Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5c9d450-896c-3b3e-8d4e-f52f95242303.roa
File:                     b5c9d450-896c-3b3e-8d4e-f52f95242303.roa (raw, json)
Hash identifier:          R3+LTopvwVvdxgNbZUNC7sF9TbhghrWt3WsCR8MZjmA=
Subject key identifier:   56:D0:D8:D5:E1:71:81:21:1F:99:A2:CA:E0:E4:BF:54:8C:C0:63:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845814309B4AF3D6F43D4AFE480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5c9d450-896c-3b3e-8d4e-f52f95242303.roa
Signing time:             Thu 11 Apr 2024 01:00:25 +0000
ROA not before:           Thu 11 Apr 2024 01:00:25 +0000
ROA not after:            Wed 10 Jul 2024 01:00:25 +0000
asID:                     16637
IP address blocks:        2001:470:170::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:81:43:09:b4:af:3d:6f:43:d4:af:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 11 01:00:25 2024 GMT
            Not After : Jul 10 01:00:25 2024 GMT
        Subject: CN=f57c6a1a-42d9-49d7-be00-bc53401161ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:a4:60:2e:b0:e9:95:bc:68:41:a5:88:10:
                    32:c8:04:34:6b:02:66:74:c2:f2:75:81:30:e4:7d:
                    e8:9e:67:7d:26:05:25:57:2d:68:8e:3f:97:6a:c8:
                    54:ed:34:46:9a:f7:0f:1b:e8:56:e8:ae:fb:6b:0c:
                    cd:43:f4:d1:d9:42:57:a4:4f:37:c6:84:9d:41:69:
                    04:81:8e:ee:57:07:10:62:78:3d:a1:f8:22:15:bd:
                    77:4f:81:fc:4a:3e:26:5d:ed:a9:59:c1:c2:40:d4:
                    0a:53:d9:fc:30:fc:6a:a2:4c:47:f1:03:53:43:e5:
                    be:db:67:ea:8a:20:a9:39:61:2c:8c:44:92:10:8b:
                    28:56:3f:78:72:79:a2:90:5b:56:f7:67:06:ef:fe:
                    cf:7f:99:82:5c:bd:7f:f0:7f:5c:17:3a:fc:9c:1d:
                    be:5c:a7:71:ea:71:65:38:ab:eb:66:ef:9c:27:f9:
                    9f:6e:10:b9:39:c2:10:94:48:3f:12:96:b9:17:f6:
                    63:13:6f:66:fd:ba:c5:51:42:7a:17:7f:0f:5a:77:
                    b3:71:86:65:cd:5e:db:e4:51:b3:ac:bb:c0:7a:51:
                    e1:f2:e6:44:78:0a:43:ee:42:cf:83:b4:bd:61:80:
                    23:20:3e:41:89:f6:70:b2:41:75:d1:f2:21:ae:15:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:D8:D5:E1:71:81:21:1F:99:A2:CA:E0:E4:BF:54:8C:C0:63:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5c9d450-896c-3b3e-8d4e-f52f95242303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:170::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:cb:5f:6d:3c:fd:48:38:be:33:24:38:4d:e7:d0:4b:22:d8:
         6c:b0:c1:9e:4e:da:2e:b8:76:17:41:63:a0:16:af:5c:69:a4:
         b9:32:2d:ec:83:bf:34:95:00:43:a3:81:dc:65:ed:d5:01:8d:
         e1:a2:c3:6c:b9:6b:42:43:fb:23:a8:87:31:f8:ef:12:a4:1a:
         a9:8a:1f:90:4b:d7:c0:f5:36:ab:e3:a3:a8:19:34:37:ce:62:
         80:26:ac:6b:b4:3c:36:17:8b:04:3a:55:0e:8c:ba:9a:0c:f5:
         81:23:98:4e:d1:54:70:d5:c7:7f:34:fe:0d:cd:c9:2f:26:42:
         d6:c4:af:35:cc:bb:53:85:cf:a1:41:f2:5d:83:86:ed:d0:9f:
         25:20:e8:96:eb:26:01:91:40:d0:82:78:16:44:c8:e9:21:be:
         30:ae:08:d6:c5:87:ae:5b:39:88:90:ce:39:3d:25:8c:45:8e:
         70:3b:f0:46:a0:ae:cd:f9:41:10:c7:a7:f1:0f:5e:a5:2a:6b:
         bc:93:99:ed:f3:52:10:92:13:26:97:32:1c:91:fc:bd:b4:52:
         dd:fd:01:d3:d3:d4:3f:f8:6d:52:c8:9f:18:41:aa:e9:20:cb:
         a1:2a:24:f4:91:38:1c:62:bc:3f:58:d6:45:85:0c:06:0f:20:
         7b:63:9b:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWBQwm0rz1vQ9Sv5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDQxMTAxMDAyNVoXDTI0MDcxMDAxMDAyNVowLzEtMCsGA1UEAxMk
ZjU3YzZhMWEtNDJkOS00OWQ3LWJlMDAtYmM1MzQwMTE2MWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArimkYC6w6ZW8aEGliBAyyAQ0awJmdMLydYEw
5H3onmd9JgUlVy1ojj+XashU7TRGmvcPG+hW6K77awzNQ/TR2UJXpE83xoSdQWkE
gY7uVwcQYng9ofgiFb13T4H8Sj4mXe2pWcHCQNQKU9n8MPxqokxH8QNTQ+W+22fq
iiCpOWEsjESSEIsoVj94cnmikFtW92cG7/7Pf5mCXL1/8H9cFzr8nB2+XKdx6nFl
OKvrZu+cJ/mfbhC5OcIQlEg/Epa5F/ZjE29m/brFUUJ6F38PWnezcYZlzV7b5FGz
rLvAelHh8uZEeApD7kLPg7S9YYAjID5BifZwskF10fIhrhUyQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFbQ2NXhcYEhH5miyuDkv1SMwGPbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjVjOWQ0NTAtODk2Yy0z
YjNlLThkNGUtZjUyZjk1MjQyMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALXLX208/Ug4vjMkOE3n0Esi2GywwZ5O2i64dhdBY6AWr1xppLky
LeyDvzSVAEOjgdxl7dUBjeGiw2y5a0JD+yOohzH47xKkGqmKH5BL18D1Nqvjo6gZ
NDfOYoAmrGu0PDYXiwQ6VQ6MupoM9YEjmE7RVHDVx380/g3NyS8mQtbErzXMu1OF
z6FB8l2Dhu3QnyUg6JbrJgGRQNCCeBZEyOkhvjCuCNbFh65bOYiQzjk9JYxFjnA7
8Eagrs35QRDHp/EPXqUqa7yTme3zUhCSEyaXMhyR/L20Ut39AdPT1D/4bVLInxhB
qukgy6EqJPSROBxivD9Y1kWFDAYPIHtjmzE=
-----END CERTIFICATE-----
Generated at Mon May 6 03:09:15 2024 by rpki-client on console-ams.rpki-client.org