Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abb6bd13-7b3d-3f93-a266-c703da06c346.roa
File:                     abb6bd13-7b3d-3f93-a266-c703da06c346.roa (raw, json)
Hash identifier:          NuVLhRZAqoDT28Hz6yDsTvxgJgcPKQ5euBxhEypkkMQ=
Subject key identifier:   C7:47:0D:BE:94:3B:58:3C:16:24:5E:10:9C:2B:A8:2A:6E:99:DC:4B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858457D1338F5935ADA7708AE26C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abb6bd13-7b3d-3f93-a266-c703da06c346.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     396026
IP address blocks:        2001:470:1f9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:38:f5:93:5a:da:77:08:ae:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=8369cd3d-5a28-43df-8ffb-93d70b25481a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:fa:a6:a1:1d:98:5c:ed:a0:e8:bd:e4:f7:
                    21:70:3e:13:51:77:72:a0:d4:2e:49:5b:4d:36:cb:
                    72:da:48:5c:21:b7:85:6b:79:33:9a:e1:16:4a:c0:
                    4f:1c:ba:67:7d:07:e7:06:e1:2b:18:2e:05:0d:f5:
                    09:b1:55:57:e8:91:f0:03:f5:ba:2e:be:2e:1b:4c:
                    4b:f9:bc:5e:86:a2:18:1f:b4:7c:52:75:77:e8:7b:
                    7f:63:2d:c3:4d:7f:ae:e7:4d:c5:c5:eb:0f:f4:fb:
                    d7:f0:e8:3a:4f:07:b2:83:93:74:6d:7c:0c:1e:c9:
                    c7:16:e8:44:f4:d2:81:c1:e1:66:84:29:c1:72:15:
                    c1:15:ec:93:ed:84:4e:08:ea:bf:e0:0d:63:59:b1:
                    19:ca:1e:83:f9:34:75:b4:e7:8f:db:5e:ab:30:ec:
                    45:8b:28:48:dc:9b:0a:bd:84:47:ce:78:0a:28:a3:
                    26:fc:98:7c:7d:34:1f:64:57:f6:b1:06:cc:fa:b2:
                    fe:f2:a7:29:7c:e7:58:34:c8:4d:79:e0:da:e6:0b:
                    8f:95:05:a6:01:08:c2:86:da:ba:c5:50:ab:55:3c:
                    12:a9:73:05:16:02:dc:86:cb:05:12:08:f8:7d:d7:
                    7b:10:c5:dd:29:a1:0c:b6:75:1c:a7:4b:01:35:7d:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:47:0D:BE:94:3B:58:3C:16:24:5E:10:9C:2B:A8:2A:6E:99:DC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abb6bd13-7b3d-3f93-a266-c703da06c346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:57:cd:55:31:1a:7f:97:68:a2:3d:0f:96:8a:f4:39:a5:48:
         3f:b0:9d:6b:77:2a:a7:a2:3e:9f:12:b0:f1:93:58:8f:52:e6:
         3c:dd:52:39:14:da:66:43:50:c8:ca:82:94:78:f7:b0:55:ed:
         f6:2f:e2:70:78:37:bb:36:e0:de:9e:eb:dd:00:33:7b:18:fc:
         6d:30:55:0d:98:71:e6:09:62:aa:2b:82:72:d3:91:7b:e0:f3:
         99:47:20:9b:7d:c3:60:74:d7:16:a9:c5:e0:40:2f:e7:75:9d:
         8d:cb:db:ba:c4:da:cb:91:75:68:f3:f1:15:97:ba:56:ed:90:
         cc:db:d0:df:2b:4e:2f:9f:3c:95:61:a9:df:1f:e3:a6:94:83:
         e5:bb:ab:d4:55:95:d7:24:61:7b:0d:62:09:46:20:6e:d2:d7:
         0a:f9:96:d0:4b:ab:0a:10:01:56:18:3a:74:a3:82:22:0c:8d:
         8c:3c:c0:b8:bc:b3:63:46:7f:70:b5:91:6f:1e:55:1c:97:09:
         88:c2:32:fc:fa:c3:90:0f:eb:3b:23:31:b2:68:03:75:54:3a:
         a0:8b:00:47:3d:c1:d1:9c:40:57:07:b1:12:ad:72:0a:9e:68:
         f4:61:43:2e:4f:4c:30:83:a1:ff:b6:45:bd:62:7e:cb:4f:15:
         d4:72:ac:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV9Ezj1k1radwiuJsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
ODM2OWNkM2QtNWEyOC00M2RmLThmZmItOTNkNzBiMjU0ODFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGb6pqEdmFztoOi95PchcD4TUXdyoNQuSVtN
Nsty2khcIbeFa3kzmuEWSsBPHLpnfQfnBuErGC4FDfUJsVVX6JHwA/W6Lr4uG0xL
+bxehqIYH7R8UnV36Ht/Yy3DTX+u503FxesP9PvX8Og6Tweyg5N0bXwMHsnHFuhE
9NKBweFmhCnBchXBFeyT7YROCOq/4A1jWbEZyh6D+TR1tOeP216rMOxFiyhI3JsK
vYRHzngKKKMm/Jh8fTQfZFf2sQbM+rL+8qcpfOdYNMhNeeDa5guPlQWmAQjChtq6
xVCrVTwSqXMFFgLchssFEgj4fdd7EMXdKaEMtnUcp0sBNX1b4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMdHDb6UO1g8FiReEJwrqCpumdxLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWJiNmJkMTMtN2IzZC0z
ZjkzLWEyNjYtYzcwM2RhMDZjMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL5XzVUxGn+XaKI9D5aK9DmlSD+wnWt3KqeiPp8SsPGTWI9S5jzd
UjkU2mZDUMjKgpR497BV7fYv4nB4N7s24N6e690AM3sY/G0wVQ2YceYJYqorgnLT
kXvg85lHIJt9w2B01xapxeBAL+d1nY3L27rE2suRdWjz8RWXulbtkMzb0N8rTi+f
PJVhqd8f46aUg+W7q9RVldckYXsNYglGIG7S1wr5ltBLqwoQAVYYOnSjgiIMjYw8
wLi8s2NGf3C1kW8eVRyXCYjCMvz6w5AP6zsjMbJoA3VUOqCLAEc9wdGcQFcHsRKt
cgqeaPRhQy5PTDCDof+2Rb1ifstPFdRyrDg=
-----END CERTIFICATE-----
Generated at Mon May 6 15:20:38 2024 by rpki-client on console-ams.rpki-client.org