Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/995db78f-29b8-3372-b44d-be5e5a4a85d2.roa
File:                     995db78f-29b8-3372-b44d-be5e5a4a85d2.roa (raw, json)
Hash identifier:          9io7YgZqkwh6Wjw39Y0zgfVT6Q748hBIxQG5CzS3lTg=
Subject key identifier:   AB:20:3B:01:6C:2B:6F:7C:2D:D6:2D:A5:AD:69:95:5A:17:2D:92:63
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858476CAA3403336EA8FACE5E4200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/995db78f-29b8-3372-b44d-be5e5a4a85d2.roa
Signing time:             Fri 04 Oct 2024 01:30:11 +0000
ROA not before:           Fri 04 Oct 2024 01:30:11 +0000
ROA not after:            Thu 02 Jan 2025 02:30:11 +0000
asID:                     150218
IP address blocks:        2001:470:39f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:aa:34:03:33:6e:a8:fa:ce:5e:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  4 01:30:11 2024 GMT
            Not After : Jan  2 02:30:11 2025 GMT
        Subject: CN=472d6511-f1e3-4b86-9d1d-fad2c15b9f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cf:84:86:8f:e7:64:53:4b:ce:fa:e8:1a:b8:
                    af:e9:8d:56:70:40:f9:ce:9c:a8:51:fa:78:c9:94:
                    05:26:24:4f:8a:0a:36:cf:d2:05:86:a3:eb:68:46:
                    41:07:ef:a0:73:26:bd:84:2c:9b:3a:a2:68:1b:7c:
                    6b:fb:77:69:e5:68:14:1c:90:42:f9:cd:99:d1:47:
                    16:fe:ef:d3:c6:ea:b9:c5:d6:27:13:b4:e1:12:dd:
                    5f:81:b6:ce:b5:f7:61:b1:70:85:8f:51:f1:b1:ab:
                    16:32:96:e7:f2:3c:71:35:65:29:a9:1b:7d:13:f6:
                    7d:48:f7:a4:cd:60:73:13:50:f2:72:f3:09:41:18:
                    64:d3:9a:13:dd:bb:c4:75:ba:39:d2:44:68:ad:af:
                    0b:90:58:4c:5c:f0:3b:86:bc:0b:32:31:61:54:14:
                    6b:70:c0:ed:33:57:55:36:71:2e:3e:36:98:57:9d:
                    78:7a:fc:ca:34:dc:49:26:42:f7:e8:21:0c:c7:0e:
                    9e:ad:f3:3c:03:3b:12:bc:12:ce:14:be:55:26:97:
                    d0:5f:06:a3:ba:a0:9e:1d:93:54:92:8d:dd:9c:c4:
                    13:9c:58:b2:c0:2a:80:db:65:19:5b:4c:b2:15:8c:
                    6b:05:27:6f:74:1e:36:7b:5c:6e:3f:36:15:d4:95:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:20:3B:01:6C:2B:6F:7C:2D:D6:2D:A5:AD:69:95:5A:17:2D:92:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/995db78f-29b8-3372-b44d-be5e5a4a85d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:39f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6f:e3:c7:b2:0d:54:f2:07:a7:09:04:e9:94:e9:22:91:32:
         df:60:8a:49:aa:3a:36:1b:5c:a5:9c:5c:46:25:ae:e7:4b:f3:
         41:b5:89:39:f4:f4:b1:5b:e4:6c:d5:27:cb:dd:18:d6:1e:64:
         f0:92:35:22:23:34:45:b8:bb:bc:bc:b5:2b:27:f3:e1:fc:2e:
         38:c7:7f:20:71:7f:c7:31:53:c7:84:91:c6:79:9a:b0:50:1a:
         8c:02:06:cc:f8:90:2c:23:83:4b:d4:64:4f:0c:fc:dc:c5:69:
         58:b3:c7:d8:af:23:56:6b:3e:cd:84:aa:8a:8f:c0:0c:54:34:
         b2:14:4c:60:17:04:04:db:83:51:83:48:a5:b5:53:72:18:23:
         92:d6:62:63:e2:ec:24:cc:92:51:f8:0e:80:e4:72:f5:76:b4:
         b3:45:73:6e:2c:ea:4c:cb:45:bf:4b:99:9a:65:dc:8f:a9:7f:
         ba:d9:03:3c:50:e9:58:cf:a1:38:b7:53:1a:1b:70:85:80:35:
         69:a0:5c:01:a5:da:cd:7d:2f:64:29:e9:43:c5:fa:39:89:d3:
         5f:9d:d3:8f:64:e3:2d:2a:5b:a2:f3:0c:ec:fc:0d:dc:4e:bd:
         c3:cf:eb:07:67:22:78:68:30:49:ed:70:49:64:6d:8e:65:b7:
         91:26:1e:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdsqjQDM26o+s5eQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTAwNDAxMzAxMVoXDTI1MDEwMjAyMzAxMVowLzEtMCsGA1UEAxMk
NDcyZDY1MTEtZjFlMy00Yjg2LTlkMWQtZmFkMmMxNWI5ZjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M+Eho/nZFNLzvroGriv6Y1WcED5zpyoUfp4
yZQFJiRPigo2z9IFhqPraEZBB++gcya9hCybOqJoG3xr+3dp5WgUHJBC+c2Z0UcW
/u/Txuq5xdYnE7ThEt1fgbbOtfdhsXCFj1HxsasWMpbn8jxxNWUpqRt9E/Z9SPek
zWBzE1DycvMJQRhk05oT3bvEdbo50kRora8LkFhMXPA7hrwLMjFhVBRrcMDtM1dV
NnEuPjaYV514evzKNNxJJkL36CEMxw6erfM8AzsSvBLOFL5VJpfQXwajuqCeHZNU
ko3dnMQTnFiywCqA22UZW0yyFYxrBSdvdB42e1xuPzYV1JXyzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKsgOwFsK298LdYtpa1plVoXLZJjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTk1ZGI3OGYtMjliOC0z
MzcyLWI0NGQtYmU1ZTVhNGE4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA9v48eyDVTyB6cJBOmU6SKRMt9gikmqOjYbXKWcXEYlrudL80G1
iTn09LFb5GzVJ8vdGNYeZPCSNSIjNEW4u7y8tSsn8+H8LjjHfyBxf8cxU8eEkcZ5
mrBQGowCBsz4kCwjg0vUZE8M/NzFaVizx9ivI1ZrPs2EqoqPwAxUNLIUTGAXBATb
g1GDSKW1U3IYI5LWYmPi7CTMklH4DoDkcvV2tLNFc24s6kzLRb9LmZpl3I+pf7rZ
AzxQ6VjPoTi3UxobcIWANWmgXAGl2s19L2Qp6UPF+jmJ01+d049k4y0qW6LzDOz8
DdxOvcPP6wdnInhoMEntcElkbY5lt5EmHu8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org