Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/697591ba-694c-384e-9626-bd632e51ecea.roa
File:                     697591ba-694c-384e-9626-bd632e51ecea.roa (raw, json)
Hash identifier:          M0NHbrbbVm80VlSt0KuzTBMQI22e4I08U7ESswoBCqY=
Subject key identifier:   A2:F2:EA:90:11:99:35:CC:09:61:5D:34:2F:5A:FA:EA:2D:F7:C0:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845CE0CD2515E4FADD25A35CA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/697591ba-694c-384e-9626-bd632e51ecea.roa
Signing time:             Wed 08 May 2024 13:08:26 +0000
ROA not before:           Wed 08 May 2024 13:08:26 +0000
ROA not after:            Tue 06 Aug 2024 13:08:26 +0000
asID:                     0
IP address blocks:        2001:500:12c::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:0c:d2:51:5e:4f:ad:d2:5a:35:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 13:08:26 2024 GMT
            Not After : Aug  6 13:08:26 2024 GMT
        Subject: CN=e08a1a2b-13fd-40c6-a982-bbe98577c25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:11:38:f4:65:77:8f:3e:af:4d:02:5a:3d:
                    38:d8:1f:46:23:99:f1:e2:20:84:fb:26:6f:50:0e:
                    0a:35:0a:77:90:08:91:b0:ea:e5:e7:fe:96:c5:12:
                    c1:fb:41:6a:dc:8e:4d:17:35:45:27:9a:ee:ad:50:
                    b3:15:86:49:8c:9f:23:ed:01:ea:ba:fe:fd:82:5f:
                    89:ce:6b:d2:80:cd:e0:e8:21:40:0a:16:6a:9a:c8:
                    5f:ad:bf:b9:70:7b:d3:6d:10:c3:23:43:9f:cc:c0:
                    8f:f1:fd:b8:09:2a:b4:06:fd:1e:c3:1f:ae:24:68:
                    d5:7e:38:49:58:e2:14:ba:14:ab:67:b7:44:81:a6:
                    19:d9:be:61:54:95:42:80:a5:55:03:72:bf:4e:11:
                    b9:d3:82:c4:25:29:c8:85:21:28:43:47:1c:20:1c:
                    31:04:a1:09:35:99:4f:d7:47:63:54:c0:42:02:09:
                    92:88:e4:2e:c0:12:29:f0:8f:92:61:80:48:2a:9d:
                    18:78:04:a3:59:c6:fe:ae:a5:c3:8c:74:89:d1:cc:
                    79:fb:9c:1e:bf:e3:8c:a8:bd:ff:03:c4:21:69:2c:
                    2e:71:22:e2:70:54:b5:24:03:17:10:c1:f7:d3:f1:
                    4a:0f:a2:d7:80:7c:58:c6:37:07:ee:c3:a6:48:1f:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:EA:90:11:99:35:CC:09:61:5D:34:2F:5A:FA:EA:2D:F7:C0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/697591ba-694c-384e-9626-bd632e51ecea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:12c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:eb:74:dd:ab:17:85:31:c2:71:56:5b:5a:21:4c:ce:b3:
         f5:34:ff:7a:d6:1a:b2:a8:e4:2f:62:ca:1b:73:66:81:08:6a:
         a8:91:05:2b:4f:16:0e:51:ea:ce:3a:d2:a2:39:54:aa:da:f6:
         7b:ee:67:fe:5d:d4:2a:ff:5f:b5:2b:91:73:26:bb:f5:3c:27:
         bb:fe:e6:7a:18:ca:19:6b:ca:8f:4f:82:b8:4c:5a:34:72:a0:
         2d:a0:df:15:26:46:cd:6b:f9:aa:82:e7:8e:9d:25:76:1b:b5:
         8c:86:9c:dc:10:05:92:dc:38:c2:e1:85:93:02:5c:5a:3b:3d:
         8c:bb:ac:7f:36:33:b1:0b:a4:62:5e:33:f9:53:f7:74:1a:c9:
         13:da:60:06:ee:1d:44:44:84:3c:d8:a4:4a:36:23:6e:74:ea:
         c2:a5:07:0b:60:4e:f2:01:39:45:7c:6b:f2:6c:d7:cb:58:86:
         33:be:4b:dd:8d:7b:c1:c9:72:1a:23:fe:91:87:4e:cd:4a:c7:
         91:a3:32:0e:39:0b:44:66:57:86:f2:9c:a9:26:d2:95:44:eb:
         35:4e:c1:65:6c:93:7a:b6:6e:9d:88:b4:6d:2b:4f:9b:2b:26:
         12:ce:96:47:b9:2e:f1:df:c1:45:4c:07:95:9d:ae:cc:ad:b8:
         cb:17:df:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXODNJRXk+t0lo1ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDUwODEzMDgyNloXDTI0MDgwNjEzMDgyNlowLzEtMCsGA1UEAxMk
ZTA4YTFhMmItMTNmZC00MGM2LWE5ODItYmJlOTg1NzdjMjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6oROPRld48+r00CWj042B9GI5nx4iCE+yZv
UA4KNQp3kAiRsOrl5/6WxRLB+0Fq3I5NFzVFJ5rurVCzFYZJjJ8j7QHquv79gl+J
zmvSgM3g6CFAChZqmshfrb+5cHvTbRDDI0OfzMCP8f24CSq0Bv0ewx+uJGjVfjhJ
WOIUuhSrZ7dEgaYZ2b5hVJVCgKVVA3K/ThG504LEJSnIhSEoQ0ccIBwxBKEJNZlP
10djVMBCAgmSiOQuwBIp8I+SYYBIKp0YeASjWcb+rqXDjHSJ0cx5+5wev+OMqL3/
A8QhaSwucSLicFS1JAMXEMH30/FKD6LXgHxYxjcH7sOmSB8MOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKLy6pARmTXMCWFdNC9a+uot98CeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjk3NTkxYmEtNjk0Yy0z
ODRlLTk2MjYtYmQ2MzJlNTFlY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFAAEs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJmw63TdqxeFMcJxVltaIUzOs/U0/3rWGrKo5C9iyhtzZoEIaqiR
BStPFg5R6s460qI5VKra9nvuZ/5d1Cr/X7UrkXMmu/U8J7v+5noYyhlryo9PgrhM
WjRyoC2g3xUmRs1r+aqC546dJXYbtYyGnNwQBZLcOMLhhZMCXFo7PYy7rH82M7EL
pGJeM/lT93QayRPaYAbuHUREhDzYpEo2I2506sKlBwtgTvIBOUV8a/Js18tYhjO+
S92Ne8HJchoj/pGHTs1Kx5GjMg45C0RmV4bynKkm0pVE6zVOwWVsk3q2bp2ItG0r
T5srJhLOlke5LvHfwUVMB5WdrsytuMsX3ww=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:34:50 2024 by rpki-client on console-fra.rpki-client.org