Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88588dd6-936f-3783-ae42-fd4faa839ed2.roa
File:                     88588dd6-936f-3783-ae42-fd4faa839ed2.roa (raw, json)
Hash identifier:          GPY68HUBnU+P40A1fygRr6UBwJVC3MDt9JrNcz/hSdI=
Subject key identifier:   BB:58:03:F7:2F:21:34:FF:44:50:1D:7F:FA:21:D0:0A:77:BB:25:7E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285845533330E1CA22517FE3FD9B60
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88588dd6-936f-3783-ae42-fd4faa839ed2.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        2604:cb00:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:30:e1:ca:22:51:7f:e3:fd:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=0531b7d9-6fbf-4878-9b69-9cd601c4b5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:0f:de:b6:8e:56:55:d2:be:22:f4:d2:d6:
                    13:0e:0b:00:69:43:45:fe:36:ef:32:15:4c:1c:6d:
                    cc:b1:14:f1:14:2f:8f:b1:39:cd:b4:de:e2:e5:bc:
                    f6:3b:19:10:c0:37:3d:23:ad:85:a1:be:e6:4f:be:
                    e1:8d:96:fe:39:35:4c:8f:5f:7a:24:70:4e:2c:ec:
                    88:f3:2e:71:ea:51:af:0b:68:90:72:f6:1a:32:fc:
                    e7:31:b2:3a:66:5f:53:1f:18:78:09:83:57:15:c9:
                    ab:ed:ce:2f:cb:12:2a:ed:cc:ff:5c:55:71:96:52:
                    64:b2:a4:9d:11:40:6f:4e:4b:ab:fe:fb:9e:5b:30:
                    da:b4:fd:84:c8:f7:49:6b:50:d9:3a:00:99:5f:38:
                    87:64:d7:8b:80:c8:82:f7:54:7b:24:72:9c:31:01:
                    2e:05:42:3b:84:75:c9:21:67:b2:7d:62:2c:62:5e:
                    d9:66:43:65:47:77:c7:cd:bf:c4:13:40:ec:8a:a5:
                    a1:ab:5e:aa:20:d1:49:0a:c2:34:5b:2a:34:a3:02:
                    8d:01:a9:03:31:ad:72:2c:ff:0a:ec:bf:ef:4d:42:
                    f6:de:81:04:f6:8d:1c:4e:de:0a:9f:17:db:bb:04:
                    66:b7:71:99:0e:76:d4:5d:79:f4:9b:d8:bd:32:17:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:03:F7:2F:21:34:FF:44:50:1D:7F:FA:21:D0:0A:77:BB:25:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88588dd6-936f-3783-ae42-fd4faa839ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:67:c1:ca:d7:96:01:8e:69:5c:8d:f4:eb:c8:ae:d4:ac:c6:
         db:7b:42:79:b9:39:25:67:ec:6e:5d:64:72:46:66:a9:d6:58:
         d8:7a:0c:b0:9d:ab:ac:a0:c5:ed:11:dc:fb:db:b9:fb:a8:50:
         47:94:80:05:14:80:03:10:f9:4a:63:69:a9:9a:fd:b1:8a:d3:
         96:a2:42:7f:57:01:e2:13:92:e6:e7:75:34:f0:9b:e0:06:7f:
         97:cb:0d:d6:e4:fd:7b:78:28:32:a1:be:ac:fd:be:b6:ea:b9:
         6b:5e:c6:99:31:77:3c:2b:64:fc:d4:da:1d:c7:1c:41:3d:59:
         58:cd:ef:a9:ba:9e:80:b5:0f:14:d7:45:de:b4:10:bf:c3:2b:
         a9:f3:84:b1:15:69:82:00:18:fa:c9:31:6c:54:5e:f6:13:81:
         4e:bc:7e:bf:0d:9d:8d:9d:b3:bd:96:34:93:1f:8c:cf:82:e2:
         74:38:62:12:89:08:03:bf:dd:ab:b0:0c:54:17:96:db:a4:d3:
         e2:a8:86:af:bd:2d:40:8d:e4:1b:19:27:ad:df:c1:83:46:04:
         09:91:98:b3:bc:b9:63:75:2c:1f:0a:8d:18:ac:9a:9d:5f:ff:
         8d:4b:0c:7a:04:35:df:05:07:55:00:79:84:7e:e0:63:88:25:
         a4:88:f0:b0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVTMzDhyiJRf+P9m2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
MDUzMWI3ZDktNmZiZi00ODc4LTliNjktOWNkNjAxYzRiNWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvikP3raOVlXSviL00tYTDgsAaUNF/jbvMhVM
HG3MsRTxFC+PsTnNtN7i5bz2OxkQwDc9I62Fob7mT77hjZb+OTVMj196JHBOLOyI
8y5x6lGvC2iQcvYaMvznMbI6Zl9THxh4CYNXFcmr7c4vyxIq7cz/XFVxllJksqSd
EUBvTkur/vueWzDatP2EyPdJa1DZOgCZXziHZNeLgMiC91R7JHKcMQEuBUI7hHXJ
IWeyfWIsYl7ZZkNlR3fHzb/EE0DsiqWhq16qINFJCsI0Wyo0owKNAakDMa1yLP8K
7L/vTUL23oEE9o0cTt4KnxfbuwRmt3GZDnbUXXn0m9i9MhetQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLtYA/cvITT/RFAdf/oh0Ap3uyV+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODg1ODhkZDYtOTM2Zi0z
NzgzLWFlNDItZmQ0ZmFhODM5ZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAmfByteWAY5pXI3068iu1KzG23tCebk5JWfsbl1kckZmqdZY2HoM
sJ2rrKDF7RHc+9u5+6hQR5SABRSAAxD5SmNpqZr9sYrTlqJCf1cB4hOS5ud1NPCb
4AZ/l8sN1uT9e3goMqG+rP2+tuq5a17GmTF3PCtk/NTaHcccQT1ZWM3vqbqegLUP
FNdF3rQQv8MrqfOEsRVpggAY+skxbFRe9hOBTrx+vw2djZ2zvZY0kx+Mz4LidDhi
EokIA7/dq7AMVBeW26TT4qiGr70tQI3kGxknrd/Bg0YECZGYs7y5Y3UsHwqNGKya
nV//jUsMegQ13wUHVQB5hH7gY4glpIjwsA==
-----END CERTIFICATE-----
Generated at Sat May 18 01:40:36 2024 by rpki-client on console-fra.rpki-client.org