Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75a485df-0af7-3a77-af31-5f637141df2b.roa
File:                     75a485df-0af7-3a77-af31-5f637141df2b.roa (raw, json)
Hash identifier:          HlzUMee9tdVMp/BLQkUH50Zvw8a6LVgsUiT03frmCjw=
Subject key identifier:   F4:DC:60:9E:BC:A6:8D:CB:E4:9A:A5:A9:E5:5F:9D:31:F4:FE:ED:0E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845909DEFA0D93BB014265ACA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75a485df-0af7-3a77-af31-5f637141df2b.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     200195
IP address blocks:        2001:470:206::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:ef:a0:d9:3b:b0:14:26:5a:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=8b15e626-7ac8-4537-a5d2-cb6a908959b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:f2:31:00:f9:e8:47:29:50:3e:f5:6a:0a:
                    47:53:4a:69:4f:85:9f:a9:d0:86:89:7a:8e:fe:71:
                    39:1a:50:c7:c1:df:96:37:35:a9:1e:82:24:36:ce:
                    3d:48:90:f9:99:68:72:88:9d:bd:e6:d6:0c:82:d9:
                    2c:e9:d6:c7:a3:b3:7e:ad:ea:f9:96:ed:21:21:fa:
                    a2:6d:a6:71:e3:ac:9c:11:48:e7:6e:2c:ed:91:58:
                    1d:77:ec:e7:74:b3:ff:6f:6b:c4:98:3c:71:bd:78:
                    8d:38:cc:7e:11:e0:af:8e:86:39:f9:da:48:ac:f5:
                    af:b1:4b:06:02:3f:8c:f2:da:64:7d:d0:97:2f:e8:
                    c3:26:c4:5c:dd:3f:4a:89:06:14:32:74:94:71:af:
                    77:1d:6d:5e:9f:31:9c:15:8c:1b:70:f0:f0:a4:78:
                    42:c1:1c:18:62:37:95:08:42:62:93:7a:9c:31:d7:
                    f8:4c:17:1a:14:b4:81:3c:aa:d0:cb:c7:e9:88:4b:
                    61:37:1c:ce:38:b8:3c:c8:dd:9e:62:6a:c6:7e:19:
                    b3:8d:5f:2a:70:b2:63:2a:97:59:4c:f8:63:42:d6:
                    35:a4:24:0d:15:b0:9e:2e:57:89:8e:3d:99:0c:c8:
                    e7:6b:c1:56:79:4f:96:2a:42:22:67:e5:9d:6d:4b:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DC:60:9E:BC:A6:8D:CB:E4:9A:A5:A9:E5:5F:9D:31:F4:FE:ED:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75a485df-0af7-3a77-af31-5f637141df2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:206::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:0f:2e:2b:61:24:53:d0:53:4e:53:c0:7d:1c:fe:c3:98:
         21:07:5d:96:60:45:22:ef:a2:80:b1:e6:41:07:d5:a8:2e:7b:
         50:5f:0f:af:2f:2a:18:bf:f7:0c:a5:82:54:d9:ea:66:08:17:
         a6:23:ba:4f:46:7c:a9:49:e6:d0:d7:74:20:0c:14:bf:73:97:
         74:30:4c:45:53:4f:8d:ab:6d:d0:ca:d4:cd:2e:f9:6a:9d:e3:
         67:07:27:d6:59:b2:5f:99:14:28:12:2e:9c:f9:4b:be:20:61:
         b7:57:1d:53:34:3f:ba:8c:3c:7f:06:c1:0c:a2:17:d4:a0:58:
         4c:fc:c2:f0:96:6d:c3:6a:d6:54:6d:25:72:29:ff:c1:0a:10:
         46:f9:62:81:38:a9:6b:d2:f4:a0:ba:59:69:22:0e:22:d0:f3:
         7d:cb:d8:d2:65:1f:51:9a:3c:1b:3d:02:81:d5:4d:3f:99:cd:
         81:0c:e3:f0:55:85:b1:af:df:8f:f6:04:e3:04:96:5d:99:f8:
         a0:3d:e9:d9:47:89:82:a0:8b:45:c7:8f:cf:51:d1:33:d6:23:
         84:e9:3f:e9:ef:9a:8b:99:be:52:d1:f6:6d:a5:a5:05:c4:be:
         8c:6f:de:d8:6f:66:ad:70:19:e1:a6:26:e5:e2:52:ba:6c:48:
         b0:2f:fa:e9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWQne+g2TuwFCZaygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDQxNjEzMDAzM1oXDTI0MDcxNTEzMDAzM1owLzEtMCsGA1UEAxMk
OGIxNWU2MjYtN2FjOC00NTM3LWE1ZDItY2I2YTkwODk1OWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8LyMQD56EcpUD71agpHU0ppT4WfqdCGiXqO
/nE5GlDHwd+WNzWpHoIkNs49SJD5mWhyiJ295tYMgtks6dbHo7N+rer5lu0hIfqi
baZx46ycEUjnbiztkVgdd+zndLP/b2vEmDxxvXiNOMx+EeCvjoY5+dpIrPWvsUsG
Aj+M8tpkfdCXL+jDJsRc3T9KiQYUMnSUca93HW1enzGcFYwbcPDwpHhCwRwYYjeV
CEJik3qcMdf4TBcaFLSBPKrQy8fpiEthNxzOOLg8yN2eYmrGfhmzjV8qcLJjKpdZ
TPhjQtY1pCQNFbCeLleJjj2ZDMjna8FWeU+WKkIiZ+WdbUszBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPTcYJ68po3L5JqlqeVfnTH0/u0OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzVhNDg1ZGYtMGFmNy0z
YTc3LWFmMzEtNWY2MzcxNDFkZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADTdDy4rYSRT0FNOU8B9HP7DmCEHXZZgRSLvooCx5kEH1ague1Bf
D68vKhi/9wylglTZ6mYIF6Yjuk9GfKlJ5tDXdCAMFL9zl3QwTEVTT42rbdDK1M0u
+Wqd42cHJ9ZZsl+ZFCgSLpz5S74gYbdXHVM0P7qMPH8GwQyiF9SgWEz8wvCWbcNq
1lRtJXIp/8EKEEb5YoE4qWvS9KC6WWkiDiLQ833L2NJlH1GaPBs9AoHVTT+ZzYEM
4/BVhbGv34/2BOMEll2Z+KA96dlHiYKgi0XHj89R0TPWI4TpP+nvmouZvlLR9m2l
pQXEvoxv3thvZq1wGeGmJuXiUrpsSLAv+uk=
-----END CERTIFICATE-----
Generated at Mon May 6 12:02:17 2024 by rpki-client on console-fra.rpki-client.org