gBke
rn4bK1gBNJLcrD8nA6XjD79RcNJ3yGumm0Q=
-----END CERTIFICATE-----
Generated at Mon May 6 15:20:36 2024 by rpki-client on console-ams.rpki-client.org