Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81053d05-a380-3bec-85d4-d38d591d2b5e.roa
File:                     81053d05-a380-3bec-85d4-d38d591d2b5e.roa (raw, json)
Hash identifier:          ytLC6iFyY4VhaD+hrg5NNPKHiSHGzmtVjR9Mj3g8qaM=
Subject key identifier:   FE:54:64:AA:FC:F1:86:76:9A:DB:CD:E6:48:31:84:AF:D5:A2:8B:AC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858452540482B97A935996451C8F2
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81053d05-a380-3bec-85d4-d38d591d2b5e.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     150727
IP address blocks:        2001:470:1c6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:48:2b:97:a9:35:99:64:51:c8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=60d3b4e2-d724-4d94-b958-04f4cf3aac84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:05:22:f7:75:9d:f2:a5:7c:60:5f:6e:4f:
                    e7:09:a6:77:1b:5d:4a:27:95:18:5a:d8:3f:bf:51:
                    8c:ef:fb:7b:0e:8f:26:3c:6d:cd:16:e7:68:ad:84:
                    42:e1:b0:21:a3:1d:46:3c:6c:f5:e8:3c:d2:83:e9:
                    1c:53:b7:14:79:33:69:6f:6f:43:1c:45:2c:1d:19:
                    b4:f6:37:7e:b8:aa:f3:91:83:3a:72:64:99:c9:ee:
                    c8:9a:cf:16:36:db:d1:ac:95:2f:e5:d7:e7:77:d7:
                    e0:54:46:cd:2b:25:2b:98:e0:c6:38:13:13:f5:8c:
                    7d:85:26:d1:df:c9:f4:20:b3:6a:2d:f3:84:48:b1:
                    c4:2a:f0:0a:fe:2d:bd:b7:8f:f3:22:21:91:05:99:
                    4b:27:dc:62:66:39:9d:b8:24:cf:62:b1:f3:5a:ca:
                    1c:c9:b2:4d:ee:21:83:6b:7d:7a:e5:6b:de:b8:49:
                    0a:f9:83:12:d3:38:aa:88:09:fc:cc:b0:aa:48:17:
                    9d:31:fb:8c:a8:9c:0b:68:8f:8f:ce:5c:c5:3a:4a:
                    95:ed:13:aa:ac:2f:1d:8e:00:47:84:4e:98:56:cf:
                    7c:f9:74:f7:d5:07:72:7e:a3:3f:56:9e:24:8a:eb:
                    6c:7f:70:7d:76:12:df:c4:0e:2a:33:01:2c:e5:ac:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:54:64:AA:FC:F1:86:76:9A:DB:CD:E6:48:31:84:AF:D5:A2:8B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81053d05-a380-3bec-85d4-d38d591d2b5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:02:03:f4:fa:77:c4:d1:8c:0d:66:9e:1b:f7:63:1a:01:96:
         0c:92:9f:2e:da:c3:ea:f6:22:ca:12:e0:53:4f:54:1b:5c:27:
         b2:07:9f:6a:4f:3b:3f:82:fd:8b:c3:6f:02:94:79:41:89:70:
         b2:29:58:a2:03:39:db:d0:e6:6c:99:0f:8d:f1:dc:c3:51:15:
         46:3e:3d:88:7c:75:86:73:e8:8c:54:99:ff:29:b1:de:34:9b:
         4f:3e:0d:33:58:10:2e:47:e3:1b:b5:51:68:02:bc:db:cf:e0:
         67:78:19:2c:78:31:bf:ab:43:6e:9f:83:6d:b6:05:e1:7d:1e:
         8d:4f:77:78:27:db:e8:9a:08:db:6b:6b:b8:34:ee:71:db:0a:
         da:42:4b:c8:79:ad:62:83:75:5a:ff:9f:11:a4:86:a8:22:ec:
         47:ff:fc:7c:91:75:6a:33:8a:8c:c5:cf:08:8c:4d:a9:b5:3e:
         ff:bf:af:0e:4e:79:56:3f:fa:62:24:26:86:7c:5f:43:c5:84:
         d7:47:f6:c0:9a:50:61:91:40:59:45:d9:4c:e5:a4:83:31:ca:
         80:6c:59:71:60:48:9e:73:88:3d:c0:9f:a1:ba:fa:b6:d4:bf:
         91:38:35:19:c3:13:13:6a:03:4b:e1:eb:4f:78:77:d8:1d:13:
         f5:b7:68:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUlQEgrl6k1mWRRyPIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDMwOTAyMDAyNVoXDTI0MDYwNzAxMDAyNVowLzEtMCsGA1UEAxMk
NjBkM2I0ZTItZDcyNC00ZDk0LWI5NTgtMDRmNGNmM2FhYzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouYFIvd1nfKlfGBfbk/nCaZ3G11KJ5UYWtg/
v1GM7/t7Do8mPG3NFudorYRC4bAhox1GPGz16DzSg+kcU7cUeTNpb29DHEUsHRm0
9jd+uKrzkYM6cmSZye7Ims8WNtvRrJUv5dfnd9fgVEbNKyUrmODGOBMT9Yx9hSbR
38n0ILNqLfOESLHEKvAK/i29t4/zIiGRBZlLJ9xiZjmduCTPYrHzWsocybJN7iGD
a3165WveuEkK+YMS0ziqiAn8zLCqSBedMfuMqJwLaI+PzlzFOkqV7ROqrC8djgBH
hE6YVs98+XT31QdyfqM/Vp4kiutsf3B9dhLfxA4qMwEs5aybMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP5UZKr88YZ2mtvN5kgxhK/VoousMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODEwNTNkMDUtYTM4MC0z
YmVjLTg1ZDQtZDM4ZDU5MWQyYjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFACA/T6d8TRjA1mnhv3YxoBlgySny7aw+r2IsoS4FNPVBtcJ7IH
n2pPOz+C/YvDbwKUeUGJcLIpWKIDOdvQ5myZD43x3MNRFUY+PYh8dYZz6IxUmf8p
sd40m08+DTNYEC5H4xu1UWgCvNvP4Gd4GSx4Mb+rQ26fg222BeF9Ho1Pd3gn2+ia
CNtra7g07nHbCtpCS8h5rWKDdVr/nxGkhqgi7Ef//HyRdWoziozFzwiMTam1Pv+/
rw5OeVY/+mIkJoZ8X0PFhNdH9sCaUGGRQFlF2UzlpIMxyoBsWXFgSJ5ziD3An6G6
+rbUv5E4NRnDExNqA0vh6094d9gdE/W3aHY=
-----END CERTIFICATE-----
Generated at Mon May 6 15:20:37 2024 by rpki-client on console-ams.rpki-client.org