Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61ab53df-a4a8-33c3-8fba-971ed5844eef.roa
File:                     61ab53df-a4a8-33c3-8fba-971ed5844eef.roa (raw, json)
Hash identifier:          MOkgmaLMXeSbUkJF3nl7JYC7fF5EFt1qXYKeA6pKKS8=
Subject key identifier:   53:CF:AA:5A:BE:10:19:1A:0F:FA:2E:74:22:1F:4F:9C:2B:FD:E8:94
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B6F97402D8CCED1FF2F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61ab53df-a4a8-33c3-8fba-971ed5844eef.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     56971
IP address blocks:        2001:470:2ac::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:6f:97:40:2d:8c:ce:d1:ff:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=de944a6e-6d22-4b76-ae27-95e54de49ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:d7:60:98:bc:1c:00:b3:d6:f4:cd:c4:60:
                    f3:3d:5f:9f:84:75:3d:9b:54:5a:1d:2b:27:9d:3f:
                    f1:0e:93:24:8e:4b:23:61:19:18:e8:97:85:1d:d4:
                    74:b0:58:9d:97:41:88:63:f9:a6:ab:66:3e:11:7b:
                    b3:a0:58:cb:40:56:3e:2e:bd:cd:bd:eb:fb:46:4c:
                    da:c7:39:db:d9:e6:d2:c9:ba:9b:44:d1:92:44:ec:
                    40:6b:26:29:de:c9:c4:49:6d:81:bc:0a:11:9d:3a:
                    69:8b:61:d9:35:d3:7b:7a:bd:08:c3:88:dd:52:d4:
                    84:74:92:76:76:2c:28:06:61:0e:56:ee:8b:c2:c6:
                    79:bf:da:89:2a:3b:0e:2d:1e:ec:6c:bb:bb:70:7d:
                    8e:5e:ac:9f:19:b1:c0:4a:d7:49:f5:8a:2f:7e:0e:
                    3e:1e:84:b9:89:e9:1f:69:84:5b:a9:16:96:a3:97:
                    7f:ec:cd:6c:cb:d0:9b:ae:15:75:89:36:5f:d9:3f:
                    0c:e9:b9:cf:0b:c2:c5:44:81:1c:6d:8c:47:8d:9f:
                    d6:76:76:44:50:e4:7e:1e:08:63:c5:68:59:a4:a0:
                    92:b6:55:62:26:b8:67:b9:c9:f0:56:f3:a0:3d:12:
                    26:6c:da:3e:df:28:6a:29:b3:9f:c2:07:7c:6c:8b:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CF:AA:5A:BE:10:19:1A:0F:FA:2E:74:22:1F:4F:9C:2B:FD:E8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61ab53df-a4a8-33c3-8fba-971ed5844eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:4e:7c:15:fe:0a:54:8d:be:98:c4:f4:2b:f5:55:70:56:
         32:aa:c3:14:95:9a:e1:af:f4:85:f6:4a:30:fc:01:8a:9d:11:
         33:f7:52:d8:8d:6c:39:4e:79:bd:a8:37:3e:0a:24:0c:02:50:
         22:e5:38:8e:aa:c2:11:69:26:a2:48:d4:35:bf:85:0f:25:a5:
         3c:1d:4d:a1:91:9e:18:a6:74:67:97:68:ed:14:c4:9f:ee:e7:
         1c:45:ff:54:c7:8f:21:16:55:d4:bc:aa:f0:cf:8b:6d:fc:87:
         6b:76:85:70:d1:f3:2c:ee:57:08:09:73:2b:ed:99:9b:23:0d:
         b4:ba:aa:1a:aa:ba:5b:0c:d7:73:17:51:a9:d9:58:15:2a:83:
         9f:90:28:26:2f:83:c1:c7:d1:de:58:da:df:15:5d:b1:44:2c:
         99:89:54:8e:cc:e3:7a:55:90:f3:6d:07:bd:6d:ef:d1:ab:4b:
         79:f2:ac:d8:95:8d:1a:dc:ff:91:a3:68:34:d6:f8:08:ee:d8:
         51:7d:90:6d:56:07:d5:fd:1e:0c:70:a4:ee:9c:4c:cd:a3:58:
         f7:ff:f4:18:e8:ce:69:c3:52:ab:97:9c:20:79:33:bd:43:6d:
         51:a4:c3:e6:cc:aa:69:07:32:ea:9c:31:70:64:e8:d5:85:8f:
         b9:51:ee:fa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2+XQC2MztH/L4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZGU5NDRhNmUtNmQyMi00Yjc2LWFlMjctOTVlNTRkZTQ5ZWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI7XYJi8HACz1vTNxGDzPV+fhHU9m1RaHSsn
nT/xDpMkjksjYRkY6JeFHdR0sFidl0GIY/mmq2Y+EXuzoFjLQFY+Lr3Nvev7Rkza
xznb2ebSybqbRNGSROxAayYp3snESW2BvAoRnTppi2HZNdN7er0Iw4jdUtSEdJJ2
diwoBmEOVu6LwsZ5v9qJKjsOLR7sbLu7cH2OXqyfGbHAStdJ9Yovfg4+HoS5iekf
aYRbqRaWo5d/7M1sy9CbrhV1iTZf2T8M6bnPC8LFRIEcbYxHjZ/WdnZEUOR+Hghj
xWhZpKCStlViJrhnucnwVvOgPRImbNo+3yhqKbOfwgd8bItcxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFPPqlq+EBkaD/oudCIfT5wr/eiUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjFhYjUzZGYtYTRhOC0z
M2MzLThmYmEtOTcxZWQ1ODQ0ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKXaTnwV/gpUjb6YxPQr9VVwVjKqwxSVmuGv9IX2SjD8AYqdETP3
UtiNbDlOeb2oNz4KJAwCUCLlOI6qwhFpJqJI1DW/hQ8lpTwdTaGRnhimdGeXaO0U
xJ/u5xxF/1THjyEWVdS8qvDPi238h2t2hXDR8yzuVwgJcyvtmZsjDbS6qhqqulsM
13MXUanZWBUqg5+QKCYvg8HH0d5Y2t8VXbFELJmJVI7M43pVkPNtB71t79GrS3ny
rNiVjRrc/5GjaDTW+Aju2FF9kG1WB9X9HgxwpO6cTM2jWPf/9BjozmnDUquXnCB5
M71DbVGkw+bMqmkHMuqcMXBk6NWFj7lR7vo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org