Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1f89351-6421-3942-8f3a-946c5852c603.roa
File:                     e1f89351-6421-3942-8f3a-946c5852c603.roa (raw, json)
Hash identifier:          6rnemBzVC40nKw/BBlmmMZB0YGnPhdtfQdblJFxyqqg=
Subject key identifier:   3A:77:D6:DE:46:8F:4F:D2:04:7D:F3:97:16:7E:EA:ED:25:2F:E0:3D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC5082F3B425E7E58C120
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1f89351-6421-3942-8f3a-946c5852c603.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     13188
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c5:08:2f:3b:42:5e:7e:58:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=dc8169e3-3e58-48ff-8a30-755c13f87810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:13:8e:c2:6a:08:2d:79:5b:34:09:a7:ee:
                    95:8f:1c:f9:07:d4:95:07:81:b9:7f:fd:ac:a1:d0:
                    a9:1b:0b:51:e7:a6:fa:6f:2a:f7:65:c3:f1:13:04:
                    fd:f5:1f:29:fd:59:86:bb:0f:24:73:c9:76:41:f2:
                    28:20:2d:6a:6e:7a:ff:5c:2a:be:0e:33:fc:17:9d:
                    5e:93:f3:c0:8a:3f:ab:cc:8e:03:14:49:f8:13:d7:
                    3a:de:ff:82:cb:7c:48:3c:54:1e:dd:4c:7b:47:ac:
                    57:5c:1a:b4:3f:ae:28:eb:21:eb:83:08:e9:fd:1a:
                    e5:19:7b:6b:6e:f4:5b:30:e9:86:a5:f2:5b:07:b4:
                    c6:92:55:ed:07:4b:b7:87:e6:3c:78:8e:cd:23:d6:
                    00:ae:42:d0:0c:74:b3:91:4f:d2:b1:de:dd:23:a5:
                    17:01:7e:8f:ff:6e:8c:2e:93:fc:b0:53:00:4d:f8:
                    66:f0:71:09:a2:7f:ba:5c:5f:c8:c2:03:59:7d:e7:
                    68:9e:d4:c3:d3:7c:17:1b:ce:28:d1:17:03:7e:58:
                    94:8b:fe:c7:2e:49:6d:f2:21:2f:16:6c:d7:9d:8d:
                    cf:8c:4e:65:84:b5:55:11:72:09:77:23:53:30:1f:
                    9b:40:2a:fd:bd:46:3c:b1:16:56:93:ac:c3:d7:98:
                    18:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:D6:DE:46:8F:4F:D2:04:7D:F3:97:16:7E:EA:ED:25:2F:E0:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1f89351-6421-3942-8f3a-946c5852c603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:31:0a:1f:a5:ea:1e:1f:da:fa:8e:11:d9:26:95:7b:a3:67:
         51:55:05:45:3c:0e:fd:f2:bd:bb:91:ab:54:79:c4:50:23:61:
         0f:fd:09:1c:86:a8:8e:ab:c6:91:63:16:4a:fd:6c:df:cf:1e:
         7e:5e:0f:96:32:b5:85:76:3f:61:53:a2:62:1e:c1:40:78:9a:
         9f:3c:40:b6:bc:7a:89:08:31:12:92:67:58:cf:0d:2a:a5:41:
         9d:f5:f8:dd:77:35:73:2a:dd:aa:87:16:5e:f1:76:f9:c7:2b:
         3e:9a:42:57:c0:18:43:29:42:44:64:1a:f1:10:2f:ba:5e:17:
         50:c3:7e:6c:ae:96:fe:16:ee:92:f3:af:5a:3a:4d:72:65:c0:
         fd:b6:a7:ec:59:0e:9d:89:3f:be:43:73:45:03:f1:e3:e6:99:
         bd:a4:ea:e4:05:c5:1e:95:c0:f2:e4:3b:c7:e1:f9:dc:26:ce:
         6f:36:cf:58:fc:f0:7f:37:dd:b7:d2:68:a9:1e:90:17:a9:a1:
         f4:a1:21:5c:61:b6:70:aa:2f:f3:6d:63:fe:69:00:58:23:db:
         f2:7d:bc:91:8a:68:93:95:f4:b1:d0:05:a4:69:43:71:60:2a:
         22:ed:05:25:69:4a:5e:f8:45:d3:35:b3:d2:19:52:e8:e6:f2:
         5f:80:db:fe
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUCWsUILztCXn5YwSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIyNTE0MDAzNFoXDTI0MDUyNTEzMDAzNFowLzEtMCsGA1UEAxMk
ZGM4MTY5ZTMtM2U1OC00OGZmLThhMzAtNzU1YzEzZjg3ODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx4TjsJqCC15WzQJp+6Vjxz5B9SVB4G5f/2s
odCpGwtR56b6byr3ZcPxEwT99R8p/VmGuw8kc8l2QfIoIC1qbnr/XCq+DjP8F51e
k/PAij+rzI4DFEn4E9c63v+Cy3xIPFQe3Ux7R6xXXBq0P64o6yHrgwjp/RrlGXtr
bvRbMOmGpfJbB7TGklXtB0u3h+Y8eI7NI9YArkLQDHSzkU/Ssd7dI6UXAX6P/26M
LpP8sFMATfhm8HEJon+6XF/IwgNZfedontTD03wXG84o0RcDfliUi/7HLklt8iEv
FmzXnY3PjE5lhLVVEXIJdyNTMB+bQCr9vUY8sRZWk6zD15gY9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDp31t5Gj0/SBH3zlxZ+6u0lL+A9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTFmODkzNTEtNjQyMS0z
OTQyLThmM2EtOTQ2YzU4NTJjNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKsxCh+l6h4f2vqOEdkmlXujZ1FVBUU8Dv3yvbuRq1R5xFAjYQ/9
CRyGqI6rxpFjFkr9bN/PHn5eD5YytYV2P2FTomIewUB4mp88QLa8eokIMRKSZ1jP
DSqlQZ31+N13NXMq3aqHFl7xdvnHKz6aQlfAGEMpQkRkGvEQL7peF1DDfmyulv4W
7pLzr1o6TXJlwP22p+xZDp2JP75Dc0UD8ePmmb2k6uQFxR6VwPLkO8fh+dwmzm82
z1j88H833bfSaKkekBepofShIVxhtnCqL/NtY/5pAFgj2/J9vJGKaJOV9LHQBaRp
Q3FgKiLtBSVpSl74RdM1s9IZUujm8l+A2/4=
-----END CERTIFICATE-----
Generated at Mon May 6 14:56:16 2024 by rpki-client on console-fra.rpki-client.org