Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/babaa48d-1f89-38c2-91e0-f1b4d692cac9.roa
File:                     babaa48d-1f89-38c2-91e0-f1b4d692cac9.roa (raw, json)
Hash identifier:          tBtVP9GPMKgJf9JnpbnkpcBfBOeb8oXb18+mkDNOG20=
Subject key identifier:   87:9B:3E:E1:88:88:BF:19:83:03:2A:4F:87:F1:A2:B2:46:49:F8:C1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B67162A7FB841288F43E4
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/babaa48d-1f89-38c2-91e0-f1b4d692cac9.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     140736
IP address blocks:        2001:470:246::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:67:16:2a:7f:b8:41:28:8f:43:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=006a641f-da07-465a-b607-922b48f37acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:8c:e4:46:91:5f:0a:b2:e7:3f:01:c1:5c:
                    2f:de:d0:66:df:d4:b3:db:8e:a2:4b:5d:6b:0e:73:
                    bc:2f:fe:1d:65:86:58:66:90:fe:fa:8d:1b:c0:72:
                    b7:59:38:b8:17:56:27:57:f0:01:4f:9c:dd:53:b7:
                    1b:6f:c7:21:d5:e7:cf:49:c7:f1:89:18:19:8f:b4:
                    7e:6f:a7:d3:b7:fc:28:76:54:6e:64:6b:1e:20:4c:
                    b1:e9:c3:ed:75:a0:e3:e1:d1:d7:29:7c:f2:b4:35:
                    ee:88:f0:86:a1:1e:4a:45:e8:89:6e:4d:fc:a6:89:
                    b9:b5:a0:66:8d:02:a1:04:67:ae:37:53:76:70:fd:
                    ad:03:2d:bb:00:1b:31:45:23:2f:93:0d:03:7f:94:
                    39:54:1f:cf:24:17:24:bf:9e:1d:a3:0f:e3:40:18:
                    59:1e:3a:56:fa:c5:6b:2b:36:69:ef:c7:52:67:2b:
                    0b:25:b7:d7:e3:d5:42:79:4a:04:4b:22:5b:94:7a:
                    94:00:d2:76:35:f4:5b:98:68:10:a2:51:31:66:ec:
                    c3:48:85:9d:13:dc:38:4e:ed:fb:73:c0:a1:db:da:
                    03:5a:09:67:7c:b3:37:97:2f:04:15:50:38:9f:39:
                    ae:ed:83:85:44:ec:29:cc:48:8b:ba:56:cc:d9:a0:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9B:3E:E1:88:88:BF:19:83:03:2A:4F:87:F1:A2:B2:46:49:F8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/babaa48d-1f89-38c2-91e0-f1b4d692cac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:246::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:0f:87:72:9f:d1:f7:6e:a2:87:2e:3d:24:44:cc:62:34:
         0d:ee:69:6a:ef:0a:fb:78:e1:58:3f:43:0f:1b:b2:e3:93:ac:
         05:5e:c6:ca:aa:5a:7d:26:20:0c:35:2a:2d:ee:9f:6b:d0:65:
         c9:04:d8:fa:eb:72:5e:e0:13:83:cf:0e:63:88:1f:d2:67:96:
         a9:f7:7f:50:6e:e7:b4:cb:cf:c4:42:f1:34:ea:73:90:c0:a5:
         d3:51:bb:50:73:de:4b:be:dc:69:00:4f:f6:49:5c:6a:27:30:
         60:03:e7:72:a3:c6:ea:a5:79:3e:8b:cb:8e:72:29:df:01:99:
         86:2e:9e:dc:e6:0b:54:0d:a2:90:79:e3:66:0c:d8:fe:51:11:
         73:af:ce:31:3a:4b:47:ba:f7:e3:47:d4:e4:e9:06:50:86:17:
         b9:a8:13:f3:37:e8:f6:25:6b:42:ca:97:5b:d4:d8:13:bc:d8:
         e3:af:20:65:a0:df:53:93:14:d3:48:86:96:80:1d:ea:69:02:
         de:1d:4e:70:44:85:fd:95:35:c5:75:65:69:88:b6:70:5b:11:
         c3:c7:20:f0:b0:bb:77:b1:42:d8:5a:e6:61:0b:5e:f8:51:21:
         08:e4:da:30:73:e2:e8:d0:ec:67:94:63:91:54:91:7f:b7:b5:
         95:31:0a:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2cWKn+4QSiPQ+QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
MDA2YTY0MWYtZGEwNy00NjVhLWI2MDctOTIyYjQ4ZjM3YWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVKM5EaRXwqy5z8BwVwv3tBm39Sz246iS11r
DnO8L/4dZYZYZpD++o0bwHK3WTi4F1YnV/ABT5zdU7cbb8ch1efPScfxiRgZj7R+
b6fTt/wodlRuZGseIEyx6cPtdaDj4dHXKXzytDXuiPCGoR5KReiJbk38pom5taBm
jQKhBGeuN1N2cP2tAy27ABsxRSMvkw0Df5Q5VB/PJBckv54dow/jQBhZHjpW+sVr
KzZp78dSZysLJbfX49VCeUoESyJblHqUANJ2NfRbmGgQolExZuzDSIWdE9w4Tu37
c8Ch29oDWglnfLM3ly8EFVA4nzmu7YOFROwpzEiLulbM2aC0dwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIebPuGIiL8ZgwMqT4fxorJGSfjBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmFiYWE0OGQtMWY4OS0z
OGMyLTkxZTAtZjFiNGQ2OTJjYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE0ZD4dyn9H3bqKHLj0kRMxiNA3uaWrvCvt44Vg/Qw8bsuOTrAVe
xsqqWn0mIAw1Ki3un2vQZckE2Prrcl7gE4PPDmOIH9Jnlqn3f1Bu57TLz8RC8TTq
c5DApdNRu1Bz3ku+3GkAT/ZJXGonMGAD53KjxuqleT6Ly45yKd8BmYYuntzmC1QN
opB542YM2P5REXOvzjE6S0e69+NH1OTpBlCGF7moE/M36PYla0LKl1vU2BO82OOv
IGWg31OTFNNIhpaAHeppAt4dTnBEhf2VNcV1ZWmItnBbEcPHIPCwu3exQtha5mEL
XvhRIQjk2jBz4ujQ7GeUY5FUkX+3tZUxCio=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org