Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa
File:                     7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa (raw, json)
Hash identifier:          J02v7yBE2J1p+j8Tb3iFT5/Min78BLfm/ZmqaP5Yna0=
Subject key identifier:   03:D1:55:88:F0:66:49:C0:54:A9:53:1C:B5:7A:F2:63:82:61:E1:0A
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285845D503C6CD9D13F7A1A3A6A180
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     32298
IP address blocks:        2606:d640:ef00::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c6:cd:9d:13:f7:a1:a3:a6:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=e27744a6-32a7-432f-94de-3889d718d85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:b5:d2:48:03:f7:6c:22:74:98:ed:5b:04:
                    87:ae:17:24:42:4a:e8:6a:01:65:5d:01:a7:21:2b:
                    54:5e:66:8f:10:06:5c:a0:7c:27:9d:f4:1e:b2:c3:
                    5d:18:1c:8d:1d:f3:14:8d:8e:81:06:32:49:9a:7e:
                    3b:d6:6e:28:85:0c:37:c6:94:cc:81:d2:c8:b6:37:
                    0a:bf:d9:76:e7:28:b3:77:17:a8:f3:b5:fa:d7:45:
                    24:69:c1:e6:ed:f0:90:67:03:d6:7b:2e:c8:2b:e9:
                    7d:c3:1c:e1:0c:73:d5:13:25:d5:a5:1c:5c:f2:52:
                    fe:58:d3:6e:ba:35:de:57:48:80:4a:08:10:ee:ac:
                    39:a0:3a:46:27:24:82:b5:fa:a3:93:9f:73:80:17:
                    2f:fe:29:fa:ac:3f:10:da:f3:fe:1b:52:84:cd:8f:
                    17:99:1b:40:d7:02:ce:b7:3c:ab:8a:72:d7:db:6d:
                    c1:3f:f2:83:5c:da:b0:0a:24:0d:7c:06:7d:9c:0e:
                    ef:7c:fd:51:1f:15:7e:d1:de:a5:73:38:f1:56:a8:
                    50:16:2c:b4:f9:ff:dc:a8:1a:3c:73:73:6e:d9:32:
                    95:a9:8c:dd:ae:42:96:a7:0d:79:4c:cb:a4:c5:a4:
                    dd:84:70:38:6d:b8:5e:09:d0:f4:9b:41:99:a4:38:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D1:55:88:F0:66:49:C0:54:A9:53:1C:B5:7A:F2:63:82:61:E1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:ef00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:49:af:5d:0b:1c:05:4a:9f:4c:93:0b:37:26:91:c5:e9:c9:
         8e:2d:1f:5d:8f:0e:04:35:72:f3:f1:06:4e:e9:c8:10:ad:d0:
         15:07:a7:a0:4b:c1:68:70:6d:fc:ce:f3:2b:4c:09:f4:a0:a0:
         88:9c:79:10:70:6e:14:b2:ef:8a:0a:8c:53:89:ee:3b:bc:2a:
         9b:c6:f2:6d:ab:e3:dc:25:54:6a:d4:9f:99:2c:63:cb:92:af:
         02:b6:77:1f:68:49:0d:9d:9c:89:9c:56:8b:f7:aa:5e:c6:53:
         13:cf:3d:ed:6c:e1:a3:a7:48:33:09:68:ec:61:07:d2:5f:96:
         30:7c:00:b6:28:5d:3d:4e:e2:00:b2:f9:75:40:a8:c6:e0:84:
         fb:b0:90:71:22:00:4c:1f:83:2c:2b:29:90:bd:f2:48:5a:4c:
         6c:2f:96:44:d9:c2:0d:fd:c6:d9:4c:fd:df:94:a9:27:0a:4a:
         05:5c:cc:7e:fa:eb:59:60:a1:22:80:f1:53:35:46:b1:81:c7:
         42:ba:08:84:b1:03:b9:86:2b:f5:c5:8a:c3:0c:2c:aa:3d:8e:
         1c:ec:34:e5:32:26:d7:5f:fe:02:03:1c:05:92:d5:f4:43:53:
         8a:50:7d:c8:f2:8d:21:da:53:af:4b:63:3a:99:d3:f7:d3:9a:
         51:b6:6d:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXVA8bNnRP3oaOmoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
ZTI3NzQ0YTYtMzJhNy00MzJmLTk0ZGUtMzg4OWQ3MThkODVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVq10kgD92widJjtWwSHrhckQkroagFlXQGn
IStUXmaPEAZcoHwnnfQessNdGByNHfMUjY6BBjJJmn471m4ohQw3xpTMgdLItjcK
v9l25yizdxeo87X610UkacHm7fCQZwPWey7IK+l9wxzhDHPVEyXVpRxc8lL+WNNu
ujXeV0iASggQ7qw5oDpGJySCtfqjk59zgBcv/in6rD8Q2vP+G1KEzY8XmRtA1wLO
tzyrinLX223BP/KDXNqwCiQNfAZ9nA7vfP1RHxV+0d6lczjxVqhQFiy0+f/cqBo8
c3Nu2TKVqYzdrkKWpw15TMukxaTdhHA4bbheCdD0m0GZpDgIkQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAPRVYjwZknAVKlTHLV68mOCYeEKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvNzcxM2I0YmQtMWNjZS0z
YjJmLTg3NTEtMDRiNzZkZDM3MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbWQO8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAc0mvXQscBUqfTJMLNyaRxenJji0fXY8OBDVy8/EGTunIEK3QFQen
oEvBaHBt/M7zK0wJ9KCgiJx5EHBuFLLvigqMU4nuO7wqm8bybavj3CVUatSfmSxj
y5KvArZ3H2hJDZ2ciZxWi/eqXsZTE8897Wzho6dIMwlo7GEH0l+WMHwAtihdPU7i
ALL5dUCoxuCE+7CQcSIATB+DLCspkL3ySFpMbC+WRNnCDf3G2Uz935SpJwpKBVzM
fvrrWWChIoDxUzVGsYHHQroIhLEDuYYr9cWKwwwsqj2OHOw05TIm11/+AgMcBZLV
9ENTilB9yPKNIdpTr0tjOpnT99OaUbZtFw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:08:50 2024 by rpki-client on console-ams.rpki-client.org