Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa
File:                     5eb17499-54d1-3ab3-b109-f2c4846c9490.roa (raw, json)
Hash identifier:          O0dtp1rWjsIxp/CwtBO62hvedXn+WEB7k1Bc5ZQYzC8=
Subject key identifier:   6D:E3:76:D8:AD:56:10:20:F0:A0:D5:E5:AE:EB:88:7D:E0:D8:C6:05
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B701A7B4CF2F358719200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     18526
IP address blocks:        2001:470:2b3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:70:1a:7b:4c:f2:f3:58:71:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=da2dc7dd-8b28-4793-a54a-7275d66505fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:9d:b4:96:d2:0f:99:ee:fe:f3:04:42:f2:
                    ef:6f:14:f9:54:f3:42:59:0f:e5:76:54:67:17:7f:
                    16:56:f5:15:0f:52:4a:dc:30:c4:3f:64:d5:22:e0:
                    11:b3:f3:02:45:93:fe:95:15:01:af:1a:9a:cf:67:
                    97:9e:e0:bf:f2:31:1d:ef:2d:d4:c5:dc:c2:be:6a:
                    71:a4:0c:e2:31:d8:7d:bb:5f:da:23:c2:06:30:1e:
                    c9:c6:b3:7c:09:c8:50:e9:10:89:c3:bd:3d:f8:ac:
                    9f:c7:e8:69:1d:92:ac:92:1f:3a:79:26:7a:91:45:
                    77:12:77:67:61:ec:4f:b5:9e:ff:d0:10:ef:31:ff:
                    99:42:b6:83:0f:35:2e:3c:53:63:3c:d8:60:0b:99:
                    c0:54:24:69:5b:94:76:54:fd:c2:bd:61:e9:37:5f:
                    11:96:cb:db:a4:3a:b3:c2:35:3d:85:89:f6:b2:85:
                    04:44:b8:df:da:51:a6:8f:3f:31:b0:3b:70:5d:b4:
                    06:4f:62:d7:90:2a:8f:f3:69:4c:2d:5b:54:e6:88:
                    26:b0:d1:fc:80:75:0e:ed:e1:98:ae:3a:d6:2d:2e:
                    07:50:ea:48:85:78:39:b0:f9:ae:a8:32:17:e9:f9:
                    52:2d:2b:89:5e:24:a1:05:6d:b4:e8:a5:75:ae:9d:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E3:76:D8:AD:56:10:20:F0:A0:D5:E5:AE:EB:88:7D:E0:D8:C6:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:91:bc:1a:3d:43:35:11:4c:f5:ff:f8:82:16:4a:5d:74:
         ae:14:82:86:15:e7:24:6a:d0:30:ed:a9:e9:5e:e3:89:dd:81:
         2b:e0:30:83:b1:d1:c3:f5:d6:1b:e4:18:7d:dc:9c:29:94:61:
         36:9d:85:3f:ba:c1:87:31:e8:ac:21:d0:a0:23:e0:d6:2b:6b:
         fc:e6:19:e4:ab:3f:91:af:1a:18:ca:51:98:81:2c:1b:73:c5:
         8e:32:ce:7d:f7:17:92:95:69:fc:93:81:eb:4f:a5:a6:a4:25:
         d4:ce:aa:00:32:36:b0:63:76:83:9a:d1:c4:4d:93:b2:c9:d6:
         31:7e:a9:53:b6:9b:f0:7e:f0:bf:2e:d2:8d:f0:2a:57:51:6f:
         91:11:68:f0:5f:0f:94:c3:07:5f:6a:f9:a8:aa:4e:fb:0f:e6:
         77:26:32:b1:4a:4c:bc:8c:cb:39:70:54:86:15:ff:35:7b:f5:
         fb:8b:5b:ab:1c:a7:9b:ef:f5:34:81:fb:7c:61:24:22:b1:f6:
         fd:ec:e7:7b:4a:da:1a:d0:84:d1:df:a2:62:db:d3:84:9a:37:
         1c:46:ed:ef:2c:ec:14:67:ea:5f:e2:4f:eb:e7:26:76:e2:8e:
         a8:c0:73:34:18:37:bc:0c:93:2f:b6:1a:71:b0:d3:0c:dc:89:
         58:c2:13:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3Aae0zy81hxkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZGEyZGM3ZGQtOGIyOC00NzkzLWE1NGEtNzI3NWQ2NjUwNWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9+dtJbSD5nu/vMEQvLvbxT5VPNCWQ/ldlRn
F38WVvUVD1JK3DDEP2TVIuARs/MCRZP+lRUBrxqaz2eXnuC/8jEd7y3UxdzCvmpx
pAziMdh9u1/aI8IGMB7JxrN8CchQ6RCJw709+Kyfx+hpHZKskh86eSZ6kUV3Endn
YexPtZ7/0BDvMf+ZQraDDzUuPFNjPNhgC5nAVCRpW5R2VP3CvWHpN18RlsvbpDqz
wjU9hYn2soUERLjf2lGmjz8xsDtwXbQGT2LXkCqP82lMLVtU5ogmsNH8gHUO7eGY
rjrWLS4HUOpIhXg5sPmuqDIX6flSLSuJXiShBW206KV1rp0SywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG3jdtitVhAg8KDV5a7riH3g2MYFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWViMTc0OTktNTRkMS0z
YWIzLWIxMDktZjJjNDg0NmM5NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKiHkbwaPUM1EUz1//iCFkpddK4UgoYV5yRq0DDtqele44ndgSvg
MIOx0cP11hvkGH3cnCmUYTadhT+6wYcx6Kwh0KAj4NYra/zmGeSrP5GvGhjKUZiB
LBtzxY4yzn33F5KVafyTgetPpaakJdTOqgAyNrBjdoOa0cRNk7LJ1jF+qVO2m/B+
8L8u0o3wKldRb5ERaPBfD5TDB19q+aiqTvsP5ncmMrFKTLyMyzlwVIYV/zV79fuL
W6scp5vv9TSB+3xhJCKx9v3s53tK2hrQhNHfomLb04SaNxxG7e8s7BRn6l/iT+vn
JnbijqjAczQYN7wMky+2GnGw0wzciVjCE1k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org