Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
File:                     fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa (raw, json)
Hash identifier:          sw4okPA1clPh3aDjOQ7OSE87DI3PqEKUiB+RixoMPeM=
Subject key identifier:   86:78:96:91:0E:E9:69:53:5D:F1:0B:DB:1E:9E:B8:82:A2:D3:BB:02
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584526A5A43B11024A53C55BF080
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     22926
IP address blocks:        2607:f5e8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:a4:3b:11:02:4a:53:c5:5b:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=3579f232-63cb-4979-a02c-a2ed27c1bd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:8d:de:21:8b:dc:cc:0f:b1:c4:23:20:6d:
                    1a:52:26:44:68:63:9f:c9:eb:9a:8c:f0:a5:88:9a:
                    f8:be:c1:50:db:74:82:13:88:09:b2:a0:6b:47:05:
                    2e:71:9f:1f:94:d4:c6:f9:e4:7d:78:81:6f:87:d3:
                    25:7b:5e:e1:8a:b9:bd:f9:60:fb:55:79:7a:fa:dd:
                    9c:9e:6b:c4:36:77:58:2e:4a:dc:d7:0f:a4:bc:6b:
                    d9:c2:2d:91:27:7a:df:79:69:c6:00:27:cb:69:2c:
                    73:5b:49:0d:0e:b1:0c:5a:63:c0:38:17:f3:2d:8f:
                    4f:2c:ad:60:b4:c0:22:86:ec:ae:91:c3:8a:4e:be:
                    3f:5a:be:11:2f:37:b3:e1:29:fa:be:03:95:90:c2:
                    e9:dd:b8:a8:ef:d6:ae:c2:2a:ea:5d:2e:b6:a9:da:
                    71:df:fb:5f:3d:eb:ab:71:5a:1a:95:c4:8e:b1:c5:
                    5a:c7:32:e6:c6:92:0a:b7:78:73:41:e4:ee:33:c1:
                    aa:06:b2:0a:17:8e:d5:f0:1b:98:12:db:4b:1a:5f:
                    09:b5:97:58:91:88:af:4a:9e:44:0a:bf:cc:b9:6d:
                    7c:0e:12:fc:4a:24:01:45:66:bb:98:7d:12:1a:2a:
                    fb:9f:5f:aa:f3:2e:67:f1:e8:49:b9:44:51:fb:86:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:96:91:0E:E9:69:53:5D:F1:0B:DB:1E:9E:B8:82:A2:D3:BB:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5e8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:28:27:f3:b2:90:84:ec:ee:c5:a3:9b:2c:4a:df:2b:04:56:
         71:55:85:0d:73:05:be:46:1c:12:e7:43:6b:c3:f5:98:ae:36:
         9d:a5:91:ac:83:e4:f3:ab:5e:79:50:06:a2:29:a0:2e:f6:4f:
         8d:f1:4c:9c:a6:a6:aa:65:c6:85:e8:35:1d:82:29:67:7b:04:
         d4:07:62:65:a6:7e:c6:1c:a6:08:a6:ee:a9:8b:9d:fd:10:63:
         a4:cd:15:53:e6:d9:3d:25:63:20:1f:d8:19:19:fd:46:f8:42:
         9b:f9:0b:a6:02:8d:15:a7:6c:bf:2a:aa:a0:4e:ed:fe:e8:3b:
         3d:77:7a:c2:74:ce:d7:9a:0b:d5:6c:2b:db:45:95:b0:39:30:
         4e:26:94:2b:78:b8:df:45:45:93:14:9a:86:bf:1d:f1:91:14:
         af:5b:1e:4d:34:52:92:ef:ac:17:f8:ed:fd:42:90:2c:1f:de:
         0b:15:65:7b:5e:3f:c0:ff:7a:c2:45:f7:de:36:f2:6b:07:21:
         30:82:4b:46:2d:45:6b:a9:a5:3b:58:71:6c:63:74:f1:1f:a6:
         1a:17:ba:46:56:ee:d2:db:ab:82:6b:98:58:1a:2d:6f:29:f0:
         2b:fe:6c:c1:ec:d5:5e:ee:13:9c:ad:bd:d5:42:11:4f:40:96:
         02:b7:87:fc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUmpaQ7EQJKU8Vb8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl
YjQ4MB4XDTI0MDMwOTE0MDAzMVoXDTI0MDYwNzEzMDAzMVowLzEtMCsGA1UEAxMk
MzU3OWYyMzItNjNjYi00OTc5LWEwMmMtYTJlZDI3YzFiZDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsyN3iGL3MwPscQjIG0aUiZEaGOfyeuajPCl
iJr4vsFQ23SCE4gJsqBrRwUucZ8flNTG+eR9eIFvh9Mle17hirm9+WD7VXl6+t2c
nmvENndYLkrc1w+kvGvZwi2RJ3rfeWnGACfLaSxzW0kNDrEMWmPAOBfzLY9PLK1g
tMAihuyukcOKTr4/Wr4RLzez4Sn6vgOVkMLp3bio79auwirqXS62qdpx3/tfPeur
cVoalcSOscVaxzLmxpIKt3hzQeTuM8GqBrIKF47V8BuYEttLGl8JtZdYkYivSp5E
Cr/MuW18DhL8SiQBRWa7mH0SGir7n1+q8y5n8ehJuURR+4bbKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIZ4lpEO6WlTXfEL2x6euIKi07sCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0
ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvZmQ4ZmM3MjItNmFhOS0z
MDZhLWFlMDAtOTdjYWUzZWJmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm
OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi
ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk
MGM4YmViNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf16DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQABKCfzspCE7O7Fo5ssSt8rBFZxVYUNcwW+RhwS50Nrw/WYrjadpZGs
g+Tzq155UAaiKaAu9k+N8UycpqaqZcaF6DUdgilnewTUB2Jlpn7GHKYIpu6pi539
EGOkzRVT5tk9JWMgH9gZGf1G+EKb+QumAo0Vp2y/KqqgTu3+6Ds9d3rCdM7XmgvV
bCvbRZWwOTBOJpQreLjfRUWTFJqGvx3xkRSvWx5NNFKS76wX+O39QpAsH94LFWV7
Xj/A/3rCRffeNvJrByEwgktGLUVrqaU7WHFsY3TxH6YaF7pGVu7S26uCa5hYGi1v
KfAr/mzB7NVe7hOcrb3VQhFPQJYCt4f8
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:10 2024 by rpki-client on console-fra.rpki-client.org