Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b65b98bc-b1d0-3f8d-b854-1be484363d15.roa
File:                     b65b98bc-b1d0-3f8d-b854-1be484363d15.roa (raw, json)
Hash identifier:          OUv1nOE0jzq2LJd9zWV+Bzsl5D42eIxWys3Z0Qhw2jI=
Subject key identifier:   27:1A:46:E0:CB:20:AA:2F:C4:A0:34:8C:06:98:60:F5:38:68:DB:34
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B707FD87D09E5C4AF0F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b65b98bc-b1d0-3f8d-b854-1be484363d15.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     17806
IP address blocks:        2001:470:2b7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:70:7f:d8:7d:09:e5:c4:af:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=40d5a346-cee4-40f1-8ba8-9dc0b5aac6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:ef:f4:bb:79:7f:6e:19:a5:49:f0:c9:52:
                    1e:ad:c5:2d:c6:e6:14:91:ae:bc:ea:85:9d:e9:2a:
                    e4:56:71:c1:dc:be:fe:03:55:78:8d:38:1d:a1:58:
                    8f:43:08:a4:c9:5c:54:ff:b8:57:fb:3b:e0:37:1a:
                    95:c9:ce:98:ec:d2:d8:be:bb:75:36:f7:ea:76:87:
                    fa:06:08:6f:86:84:a6:23:86:1c:3d:3a:d7:79:40:
                    b0:22:8b:7f:61:a5:d8:6a:4c:ec:a0:ac:e9:c3:37:
                    95:55:41:36:56:8b:9c:ce:d5:03:0b:cd:c5:de:34:
                    33:4e:08:f5:b1:ae:12:37:4f:2d:a4:c0:75:9e:93:
                    3c:3c:c1:aa:90:4a:96:54:9e:b9:4d:8c:f1:35:eb:
                    b0:c6:3b:0d:12:7f:46:72:d6:d5:12:66:c3:48:9e:
                    19:de:02:73:2a:42:3d:d0:c0:21:27:6c:65:91:c1:
                    40:4c:26:dc:af:11:ec:d2:d9:83:e8:75:9d:dc:70:
                    32:9b:7e:b9:46:66:07:90:41:ff:cf:8d:8c:18:9b:
                    ff:1e:47:32:54:9c:ce:c7:a1:1c:47:59:97:ae:7e:
                    ff:8a:cf:45:34:cd:41:67:94:7a:06:6d:3f:3c:8b:
                    b2:ff:ba:93:ba:f0:4e:97:d3:71:82:c6:7d:1d:ba:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1A:46:E0:CB:20:AA:2F:C4:A0:34:8C:06:98:60:F5:38:68:DB:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b65b98bc-b1d0-3f8d-b854-1be484363d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:78:0b:42:d7:cd:62:52:32:76:af:20:81:26:47:e4:59:5e:
         b1:bd:aa:8b:c5:c6:4b:aa:8f:52:af:56:a6:a9:6f:bf:2e:b3:
         7b:eb:af:9e:66:32:7b:bd:c1:de:60:d2:5b:69:40:9b:54:22:
         d5:f9:8c:01:f9:ce:19:48:2d:9b:5b:23:05:e1:65:83:79:e7:
         d7:68:68:c2:24:75:83:ac:c6:20:04:71:3c:b6:a7:91:9e:88:
         ef:77:a3:d0:b5:e8:ef:86:c1:1e:a8:03:e7:af:48:0d:4f:fd:
         38:46:ad:e9:2a:c6:e0:f3:13:8f:e8:df:cb:ab:47:d5:3b:71:
         b3:a2:14:0c:5f:27:72:6a:b6:d4:3c:a7:6a:fc:4d:13:14:3a:
         4b:19:cb:42:4c:10:a6:7c:37:ed:56:d5:ca:a5:b9:b2:02:16:
         eb:a6:21:5d:da:16:45:5e:49:ec:76:f8:e1:b4:6d:43:26:92:
         b8:c8:0e:d6:9e:47:e1:b8:09:27:9c:4c:4b:aa:24:82:76:ae:
         14:67:22:cf:b7:29:ee:fe:56:a4:85:6f:32:89:61:97:7d:26:
         da:07:2c:81:4e:df:3f:00:92:4b:5e:77:24:c9:ee:3e:5e:e8:
         0e:df:da:36:b2:43:42:48:9b:57:98:d1:0c:0a:2a:c1:4b:0b:
         10:fe:41:2b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3B/2H0J5cSvD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NDBkNWEzNDYtY2VlNC00MGYxLThiYTgtOWRjMGI1YWFjNmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5bv9Lt5f24ZpUnwyVIercUtxuYUka686oWd
6SrkVnHB3L7+A1V4jTgdoViPQwikyVxU/7hX+zvgNxqVyc6Y7NLYvrt1Nvfqdof6
BghvhoSmI4YcPTrXeUCwIot/YaXYakzsoKzpwzeVVUE2VoucztUDC83F3jQzTgj1
sa4SN08tpMB1npM8PMGqkEqWVJ65TYzxNeuwxjsNEn9GctbVEmbDSJ4Z3gJzKkI9
0MAhJ2xlkcFATCbcrxHs0tmD6HWd3HAym365RmYHkEH/z42MGJv/HkcyVJzOx6Ec
R1mXrn7/is9FNM1BZ5R6Bm0/PIuy/7qTuvBOl9NxgsZ9HbpxgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCcaRuDLIKovxKA0jAaYYPU4aNs0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjY1Yjk4YmMtYjFkMC0z
ZjhkLWI4NTQtMWJlNDg0MzYzZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADR4C0LXzWJSMnavIIEmR+RZXrG9qovFxkuqj1KvVqapb78us3vr
r55mMnu9wd5g0ltpQJtUItX5jAH5zhlILZtbIwXhZYN559doaMIkdYOsxiAEcTy2
p5GeiO93o9C16O+GwR6oA+evSA1P/ThGrekqxuDzE4/o38urR9U7cbOiFAxfJ3Jq
ttQ8p2r8TRMUOksZy0JMEKZ8N+1W1cqlubICFuumIV3aFkVeSex2+OG0bUMmkrjI
DtaeR+G4CSecTEuqJIJ2rhRnIs+3Ke7+VqSFbzKJYZd9JtoHLIFO3z8AkktedyTJ
7j5e6A7f2jayQ0JIm1eY0QwKKsFLCxD+QSs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:38 2024 by rpki-client on console-fra.rpki-client.org