Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa
File:                     eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa (raw, json)
Hash identifier:          5KjPOE+xi+EGkmJFAm+vDrsZ7F4zooMq0BN7N0rMfoU=
Subject key identifier:   A2:F7:0D:5B:ED:62:62:50:26:81:BA:66:0C:CB:01:D4:F7:DB:CC:92
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285845CE0917268FED4828D1818F00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     54858
IP address blocks:        2001:1868::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:17:26:8f:ed:48:28:d1:81:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=87d3327d-b200-4ba5-8b33-8b9a2da76bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:62:ea:8c:29:1c:cc:2e:54:fc:13:76:18:
                    3e:9d:eb:94:91:c6:c3:28:a0:76:47:e9:e3:57:01:
                    ba:42:13:df:ae:e0:86:5a:06:af:cf:51:9c:8a:aa:
                    c1:92:01:a6:40:22:15:d2:85:58:4e:42:d3:fe:45:
                    fc:97:54:13:57:1d:17:ec:46:51:c0:b6:7d:81:00:
                    9b:16:64:55:d6:1d:f2:1b:cf:ae:e3:52:0a:b6:6e:
                    d4:60:7c:e0:2f:6b:ef:56:bd:d6:b6:d1:0c:d6:ef:
                    a9:7e:8b:c3:df:60:5d:dc:8c:bb:14:2e:20:ed:3c:
                    d0:a5:0d:90:c7:59:02:64:65:d8:72:21:42:ea:e5:
                    de:d2:24:ee:57:04:6c:c9:2d:c9:3f:47:0a:e5:5d:
                    cb:ee:4b:6b:50:6e:6a:32:4d:54:c1:d7:93:13:3d:
                    a1:39:66:16:6a:73:05:77:4b:a4:85:1f:d4:74:57:
                    41:64:b7:1c:dc:f4:be:fb:6c:14:be:28:cb:e9:90:
                    6b:9b:af:8a:99:c3:61:76:02:a9:03:f9:34:a6:8b:
                    4a:40:d8:55:53:2f:4a:01:9d:0e:d9:44:5f:df:7b:
                    8c:94:c0:bd:0d:7e:c4:a9:8b:c8:77:d0:bd:55:1e:
                    c3:59:5d:22:42:26:7a:cd:ee:ae:da:09:9e:9f:aa:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F7:0D:5B:ED:62:62:50:26:81:BA:66:0C:CB:01:D4:F7:DB:CC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1868::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:33:db:38:fb:05:aa:b3:53:d3:f5:ed:09:1e:0e:71:8b:
         7a:52:db:b6:2e:da:19:67:3f:55:3d:1b:47:43:19:50:29:0a:
         d4:41:e4:56:8a:c1:96:bb:c1:e3:8f:57:25:cd:ed:89:59:1d:
         b7:25:ce:d2:fb:fb:a8:d0:39:2d:32:40:fe:29:55:46:9d:ec:
         ce:ca:6c:16:6b:75:80:0e:29:85:f8:c3:0d:54:78:72:34:26:
         51:7a:fe:65:d2:97:8a:24:c9:54:b3:4c:48:e8:20:18:9e:6f:
         d1:8b:45:6e:6c:bb:6a:6e:04:01:47:01:6a:a8:21:89:9b:70:
         fd:2b:2d:55:7a:6b:45:bf:81:b3:05:17:9b:75:1f:ae:5e:41:
         b5:24:27:53:ec:64:c8:57:70:25:5f:d1:09:e4:0d:c2:c7:c8:
         22:b9:db:3f:b1:f5:39:c2:80:17:0b:f4:a9:7e:89:5f:bc:c7:
         58:50:73:15:9e:e1:d4:79:3e:86:2b:fb:0f:51:9e:b0:88:a6:
         04:d3:91:68:c7:98:84:05:5a:16:74:3b:cf:d8:a8:ea:99:7c:
         d3:10:8f:38:76:fa:05:68:ab:23:95:6f:44:aa:c6:ce:ee:1e:
         8f:b4:8d:78:8e:eb:e9:f0:5a:59:35:af:ba:fb:fd:76:72:d4:
         4d:b2:02:b9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEXOCRcmj+1IKNGBjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
ODdkMzMyN2QtYjIwMC00YmE1LThiMzMtOGI5YTJkYTc2YmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn5i6owpHMwuVPwTdhg+neuUkcbDKKB2R+nj
VwG6QhPfruCGWgavz1GciqrBkgGmQCIV0oVYTkLT/kX8l1QTVx0X7EZRwLZ9gQCb
FmRV1h3yG8+u41IKtm7UYHzgL2vvVr3WttEM1u+pfovD32Bd3Iy7FC4g7TzQpQ2Q
x1kCZGXYciFC6uXe0iTuVwRsyS3JP0cK5V3L7ktrUG5qMk1UwdeTEz2hOWYWanMF
d0ukhR/UdFdBZLcc3PS++2wUvijL6ZBrm6+KmcNhdgKpA/k0potKQNhVUy9KAZ0O
2URf33uMlMC9DX7EqYvId9C9VR7DWV0iQiZ6ze6u2gmen6p7KQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKL3DVvtYmJQJoG6ZgzLAdT328ySMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWZmNzExMmEtMGUwYy0z
OGNhLWE1ODUtMTFiNDI5MmJmYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYaDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB6rzPbOPsFqrNT0/XtCR4OcYt6Utu2LtoZZz9VPRtHQxlQKQrUQeRW
isGWu8Hjj1clze2JWR23Jc7S+/uo0DktMkD+KVVGnezOymwWa3WADimF+MMNVHhy
NCZRev5l0peKJMlUs0xI6CAYnm/Ri0VubLtqbgQBRwFqqCGJm3D9Ky1VemtFv4Gz
BRebdR+uXkG1JCdT7GTIV3AlX9EJ5A3Cx8giuds/sfU5woAXC/SpfolfvMdYUHMV
nuHUeT6GK/sPUZ6wiKYE05Fox5iEBVoWdDvP2KjqmXzTEI84dvoFaKsjlW9EqsbO
7h6PtI14juvp8FpZNa+6+/12ctRNsgK5
-----END CERTIFICATE-----
Generated at Fri May 17 23:38:52 2024 by rpki-client on console-ams.rpki-client.org