Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa
File:                     346126f1-afa9-35ba-8367-f2cf5b47395b.roa (raw, json)
Hash identifier:          EqEMjXBFoIRQRQsGim7adJO1sCuy1n87ZBzzfS3GyAM=
Subject key identifier:   B1:10:DD:13:3E:E1:82:8C:67:C8:92:59:13:21:F1:16:41:5B:AB:8A
Certificate issuer:       /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Certificate serial:       010D0C9F4328584561285F01AF2F221AAE0B5400
Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     33387
IP address blocks:        2604:4300::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5f:01:af:2f:22:1a:ae:0b:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=4a816f72-ba75-4dd9-8e96-bc4df9439de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d0:af:b6:11:dd:22:9d:8b:e0:d4:5c:dc:95:
                    6a:e2:bf:0c:86:c5:7e:87:33:21:ac:a3:7a:e8:cf:
                    b5:80:10:7e:5a:12:06:1a:85:ce:69:79:05:78:7b:
                    22:79:a9:e5:ad:9a:22:d5:ee:d2:8c:14:40:d2:8c:
                    49:a8:b1:0a:e3:e1:ff:dd:ac:81:64:21:b9:45:c8:
                    fd:75:b5:56:4d:ce:7d:73:d1:c3:43:c2:b1:92:ec:
                    6b:15:50:a6:ea:cb:71:c1:32:d0:50:d2:8c:5a:74:
                    7b:aa:7f:e3:db:31:0b:65:8b:96:f5:61:00:3b:fb:
                    3d:cb:58:5e:59:72:54:ea:09:70:63:93:18:d9:8f:
                    96:62:d7:9d:6f:c3:98:a7:c4:fa:78:44:3f:98:1e:
                    b8:07:32:70:07:f7:ac:4d:35:54:a9:90:27:2f:2d:
                    c3:2b:39:1a:58:52:a7:17:0a:c2:ef:fb:01:b5:06:
                    55:0a:07:13:42:62:9c:03:17:81:58:70:1b:54:af:
                    22:e7:c4:fe:fe:19:83:a1:c3:84:e5:03:db:5a:f9:
                    6f:f1:43:16:e0:7a:f6:aa:b1:c9:c6:6d:cb:59:84:
                    99:55:84:2d:11:24:48:a7:9d:51:d9:7e:a7:b8:b6:
                    57:61:0c:1d:7d:2c:ba:0c:e2:a0:80:72:a8:b7:d3:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:10:DD:13:3E:E1:82:8C:67:C8:92:59:13:21:F1:16:41:5B:AB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl

            X509v3 Authority Key Identifier:
                keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c8:2e:13:6d:36:63:40:dd:f9:c2:d0:3d:56:78:2a:81:97:
         ee:a1:c1:a2:62:19:5c:84:10:15:c6:f4:bb:c3:7f:7a:89:36:
         74:b3:7b:03:0a:f8:3d:1b:7a:93:a4:90:8d:ea:1c:4d:b5:3b:
         65:8a:de:47:0b:1f:43:40:1a:6e:2b:ab:c7:c8:0f:40:ba:64:
         a7:ec:3a:9e:b5:cb:1a:70:c9:fe:80:25:76:1e:3d:b8:da:04:
         72:0c:e4:ed:59:77:a9:c2:72:f6:11:96:38:6e:98:ab:2a:2c:
         ac:85:1b:8d:f0:1f:be:08:a8:01:58:8f:c1:c1:66:27:45:ef:
         93:04:cc:ea:5d:18:98:64:54:ae:7b:01:38:62:42:6a:6c:bb:
         06:e5:34:3c:65:05:ae:72:d7:da:a6:d7:c1:72:4a:69:cc:1d:
         a1:fc:e8:c1:db:de:f5:7d:b5:1b:fd:c7:c2:62:7a:8b:ff:9e:
         d4:b9:5d:59:a7:9c:56:dd:27:9f:84:58:8b:3d:ad:aa:3a:49:
         f6:c5:ec:1b:ad:d2:72:ca:a0:aa:db:5e:92:91:dc:2a:2a:cd:
         c5:61:c5:a2:e8:5f:98:dd:78:71:74:c1:e2:d7:4c:3b:bd:2a:
         a5:b8:b2:19:cc:13:37:ae:12:5d:61:53:e3:17:ef:d7:c8:29:
         5a:89:c9:81
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVhKF8Bry8iGq4LVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhj
YzU1MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
NGE4MTZmNzItYmE3NS00ZGQ5LThlOTYtYmM0ZGY5NDM5ZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NCvthHdIp2L4NRc3JVq4r8MhsV+hzMhrKN6
6M+1gBB+WhIGGoXOaXkFeHsieanlrZoi1e7SjBRA0oxJqLEK4+H/3ayBZCG5Rcj9
dbVWTc59c9HDQ8KxkuxrFVCm6stxwTLQUNKMWnR7qn/j2zELZYuW9WEAO/s9y1he
WXJU6glwY5MY2Y+WYtedb8OYp8T6eEQ/mB64BzJwB/esTTVUqZAnLy3DKzkaWFKn
FwrC7/sBtQZVCgcTQmKcAxeBWHAbVK8i58T+/hmDocOE5QPbWvlv8UMW4Hr2qrHJ
xm3LWYSZVYQtESRIp51R2X6nuLZXYQwdfSy6DOKggHKot9NOQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLEQ3RM+4YKMZ8iSWRMh8RZBW6uKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0
YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvMzQ2MTI2ZjEtYWZhOS0z
NWJhLTgzNjctZjJjZjViNDczOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjBjNGFmNzktY2RjZi00NjQwLWFi
NGUtZjBmMzM2NDhjYzU1LzIwYzRhZjc5LWNkY2YtNDY0MC1hYjRlLWYwZjMzNjQ4
Y2M1NS5jcmwwHwYDVR0jBBgwFoAUVJshF3K5Lew9XWKBCmzP96diQ00wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYz
MzY0OGNjNTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRDADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBVyC4TbTZjQN35wtA9VngqgZfuocGiYhlchBAVxvS7w396iTZ0s3sD
Cvg9G3qTpJCN6hxNtTtlit5HCx9DQBpuK6vHyA9AumSn7DqetcsacMn+gCV2Hj24
2gRyDOTtWXepwnL2EZY4bpirKiyshRuN8B++CKgBWI/BwWYnRe+TBMzqXRiYZFSu
ewE4YkJqbLsG5TQ8ZQWuctfaptfBckppzB2h/OjB2971fbUb/cfCYnqL/57UuV1Z
p5xW3SefhFiLPa2qOkn2xewbrdJyyqCq216SkdwqKs3FYcWi6F+Y3XhxdMHi10w7
vSqluLIZzBM3rhJdYVPjF+/XyClaicmB
-----END CERTIFICATE-----
Generated at Fri Apr 26 06:10:03 2024 by rpki-client on console-ams.rpki-client.org