Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa
File:                     e2794a0f-04b2-3f30-9997-493db90290d9.roa (raw, json)
Hash identifier:          mQeOggTg6U0FTr05Ol3R1viYRyEa9BI/+zDm81p3Zzk=
Subject key identifier:   3D:46:29:F2:E3:64:EA:47:B5:62:3B:0E:79:1C:B6:1C:A2:B3:2C:7E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B678D7B213FE9AD709E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     133905
IP address blocks:        2001:470:25a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:67:8d:7b:21:3f:e9:ad:70:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4c40279f-1660-4a6b-b4f1-40ccbc7f4172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:4a:49:2c:77:8a:b0:c3:4c:0c:6a:b3:6f:
                    00:18:16:d4:17:a5:84:b3:04:62:7f:19:cd:e5:85:
                    58:a7:7b:74:98:8c:69:14:9a:0c:26:ec:1c:0c:a8:
                    4c:ca:77:9d:26:98:11:d2:c9:00:d2:64:06:0e:94:
                    49:d8:4c:91:f8:e4:26:31:9b:93:d6:49:54:8c:f5:
                    c6:d2:a0:c2:69:57:fd:31:72:3f:83:41:d6:67:a1:
                    d4:3e:e1:12:f7:3b:e6:55:50:9b:0c:13:4d:ad:f3:
                    60:59:55:44:e4:f5:79:2a:dc:bb:c3:74:2d:41:08:
                    b4:37:e0:4c:fa:1c:55:0f:91:92:a8:d1:fa:2f:0e:
                    5f:91:ce:15:9b:c3:b5:75:f9:85:13:78:50:f1:b6:
                    e3:d0:02:7a:79:d2:a4:f1:03:0f:71:a9:f1:34:36:
                    11:a3:8a:5f:62:d7:f6:50:30:53:5e:cd:7e:60:e3:
                    ec:8d:bc:94:11:db:71:e1:7e:59:0d:d8:57:28:a9:
                    bb:e9:93:70:81:7c:d8:e4:29:57:81:41:3e:67:72:
                    82:9b:67:1b:44:27:d1:78:a9:b7:99:0f:65:f2:13:
                    be:75:ed:cf:05:04:7d:b3:27:3d:1e:5d:8f:97:12:
                    85:70:8d:98:11:e4:e3:db:e2:67:bb:b1:89:f6:aa:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:46:29:F2:E3:64:EA:47:B5:62:3B:0E:79:1C:B6:1C:A2:B3:2C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2794a0f-04b2-3f30-9997-493db90290d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:29:f0:64:9a:0c:a8:60:1f:a4:99:e7:40:f1:a9:a3:79:7f:
         c9:1c:cf:2e:e7:71:61:cd:3b:ca:f7:13:27:ac:e8:b2:32:44:
         74:79:09:e4:ad:c7:36:52:3c:0a:5c:da:72:20:9e:44:1c:25:
         af:8a:f1:cd:65:2f:6b:0d:cb:0b:e9:29:94:a8:c3:11:11:20:
         32:18:4e:c8:cf:ce:47:5c:b2:c2:d4:54:c1:b9:10:4e:a6:65:
         90:d8:dd:03:21:ef:d0:53:49:a6:56:ea:a5:2a:7c:20:c2:e9:
         bc:8b:8b:5b:f4:f3:26:46:1f:e8:85:fe:42:26:b0:7a:e7:d9:
         82:c7:c7:65:2d:05:cf:f4:30:e1:dd:58:e9:3c:02:3c:e5:4d:
         75:a7:3a:42:f1:38:f2:8c:5b:0a:b2:ae:b4:4c:66:ea:75:69:
         e1:05:e3:aa:21:cc:12:0c:fb:a1:59:03:f8:e8:ce:0f:ef:64:
         6c:92:fb:84:4c:ca:a6:75:3b:90:4f:35:d4:1d:99:cd:49:a0:
         da:7b:d9:55:c8:cb:f9:d2:0e:a2:e7:09:b9:6a:74:e3:e2:e5:
         a2:a3:b9:d8:05:81:97:8b:ec:d5:5b:d4:cd:ab:76:4c:d2:e6:
         9b:87:7f:31:5a:f0:bf:85:50:2c:8a:d3:0b:97:34:a6:91:48:
         ef:73:3b:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2eNeyE/6a1wnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NGM0MDI3OWYtMTY2MC00YTZiLWI0ZjEtNDBjY2JjN2Y0MTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OBKSSx3irDDTAxqs28AGBbUF6WEswRifxnN
5YVYp3t0mIxpFJoMJuwcDKhMynedJpgR0skA0mQGDpRJ2EyR+OQmMZuT1klUjPXG
0qDCaVf9MXI/g0HWZ6HUPuES9zvmVVCbDBNNrfNgWVVE5PV5Kty7w3QtQQi0N+BM
+hxVD5GSqNH6Lw5fkc4Vm8O1dfmFE3hQ8bbj0AJ6edKk8QMPcanxNDYRo4pfYtf2
UDBTXs1+YOPsjbyUEdtx4X5ZDdhXKKm76ZNwgXzY5ClXgUE+Z3KCm2cbRCfReKm3
mQ9l8hO+de3PBQR9syc9Hl2PlxKFcI2YEeTj2+Jnu7GJ9qp6ZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD1GKfLjZOpHtWI7Dnkcthyisyx+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTI3OTRhMGYtMDRiMi0z
ZjMwLTk5OTctNDkzZGI5MDI5MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIIp8GSaDKhgH6SZ50DxqaN5f8kczy7ncWHNO8r3Eyes6LIyRHR5
CeStxzZSPApc2nIgnkQcJa+K8c1lL2sNywvpKZSowxERIDIYTsjPzkdcssLUVMG5
EE6mZZDY3QMh79BTSaZW6qUqfCDC6byLi1v08yZGH+iF/kImsHrn2YLHx2UtBc/0
MOHdWOk8AjzlTXWnOkLxOPKMWwqyrrRMZup1aeEF46ohzBIM+6FZA/jozg/vZGyS
+4RMyqZ1O5BPNdQdmc1JoNp72VXIy/nSDqLnCblqdOPi5aKjudgFgZeL7NVb1M2r
dkzS5puHfzFa8L+FUCyK0wuXNKaRSO9zO/8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org