Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa
File:                     e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa (raw, json)
Hash identifier:          kNcvJYzsJkBpC/Vk8qvK4SJyQrKFODuAT0ajkGEXQr4=
Subject key identifier:   90:D8:65:52:8F:DD:4E:0E:BF:17:2F:7F:23:40:C5:FE:A4:22:CC:03
Certificate issuer:       /CN=8f4a083f-2810-4d6e-a7c3-81c8b1d61896
Certificate serial:       010D0C9F432858460313F845609117A1AF058D00
Authority key identifier: 0A:30:E6:5B:B6:A2:07:C8:21:6A:34:39:61:00:AC:D3:9F:82:0D:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa
Signing time:             Mon 27 May 2024 13:00:34 +0000
ROA not before:           Mon 27 May 2024 13:00:34 +0000
ROA not after:            Sun 25 Aug 2024 13:00:34 +0000
asID:                     5786
IP address blocks:        2607:2000::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:03:13:f8:45:60:91:17:a1:af:05:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4a083f-2810-4d6e-a7c3-81c8b1d61896
        Validity
            Not Before: May 27 13:00:34 2024 GMT
            Not After : Aug 25 13:00:34 2024 GMT
        Subject: CN=00cf01d5-cacd-46bf-8863-71630b34a075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:27:c6:3f:f9:cf:83:fd:8c:cf:f9:4e:f3:
                    6c:2c:80:d6:77:ef:29:5a:8a:3c:6d:d7:39:b0:5b:
                    96:5f:df:ae:a6:d6:c3:58:7d:09:c8:e6:0a:4d:da:
                    1a:93:44:8c:6b:3e:db:91:cb:9f:2a:e0:30:6c:ab:
                    82:7d:8d:5d:f5:19:97:52:e5:00:25:9b:bc:d9:ce:
                    b0:99:9c:54:ac:bb:60:d1:a0:d2:ce:18:6a:fa:a2:
                    fc:e1:c3:03:5c:b5:33:7b:ea:74:3a:cb:cc:ac:f4:
                    cb:ce:a3:ca:32:43:d6:f6:0d:09:7c:f2:76:1e:92:
                    d2:49:38:8a:6b:49:47:7c:52:c7:4f:14:ef:6c:37:
                    72:8e:87:63:1f:e0:2a:60:63:66:ac:0b:eb:65:8f:
                    f1:09:0d:bc:19:9c:36:48:89:c8:5f:79:6a:cc:f2:
                    14:2f:59:8b:c9:d8:4b:f3:80:dc:0f:fa:38:a5:ee:
                    45:90:50:c3:e4:66:b5:35:9d:95:12:f8:3d:34:ca:
                    8d:a9:03:d1:7e:a4:6c:41:e2:36:95:70:bb:96:24:
                    67:29:05:7e:8b:e8:43:9b:18:3a:7c:10:20:41:e0:
                    c6:42:ab:54:80:8e:8a:c8:03:6c:69:40:a9:d0:14:
                    a0:4b:e0:09:f2:b7:bf:75:2e:fd:e6:d0:03:44:77:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D8:65:52:8F:DD:4E:0E:BF:17:2F:7F:23:40:C5:FE:A4:22:CC:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.crl

            X509v3 Authority Key Identifier:
                keyid:0A:30:E6:5B:B6:A2:07:C8:21:6A:34:39:61:00:AC:D3:9F:82:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:a5:e2:48:d1:e9:66:88:dd:8a:fd:a1:92:4a:c1:2f:5c:
         d8:d4:1a:7c:7d:b8:98:23:22:af:af:ae:10:a3:88:35:34:66:
         4e:94:08:b2:b3:29:79:61:fe:ba:38:43:c3:b8:df:fa:03:a1:
         71:56:0e:7f:93:0e:b3:a3:cf:29:cb:2c:3d:87:0f:97:1e:51:
         4f:25:7f:76:5e:9a:d3:86:0e:f0:c0:ec:a6:4b:a3:bc:97:af:
         5b:15:fd:ef:90:9b:b4:9f:99:7a:3e:04:84:33:f8:93:9f:69:
         53:01:54:5a:8b:3d:8d:e4:0a:32:d7:47:98:52:51:ad:22:78:
         e6:91:21:6d:08:64:ef:77:90:81:24:75:f4:69:d8:4e:34:1e:
         d6:49:74:02:1b:74:fe:71:6f:30:bf:7d:2e:df:c9:5e:d6:92:
         a7:61:86:a9:9c:18:27:8b:10:23:c5:ea:8f:31:fe:1a:96:29:
         1c:d9:05:5d:76:b8:db:1f:b2:d7:27:f7:ec:7c:ea:bb:64:9b:
         80:2b:af:e5:fe:a4:bb:3e:60:28:14:f1:ec:96:e3:96:08:44:
         62:37:56:c0:53:70:48:ae:9d:1d:b3:5f:17:26:78:3c:50:fd:
         8f:e4:4a:ea:c2:a0:4f:d5:5a:65:ba:74:c9:5b:c4:ee:e4:b1:
         24:6a:8a:f8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEYDE/hFYJEXoa8FjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY0YTA4M2YtMjgxMC00ZDZlLWE3YzMtODFjOGIxZDYx
ODk2MB4XDTI0MDUyNzEzMDAzNFoXDTI0MDgyNTEzMDAzNFowLzEtMCsGA1UEAxMk
MDBjZjAxZDUtY2FjZC00NmJmLTg4NjMtNzE2MzBiMzRhMDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo54nxj/5z4P9jM/5TvNsLIDWd+8pWoo8bdc5
sFuWX9+uptbDWH0JyOYKTdoak0SMaz7bkcufKuAwbKuCfY1d9RmXUuUAJZu82c6w
mZxUrLtg0aDSzhhq+qL84cMDXLUze+p0OsvMrPTLzqPKMkPW9g0JfPJ2HpLSSTiK
a0lHfFLHTxTvbDdyjodjH+AqYGNmrAvrZY/xCQ28GZw2SInIX3lqzPIUL1mLydhL
84DcD/o4pe5FkFDD5Ga1NZ2VEvg9NMqNqQPRfqRsQeI2lXC7liRnKQV+i+hDmxg6
fBAgQeDGQqtUgI6KyANsaUCp0BSgS+AJ8re/dS795tADRHcz0wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJDYZVKP3U4OvxcvfyNAxf6kIswDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjRh
MDgzZi0yODEwLTRkNmUtYTdjMy04MWM4YjFkNjE4OTYvZTExYzA5NTAtMzI3ZS0z
YmRjLWI4MGMtZGI0YWFjZmI0OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY0YTA4M2YtMjgxMC00ZDZlLWE3
YzMtODFjOGIxZDYxODk2LzhmNGEwODNmLTI4MTAtNGQ2ZS1hN2MzLTgxYzhiMWQ2
MTg5Ni5jcmwwHwYDVR0jBBgwFoAUCjDmW7aiB8ghajQ5YQCs05+CDT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjRhMDgzZi0yODEwLTRkNmUtYTdjMy04MWM4
YjFkNjE4OTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCOb6XiSNHpZojdiv2hkkrBL1zY1Bp8fbiYIyKvr64Qo4g1NGZOlAiy
syl5Yf66OEPDuN/6A6FxVg5/kw6zo88pyyw9hw+XHlFPJX92XprThg7wwOymS6O8
l69bFf3vkJu0n5l6PgSEM/iTn2lTAVRaiz2N5Aoy10eYUlGtInjmkSFtCGTvd5CB
JHX0adhONB7WSXQCG3T+cW8wv30u38le1pKnYYapnBgnixAjxeqPMf4alikc2QVd
drjbH7LXJ/fsfOq7ZJuAK6/l/qS7PmAoFPHsluOWCERiN1bAU3BIrp0ds18XJng8
UP2P5ErqwqBP1VplunTJW8Tu5LEkaor4
-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:49 2024 by rpki-client on console-fra.rpki-client.org