Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef411482-5f78-3aad-b80c-bb1a5129e575.roa
File:                     ef411482-5f78-3aad-b80c-bb1a5129e575.roa (raw, json)
Hash identifier:          k8/bDLmYPwtM/P/QtH8iawPQrSV2QMSPp2fHj1eNUOY=
Subject key identifier:   5C:06:AB:BC:12:A4:9A:EF:DA:8E:72:AF:BB:75:FA:1F:23:CF:6B:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847FDF38A2877935A0F6CB08CE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef411482-5f78-3aad-b80c-bb1a5129e575.roa
Signing time:             Mon 25 Nov 2024 02:30:10 +0000
ROA not before:           Mon 25 Nov 2024 02:30:10 +0000
ROA not after:            Sun 23 Feb 2025 02:30:10 +0000
asID:                     216138
IP address blocks:        2001:470:38a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:f3:8a:28:77:93:5a:0f:6c:b0:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 25 02:30:10 2024 GMT
            Not After : Feb 23 02:30:10 2025 GMT
        Subject: CN=f664d72b-3a56-418b-863b-877b33ebae37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:96:a4:81:e3:8a:26:04:9e:26:41:c7:ae:
                    b0:f0:91:a1:e7:e9:27:86:09:08:43:1c:82:3c:85:
                    a8:30:d3:76:0e:38:d2:c8:8f:55:78:cd:c1:ce:ca:
                    c2:1a:8b:c6:1d:33:91:9b:35:b3:ec:02:d4:dc:df:
                    f8:fd:a4:4e:bf:b3:49:04:71:af:cf:80:b8:54:b9:
                    f1:b1:d5:d8:6a:f0:84:a6:36:f3:5e:4b:10:75:ab:
                    67:70:00:02:69:47:dc:41:0d:62:bc:f1:98:eb:f4:
                    c2:7d:e1:82:a8:a4:35:3d:ab:f4:e1:02:d6:90:cf:
                    34:0e:3a:2b:d3:7e:0a:c5:bb:26:64:20:06:7b:0b:
                    0e:57:d8:03:12:b9:8d:6c:e3:01:b7:ab:75:50:84:
                    f0:67:ab:c5:42:0d:8d:b2:61:5a:2a:03:35:41:cc:
                    ba:ec:4f:1b:e6:7f:72:ff:13:ec:5d:79:03:53:8f:
                    73:dc:62:95:83:30:41:3a:b2:60:d7:7d:f1:09:f1:
                    85:ef:36:d1:35:57:4e:94:25:a8:62:35:f4:3e:a3:
                    09:5b:5f:86:2b:2a:b6:8d:9c:2f:76:02:f5:30:a4:
                    ef:1a:8c:db:a7:db:2b:8b:b1:69:01:07:20:1e:53:
                    17:c5:c9:7f:e3:7f:07:f8:41:cb:03:ce:06:37:f0:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:06:AB:BC:12:A4:9A:EF:DA:8E:72:AF:BB:75:FA:1F:23:CF:6B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef411482-5f78-3aad-b80c-bb1a5129e575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:10:51:08:d4:28:37:85:cf:80:f8:55:75:bb:25:94:29:a5:
         bc:32:a6:53:fe:2b:38:79:42:d5:be:01:da:55:5a:b2:5b:3f:
         5b:e8:0d:80:0f:9c:46:62:8e:49:72:f3:62:a3:0c:29:5e:fb:
         3c:28:e9:36:6e:c6:3e:77:dd:fb:6d:e8:2b:82:a7:4b:bb:b3:
         8e:90:80:25:90:20:d9:25:df:0a:64:2e:4f:0b:88:6d:e8:ab:
         64:3b:f3:10:32:9a:51:ee:c8:fa:71:44:6e:da:a1:fe:31:ab:
         35:4d:7c:31:c6:be:4c:59:02:9a:b1:7e:2c:34:6c:bd:78:7e:
         ac:55:13:82:46:eb:a2:95:c2:17:0e:c7:60:06:c5:6c:4c:b5:
         65:32:3a:48:34:ad:c1:37:31:f5:48:13:fa:03:89:f1:96:21:
         0f:6a:f3:db:5d:2a:fd:f5:e6:d7:06:c5:af:cd:43:ca:ee:a6:
         c0:5c:68:db:2c:9f:3b:fb:ef:c6:9c:ca:6d:8b:30:7c:32:1e:
         23:91:bc:87:7d:41:92:6e:b0:0b:a7:6f:99:10:16:45:32:04:
         c9:f5:5b:65:1b:8c:f8:b5:6d:35:94:78:5a:00:9d:69:55:ec:
         a8:ba:11:67:ab:67:df:d2:7c:3b:29:49:6c:d8:ad:bf:33:f7:
         f5:5b:9d:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEf984ood5NaD2ywjOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTEyNTAyMzAxMFoXDTI1MDIyMzAyMzAxMFowLzEtMCsGA1UEAxMk
ZjY2NGQ3MmItM2E1Ni00MThiLTg2M2ItODc3YjMzZWJhZTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRGWpIHjiiYEniZBx66w8JGh5+knhgkIQxyC
PIWoMNN2DjjSyI9VeM3BzsrCGovGHTORmzWz7ALU3N/4/aROv7NJBHGvz4C4VLnx
sdXYavCEpjbzXksQdatncAACaUfcQQ1ivPGY6/TCfeGCqKQ1Pav04QLWkM80Djor
034KxbsmZCAGewsOV9gDErmNbOMBt6t1UITwZ6vFQg2NsmFaKgM1Qcy67E8b5n9y
/xPsXXkDU49z3GKVgzBBOrJg133xCfGF7zbRNVdOlCWoYjX0PqMJW1+GKyq2jZwv
dgL1MKTvGozbp9sri7FpAQcgHlMXxcl/438H+EHLA84GN/CDAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFwGq7wSpJrv2o5yr7t1+h8jz2txMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWY0MTE0ODItNWY3OC0z
YWFkLWI4MGMtYmIxYTUxMjllNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJgQUQjUKDeFz4D4VXW7JZQppbwyplP+Kzh5QtW+AdpVWrJbP1vo
DYAPnEZijkly82KjDCle+zwo6TZuxj533ftt6CuCp0u7s46QgCWQINkl3wpkLk8L
iG3oq2Q78xAymlHuyPpxRG7aof4xqzVNfDHGvkxZApqxfiw0bL14fqxVE4JG66KV
whcOx2AGxWxMtWUyOkg0rcE3MfVIE/oDifGWIQ9q89tdKv315tcGxa/NQ8rupsBc
aNssnzv778acym2LMHwyHiORvId9QZJusAunb5kQFkUyBMn1W2UbjPi1bTWUeFoA
nWlV7Ki6EWerZ9/SfDspSWzYrb8z9/Vbnb8=
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:28:07 2024 by rpki-client on console-ams.rpki-client.org