Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9093161-5334-3639-9eb4-28f0fad9fed9.roa
File:                     a9093161-5334-3639-9eb4-28f0fad9fed9.roa (raw, json)
Hash identifier:          NImQdD516OaeawMACD2TUpqJjYRaFT+4fhxrwrznpa4=
Subject key identifier:   F0:5E:39:6A:2C:33:5E:81:AE:6C:40:FF:2D:88:35:B4:AF:BF:55:56
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFFD6F9C4A82F87405E080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9093161-5334-3639-9eb4-28f0fad9fed9.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     32681
IP address blocks:        2001:470:253::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:fd:6f:9c:4a:82:f8:74:05:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=bb10f528-2e94-4c4b-9107-d4078fb5a13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:5e:c1:ed:37:fc:e0:4e:68:73:70:1b:93:
                    af:8b:df:62:2b:48:53:c4:19:ca:fc:da:22:aa:d3:
                    f6:a0:a7:5c:58:e3:e8:f7:9e:81:09:60:d5:c2:a0:
                    82:a6:0d:f4:8e:84:7c:77:bc:fa:49:95:c4:0a:3b:
                    bd:b4:e2:31:28:1e:43:3e:62:42:4c:24:a9:6b:20:
                    60:97:9e:76:16:fb:5f:25:76:20:38:a7:08:1e:7d:
                    d3:d6:9e:fc:c5:81:94:3e:1b:01:ce:54:4a:59:53:
                    7c:0f:d4:65:67:30:d3:6a:9d:a1:a8:0c:3a:ff:6b:
                    15:7d:b1:91:2d:c4:ec:8f:ee:94:97:c4:69:79:48:
                    2a:cd:3d:2d:5f:f5:45:88:28:39:7f:06:6d:cf:34:
                    eb:f6:ee:e4:f6:46:a2:24:a2:c1:1b:91:be:59:b9:
                    d5:81:64:c6:0e:33:2b:0e:81:9f:f1:16:70:28:6c:
                    3b:af:c2:18:99:df:d9:2f:11:87:54:10:2f:0b:c1:
                    99:c7:1b:9d:d0:95:7b:87:e9:d5:51:78:42:0e:a0:
                    92:20:9e:23:07:1b:2e:0a:d5:7a:a7:3a:37:27:f7:
                    0e:b1:05:10:74:db:03:a4:2c:04:18:91:60:07:39:
                    63:01:49:3e:8d:1a:46:b1:d7:4b:70:d6:8a:60:87:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5E:39:6A:2C:33:5E:81:AE:6C:40:FF:2D:88:35:B4:AF:BF:55:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9093161-5334-3639-9eb4-28f0fad9fed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:253::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:e6:3b:e3:bc:24:20:30:d6:9d:cd:7a:f0:91:a5:f8:4f:45:
         03:8e:54:02:df:d9:bc:28:fd:5a:b8:5c:d5:8a:96:ba:64:2c:
         6a:a9:4e:99:f8:c7:d5:88:6f:d8:4b:9c:c4:73:1b:f7:72:8d:
         36:bd:5a:48:4f:87:ef:70:d1:ea:6d:4d:06:1a:19:a6:b1:b7:
         8d:da:08:f0:52:b0:1a:52:d9:87:9b:eb:6a:63:54:00:ed:50:
         17:42:0c:a5:ad:b8:95:5a:e1:a6:34:f8:43:8e:1d:9c:03:79:
         33:ee:78:b5:74:f6:ea:93:24:a9:4f:6c:42:be:28:18:ee:8a:
         bd:21:77:af:26:e9:a4:c2:af:2b:73:2c:93:f9:8d:43:3d:d7:
         fc:5b:2b:7f:72:4f:05:27:85:02:30:3d:85:a1:e4:1c:c2:f4:
         50:ba:b1:17:53:d3:f0:74:40:97:b6:62:95:8b:42:5a:d9:b0:
         07:63:65:d2:f4:1b:9e:d3:3b:2b:bf:cd:63:49:76:a5:fd:81:
         68:74:84:b0:49:81:89:93:b8:d4:74:eb:c6:a2:5f:b9:16:8a:
         84:57:7d:2a:9b:0f:9b:33:e7:e2:ac:a6:c9:bc:9e:48:c1:b9:
         e1:2e:4e:c2:01:36:ff:c9:00:29:e3:6d:d1:34:23:bf:03:ee:
         c9:22:99:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz/1vnEqC+HQF4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YmIxMGY1MjgtMmU5NC00YzRiLTkxMDctZDQwNzhmYjVhMTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloZewe03/OBOaHNwG5Ovi99iK0hTxBnK/Noi
qtP2oKdcWOPo956BCWDVwqCCpg30joR8d7z6SZXECju9tOIxKB5DPmJCTCSpayBg
l552FvtfJXYgOKcIHn3T1p78xYGUPhsBzlRKWVN8D9RlZzDTap2hqAw6/2sVfbGR
LcTsj+6Ul8RpeUgqzT0tX/VFiCg5fwZtzzTr9u7k9kaiJKLBG5G+WbnVgWTGDjMr
DoGf8RZwKGw7r8IYmd/ZLxGHVBAvC8GZxxud0JV7h+nVUXhCDqCSIJ4jBxsuCtV6
pzo3J/cOsQUQdNsDpCwEGJFgBzljAUk+jRpGsddLcNaKYIe2LQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPBeOWosM16BrmxA/y2INbSvv1VWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTkwOTMxNjEtNTMzNC0z
NjM5LTllYjQtMjhmMGZhZDlmZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALbmO+O8JCAw1p3NevCRpfhPRQOOVALf2bwo/Vq4XNWKlrpkLGqp
Tpn4x9WIb9hLnMRzG/dyjTa9WkhPh+9w0eptTQYaGaaxt43aCPBSsBpS2Yeb62pj
VADtUBdCDKWtuJVa4aY0+EOOHZwDeTPueLV09uqTJKlPbEK+KBjuir0hd68m6aTC
rytzLJP5jUM91/xbK39yTwUnhQIwPYWh5BzC9FC6sRdT0/B0QJe2YpWLQlrZsAdj
ZdL0G57TOyu/zWNJdqX9gWh0hLBJgYmTuNR068aiX7kWioRXfSqbD5sz5+Kspsm8
nkjBueEuTsIBNv/JACnjbdE0I78D7skimeo=
-----END CERTIFICATE-----
Generated at Fri Feb 7 11:54:23 2025 by rpki-client