Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa
File:                     9c012a43-a7f3-3901-85c6-fe671914ce92.roa (raw, json)
Hash identifier:          RR3P6wVZCZql1TvQ2pzLXLkDXlGRIN7gKMvKL3DrMDM=
Subject key identifier:   59:EF:FD:E1:8F:5C:F4:19:8A:80:2F:0A:AC:A3:4D:91:BD:D8:F0:8B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B6FB1D6B8EC60DA553C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     396003
IP address blocks:        2001:470:289::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:6f:b1:d6:b8:ec:60:da:55:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=ff8fd95d-fd67-442c-9781-a63a44e7558d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:37:e1:be:ec:ba:ff:0f:60:70:d0:37:ac:
                    72:de:bc:22:09:6d:c4:d0:9d:38:a8:61:63:47:80:
                    98:d6:17:4c:fd:49:b4:36:42:17:d4:b4:e7:87:47:
                    8f:67:e0:6d:7a:69:6f:a2:e1:9f:68:ac:65:4f:7a:
                    3d:0c:f6:c1:3d:72:64:b5:b4:7c:4f:cc:68:86:d4:
                    fe:c0:39:86:62:5e:75:57:94:88:23:d2:c5:08:f7:
                    9c:10:08:ab:40:bf:9e:b6:bd:23:52:8a:71:02:ee:
                    57:ba:27:bc:9f:9f:4e:2a:3f:c0:60:b2:e0:81:18:
                    0a:76:b2:50:44:a1:6c:b7:e1:53:71:25:06:ff:0b:
                    87:7e:af:e7:a8:04:c5:bb:67:46:b0:7d:f5:92:d4:
                    b5:e8:44:0a:ca:a8:fd:21:c7:54:cd:24:48:75:26:
                    7c:3d:8d:e2:86:55:53:4f:55:a5:f9:c3:ee:db:38:
                    3c:8a:ab:63:87:64:15:3c:1b:0b:96:34:32:c1:e4:
                    f6:f4:9d:9f:67:12:51:e9:be:79:27:65:24:ff:b2:
                    77:99:ee:6b:90:04:a4:0b:2c:44:9c:d0:0a:14:8e:
                    13:b6:69:b0:ea:d8:0f:3f:ac:58:f7:d4:70:3a:1f:
                    e6:d6:95:b5:3e:6b:0d:0b:f6:dc:9a:d5:d7:73:58:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:FD:E1:8F:5C:F4:19:8A:80:2F:0A:AC:A3:4D:91:BD:D8:F0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:289::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2b:a9:b7:6a:1d:94:be:00:ae:e8:78:5f:8c:11:6f:a2:4b:
         0f:4f:27:de:97:d2:80:dc:aa:81:5e:04:af:42:66:35:d5:86:
         de:91:3d:86:f9:8e:98:bc:d2:94:50:d4:44:d4:8a:76:50:10:
         a6:6b:fa:62:6d:d3:c6:fa:7f:44:54:5d:b4:e8:37:b4:15:59:
         50:64:98:e6:e6:1b:1e:eb:d9:58:58:fa:dd:d0:5b:2d:da:75:
         97:65:b9:80:21:7f:a0:e4:bf:8b:c7:4f:ac:66:94:5d:a3:4f:
         03:fb:08:2f:29:f6:6e:9f:c1:ee:61:dd:44:ef:30:f9:d5:1e:
         16:7d:a4:1d:cc:e1:e7:6d:26:c9:fa:ac:75:8c:9f:79:b5:45:
         c0:ad:8a:60:f0:e4:d5:f8:ee:66:c4:00:06:d8:b4:1b:03:95:
         dd:0e:e2:47:27:9f:da:b7:40:32:36:f3:ed:f9:66:16:7e:41:
         7e:a8:34:0e:4d:35:12:3e:a5:24:7a:31:e0:fd:4d:10:c2:ca:
         f0:e1:c6:0a:17:69:11:d1:e2:00:54:ff:d1:ed:74:25:49:b5:
         31:a6:4b:14:88:43:c4:73:40:2e:ce:96:c7:ff:e2:bf:73:a6:
         8c:0b:34:3a:32:b8:93:f2:a8:cb:57:2d:13:5f:ce:a8:25:6f:
         9e:b2:5c:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2+x1rjsYNpVPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZmY4ZmQ5NWQtZmQ2Ny00NDJjLTk3ODEtYTYzYTQ0ZTc1NThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskE34b7suv8PYHDQN6xy3rwiCW3E0J04qGFj
R4CY1hdM/Um0NkIX1LTnh0ePZ+BtemlvouGfaKxlT3o9DPbBPXJktbR8T8xohtT+
wDmGYl51V5SII9LFCPecEAirQL+etr0jUopxAu5Xuie8n59OKj/AYLLggRgKdrJQ
RKFst+FTcSUG/wuHfq/nqATFu2dGsH31ktS16EQKyqj9IcdUzSRIdSZ8PY3ihlVT
T1Wl+cPu2zg8iqtjh2QVPBsLljQyweT29J2fZxJR6b55J2Uk/7J3me5rkASkCyxE
nNAKFI4Ttmmw6tgPP6xY99RwOh/m1pW1PmsNC/bcmtXXc1jvxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFnv/eGPXPQZioAvCqyjTZG92PCLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWMwMTJhNDMtYTdmMy0z
OTAxLTg1YzYtZmU2NzE5MTRjZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADIrqbdqHZS+AK7oeF+MEW+iSw9PJ96X0oDcqoFeBK9CZjXVht6R
PYb5jpi80pRQ1ETUinZQEKZr+mJt08b6f0RUXbToN7QVWVBkmObmGx7r2VhY+t3Q
Wy3adZdluYAhf6Dkv4vHT6xmlF2jTwP7CC8p9m6fwe5h3UTvMPnVHhZ9pB3M4edt
Jsn6rHWMn3m1RcCtimDw5NX47mbEAAbYtBsDld0O4kcnn9q3QDI28+35ZhZ+QX6o
NA5NNRI+pSR6MeD9TRDCyvDhxgoXaRHR4gBU/9HtdCVJtTGmSxSIQ8RzQC7Olsf/
4r9zpowLNDoyuJPyqMtXLRNfzqglb56yXEQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org