Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/c9414f65-1605-398e-8ffe-0121d7712234.roa
File:                     c9414f65-1605-398e-8ffe-0121d7712234.roa (raw, json)
Hash identifier:          qX4XuEum1u0Z1HNvQqZZ7qzVc7hcFRMvjpz6YHdjiHE=
Subject key identifier:   FF:1A:95:99:8F:72:80:4B:7F:37:18:4F:6E:90:2D:69:8E:9C:6B:CE
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858456DA3A690A8F4C0796C208340
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/c9414f65-1605-398e-8ffe-0121d7712234.roa
Signing time:             Thu 04 Apr 2024 00:18:55 +0000
ROA not before:           Thu 04 Apr 2024 00:18:55 +0000
ROA not after:            Wed 03 Jul 2024 00:18:55 +0000
asID:                     63023
IP address blocks:        2607:a140:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6d:a3:a6:90:a8:f4:c0:79:6c:20:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Apr  4 00:18:55 2024 GMT
            Not After : Jul  3 00:18:55 2024 GMT
        Subject: CN=0f1a6f2d-693b-4eb8-881b-94255c04b5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:fd:dd:2d:9d:8a:a0:e0:81:73:ee:2e:6f:
                    44:53:f6:f7:7c:74:de:dd:a6:97:ee:b2:c8:44:d9:
                    b8:ab:53:ea:8e:f6:22:6e:71:28:00:9c:7a:5a:cf:
                    06:55:05:12:99:c7:e9:23:b9:4e:a9:d6:69:33:d2:
                    1b:27:01:d3:4d:74:f8:8a:87:4b:b2:7f:a3:34:44:
                    6e:a3:22:40:1a:f5:8b:c1:2a:64:c2:d1:90:f3:43:
                    48:c5:2f:67:c5:57:71:d7:14:0a:05:32:5d:93:61:
                    ef:c5:08:14:12:66:65:e3:70:cb:9d:59:05:fa:2e:
                    9b:cf:5e:dd:df:99:a0:85:28:fa:61:3f:1a:24:2b:
                    2c:e3:00:97:db:c8:2a:6c:59:11:31:82:72:81:07:
                    12:fe:bd:16:df:df:c3:17:a1:16:b7:41:7b:62:a6:
                    fb:39:93:bc:65:f2:6d:88:6a:91:28:80:86:da:ec:
                    6d:0b:23:00:ec:4b:1e:51:fe:69:6d:f0:b9:54:aa:
                    25:e8:05:87:8d:61:ad:81:41:8d:d1:52:5e:bf:09:
                    3e:3a:f8:fc:87:b8:8a:ba:f5:42:68:24:22:c9:75:
                    30:48:bc:8f:60:41:ca:14:d9:f4:45:66:f5:9c:8a:
                    e3:46:73:1c:a2:96:84:6b:57:2d:84:c3:37:99:17:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:95:99:8F:72:80:4B:7F:37:18:4F:6E:90:2D:69:8E:9C:6B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/c9414f65-1605-398e-8ffe-0121d7712234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:72:85:68:e4:48:92:23:2a:d1:47:95:aa:d0:07:ef:69:
         69:c1:2d:db:25:a4:ae:5a:2a:32:e3:f7:84:5e:23:56:f3:97:
         1c:c8:85:3e:32:94:7a:5b:ac:a4:ac:4c:7c:27:7c:4a:08:2c:
         ef:78:2a:5e:23:af:9e:97:47:90:f9:c5:5f:85:78:cd:51:ee:
         70:0b:70:55:e0:34:53:93:9b:4a:b9:c8:78:34:b0:aa:fc:32:
         03:07:ca:78:ed:68:cf:1d:20:55:12:3a:50:c7:75:4f:82:a7:
         77:1d:09:7f:84:cd:30:97:fc:b1:70:e8:85:33:5c:2d:9b:33:
         b5:5b:af:3a:a5:22:62:63:98:22:9b:d6:b1:c5:36:5c:f6:f4:
         c6:81:27:4e:94:6a:32:53:05:d7:0f:3b:2f:0f:54:ba:a0:0d:
         ca:80:ff:87:95:19:b1:79:21:26:49:1a:70:8d:19:24:41:0b:
         fa:c4:3c:71:a9:74:0c:17:5a:fd:d5:19:73:43:df:a7:bd:4d:
         92:a4:20:aa:e3:1d:f2:51:40:c5:86:bb:da:f6:81:ca:4d:92:
         bd:6f:61:74:01:4e:c0:53:1e:a4:ad:42:d2:0c:cd:7d:9a:f1:
         3a:e2:ce:85:d2:9b:2c:15:45:a1:1d:41:1b:79:0e:59:45:b5:
         cb:b0:38:e9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVto6aQqPTAeWwgg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxOTZmODEtYzI2ZS00NjkwLThiYjgtYmFiNGQ2NTQx
NjMyMB4XDTI0MDQwNDAwMTg1NVoXDTI0MDcwMzAwMTg1NVowLzEtMCsGA1UEAxMk
MGYxYTZmMmQtNjkzYi00ZWI4LTg4MWItOTQyNTVjMDRiNWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNb93S2diqDggXPuLm9EU/b3fHTe3aaX7rLI
RNm4q1PqjvYibnEoAJx6Ws8GVQUSmcfpI7lOqdZpM9IbJwHTTXT4iodLsn+jNERu
oyJAGvWLwSpkwtGQ80NIxS9nxVdx1xQKBTJdk2HvxQgUEmZl43DLnVkF+i6bz17d
35mghSj6YT8aJCss4wCX28gqbFkRMYJygQcS/r0W39/DF6EWt0F7Yqb7OZO8ZfJt
iGqRKICG2uxtCyMA7EseUf5pbfC5VKol6AWHjWGtgUGN0VJevwk+Ovj8h7iKuvVC
aCQiyXUwSLyPYEHKFNn0RWb1nIrjRnMcopaEa1cthMM3mReaXQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP8alZmPcoBLfzcYT26QLWmOnGvOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOTE5
NmY4MS1jMjZlLTQ2OTAtOGJiOC1iYWI0ZDY1NDE2MzIvYzk0MTRmNjUtMTYwNS0z
OThlLThmZmUtMDEyMWQ3NzEyMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjkxOTZmODEtYzI2ZS00NjkwLThi
YjgtYmFiNGQ2NTQxNjMyLzI5MTk2ZjgxLWMyNmUtNDY5MC04YmI4LWJhYjRkNjU0
MTYzMi5jcmwwHwYDVR0jBBgwFoAU+813SzdHY5Dw69CRgJFkZaTuvgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOTE5NmY4MS1jMjZlLTQ2OTAtOGJiOC1iYWI0
ZDY1NDE2MzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgehQAww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAe6JyhWjkSJIjKtFHlarQB+9pacEt2yWkrloqMuP3hF4jVvOXHMiF
PjKUeluspKxMfCd8Sggs73gqXiOvnpdHkPnFX4V4zVHucAtwVeA0U5ObSrnIeDSw
qvwyAwfKeO1ozx0gVRI6UMd1T4Kndx0Jf4TNMJf8sXDohTNcLZsztVuvOqUiYmOY
IpvWscU2XPb0xoEnTpRqMlMF1w87Lw9UuqANyoD/h5UZsXkhJkkacI0ZJEEL+sQ8
cal0DBda/dUZc0Pfp71NkqQgquMd8lFAxYa72vaByk2SvW9hdAFOwFMepK1C0gzN
fZrxOuLOhdKbLBVFoR1BG3kOWUW1y7A46Q==
-----END CERTIFICATE-----
Generated at Mon May 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org