Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa
File:                     7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa (raw, json)
Hash identifier:          oOIGhGWqqT6QP90sAIemzAJHAy89KVHB+b5Qkv0lr/A=
Subject key identifier:   EE:56:29:03:BE:8B:B6:3C:F0:D2:0C:62:4D:93:07:9B:D6:D3:ED:9C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B38B261CDE4B190894C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     17117
IP address blocks:        2001:470:c4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:38:b2:61:cd:e4:b1:90:89:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=6618a0f3-6d9c-4774-a83c-266061751e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:20:03:f2:7b:54:83:ee:8d:31:d9:a7:10:4c:
                    62:22:a8:a2:47:71:91:93:9e:12:dd:85:fd:d4:3b:
                    f4:50:41:09:7d:ec:ba:71:8c:d1:63:4a:b3:01:d9:
                    d1:2e:33:93:3e:c5:c8:f7:38:74:df:db:97:56:d7:
                    73:d6:28:0a:57:42:d1:86:76:61:f0:d3:09:88:38:
                    a0:1a:bb:bc:6d:37:ab:2f:fa:93:e3:c3:84:da:8c:
                    c9:33:13:88:bb:91:c3:eb:56:17:9d:75:fc:0d:c0:
                    2e:b6:2a:69:95:da:82:de:7e:13:27:42:25:44:d9:
                    a7:43:c6:89:a7:b9:d0:2f:eb:46:05:8c:ff:99:84:
                    f5:cc:a8:b6:26:fc:9e:5b:d5:69:a6:a5:c7:a9:40:
                    83:ae:5f:c8:e8:0e:57:81:dc:0b:a4:f5:d6:4b:1c:
                    d7:06:f3:4d:12:61:fc:a5:6b:cf:ea:5a:be:b6:91:
                    46:fe:97:89:4c:1b:8a:9f:06:94:a9:2a:4f:a6:75:
                    80:1a:16:2c:9d:a9:b7:26:85:b9:7b:f1:dc:e9:d8:
                    f0:b3:19:08:28:2d:d6:48:29:37:90:ae:64:98:7e:
                    65:9a:54:63:85:dd:61:c9:ac:e8:08:f9:5b:0d:4e:
                    83:d2:89:a4:ca:be:8a:61:4a:ad:db:d6:43:bc:eb:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:56:29:03:BE:8B:B6:3C:F0:D2:0C:62:4D:93:07:9B:D6:D3:ED:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:62:05:0f:7d:95:1d:a8:f5:25:e2:51:f9:0d:67:f8:f8:
         91:8b:d1:43:84:fa:aa:e3:f5:fa:0f:40:a9:bb:9c:7c:cc:07:
         14:30:dc:e1:ad:27:1e:47:99:2b:72:71:a3:13:1f:f4:e9:33:
         1f:56:f1:42:40:80:ab:22:6c:12:14:32:1f:af:e7:40:e2:10:
         d4:18:74:f4:a1:ce:bc:b7:59:59:4f:01:fa:e9:87:45:89:14:
         ed:36:cd:58:00:d0:38:86:ff:3f:4b:53:ba:4c:17:95:a9:1b:
         26:4e:e1:6b:46:8c:8d:30:e0:3f:8f:2e:d8:b5:5f:78:fa:4a:
         a2:0f:a0:d2:b8:fd:c6:c8:99:17:d6:19:52:a2:93:aa:0b:08:
         c8:d3:11:5b:c8:d0:86:7b:0d:8c:5d:d6:d7:35:5b:3e:48:aa:
         83:ce:31:5b:05:ff:71:2a:81:57:b9:d8:09:35:1f:e4:5d:5d:
         ca:11:f9:ca:be:c8:74:c8:d7:8c:50:3a:01:18:a4:7f:44:4c:
         95:17:16:6c:1d:07:83:6d:3a:7f:e7:a6:68:64:bb:7a:30:c3:
         b1:de:8d:d6:82:39:b8:b0:55:66:83:00:b6:9e:0d:64:98:e5:
         eb:f7:db:da:a8:cf:0b:c7:70:a4:85:6b:14:d6:db:0e:25:58:
         5c:cf:1e:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6WziyYc3ksZCJTEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NjYxOGEwZjMtNmQ5Yy00Nzc0LWE4M2MtMjY2MDYxNzUxZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCAD8ntUg+6NMdmnEExiIqiiR3GRk54S3YX9
1Dv0UEEJfey6cYzRY0qzAdnRLjOTPsXI9zh039uXVtdz1igKV0LRhnZh8NMJiDig
Gru8bTerL/qT48OE2ozJMxOIu5HD61YXnXX8DcAutippldqC3n4TJ0IlRNmnQ8aJ
p7nQL+tGBYz/mYT1zKi2JvyeW9VppqXHqUCDrl/I6A5XgdwLpPXWSxzXBvNNEmH8
pWvP6lq+tpFG/peJTBuKnwaUqSpPpnWAGhYsnam3JoW5e/Hc6djwsxkIKC3WSCk3
kK5kmH5lmlRjhd1hyazoCPlbDU6D0omkyr6KYUqt29ZDvOsjYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO5WKQO+i7Y88NIMYk2TB5vW0+2cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2Y2MDM0NWMtNDVkNi0z
OGRhLWI0YTItOGNiNzM2NzJlZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6ZYgUPfZUdqPUl4lH5DWf4+JGL0UOE+qrj9foPQKm7nHzMBxQw
3OGtJx5HmStycaMTH/TpMx9W8UJAgKsibBIUMh+v50DiENQYdPShzry3WVlPAfrp
h0WJFO02zVgA0DiG/z9LU7pMF5WpGyZO4WtGjI0w4D+PLti1X3j6SqIPoNK4/cbI
mRfWGVKik6oLCMjTEVvI0IZ7DYxd1tc1Wz5IqoPOMVsF/3EqgVe52Ak1H+RdXcoR
+cq+yHTI14xQOgEYpH9ETJUXFmwdB4NtOn/npmhku3oww7HejdaCObiwVWaDALae
DWSY5ev329qozwvHcKSFaxTW2w4lWFzPHus=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:28 2024 by rpki-client on console-ams.rpki-client.org