Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa
File:                     f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa (raw, json)
Hash identifier:          jpVORr/8aPA3UVkGAyi5m7AP7m2MEBXN3DJQSiPiQEQ=
Subject key identifier:   29:AE:E2:24:0C:6F:25:EF:CA:FB:1A:32:23:50:E4:36:DB:10:F3:F0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B635257285E3611674480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     13188
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:63:52:57:28:5e:36:11:67:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=56503a3e-fc97-43f2-8d53-1a16c9a10051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ea:53:86:be:a5:d4:64:1b:4a:3b:0d:74:db:
                    c0:9f:7c:4d:c7:55:d5:80:f3:6d:76:37:69:68:15:
                    24:77:43:d2:c0:cc:c1:7b:a1:a7:ec:0b:e1:6c:8a:
                    3f:ab:cd:38:24:c0:21:7d:f9:74:cc:82:d1:bb:a5:
                    e7:2d:f0:a0:f0:e4:6f:31:e0:23:08:17:66:6a:cf:
                    4e:c3:01:72:b6:bb:23:10:61:38:89:1e:eb:b5:99:
                    bb:c2:09:68:df:60:1b:aa:09:38:34:55:84:d7:95:
                    51:dc:ee:5b:ac:62:58:e6:af:48:12:01:f4:ba:39:
                    6c:64:18:c7:f9:13:71:b6:28:7e:e2:ac:ec:5c:0f:
                    02:09:09:e8:80:ef:a4:60:3f:8d:8d:fb:57:ff:ff:
                    d7:d5:6a:ab:f2:4a:f3:7f:04:89:26:c3:ca:f8:c9:
                    fa:6d:33:11:a1:8c:3f:a1:5b:35:c1:45:43:55:86:
                    40:1b:b4:49:a2:ae:28:7b:54:4f:14:c3:6d:24:9d:
                    d3:07:3b:1c:0d:b9:ba:01:d3:32:8f:dc:a8:19:95:
                    92:a9:a4:98:cc:41:7b:01:e8:99:f5:ae:8e:69:1a:
                    4b:01:2d:05:d5:fc:d8:48:ee:c1:42:c4:a1:9f:06:
                    5f:f9:1c:44:3a:8d:9f:36:1c:a5:11:18:03:40:f1:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:E2:24:0C:6F:25:EF:CA:FB:1A:32:23:50:E4:36:DB:10:F3:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f83f3b8c-5b3d-31ad-98a0-5a2366ba9cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:29:5c:82:ce:8c:34:99:6b:fb:ea:6f:6d:ca:75:d2:ad:7b:
         ed:1a:0c:92:14:b4:e7:35:ef:35:77:84:5a:77:9c:d6:2c:17:
         00:23:a1:96:92:8c:a6:1f:fa:f5:8a:54:3c:1e:f0:ef:a7:c6:
         89:e3:fe:a9:d6:d0:8c:65:35:b7:dc:86:73:c5:86:68:38:07:
         e9:b3:f3:9d:16:4e:58:9e:52:79:c8:5f:77:5c:20:6c:d3:e2:
         fc:72:24:6d:b0:72:b5:58:0f:89:e1:03:3c:68:5d:74:a3:39:
         9f:04:64:d9:c2:4f:90:55:f7:3d:f9:fb:7e:5f:09:9d:8d:cb:
         02:6a:f7:80:87:73:12:70:64:f4:a2:cb:e9:d3:e7:a8:37:d0:
         ec:1f:37:ec:31:56:b3:4f:87:2b:bb:2f:69:02:b9:f2:a3:a4:
         51:db:a7:d0:e2:d3:14:a3:09:5b:a0:57:77:a2:55:a7:79:83:
         fe:97:ee:b6:c3:a1:a0:88:ab:a1:96:ef:98:b4:04:13:33:65:
         2c:bb:f8:e5:c4:2b:ba:7c:25:2d:fb:55:de:6c:f9:3a:e0:e2:
         84:3f:82:25:ba:2e:8b:a7:c1:92:88:7d:fb:04:10:52:f3:4a:
         f8:79:21:2c:d7:d2:df:a0:2a:43:9f:bf:b6:ac:96:6c:e9:d2:
         7e:fb:9b:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W2NSVyheNhFnRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NTY1MDNhM2UtZmM5Ny00M2YyLThkNTMtMWExNmM5YTEwMDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOpThr6l1GQbSjsNdNvAn3xNx1XVgPNtdjdp
aBUkd0PSwMzBe6Gn7AvhbIo/q804JMAhffl0zILRu6XnLfCg8ORvMeAjCBdmas9O
wwFytrsjEGE4iR7rtZm7wglo32Abqgk4NFWE15VR3O5brGJY5q9IEgH0ujlsZBjH
+RNxtih+4qzsXA8CCQnogO+kYD+NjftX///X1Wqr8krzfwSJJsPK+Mn6bTMRoYw/
oVs1wUVDVYZAG7RJoq4oe1RPFMNtJJ3TBzscDbm6AdMyj9yoGZWSqaSYzEF7AeiZ
9a6OaRpLAS0F1fzYSO7BQsShnwZf+RxEOo2fNhylERgDQPE/CwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCmu4iQMbyXvyvsaMiNQ5DbbEPPwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjgzZjNiOGMtNWIzZC0z
MWFkLTk4YTAtNWEyMzY2YmE5Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHUpXILOjDSZa/vqb23KddKte+0aDJIUtOc17zV3hFp3nNYsFwAj
oZaSjKYf+vWKVDwe8O+nxonj/qnW0IxlNbfchnPFhmg4B+mz850WTlieUnnIX3dc
IGzT4vxyJG2wcrVYD4nhAzxoXXSjOZ8EZNnCT5BV9z35+35fCZ2NywJq94CHcxJw
ZPSiy+nT56g30OwfN+wxVrNPhyu7L2kCufKjpFHbp9Di0xSjCVugV3eiVad5g/6X
7rbDoaCIq6GW75i0BBMzZSy7+OXEK7p8JS37Vd5s+Trg4oQ/giW6LounwZKIffsE
EFLzSvh5ISzX0t+gKkOfv7aslmzp0n77m9g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:40 2024 by rpki-client on console-fra.rpki-client.org