Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa
File:                     5cb1ba93-1260-3280-bb73-02ae195f131d.roa (raw, json)
Hash identifier:          n6nZ5xLU65AF80SQXhID2BVVIl6UsOoTBRXda58eoQg=
Subject key identifier:   2D:21:6E:4C:7C:3E:5B:12:2F:81:4C:6F:2B:EF:38:57:CB:F6:32:53
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847BDA000B921068DA3F15773C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa
Signing time:             Sat 02 Nov 2024 01:30:07 +0000
ROA not before:           Sat 02 Nov 2024 01:30:07 +0000
ROA not after:            Fri 31 Jan 2025 02:30:07 +0000
asID:                     399426
IP address blocks:        2001:470:3bc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:a0:00:b9:21:06:8d:a3:f1:57:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov  2 01:30:07 2024 GMT
            Not After : Jan 31 02:30:07 2025 GMT
        Subject: CN=eed9f2b5-dce0-418a-a5d8-69b77ab98332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:d6:f6:c6:eb:c5:80:23:c9:f8:e9:61:f0:
                    5a:01:ad:d2:c9:e6:93:04:ee:4a:b7:fa:69:18:58:
                    93:ad:b3:3c:a8:2e:3c:f8:f3:ec:0c:f3:7c:b0:fe:
                    b9:c6:9b:5d:10:58:3f:3a:82:78:f8:55:27:43:48:
                    73:39:39:30:c5:45:0c:14:26:3b:b9:9e:f9:1a:45:
                    b2:8e:ba:c7:26:90:48:14:cd:0f:e8:25:c5:1d:8f:
                    b0:bf:76:7c:ad:55:53:95:e2:13:54:c2:d3:6b:74:
                    2c:fb:48:97:fd:a1:bc:00:1f:63:a5:c5:ca:57:eb:
                    de:37:a9:3d:0f:aa:02:d8:6a:ce:d2:6f:fa:3f:dd:
                    d6:3d:83:2b:0e:20:5f:b4:d2:67:5e:f2:19:f2:fe:
                    ca:4c:8d:fe:4b:78:30:e5:12:5b:38:a0:57:87:21:
                    9b:da:b9:c8:a3:24:5d:da:7e:c8:f0:25:73:8d:20:
                    7c:1a:78:cd:43:78:3e:1d:22:78:98:08:db:31:fb:
                    e9:06:da:0e:09:c8:7b:e1:f6:74:3d:35:83:2f:e6:
                    85:12:d9:74:ea:ae:7b:1b:85:46:b3:ab:29:3e:89:
                    85:2a:06:62:ac:7d:d7:e6:68:33:d4:47:23:fb:f8:
                    3d:2e:3d:d1:86:1d:c9:20:2b:e6:50:9b:38:f2:22:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:6E:4C:7C:3E:5B:12:2F:81:4C:6F:2B:EF:38:57:CB:F6:32:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e2:f1:a0:04:1c:05:ca:a9:b1:e2:30:58:ab:c9:2a:a0:77:
         dd:38:67:44:6a:e3:98:af:32:34:9d:bf:56:ea:72:37:48:c7:
         b6:e3:d7:28:ba:ee:03:84:94:e0:9d:c6:7f:80:3a:12:17:10:
         ab:5f:e7:a8:db:ea:05:66:19:70:a6:16:18:a8:2c:7f:5f:9a:
         47:0e:de:21:4c:f3:4b:c8:fc:6c:4f:5c:34:34:82:70:3b:ec:
         f9:2b:90:88:bc:97:24:4b:11:72:f2:f8:df:04:e4:63:da:09:
         51:f6:39:0e:fb:87:46:3c:a1:0e:59:24:73:8e:b3:f0:64:06:
         62:87:9c:e1:74:bd:f4:d9:f0:7b:f1:82:f3:bc:d3:ab:f4:26:
         07:3a:82:db:3c:e6:7d:19:27:05:16:d6:e7:07:c9:52:1e:9b:
         0c:d5:22:d9:5d:6b:95:bd:22:af:dc:b8:16:9b:58:68:f9:c2:
         a8:0f:f9:f8:57:cb:5c:f4:56:29:57:4a:55:34:f9:be:16:fc:
         75:4f:4d:ec:88:7c:57:81:2f:c4:af:4f:97:f4:36:e2:cb:41:
         fe:fc:84:d4:ce:7c:d0:f0:b2:45:f0:f3:4b:f1:df:58:30:31:
         85:dc:ee:70:8f:82:76:aa:19:6e:bf:29:32:aa:04:8b:7e:ef:
         af:25:fb:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe9oAC5IQaNo/FXc8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTEwMjAxMzAwN1oXDTI1MDEzMTAyMzAwN1owLzEtMCsGA1UEAxMk
ZWVkOWYyYjUtZGNlMC00MThhLWE1ZDgtNjliNzdhYjk4MzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTTW9sbrxYAjyfjpYfBaAa3SyeaTBO5Kt/pp
GFiTrbM8qC48+PPsDPN8sP65xptdEFg/OoJ4+FUnQ0hzOTkwxUUMFCY7uZ75GkWy
jrrHJpBIFM0P6CXFHY+wv3Z8rVVTleITVMLTa3Qs+0iX/aG8AB9jpcXKV+veN6k9
D6oC2GrO0m/6P93WPYMrDiBftNJnXvIZ8v7KTI3+S3gw5RJbOKBXhyGb2rnIoyRd
2n7I8CVzjSB8GnjNQ3g+HSJ4mAjbMfvpBtoOCch74fZ0PTWDL+aFEtl06q57G4VG
s6spPomFKgZirH3X5mgz1Ecj+/g9Lj3Rhh3JICvmUJs48iIedwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC0hbkx8PlsSL4FMbyvvOFfL9jJTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWNiMWJhOTMtMTI2MC0z
MjgwLWJiNzMtMDJhZTE5NWYxMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE3i8aAEHAXKqbHiMFirySqgd904Z0Rq45ivMjSdv1bqcjdIx7bj
1yi67gOElOCdxn+AOhIXEKtf56jb6gVmGXCmFhioLH9fmkcO3iFM80vI/GxPXDQ0
gnA77PkrkIi8lyRLEXLy+N8E5GPaCVH2OQ77h0Y8oQ5ZJHOOs/BkBmKHnOF0vfTZ
8HvxgvO806v0Jgc6gts85n0ZJwUW1ucHyVIemwzVItlda5W9Iq/cuBabWGj5wqgP
+fhXy1z0VilXSlU0+b4W/HVPTeyIfFeBL8SvT5f0NuLLQf78hNTOfNDwskXw80vx
31gwMYXc7nCPgnaqGW6/KTKqBIt+768l+/c=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:22 2024 by rpki-client on console-ams.rpki-client.org