Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dca2fd-9936-3816-aa32-596bc31fbfd4.roa
File:                     a4dca2fd-9936-3816-aa32-596bc31fbfd4.roa (raw, json)
Hash identifier:          /sDu+HbvzxsSwjLPqtGsXpUsjpSJtU/jYMoSxW6qzK0=
Subject key identifier:   CE:BE:D0:BA:F1:32:6D:F1:29:A6:8A:E5:18:E5:C4:D8:E5:39:C6:EA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F8956737C321E10F36A92D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dca2fd-9936-3816-aa32-596bc31fbfd4.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     25943
IP address blocks:        2001:470:e5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:67:37:c3:21:e1:0f:36:a9:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=e7a94ff7-c02b-40a7-a65b-e521632e8843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:f8:13:1b:d5:c3:0d:e7:08:c6:a6:fb:96:
                    02:79:a2:20:a0:2d:dd:1e:74:6e:2b:88:44:9e:c7:
                    49:a3:2e:01:e2:29:0f:48:89:99:5c:36:cd:e3:74:
                    e2:3e:c9:02:b9:a5:2c:14:d4:24:86:70:83:16:54:
                    59:75:a3:6c:9b:e1:d6:c7:d6:5b:05:93:8c:02:a1:
                    e3:dc:e2:18:bd:70:ac:31:b8:1c:53:6c:70:0e:e6:
                    4d:7f:a4:1a:a0:36:32:3b:93:27:47:c3:4c:2f:e8:
                    77:be:4a:30:87:0b:95:c0:da:de:fb:fe:61:4a:c3:
                    9b:4a:bf:a1:45:9f:40:49:cd:4d:3f:b2:36:39:5c:
                    d9:85:12:9f:e2:1c:f4:7e:5b:32:f9:92:30:9e:08:
                    80:72:b9:6d:5f:87:1c:82:76:8b:cc:82:c4:5f:90:
                    87:e1:20:14:99:de:c8:71:bb:9a:29:70:38:75:5f:
                    df:d9:d9:10:52:57:62:21:5a:4b:85:45:df:bd:3e:
                    63:fd:12:55:c2:35:8c:2c:69:5d:3b:a0:91:58:a6:
                    53:7a:32:7b:9b:0e:e3:3e:96:bb:42:af:a6:e2:21:
                    69:f0:15:a6:20:14:7e:e1:b7:f1:cf:48:45:61:21:
                    65:5b:68:4f:87:d6:3a:3b:5b:bd:09:c9:08:cc:c9:
                    5a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BE:D0:BA:F1:32:6D:F1:29:A6:8A:E5:18:E5:C4:D8:E5:39:C6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dca2fd-9936-3816-aa32-596bc31fbfd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f9:b3:17:31:87:53:5e:01:7d:7e:6a:23:a5:d0:a2:cd:07:
         58:cb:c1:3b:8c:b2:6e:2d:07:ea:24:ec:c2:2c:57:97:4b:d5:
         b2:60:89:43:c4:b9:0f:83:1e:ea:8f:a8:14:61:e2:13:2a:84:
         7f:26:d4:8f:d3:32:8d:9a:41:c2:55:1b:6a:68:84:3e:58:04:
         51:ff:7a:58:dd:17:56:b0:d5:9c:d7:ea:53:09:c1:1e:ba:d2:
         bb:35:55:43:ab:0e:aa:f6:44:6b:b3:aa:c1:43:73:33:c7:01:
         e1:54:c4:33:40:42:45:75:65:a5:b5:46:f9:ce:fb:40:fc:59:
         3d:32:60:75:cf:ba:c1:d4:a2:8e:56:26:c1:c5:1d:54:17:db:
         ea:d5:35:01:30:f0:83:e2:95:8a:8a:06:7b:5b:5a:d9:b9:04:
         e8:20:f7:bb:91:79:09:39:e9:7a:a7:ee:9f:a2:d8:ef:6b:51:
         1f:76:d2:3b:8a:74:61:87:65:22:b9:51:5b:67:2a:f4:bc:ae:
         ec:15:10:7e:aa:06:3a:90:af:9b:a9:ef:38:b6:2e:55:d5:88:
         58:47:99:80:3a:ae:53:7d:00:26:1a:a9:08:b7:2a:8a:f1:85:
         90:91:ec:c7:88:f7:8a:7d:85:76:17:1c:3f:0d:22:0a:31:18:
         8d:4d:5d:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET4lWc3wyHhDzapLUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
ZTdhOTRmZjctYzAyYi00MGE3LWE2NWItZTUyMTYzMmU4ODQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu34ExvVww3nCMam+5YCeaIgoC3dHnRuK4hE
nsdJoy4B4ikPSImZXDbN43TiPskCuaUsFNQkhnCDFlRZdaNsm+HWx9ZbBZOMAqHj
3OIYvXCsMbgcU2xwDuZNf6QaoDYyO5MnR8NML+h3vkowhwuVwNre+/5hSsObSr+h
RZ9ASc1NP7I2OVzZhRKf4hz0flsy+ZIwngiAcrltX4ccgnaLzILEX5CH4SAUmd7I
cbuaKXA4dV/f2dkQUldiIVpLhUXfvT5j/RJVwjWMLGldO6CRWKZTejJ7mw7jPpa7
Qq+m4iFp8BWmIBR+4bfxz0hFYSFlW2hPh9Y6O1u9CckIzMladwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM6+0LrxMm3xKaaK5RjlxNjlOcbqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTRkY2EyZmQtOTkzNi0z
ODE2LWFhMzItNTk2YmMzMWZiZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHf5sxcxh1NeAX1+aiOl0KLNB1jLwTuMsm4tB+ok7MIsV5dL1bJg
iUPEuQ+DHuqPqBRh4hMqhH8m1I/TMo2aQcJVG2pohD5YBFH/eljdF1aw1ZzX6lMJ
wR660rs1VUOrDqr2RGuzqsFDczPHAeFUxDNAQkV1ZaW1RvnO+0D8WT0yYHXPusHU
oo5WJsHFHVQX2+rVNQEw8IPilYqKBntbWtm5BOgg97uReQk56Xqn7p+i2O9rUR92
0juKdGGHZSK5UVtnKvS8ruwVEH6qBjqQr5up7zi2LlXViFhHmYA6rlN9ACYaqQi3
KorxhZCR7MeI94p9hXYXHD8NIgoxGI1NXWQ=
-----END CERTIFICATE-----
Generated at Mon May 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org