Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa67fba3-6cc5-3680-b207-88852245826b.roa
File:                     fa67fba3-6cc5-3680-b207-88852245826b.roa (raw, json)
Hash identifier:          BclIhlM1t72zLRG44XQMRekLSWeLlwnlziJjuN2t+cI=
Subject key identifier:   3D:1F:70:39:AE:B3:BF:4F:2F:6A:B4:32:6B:29:35:6F:F4:09:3F:93
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B384B60447E08CAAA3340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa67fba3-6cc5-3680-b207-88852245826b.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     15250
IP address blocks:        2001:470:ae::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:38:4b:60:44:7e:08:ca:aa:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4dce0212-a1f6-4c2b-88ab-7b4b10e2a9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6b:e5:f2:84:e1:af:31:4a:9e:35:2e:02:6f:
                    0a:e7:f5:6b:22:ca:15:ec:22:59:bd:3a:91:43:f2:
                    ff:f4:6e:c7:73:01:9f:b1:aa:a6:d7:46:e9:08:72:
                    73:e2:d5:57:61:12:10:8c:cf:ef:6a:05:48:02:34:
                    b0:14:5b:08:81:69:2c:00:98:7f:5e:e1:f4:cb:28:
                    79:5d:b7:80:dc:1a:e3:8e:dd:a5:7b:3c:e9:1f:60:
                    5e:b5:19:f6:e1:64:c0:06:5a:2d:3d:db:85:b5:71:
                    31:5f:87:25:ca:62:67:7d:38:90:83:d5:2f:29:eb:
                    42:37:49:a4:63:b6:2b:92:73:d5:93:ce:bc:1e:7d:
                    38:1b:81:18:08:7e:83:76:80:31:fb:6a:1d:bd:21:
                    95:e0:ba:76:cc:03:c4:8d:74:4f:24:b5:f3:78:f8:
                    a4:68:f3:05:23:c1:7d:3e:33:4d:06:0f:30:aa:d7:
                    a2:ba:3f:08:5b:51:9a:66:e6:3f:f8:52:05:ca:be:
                    b0:c3:5a:71:b9:0a:f6:59:65:2d:ab:50:a7:05:3a:
                    f5:4d:b9:eb:00:64:b7:11:a9:88:33:37:fd:ea:ae:
                    a7:94:a2:c8:cd:89:30:21:c5:a1:5b:36:ce:58:d5:
                    e0:f4:f5:b4:ec:bf:5f:44:03:0d:b8:d0:92:e5:c4:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:70:39:AE:B3:BF:4F:2F:6A:B4:32:6B:29:35:6F:F4:09:3F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fa67fba3-6cc5-3680-b207-88852245826b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:70:97:df:44:86:4c:70:0a:0a:30:48:9a:fd:92:ad:7f:cb:
         43:ff:61:77:21:bb:85:72:10:e5:b4:46:db:3e:4d:48:ba:01:
         62:d0:57:17:a3:f6:13:57:6c:ec:1c:ba:7f:79:c1:21:84:b6:
         84:d9:87:a1:2a:65:12:1a:56:d3:09:09:57:22:12:f5:ea:1c:
         bd:32:79:48:a2:f5:df:cf:a2:b2:8a:07:58:13:e3:de:dd:c9:
         c7:62:05:b1:65:d3:60:47:ee:44:81:14:76:5f:21:41:a0:70:
         27:de:85:fd:b6:82:a1:53:f0:e9:a8:f9:b3:da:4c:86:c8:35:
         7b:bb:04:87:58:d3:1b:a6:de:3f:b7:a1:c5:cf:67:df:2c:2f:
         a3:cd:82:04:d5:ef:e7:16:31:ce:4a:0f:ee:14:16:a8:4c:db:
         d6:6b:f7:d8:2c:5d:62:f9:bd:ab:d4:fc:62:8b:47:7f:f0:51:
         9f:49:2c:7f:f0:83:62:fb:1e:56:cd:1b:51:b5:64:b2:46:31:
         94:96:86:04:c9:96:5c:9b:e3:76:00:2e:1b:ed:02:da:fc:06:
         83:43:ea:fe:83:b3:65:27:db:63:c4:13:50:db:bb:88:5e:da:
         dc:3b:13:f4:df:80:35:02:39:fa:3d:c6:61:aa:bb:17:5e:70:
         d2:11:29:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6WzhLYER+CMqqM0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NGRjZTAyMTItYTFmNi00YzJiLTg4YWItN2I0YjEwZTJhOWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWvl8oThrzFKnjUuAm8K5/VrIsoV7CJZvTqR
Q/L/9G7HcwGfsaqm10bpCHJz4tVXYRIQjM/vagVIAjSwFFsIgWksAJh/XuH0yyh5
XbeA3Brjjt2lezzpH2BetRn24WTABlotPduFtXExX4clymJnfTiQg9UvKetCN0mk
Y7YrknPVk868Hn04G4EYCH6DdoAx+2odvSGV4Lp2zAPEjXRPJLXzePikaPMFI8F9
PjNNBg8wqteiuj8IW1GaZuY/+FIFyr6ww1pxuQr2WWUtq1CnBTr1TbnrAGS3EamI
Mzf96q6nlKLIzYkwIcWhWzbOWNXg9PW07L9fRAMNuNCS5cQNgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD0fcDmus79PL2q0MmspNW/0CT+TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmE2N2ZiYTMtNmNjNS0z
NjgwLWIyMDctODg4NTIyNDU4MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALhwl99EhkxwCgowSJr9kq1/y0P/YXchu4VyEOW0Rts+TUi6AWLQ
Vxej9hNXbOwcun95wSGEtoTZh6EqZRIaVtMJCVciEvXqHL0yeUii9d/PorKKB1gT
497dycdiBbFl02BH7kSBFHZfIUGgcCfehf22gqFT8Omo+bPaTIbINXu7BIdY0xum
3j+3ocXPZ98sL6PNggTV7+cWMc5KD+4UFqhM29Zr99gsXWL5vavU/GKLR3/wUZ9J
LH/wg2L7HlbNG1G1ZLJGMZSWhgTJllyb43YALhvtAtr8BoND6v6Ds2Un22PEE1Db
u4he2tw7E/TfgDUCOfo9xmGquxdecNIRKWg=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:44:59 2024 by rpki-client on console-fra.rpki-client.org