Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99102f1e-cc52-30bb-adbe-a541d8155ea8.roa
File:                     99102f1e-cc52-30bb-adbe-a541d8155ea8.roa (raw, json)
Hash identifier:          bXYGsIKj13OtScQ2KAasNmpX7hMSxl/2OsMQThpIn5o=
Subject key identifier:   2F:DD:FB:D6:78:60:60:0A:A8:13:8C:59:A7:95:22:D4:D3:47:86:67
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844EC05418C9FB10E9497258340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99102f1e-cc52-30bb-adbe-a541d8155ea8.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     142125
IP address blocks:        2001:470:230::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:41:8c:9f:b1:0e:94:97:25:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=77580af1-6c49-4156-af48-cacb068cbfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:87:39:f9:86:12:6d:f0:53:59:be:2e:3e:
                    ea:f6:12:f9:db:21:d8:ec:5b:57:ae:75:34:0a:2c:
                    05:5c:bc:c8:dd:a6:52:f9:74:1b:ce:c0:34:bf:cf:
                    2b:98:29:67:b8:5a:b3:8b:89:48:40:f1:b2:ce:6d:
                    5b:4e:62:06:38:cf:24:24:e5:11:2d:29:5d:2b:14:
                    d3:e0:ca:7b:1b:69:9e:18:0b:13:be:ef:d8:60:fa:
                    e9:b4:c5:0c:db:6d:6e:29:e7:7f:ae:74:c0:e6:4a:
                    5d:0b:88:4f:ff:0b:56:cb:53:47:df:a2:6a:13:35:
                    cc:71:bb:0a:f4:9b:79:68:ba:76:91:e3:fb:44:99:
                    ad:7a:eb:59:a6:5c:df:79:a0:02:d2:e2:ee:75:be:
                    2c:89:28:bd:2c:43:fe:a5:44:ee:77:45:59:4f:38:
                    74:80:99:c7:bc:dd:c4:d5:dc:f8:61:5b:a4:6a:0d:
                    9e:91:f2:5b:3f:b6:4f:70:b7:48:d6:ac:ed:a3:f2:
                    8c:c8:05:bb:63:93:d2:20:be:a4:ac:3f:04:0a:c2:
                    ea:21:0f:dc:36:2d:57:4e:b7:a9:9d:f9:49:be:48:
                    76:59:1c:35:29:2d:6e:1c:16:b7:9c:39:59:41:09:
                    c3:c9:57:00:77:1d:78:c9:1d:4c:a3:7b:a1:5c:53:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DD:FB:D6:78:60:60:0A:A8:13:8C:59:A7:95:22:D4:D3:47:86:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99102f1e-cc52-30bb-adbe-a541d8155ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:230::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:7a:82:1a:8d:ce:4f:40:6f:ef:58:70:74:92:7f:4d:6a:81:
         7a:0f:d7:40:02:52:43:0c:48:53:36:a6:02:ef:b7:1c:be:e0:
         4f:f3:13:d9:1b:9a:27:17:79:69:af:7e:c1:2c:09:46:ee:4d:
         db:ee:b5:c7:9c:d7:31:d4:b4:3f:57:8c:8f:c6:6f:5f:f0:d9:
         39:48:9c:29:01:c4:04:99:d8:4c:5c:39:0f:29:c1:e4:e5:8e:
         69:4b:10:40:e6:08:fe:1b:47:db:90:a1:43:5d:55:d2:19:b1:
         47:5a:00:d2:09:82:32:63:29:37:e0:fd:77:e8:59:f2:a6:fa:
         e6:97:ed:20:08:c6:92:37:3b:ad:6e:92:83:5a:71:7d:ad:9c:
         07:9d:0f:b7:fd:a4:cc:1d:19:83:cd:83:ef:f5:f8:be:fe:6a:
         2b:29:be:bf:7c:53:80:a2:e4:51:fe:2f:d9:af:64:d1:df:d3:
         49:39:04:9b:82:39:14:d8:4b:4a:80:18:1f:4a:e8:81:2b:c4:
         3f:54:37:3f:96:db:7e:da:3a:9e:3a:c6:6d:34:b4:36:cc:38:
         43:de:d8:32:93:c1:28:d5:ed:8c:21:bc:46:f0:e5:93:a3:8d:
         da:0e:af:f5:92:0d:d8:2c:18:90:2f:3e:fc:06:c8:9a:30:30:
         14:09:0c:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETsBUGMn7EOlJclg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIxNzE0MDAzMFoXDTI0MDUxNzEzMDAzMFowLzEtMCsGA1UEAxMk
Nzc1ODBhZjEtNmM0OS00MTU2LWFmNDgtY2FjYjA2OGNiZmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4miHOfmGEm3wU1m+Lj7q9hL52yHY7FtXrnU0
CiwFXLzI3aZS+XQbzsA0v88rmClnuFqzi4lIQPGyzm1bTmIGOM8kJOURLSldKxTT
4Mp7G2meGAsTvu/YYPrptMUM221uKed/rnTA5kpdC4hP/wtWy1NH36JqEzXMcbsK
9Jt5aLp2keP7RJmteutZplzfeaAC0uLudb4siSi9LEP+pUTud0VZTzh0gJnHvN3E
1dz4YVukag2ekfJbP7ZPcLdI1qzto/KMyAW7Y5PSIL6krD8ECsLqIQ/cNi1XTrep
nflJvkh2WRw1KS1uHBa3nDlZQQnDyVcAdx14yR1Mo3uhXFNGsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC/d+9Z4YGAKqBOMWaeVItTTR4ZnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTkxMDJmMWUtY2M1Mi0z
MGJiLWFkYmUtYTU0MWQ4MTU1ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB16ghqNzk9Ab+9YcHSSf01qgXoP10ACUkMMSFM2pgLvtxy+4E/z
E9kbmicXeWmvfsEsCUbuTdvutcec1zHUtD9XjI/Gb1/w2TlInCkBxASZ2ExcOQ8p
weTljmlLEEDmCP4bR9uQoUNdVdIZsUdaANIJgjJjKTfg/XfoWfKm+uaX7SAIxpI3
O61ukoNacX2tnAedD7f9pMwdGYPNg+/1+L7+aispvr98U4Ci5FH+L9mvZNHf00k5
BJuCORTYS0qAGB9K6IErxD9UNz+W237aOp46xm00tDbMOEPe2DKTwSjV7YwhvEbw
5ZOjjdoOr/WSDdgsGJAvPvwGyJowMBQJDLU=
-----END CERTIFICATE-----
Generated at Mon May 6 20:30:36 2024 by rpki-client on console-ams.rpki-client.org