Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
File:                     0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json)
Hash identifier:          IozgTTyLrnKaWQpXXP9dnnyyE0oHNK14A4F2Rr4wE9c=
Subject key identifier:   8B:6A:24:91:47:54:79:9C:DE:51:8A:8B:99:17:1D:A0:DE:A3:C3:C6
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285846153953B7E15C6B3C24D944A0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
Signing time:             Mon 03 Jun 2024 01:00:25 +0000
ROA not before:           Mon 03 Jun 2024 01:00:25 +0000
ROA not after:            Sun 01 Sep 2024 01:00:25 +0000
asID:                     4213
IP address blocks:        2607:f820::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:15:39:53:b7:e1:5c:6b:3c:24:d9:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jun  3 01:00:25 2024 GMT
            Not After : Sep  1 01:00:25 2024 GMT
        Subject: CN=3787f45e-ec85-4628-9e39-4c0f5e28160e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:f2:91:1b:59:73:96:fd:a8:e9:7d:05:b6:
                    d2:c7:67:03:ea:6d:d9:ee:10:ae:28:28:d0:0d:b7:
                    5a:b3:48:1e:98:b1:72:3c:a2:74:87:e0:bc:07:f1:
                    c5:87:94:97:7c:aa:6f:7e:8f:76:1e:5d:70:df:74:
                    5a:79:91:13:ca:8b:e9:98:7d:8c:01:06:01:69:42:
                    a3:38:f1:10:a2:f3:4a:47:ea:e2:ae:13:30:fa:ad:
                    c1:25:71:ed:c1:db:e8:9b:72:e7:c3:50:72:4d:fb:
                    d6:a9:7f:bd:05:b5:c1:f0:c6:2b:02:a0:5c:35:0b:
                    be:da:e3:a1:ea:c3:ee:ac:52:56:88:62:11:72:3e:
                    b3:42:64:fa:06:89:2c:a5:d2:4a:07:15:01:4c:ba:
                    d0:8e:a6:17:e2:ef:bb:6b:ad:27:78:fb:01:41:c9:
                    f4:e3:80:78:ac:36:f8:3b:af:a6:30:a0:34:75:05:
                    8b:e2:89:b3:5d:be:dd:51:53:6b:fd:37:1a:01:e9:
                    de:36:8c:c4:9e:85:34:5d:4f:2a:86:8a:b1:99:ea:
                    df:3a:41:4a:84:80:7f:cb:8d:98:54:42:85:48:80:
                    90:02:e7:6a:2b:67:fb:31:6c:a3:98:ce:c7:39:2a:
                    22:d7:6c:de:06:8e:2f:f6:38:a2:9c:20:a6:f5:2b:
                    3b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6A:24:91:47:54:79:9C:DE:51:8A:8B:99:17:1D:A0:DE:A3:C3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:00:d5:a7:b0:8e:e0:3e:6f:c2:69:86:20:e0:6e:90:68:f2:
         03:5d:95:cb:05:0a:8a:8a:c1:6b:66:57:e0:df:ac:2e:5f:c4:
         dd:a6:25:62:04:58:66:47:f3:0b:4e:98:4a:5d:70:ab:a8:ae:
         cd:80:68:6f:28:f2:ec:fc:e4:db:6c:07:dd:8e:83:d6:90:2c:
         ae:8e:86:5a:47:ee:43:37:12:4f:0c:d1:43:81:e0:ae:e6:40:
         99:ea:65:e4:b4:0b:09:e9:06:ad:3c:fe:46:1a:6e:31:ec:72:
         6c:5b:6c:ee:02:2a:ba:a7:fd:db:52:bc:e1:fa:74:fd:14:09:
         82:fa:d7:5f:b0:f2:ef:5f:46:f5:15:45:e3:8c:4f:1b:3e:8e:
         40:8a:06:3c:f3:52:74:db:58:b7:58:ac:a9:d9:0d:7d:28:9a:
         b6:86:94:b9:94:c3:85:bc:79:ad:55:d6:17:a3:e2:21:01:74:
         8d:8a:88:ac:21:ed:1d:ec:de:23:91:00:3d:2f:d7:5c:e9:a1:
         7a:aa:fa:3a:71:d1:9c:17:f2:c7:14:d1:2b:33:22:ab:65:62:
         cf:3b:92:d9:7b:a8:44:08:82:28:d8:79:56:e0:aa:de:67:71:
         21:8c:34:c3:1c:63:02:0f:7b:f9:e8:ad:1a:3c:5a:51:6d:a5:
         09:8b:40:51
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEYVOVO34VxrPCTZRKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI0MDYwMzAxMDAyNVoXDTI0MDkwMTAxMDAyNVowLzEtMCsGA1UEAxMk
Mzc4N2Y0NWUtZWM4NS00NjI4LTllMzktNGMwZjVlMjgxNjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNjykRtZc5b9qOl9BbbSx2cD6m3Z7hCuKCjQ
Dbdas0gemLFyPKJ0h+C8B/HFh5SXfKpvfo92Hl1w33RaeZETyovpmH2MAQYBaUKj
OPEQovNKR+rirhMw+q3BJXHtwdvom3Lnw1ByTfvWqX+9BbXB8MYrAqBcNQu+2uOh
6sPurFJWiGIRcj6zQmT6BokspdJKBxUBTLrQjqYX4u+7a60nePsBQcn044B4rDb4
O6+mMKA0dQWL4omzXb7dUVNr/TcaAeneNozEnoU0XU8qhoqxmerfOkFKhIB/y42Y
VEKFSICQAudqK2f7MWyjmM7HOSoi12zeBo4v9jiinCCm9Ss7LwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFItqJJFHVHmc3lGKi5kXHaDeo8PGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGY0NDIxZTktZjI0Yi0z
ZmI0LTgwYTMtMjc4MTE5NzI1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4IDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBuANWnsI7gPm/CaYYg4G6QaPIDXZXLBQqKisFrZlfg36wuX8TdpiVi
BFhmR/MLTphKXXCrqK7NgGhvKPLs/OTbbAfdjoPWkCyujoZaR+5DNxJPDNFDgeCu
5kCZ6mXktAsJ6QatPP5GGm4x7HJsW2zuAiq6p/3bUrzh+nT9FAmC+tdfsPLvX0b1
FUXjjE8bPo5AigY881J021i3WKyp2Q19KJq2hpS5lMOFvHmtVdYXo+IhAXSNiois
Ie0d7N4jkQA9L9dc6aF6qvo6cdGcF/LHFNErMyKrZWLPO5LZe6hECIIo2HlW4Kre
Z3EhjDTDHGMCD3v56K0aPFpRbaUJi0BR
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:48:06 2024 by rpki-client on console-fra.rpki-client.org