Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6b843ad8-b2e3-33ac-9c96-e5996013e7c8.roa
File:                     6b843ad8-b2e3-33ac-9c96-e5996013e7c8.roa (raw, json)
Hash identifier:          dXlvlgBM74Se2x/DZCZlaZn3rQyT3oTcACOaSjg/DqQ=
Subject key identifier:   B0:98:BC:EB:48:A1:4F:65:12:37:D4:EF:08:2D:0F:49:D4:3D:7C:BC
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F432858454C380C9D3630FCFED3874140
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6b843ad8-b2e3-33ac-9c96-e5996013e7c8.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     33343
IP address blocks:        2610:20::/37 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0c:9d:36:30:fc:fe:d3:87:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=1ff1c4af-3f85-436f-bcc1-010cd0237d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:0e:a8:8f:5d:0d:b8:29:c9:5a:e9:76:13:
                    b8:ed:fd:7e:78:2a:9a:d1:66:a1:ca:82:0f:45:ea:
                    2a:d7:5e:bd:f2:ba:ed:69:35:66:fc:f6:b6:78:68:
                    a2:10:7f:81:06:0d:87:f5:83:bc:77:4e:b2:de:6e:
                    9d:b6:2b:8d:fe:9f:53:ea:56:e0:b6:b5:60:5d:fd:
                    31:44:b0:7a:a1:fc:2a:09:35:3d:97:d6:2a:e8:46:
                    28:44:d5:87:d8:72:c6:e7:6e:70:c6:4a:fd:b9:d4:
                    3d:35:c8:14:77:68:c1:81:8f:fe:4a:e2:62:7d:cf:
                    c4:60:a7:a3:d2:fc:7a:01:f4:1b:a7:ce:ff:0b:89:
                    1e:fb:90:13:0c:4e:86:fa:ac:63:33:53:3a:2c:46:
                    a4:b3:69:60:23:b6:f9:f8:b2:bd:18:a6:ce:a5:11:
                    d6:07:71:b9:64:22:b9:e2:47:65:5a:63:f1:b3:29:
                    b4:3a:31:a8:61:26:7b:6a:d8:b3:b3:91:b7:74:70:
                    48:33:7b:58:73:ea:c2:61:1f:cf:04:88:c8:48:40:
                    ad:bb:51:c4:5f:75:27:51:14:83:ea:59:b4:a8:8a:
                    a5:11:7e:a1:2c:54:bc:0f:03:39:41:2b:6e:df:de:
                    d7:13:94:d9:40:1d:ae:b3:ab:bf:6c:6b:b6:77:74:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:98:BC:EB:48:A1:4F:65:12:37:D4:EF:08:2D:0F:49:D4:3D:7C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6b843ad8-b2e3-33ac-9c96-e5996013e7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:95:8b:f6:59:ab:e0:ac:47:82:30:5f:db:bf:24:59:d0:
         1b:28:85:65:1c:f0:ad:99:1d:7a:3d:83:c0:c6:5b:62:31:c7:
         39:6d:35:87:69:1a:7f:c5:7d:a9:5f:ea:56:b0:b7:a1:79:06:
         5f:2f:b3:e4:d3:23:a6:ce:df:e7:79:35:71:3a:2c:10:1e:3e:
         80:cc:b6:e8:e9:f9:33:07:f7:e3:63:c7:5c:d1:ab:32:81:1a:
         6e:ab:a1:d6:29:cd:eb:3e:42:02:0c:c6:84:9f:e7:28:e2:a7:
         1a:05:23:f3:bb:b6:08:33:e3:8f:af:f5:50:7a:16:4a:b0:02:
         bc:d8:45:be:2f:80:0a:f5:7a:62:3a:1a:f6:21:c7:70:df:65:
         cf:11:6f:af:2b:f9:af:ff:45:31:7e:ea:27:a3:f1:5e:88:ce:
         45:7f:be:6f:ba:d0:20:58:67:ee:5e:01:1c:b5:a0:b6:11:6d:
         ad:d1:f0:29:42:af:cb:8f:78:e1:a5:12:98:37:16:1c:3b:71:
         b3:65:b0:92:45:0b:3d:ec:79:f1:18:e9:16:2e:b9:5a:f1:e5:
         25:48:bf:f6:98:7a:67:0e:22:48:0d:b7:10:7d:d8:d3:fe:d9:
         d2:fd:33:e2:78:68:82:b5:b0:ad:08:60:cd:87:d7:15:29:9a:
         27:e6:20:fd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVMOAydNjD8/tOHQUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm
YWI3MB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk
MWZmMWM0YWYtM2Y4NS00MzZmLWJjYzEtMDEwY2QwMjM3ZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP0OqI9dDbgpyVrpdhO47f1+eCqa0WahyoIP
Reoq11698rrtaTVm/Pa2eGiiEH+BBg2H9YO8d06y3m6dtiuN/p9T6lbgtrVgXf0x
RLB6ofwqCTU9l9Yq6EYoRNWH2HLG525wxkr9udQ9NcgUd2jBgY/+SuJifc/EYKej
0vx6AfQbp87/C4ke+5ATDE6G+qxjM1M6LEaks2lgI7b5+LK9GKbOpRHWB3G5ZCK5
4kdlWmPxsym0OjGoYSZ7atizs5G3dHBIM3tYc+rCYR/PBIjISECtu1HEX3UnURSD
6lm0qIqlEX6hLFS8DwM5QStu397XE5TZQB2us6u/bGu2d3Tk2wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLCYvOtIoU9lEjfU7wgtD0nUPXy8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk
NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNmI4NDNhZDgtYjJlMy0z
M2FjLTljOTYtZTU5OTYwMTNlN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2
ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3
ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4
ZDU3N2ZhYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJhAAIAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeSuVi/ZZq+CsR4IwX9u/JFnQGyiFZRzwrZkdej2DwMZbYjHHOW01
h2kaf8V9qV/qVrC3oXkGXy+z5NMjps7f53k1cTosEB4+gMy26On5Mwf342PHXNGr
MoEabquh1inN6z5CAgzGhJ/nKOKnGgUj87u2CDPjj6/1UHoWSrACvNhFvi+ACvV6
Yjoa9iHHcN9lzxFvryv5r/9FMX7qJ6PxXojORX++b7rQIFhn7l4BHLWgthFtrdHw
KUKvy4944aUSmDcWHDtxs2WwkkULPex58RjpFi65WvHlJUi/9ph6Zw4iSA23EH3Y
0/7Z0v0z4nhogrWwrQhgzYfXFSmaJ+Yg/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:45 2024 by rpki-client on console-fra.rpki-client.org