Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b94f0270-f712-3f17-b5aa-b5944cbce54a.roa
File:                     b94f0270-f712-3f17-b5aa-b5944cbce54a.roa (raw, json)
Hash identifier:          2Qq1g5oiefaR3tsJvsiO2lOcOq2dbMNBJCsmtgJ75Ek=
Subject key identifier:   3B:B2:30:3B:F6:E5:82:2A:2D:15:6F:33:B3:50:C5:81:0E:18:9F:4C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462EC190AB46EE428BC3C160
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b94f0270-f712-3f17-b5aa-b5944cbce54a.roa
Signing time:             Wed 20 Mar 2024 21:06:52 +0000
ROA not before:           Wed 20 Mar 2024 21:06:52 +0000
ROA not after:            Tue 18 Jun 2024 21:06:52 +0000
asID:                     396982
IP address blocks:        2600:1900:40f0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:c1:90:ab:46:ee:42:8b:c3:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:06:52 2024 GMT
            Not After : Jun 18 21:06:52 2024 GMT
        Subject: CN=c10481bd-ffb2-456c-bef9-9bd59853e691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:41:c1:72:53:c1:31:e8:b6:d0:f7:6c:5d:
                    d1:91:dd:77:65:74:59:f8:ee:69:fd:49:bc:de:b0:
                    09:c0:87:c6:d1:eb:b3:24:f8:69:3a:6c:53:5a:65:
                    3f:33:7a:0c:e9:66:63:3c:37:35:81:05:03:10:7e:
                    63:be:62:57:d9:c8:42:18:84:0b:95:d2:32:03:65:
                    6d:e5:94:53:01:52:1a:c1:2f:32:c2:fc:16:ee:a6:
                    1b:74:e6:79:43:48:63:2d:91:4e:33:2d:a3:aa:a5:
                    14:01:8f:d8:2d:ef:47:c1:cc:1f:ec:34:40:65:47:
                    33:29:3f:d5:60:18:20:e3:5b:3a:b6:0f:5a:00:90:
                    60:d7:c7:76:6b:3c:a1:ae:86:f7:0c:56:9a:70:3f:
                    a1:c5:78:01:ef:ee:e9:40:71:b4:19:6a:a6:de:7f:
                    47:ed:3f:3e:6a:b6:60:87:05:10:e0:a7:fe:23:9b:
                    81:65:18:59:cf:ef:44:bf:a3:db:08:65:b8:b1:84:
                    64:42:d9:2c:30:f9:be:af:56:01:9f:35:a2:3d:a5:
                    78:02:26:42:2a:7e:ed:24:05:fe:d9:b9:cf:d0:7c:
                    ff:06:38:a8:a3:ff:a9:cd:66:60:1e:af:84:27:61:
                    f5:36:7c:f5:7d:29:91:63:d5:0d:16:e3:21:fc:0d:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:30:3B:F6:E5:82:2A:2D:15:6F:33:B3:50:C5:81:0E:18:9F:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b94f0270-f712-3f17-b5aa-b5944cbce54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:40f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:17:f4:17:4c:45:ae:13:59:f4:79:1e:9e:d4:b3:d9:60:85:
         3b:c2:1f:92:2c:f1:02:c9:04:81:24:51:08:1d:e5:a3:08:09:
         0e:90:84:80:f9:dc:23:b7:fb:fd:08:05:67:2e:de:e4:37:87:
         59:88:88:7c:a4:85:00:03:d5:b3:dd:56:61:5f:a1:69:19:90:
         9b:1d:64:66:0c:e9:98:64:79:af:1d:85:67:19:36:f0:cb:9e:
         30:21:e1:28:94:e6:58:04:ec:3e:aa:64:94:e4:31:ed:b5:0e:
         1b:d5:7f:90:3b:82:59:6f:6c:8f:d2:4b:fb:b8:68:83:9b:1d:
         2f:e7:0e:f6:cc:00:91:64:15:58:e5:40:13:99:24:f0:b2:f7:
         8b:af:81:a6:a7:35:e6:4e:e0:4c:57:d0:5f:99:22:ff:47:60:
         13:7e:18:b6:f9:5d:82:fb:8f:12:bc:72:75:61:03:c7:4f:a5:
         2b:d4:a8:08:cc:e9:26:c1:19:76:ed:9c:1f:95:dc:e2:43:f6:
         c8:e3:df:b5:fd:4c:2e:63:6a:09:0e:6a:d4:64:a3:72:6b:bc:
         5f:6f:ea:d2:dc:47:ea:b9:a7:ec:bd:eb:c7:f0:32:2a:9f:8d:
         0f:96:ff:fd:e6:25:57:3b:73:37:d7:ac:a7:b1:10:10:1e:4a:
         48:fd:cd:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVGLsGQq0buQovDwWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMDIxMDY1MloXDTI0MDYxODIxMDY1MlowLzEtMCsGA1UEAxMk
YzEwNDgxYmQtZmZiMi00NTZjLWJlZjktOWJkNTk4NTNlNjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb5BwXJTwTHottD3bF3Rkd13ZXRZ+O5p/Um8
3rAJwIfG0euzJPhpOmxTWmU/M3oM6WZjPDc1gQUDEH5jvmJX2chCGIQLldIyA2Vt
5ZRTAVIawS8ywvwW7qYbdOZ5Q0hjLZFOMy2jqqUUAY/YLe9Hwcwf7DRAZUczKT/V
YBgg41s6tg9aAJBg18d2azyhrob3DFaacD+hxXgB7+7pQHG0GWqm3n9H7T8+arZg
hwUQ4Kf+I5uBZRhZz+9Ev6PbCGW4sYRkQtksMPm+r1YBnzWiPaV4AiZCKn7tJAX+
2bnP0Hz/Bjioo/+pzWZgHq+EJ2H1Nnz1fSmRY9UNFuMh/A3ZdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDuyMDv25YIqLRVvM7NQxYEOGJ9MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjk0ZjAyNzAtZjcxMi0z
ZjE3LWI1YWEtYjU5NDRjYmNlNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAEDw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHAX9BdMRa4TWfR5Hp7Us9lghTvCH5Is8QLJBIEkUQgd5aMICQ6Q
hID53CO3+/0IBWcu3uQ3h1mIiHykhQAD1bPdVmFfoWkZkJsdZGYM6Zhkea8dhWcZ
NvDLnjAh4SiU5lgE7D6qZJTkMe21DhvVf5A7gllvbI/SS/u4aIObHS/nDvbMAJFk
FVjlQBOZJPCy94uvgaanNeZO4ExX0F+ZIv9HYBN+GLb5XYL7jxK8cnVhA8dPpSvU
qAjM6SbBGXbtnB+V3OJD9sjj37X9TC5jagkOatRko3JrvF9v6tLcR+q5p+y968fw
MiqfjQ+W//3mJVc7czfXrKexEBAeSkj9zZw=
-----END CERTIFICATE-----
Generated at Mon May 6 02:00:05 2024 by rpki-client on console-fra.rpki-client.org