Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/feb519c6-c816-3fbb-bd9d-379d95a48d22.roa
File:                     feb519c6-c816-3fbb-bd9d-379d95a48d22.roa (raw, json)
Hash identifier:          WE7S+pJwqyLRmlxpUwrx8RT8R+PUfAGfuT1CULhG3B0=
Subject key identifier:   38:FB:6E:B6:05:08:5E:BE:74:13:49:7F:A8:AF:F1:53:24:37:63:BB
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584574B317AFF2921DC54401B700
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/feb519c6-c816-3fbb-bd9d-379d95a48d22.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     30124
IP address blocks:        2001:500:77::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:17:af:f2:92:1d:c5:44:01:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=9059938e-7542-4441-8885-5de718bf81db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:95:ad:d8:1d:2e:2a:04:3c:50:0f:6b:ff:
                    0c:5f:3a:67:2d:08:39:66:ee:46:aa:b1:5c:3e:9d:
                    73:6f:86:b4:d1:c2:b2:5f:38:0b:50:19:96:79:e0:
                    ca:55:f8:a9:a0:c7:c4:31:0f:59:91:10:43:9a:b5:
                    6d:f3:25:61:fd:ac:ad:c1:5f:fc:8d:18:1a:54:61:
                    fa:6a:3a:a6:b8:cb:e9:60:68:eb:6b:af:ef:1a:aa:
                    bd:56:61:96:a8:10:31:38:6a:42:20:97:7e:c2:44:
                    c5:ed:9c:70:ec:a6:fc:5a:88:1b:35:55:9c:5e:07:
                    ff:51:34:05:be:6e:14:1c:e1:33:88:75:c1:3f:41:
                    3e:f4:27:60:2c:1c:08:43:30:78:12:c8:06:71:10:
                    ce:b4:6e:57:44:a7:44:76:fc:67:25:e0:47:ed:16:
                    ba:dc:79:a4:e3:37:d8:51:c3:57:93:62:4d:c0:18:
                    17:ed:b1:77:da:fd:36:5d:02:8b:b0:99:af:4a:51:
                    38:9f:bc:ce:ea:c1:96:9f:02:2d:98:d1:70:c1:ef:
                    8e:31:3f:e1:84:e0:4b:14:f2:91:76:3f:19:1e:15:
                    43:87:db:f1:23:4c:df:1f:e1:a7:7b:98:b1:d5:f2:
                    6b:17:40:b0:d5:43:bb:a5:e0:16:36:db:33:4a:2e:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FB:6E:B6:05:08:5E:BE:74:13:49:7F:A8:AF:F1:53:24:37:63:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/feb519c6-c816-3fbb-bd9d-379d95a48d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:77::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:28:ac:76:01:ca:41:03:a6:85:2e:fc:76:50:c4:35:82:42:
         e4:49:74:d7:f7:26:7a:b1:cc:8f:48:c7:a6:19:77:9d:b1:ae:
         dc:ca:8f:b9:66:82:35:af:e2:1c:fb:80:20:76:af:92:68:1e:
         f8:0d:23:b6:38:13:af:ac:d4:4c:6a:7b:d1:9e:ba:41:d2:20:
         05:92:53:e2:66:1e:8f:ad:66:61:95:18:6b:be:a2:7b:b6:77:
         f9:73:0e:5d:da:67:24:f8:f8:ad:36:94:df:09:ad:87:11:e5:
         82:a2:03:25:28:60:60:1f:b8:a6:52:6d:26:45:e0:0e:5d:07:
         7f:e4:3a:8d:95:fa:80:07:99:db:2d:c6:ff:07:04:9b:4f:aa:
         a7:1b:df:4c:c4:e9:e4:81:0f:42:3b:39:31:5f:28:f3:40:71:
         51:36:91:38:17:e9:79:6f:46:5f:ee:e8:5d:02:6d:24:3b:72:
         63:14:12:cb:c9:07:a7:5e:67:93:f7:2f:c5:c0:d0:a3:34:86:
         55:d7:b8:e3:d8:be:2e:2e:6d:9e:8d:fb:d0:d9:44:80:c4:b5:
         5d:01:83:da:e5:3e:e8:61:59:cf:99:a8:4d:6a:f0:e7:53:2a:
         9e:ae:89:7a:da:c0:11:40:d9:ae:f4:f6:a9:eb:13:90:2d:f3:
         ef:70:e5:84
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV0sxev8pIdxUQBtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk
OTA1OTkzOGUtNzU0Mi00NDQxLTg4ODUtNWRlNzE4YmY4MWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kOVrdgdLioEPFAPa/8MXzpnLQg5Zu5GqrFc
Pp1zb4a00cKyXzgLUBmWeeDKVfipoMfEMQ9ZkRBDmrVt8yVh/aytwV/8jRgaVGH6
ajqmuMvpYGjra6/vGqq9VmGWqBAxOGpCIJd+wkTF7Zxw7Kb8WogbNVWcXgf/UTQF
vm4UHOEziHXBP0E+9CdgLBwIQzB4EsgGcRDOtG5XRKdEdvxnJeBH7Ra63Hmk4zfY
UcNXk2JNwBgX7bF32v02XQKLsJmvSlE4n7zO6sGWnwItmNFwwe+OMT/hhOBLFPKR
dj8ZHhVDh9vxI0zfH+Gne5ix1fJrF0Cw1UO7peAWNtszSi4H2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDj7brYFCF6+dBNJf6iv8VMkN2O7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZmViNTE5YzYtYzgxNi0z
ZmJiLWJkOWQtMzc5ZDk1YTQ4ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAB3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQorHYBykEDpoUu/HZQxDWCQuRJdNf3JnqxzI9Ix6YZd52xrtzK
j7lmgjWv4hz7gCB2r5JoHvgNI7Y4E6+s1Exqe9GeukHSIAWSU+JmHo+tZmGVGGu+
onu2d/lzDl3aZyT4+K02lN8JrYcR5YKiAyUoYGAfuKZSbSZF4A5dB3/kOo2V+oAH
mdstxv8HBJtPqqcb30zE6eSBD0I7OTFfKPNAcVE2kTgX6XlvRl/u6F0CbSQ7cmMU
EsvJB6deZ5P3L8XA0KM0hlXXuOPYvi4ubZ6N+9DZRIDEtV0Bg9rlPuhhWc+ZqE1q
8OdTKp6uiXrawBFA2a709qnrE5At8+9w5YQ=
-----END CERTIFICATE-----
Generated at Sun May 19 02:00:33 2024 by rpki-client on console-ams.rpki-client.org