Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/924c850f-42b0-3173-a0fd-00571c68e0ad.roa
File:                     924c850f-42b0-3173-a0fd-00571c68e0ad.roa (raw, json)
Hash identifier:          ZoR8hwA8vGPqlN3ad2yJ0mMophSIkVH9do6bsS03JLE=
Subject key identifier:   16:2C:87:93:5E:D1:F8:96:3C:60:1F:BA:8A:EC:3C:B6:46:A1:10:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584762D6714D5544CCA8B4FF671E
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/924c850f-42b0-3173-a0fd-00571c68e0ad.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     36733
IP address blocks:        2603:2a40:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:71:4d:55:44:cc:a8:b4:ff:67:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=eb129192-9034-4712-83fa-6964da3ed731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:55:e2:93:18:29:db:62:59:65:a3:15:2c:
                    53:06:8e:1e:a2:44:81:8b:da:69:20:b8:4d:17:4f:
                    7b:2c:4c:4f:38:c0:e7:58:f2:67:c9:27:65:7e:a5:
                    a1:99:71:47:c1:d3:0b:6a:c5:49:65:d6:49:17:72:
                    b7:7e:5f:be:95:16:f7:7a:95:7e:67:01:99:9a:fc:
                    c6:d7:e8:6b:3d:ad:69:67:41:a9:8e:23:cc:8c:bd:
                    d9:07:4a:fd:08:c8:f2:00:a7:83:64:37:23:ab:c5:
                    41:1d:06:ee:97:20:60:ca:60:5b:c4:e9:32:bb:7b:
                    ae:30:57:08:e2:74:8d:60:db:7c:8d:48:d7:59:c8:
                    f6:d7:eb:97:06:21:e1:67:30:f3:df:b3:22:ce:28:
                    a6:28:5d:3f:23:4d:06:96:20:40:f0:8c:ba:3a:5e:
                    e3:bb:55:f5:64:a1:04:54:e1:b6:0b:d2:9d:df:49:
                    b7:25:30:0b:05:d5:83:d8:e0:ec:da:b0:89:bf:95:
                    08:f3:4e:f1:ef:df:29:18:4e:64:69:e1:ea:36:7c:
                    e6:74:11:b9:57:22:f9:3e:08:3b:6f:af:01:97:d2:
                    2e:30:84:8b:2a:db:4c:a4:2b:a9:d6:ee:8f:59:1d:
                    a4:df:ab:12:d3:89:20:0e:2d:06:38:98:43:af:ad:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:87:93:5E:D1:F8:96:3C:60:1F:BA:8A:EC:3C:B6:46:A1:10:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/924c850f-42b0-3173-a0fd-00571c68e0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2a40:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b1:3d:86:9a:30:fc:f0:b2:27:8c:6c:bd:3f:78:ad:fc:34:
         73:15:f9:2a:49:28:d9:f6:f5:65:df:1f:20:97:c2:0a:5c:b0:
         03:ee:ad:31:41:c0:78:82:69:ac:d6:6e:66:b4:81:74:3a:cc:
         e1:ba:2a:02:9e:90:68:d0:83:3f:8f:7d:52:98:29:06:af:f6:
         a0:6b:4a:de:1c:57:84:a1:f3:e5:c0:c1:42:48:97:b1:2c:d4:
         12:93:66:c0:e8:ba:20:d2:fb:b6:7d:41:21:ad:26:7a:a4:b5:
         48:2d:7a:bf:64:fd:bf:df:53:a3:88:bc:68:11:f8:b9:ad:23:
         44:58:1c:6a:0f:bf:ed:f0:99:16:15:85:ab:37:58:68:2e:1c:
         e4:1a:6e:f4:fa:47:34:71:ca:ed:c9:02:80:78:a4:3b:07:1e:
         83:d3:b9:cd:49:b5:4e:a0:59:2b:c9:1c:42:ab:dc:a6:c0:ae:
         99:b4:c0:e2:2a:5b:0b:8f:9e:9e:2c:bc:af:be:37:f4:65:3e:
         cc:b5:3f:92:f9:4f:81:4c:c7:16:7d:3b:7b:f1:31:49:df:d0:
         d0:78:93:41:70:15:6d:6a:c6:b8:88:dd:11:93:ba:33:43:93:
         01:57:2f:e0:01:27:66:1a:11:3c:0e:90:a0:9c:78:5d:8f:b0:
         7f:d9:11:0a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdi1nFNVUTMqLT/Zx4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
ZWIxMjkxOTItOTAzNC00NzEyLTgzZmEtNjk2NGRhM2VkNzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNRV4pMYKdtiWWWjFSxTBo4eokSBi9ppILhN
F097LExPOMDnWPJnySdlfqWhmXFHwdMLasVJZdZJF3K3fl++lRb3epV+ZwGZmvzG
1+hrPa1pZ0GpjiPMjL3ZB0r9CMjyAKeDZDcjq8VBHQbulyBgymBbxOkyu3uuMFcI
4nSNYNt8jUjXWcj21+uXBiHhZzDz37MiziimKF0/I00GliBA8Iy6Ol7ju1X1ZKEE
VOG2C9Kd30m3JTALBdWD2ODs2rCJv5UI807x798pGE5kaeHqNnzmdBG5VyL5Pgg7
b68Bl9IuMISLKttMpCup1u6PWR2k36sS04kgDi0GOJhDr63d7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBYsh5Ne0fiWPGAfuorsPLZGoRBmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTI0Yzg1MGYtNDJiMC0z
MTczLWEwZmQtMDA1NzFjNjhlMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMqQAYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJ7E9hpow/PCyJ4xsvT94rfw0cxX5Kkko2fb1Zd8fIJfCClywA+6t
MUHAeIJprNZuZrSBdDrM4boqAp6QaNCDP499UpgpBq/2oGtK3hxXhKHz5cDBQkiX
sSzUEpNmwOi6INL7tn1BIa0meqS1SC16v2T9v99To4i8aBH4ua0jRFgcag+/7fCZ
FhWFqzdYaC4c5Bpu9PpHNHHK7ckCgHikOwceg9O5zUm1TqBZK8kcQqvcpsCumbTA
4ipbC4+eniy8r7439GU+zLU/kvlPgUzHFn07e/ExSd/Q0HiTQXAVbWrGuIjdEZO6
M0OTAVcv4AEnZhoRPA6QoJx4XY+wf9kRCg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:46:09 2024 by rpki-client on console-ams.rpki-client.org