Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e83e107a-28cf-3287-9c98-61472a7fd96b.roa
File:                     e83e107a-28cf-3287-9c98-61472a7fd96b.roa (raw, json)
Hash identifier:          2S157OBZD5fyo2YHM5Ef4AV6g1vWbxjfgb2Olirs/iQ=
Subject key identifier:   7F:C5:43:44:C6:F9:ED:76:3B:0B:54:BD:C5:EF:E6:E4:EC:5F:A4:EC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B630191FDD7DFD2EF0680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e83e107a-28cf-3287-9c98-61472a7fd96b.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     200184
IP address blocks:        2001:470:175::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:63:01:91:fd:d7:df:d2:ef:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=6f102bce-efa4-48d9-8ac9-3ff9b8c0b3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:9b:cd:3d:7c:3c:07:f0:18:ba:c3:67:05:
                    9f:ff:a6:7e:ec:82:df:ac:6a:57:e2:07:bc:b4:55:
                    c6:21:61:e8:07:23:56:bd:98:ab:1d:4a:57:aa:2f:
                    08:ac:35:b0:11:e5:7b:c9:3a:60:41:87:d2:83:57:
                    1e:d6:ec:fe:87:4f:a2:81:cf:f6:41:47:9b:e4:22:
                    39:f3:7a:c8:e3:8b:36:b0:05:ac:56:41:42:3a:ba:
                    07:74:17:01:5f:0d:94:aa:e4:e3:64:8e:12:41:59:
                    a8:1e:19:c8:89:e3:ee:fc:34:3c:f9:25:35:46:55:
                    46:f2:f5:5a:cd:2e:e0:cd:5b:c5:b6:bc:e2:43:b4:
                    9b:29:7c:f8:81:c3:fd:db:77:d2:b7:2a:33:82:8e:
                    80:31:07:53:b1:49:2d:44:9f:38:18:b2:4e:2d:02:
                    12:c6:94:8d:4f:54:2c:ea:2f:c4:7d:3e:b0:ca:c8:
                    46:92:69:1d:0a:ed:96:35:6e:6d:3d:8e:65:cc:9f:
                    b0:4b:60:e9:19:2d:24:b2:64:37:62:7e:1e:e5:47:
                    25:03:2f:bd:9f:bf:7a:41:49:b8:e7:b3:d1:4d:60:
                    85:b9:18:cd:57:4d:89:1d:96:7e:64:ae:fe:43:f5:
                    cb:6f:1a:24:53:2a:81:0f:3b:da:98:c5:81:26:ca:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C5:43:44:C6:F9:ED:76:3B:0B:54:BD:C5:EF:E6:E4:EC:5F:A4:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e83e107a-28cf-3287-9c98-61472a7fd96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:175::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:55:90:7f:02:6e:ae:d3:a8:e7:06:bd:f9:e3:c1:7e:99:b6:
         11:df:10:4a:5f:70:70:61:78:2a:6d:97:a2:18:42:13:bd:66:
         d6:14:c2:9a:3a:6f:93:69:29:6d:50:39:08:3b:1c:5e:e7:a7:
         53:11:59:24:a2:ac:70:d0:94:ba:0a:57:65:82:a1:58:d6:63:
         aa:fc:26:08:7f:79:84:54:84:e0:63:50:c8:60:a5:6d:34:59:
         d4:b8:a0:55:6b:fb:ac:9c:c0:be:d8:3b:f9:74:28:87:e4:95:
         84:d9:c4:91:0d:9a:1c:e6:28:16:b7:8a:15:83:e9:a5:21:2e:
         e3:85:b0:48:16:31:47:8c:34:86:99:2d:88:62:a9:2f:9d:1b:
         5a:a3:fe:d8:11:85:65:0a:7a:63:f9:81:34:da:08:a3:02:01:
         90:df:de:40:b8:91:79:0a:04:25:5a:18:c4:55:c6:6d:0e:31:
         b2:8b:f7:18:cf:ad:9d:99:c1:5b:d4:f6:f3:9c:3c:8f:a1:7b:
         9d:0a:50:50:52:82:5f:29:f3:4b:66:e7:d9:76:78:5c:3b:85:
         2e:87:a1:02:94:cd:27:cf:08:52:ce:c0:d3:a3:f3:d6:b7:d8:
         93:3f:f7:44:6e:2e:9b:f9:eb:cd:31:27:52:73:ad:c7:e9:da:
         43:a6:91:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2MBkf3X39LvBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NmYxMDJiY2UtZWZhNC00OGQ5LThhYzktM2ZmOWI4YzBiM2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlCbzT18PAfwGLrDZwWf/6Z+7ILfrGpX4ge8
tFXGIWHoByNWvZirHUpXqi8IrDWwEeV7yTpgQYfSg1ce1uz+h0+igc/2QUeb5CI5
83rI44s2sAWsVkFCOroHdBcBXw2UquTjZI4SQVmoHhnIiePu/DQ8+SU1RlVG8vVa
zS7gzVvFtrziQ7SbKXz4gcP923fStyozgo6AMQdTsUktRJ84GLJOLQISxpSNT1Qs
6i/EfT6wyshGkmkdCu2WNW5tPY5lzJ+wS2DpGS0ksmQ3Yn4e5UclAy+9n796QUm4
57PRTWCFuRjNV02JHZZ+ZK7+Q/XLbxokUyqBDzvamMWBJsrQwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH/FQ0TG+e12OwtUvcXv5uTsX6TsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTgzZTEwN2EtMjhjZi0z
Mjg3LTljOTgtNjE0NzJhN2ZkOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIlVkH8Cbq7TqOcGvfnjwX6ZthHfEEpfcHBheCptl6IYQhO9ZtYU
wpo6b5NpKW1QOQg7HF7np1MRWSSirHDQlLoKV2WCoVjWY6r8Jgh/eYRUhOBjUMhg
pW00WdS4oFVr+6ycwL7YO/l0KIfklYTZxJENmhzmKBa3ihWD6aUhLuOFsEgWMUeM
NIaZLYhiqS+dG1qj/tgRhWUKemP5gTTaCKMCAZDf3kC4kXkKBCVaGMRVxm0OMbKL
9xjPrZ2ZwVvU9vOcPI+he50KUFBSgl8p80tm59l2eFw7hS6HoQKUzSfPCFLOwNOj
89a32JM/90RuLpv5680xJ1Jzrcfp2kOmkTA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:31 2024 by rpki-client on console-ams.rpki-client.org