Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90df2ccd-7aa9-3dcc-842f-c5d4a98b1f0d.roa
File:                     90df2ccd-7aa9-3dcc-842f-c5d4a98b1f0d.roa (raw, json)
Hash identifier:          sWjbfihaaSduof2uUYSWiFWwGIKFWp5GVKg29YkSYLE=
Subject key identifier:   11:D5:2F:F4:E1:34:4C:75:44:30:4A:30:16:05:09:39:10:8C:D9:F5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC8AD2A96A2521CD85F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90df2ccd-7aa9-3dcc-842f-c5d4a98b1f0d.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     51500
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c8:ad:2a:96:a2:52:1c:d8:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=e8762559-ebda-4d93-aafa-6bff84fdb0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:f5:c2:73:2f:24:bc:cc:91:4c:82:f5:5f:
                    5d:6e:4a:02:2e:52:dd:e2:77:c6:0c:0b:6a:d0:55:
                    0c:94:15:31:17:50:a7:1d:40:17:91:2b:28:af:08:
                    b9:05:ea:a3:55:e4:55:4e:bb:84:55:47:cf:44:ad:
                    b2:25:4b:d3:8e:a4:a7:8b:ea:1b:56:d6:cb:a9:7b:
                    40:c4:96:ea:76:16:de:33:eb:4e:c9:b5:e1:f8:ba:
                    0e:04:99:60:33:b8:33:fc:8d:87:17:cd:45:22:1a:
                    df:8e:59:e5:dd:4c:8d:90:ca:eb:87:8e:2d:a9:3c:
                    35:e1:0c:00:8f:3f:fb:e6:2f:05:bb:14:b2:87:39:
                    a6:eb:f5:a0:4f:04:af:c5:0d:0c:eb:6b:72:d1:40:
                    ec:49:60:7f:d6:53:5a:0f:f6:b3:0a:e2:fd:ad:37:
                    b7:2d:da:b3:d9:67:05:e2:f3:eb:2f:23:6d:4c:ed:
                    48:89:ce:11:80:43:ec:6a:10:9a:c1:88:c4:89:46:
                    6e:26:6d:4e:c2:e5:32:49:8f:37:be:26:e7:c7:da:
                    b8:dd:fe:bc:be:ce:4c:d7:f7:d8:78:39:05:10:01:
                    4f:c8:af:a7:97:5f:5c:c1:e3:ea:b1:59:4e:bb:67:
                    62:59:99:39:19:22:3d:34:b4:2e:e5:32:c1:02:5f:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:2F:F4:E1:34:4C:75:44:30:4A:30:16:05:09:39:10:8C:D9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/90df2ccd-7aa9-3dcc-842f-c5d4a98b1f0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3f:28:17:4f:c1:cd:8c:e1:d0:6e:f3:36:3d:2f:4a:ed:2f:
         09:d2:55:87:65:0e:5b:30:2c:cb:da:2a:16:4c:c5:3f:42:db:
         a3:74:43:0d:c9:5f:e3:f9:c0:78:24:4a:5e:26:f3:9f:00:0f:
         fe:fd:4f:77:bb:38:bd:6a:df:ba:7a:4c:17:3a:30:56:0d:5e:
         50:d1:d6:19:9f:f9:91:9d:be:8e:80:d1:17:85:eb:cf:3f:8b:
         f3:f4:27:4c:5b:f6:c5:1a:b0:05:2e:39:51:fe:44:04:72:1d:
         0d:bb:94:d6:ea:e3:82:39:85:51:2a:4e:c1:ef:fe:83:91:b1:
         a1:89:19:62:f3:55:34:15:09:24:1e:f9:fc:ce:12:3b:12:5b:
         07:6d:bd:cd:1e:5a:9b:fd:1a:c3:e3:3c:52:37:fb:d2:e0:7c:
         9e:e1:f1:0f:7d:50:03:3b:78:59:ac:12:9b:71:ed:b3:24:ba:
         c2:56:e6:f6:fa:8c:32:8a:a8:4c:84:19:5b:70:0f:41:99:8d:
         cb:82:41:7f:c9:d6:a5:bf:6c:d6:96:68:02:74:d7:d0:58:47:
         56:15:da:75:3b:52:24:da:29:d1:9f:9f:1e:73:75:0c:1c:7f:
         a7:fd:3c:f5:bd:27:be:f1:c2:44:af:fc:29:a3:e6:f2:1c:36:
         7c:e7:4f:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUCWsitKpaiUhzYXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyNTE0MDAzNFoXDTI0MDUyNTEzMDAzNFowLzEtMCsGA1UEAxMk
ZTg3NjI1NTktZWJkYS00ZDkzLWFhZmEtNmJmZjg0ZmRiMGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oX1wnMvJLzMkUyC9V9dbkoCLlLd4nfGDAtq
0FUMlBUxF1CnHUAXkSsorwi5BeqjVeRVTruEVUfPRK2yJUvTjqSni+obVtbLqXtA
xJbqdhbeM+tOybXh+LoOBJlgM7gz/I2HF81FIhrfjlnl3UyNkMrrh44tqTw14QwA
jz/75i8FuxSyhzmm6/WgTwSvxQ0M62ty0UDsSWB/1lNaD/azCuL9rTe3Ldqz2WcF
4vPrLyNtTO1Iic4RgEPsahCawYjEiUZuJm1OwuUySY83vibnx9q43f68vs5M1/fY
eDkFEAFPyK+nl19cwePqsVlOu2diWZk5GSI9NLQu5TLBAl8+lQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBHVL/ThNEx1RDBKMBYFCTkQjNn1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTBkZjJjY2QtN2FhOS0z
ZGNjLTg0MmYtYzVkNGE5OGIxZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABA/KBdPwc2M4dBu8zY9L0rtLwnSVYdlDlswLMvaKhZMxT9C26N0
Qw3JX+P5wHgkSl4m858AD/79T3e7OL1q37p6TBc6MFYNXlDR1hmf+ZGdvo6A0ReF
688/i/P0J0xb9sUasAUuOVH+RARyHQ27lNbq44I5hVEqTsHv/oORsaGJGWLzVTQV
CSQe+fzOEjsSWwdtvc0eWpv9GsPjPFI3+9LgfJ7h8Q99UAM7eFmsEptx7bMkusJW
5vb6jDKKqEyEGVtwD0GZjcuCQX/J1qW/bNaWaAJ019BYR1YV2nU7UiTaKdGfnx5z
dQwcf6f9PPW9J77xwkSv/Cmj5vIcNnznTxU=
-----END CERTIFICATE-----
Generated at Mon May 6 20:30:36 2024 by rpki-client on console-ams.rpki-client.org