Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92dbddcd-8c0e-3f11-8c62-7569bab34ed6.roa
File:                     92dbddcd-8c0e-3f11-8c62-7569bab34ed6.roa (raw, json)
Hash identifier:          wnrQGQZZXsAswoezU/Dkt2g9P1exa2Dsdi+1y9Zihv4=
Subject key identifier:   CE:D5:83:E9:42:57:BA:9B:04:B5:3A:07:70:E1:0B:E9:77:49:94:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B75F3BF854FF27A949500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92dbddcd-8c0e-3f11-8c62-7569bab34ed6.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     16324
IP address blocks:        2001:470:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:75:f3:bf:85:4f:f2:7a:94:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=abd6a84d-bfcb-468b-9f67-a36848350fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:85:4f:95:d8:3a:1d:38:e5:19:4e:3f:ab:
                    91:f8:6b:82:94:78:0e:87:70:1f:7c:bc:7e:0a:50:
                    4d:be:39:d2:d3:05:77:90:c7:d8:4f:5f:cc:0f:00:
                    9e:ef:a7:7a:f3:46:28:95:d2:71:7d:7c:f7:8f:16:
                    ea:ec:13:ea:c4:b0:a4:23:6c:90:26:19:a8:79:8a:
                    73:71:f9:34:05:7d:e2:a0:e2:58:fd:df:40:c2:0a:
                    2c:4d:b9:12:0e:a2:32:bb:4d:ab:76:74:18:69:f8:
                    f1:c9:af:0c:65:7d:c2:a7:40:16:9c:0d:25:36:7a:
                    58:b9:9f:c1:08:53:07:b5:9f:29:cf:e9:2b:81:a7:
                    02:f9:cf:5b:d9:40:7d:ae:21:4b:62:e8:7c:c9:8f:
                    8a:f3:b7:c6:a2:f7:9e:d8:87:b1:f6:74:1b:0b:ac:
                    d7:f9:8c:38:43:30:87:83:e8:b2:72:cb:68:4b:18:
                    c2:2b:18:d8:e2:6d:46:d3:e2:df:38:de:69:ce:40:
                    b5:2a:60:a8:ff:6e:eb:1a:af:eb:26:ec:0b:74:78:
                    2a:3a:4e:6c:77:eb:19:87:7e:59:d5:e7:83:cb:8c:
                    e5:ae:b9:2f:c2:1e:20:5f:5b:d7:f1:83:e7:e5:a9:
                    bc:d3:50:e2:9a:3a:7d:82:1f:d4:a8:a7:43:3b:03:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D5:83:E9:42:57:BA:9B:04:B5:3A:07:70:E1:0B:E9:77:49:94:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92dbddcd-8c0e-3f11-8c62-7569bab34ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:28:65:28:d7:78:be:74:c5:19:72:f0:4a:7b:e9:11:df:
         9e:50:4a:86:4f:8a:2f:9a:aa:ba:d6:bc:e2:c8:d8:b2:7d:2c:
         39:ea:4a:2c:e4:1d:6c:7a:ea:0f:ac:9a:99:ea:94:a6:6f:f0:
         2c:94:ef:3a:8d:e8:29:4a:3f:ae:99:92:e9:47:4b:0d:dd:29:
         38:df:d4:20:98:35:f0:46:0c:00:d3:50:c6:ae:c6:99:db:77:
         17:b6:e5:b3:39:2e:7f:e9:5c:b9:fa:5f:11:c6:03:1d:ab:88:
         fc:8f:00:89:49:fd:3a:6b:1b:1b:b8:ef:fe:ab:99:f3:e0:d0:
         f2:fb:96:c1:da:78:b2:87:55:9b:ae:02:c0:46:83:c3:e3:3f:
         8e:14:64:7a:6c:3a:4c:7d:ec:82:d7:52:bf:ef:c1:09:38:98:
         9c:45:ab:2e:f2:c9:37:77:87:d6:71:96:92:5c:7d:90:49:18:
         c5:32:c0:9e:f3:d4:a7:8c:90:dc:1d:f1:d4:67:15:1e:74:2a:
         d0:fb:6d:30:c5:55:94:a4:00:79:5b:f9:73:a1:23:71:47:d3:
         0d:d5:44:3a:7e:d2:b2:8f:a0:d2:26:0e:c3:1a:ec:dd:0f:47:
         d8:c0:ba:da:d4:8c:07:35:05:23:ed:9f:35:4a:a4:02:57:d1:
         27:39:e4:3d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3Xzv4VP8nqUlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
YWJkNmE4NGQtYmZjYi00NjhiLTlmNjctYTM2ODQ4MzUwZmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTOFT5XYOh045RlOP6uR+GuClHgOh3AffLx+
ClBNvjnS0wV3kMfYT1/MDwCe76d680YoldJxfXz3jxbq7BPqxLCkI2yQJhmoeYpz
cfk0BX3ioOJY/d9AwgosTbkSDqIyu02rdnQYafjxya8MZX3Cp0AWnA0lNnpYuZ/B
CFMHtZ8pz+krgacC+c9b2UB9riFLYuh8yY+K87fGovee2Iex9nQbC6zX+Yw4QzCH
g+iycstoSxjCKxjY4m1G0+LfON5pzkC1KmCo/27rGq/rJuwLdHgqOk5sd+sZh35Z
1eeDy4zlrrkvwh4gX1vX8YPn5am801Dimjp9gh/UqKdDOwNzDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM7Vg+lCV7qbBLU6B3DhC+l3SZS/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTJkYmRkY2QtOGMwZS0z
ZjExLThjNjItNzU2OWJhYjM0ZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACC3KGUo13i+dMUZcvBKe+kR355QSoZPii+aqrrWvOLI2LJ9LDnq
SizkHWx66g+smpnqlKZv8CyU7zqN6ClKP66ZkulHSw3dKTjf1CCYNfBGDADTUMau
xpnbdxe25bM5Ln/pXLn6XxHGAx2riPyPAIlJ/TprGxu47/6rmfPg0PL7lsHaeLKH
VZuuAsBGg8PjP44UZHpsOkx97ILXUr/vwQk4mJxFqy7yyTd3h9ZxlpJcfZBJGMUy
wJ7z1KeMkNwd8dRnFR50KtD7bTDFVZSkAHlb+XOhI3FH0w3VRDp+0rKPoNImDsMa
7N0PR9jAutrUjAc1BSPtnzVKpAJX0Sc55D0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:38 2024 by rpki-client on console-fra.rpki-client.org