Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa
File:                     cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa (raw, json)
Hash identifier:          AOfdJdOk82w3IC+jB14ro8ui/M/d55nJi5SE8x5taEs=
Subject key identifier:   DD:69:8B:D6:29:44:36:E3:8E:8B:BF:4B:D3:DB:DF:FD:DC:AE:32:2B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462FB16ADA49381686CADE00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa
Signing time:             Wed 20 Mar 2024 21:08:45 +0000
ROA not before:           Wed 20 Mar 2024 21:08:45 +0000
ROA not after:            Tue 18 Jun 2024 21:08:45 +0000
asID:                     15169
IP address blocks:        2001:4860:4824::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2f:b1:6a:da:49:38:16:86:ca:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:08:45 2024 GMT
            Not After : Jun 18 21:08:45 2024 GMT
        Subject: CN=459c242b-5ec5-4d8d-93b0-d369304b277f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:e6:35:a1:c0:d0:73:07:3f:21:4a:2f:51:
                    56:79:89:09:c3:e1:03:14:2c:40:b6:c8:f6:a5:ec:
                    e8:05:e9:4e:ac:a4:79:79:35:7c:10:db:f9:fe:fe:
                    43:56:36:70:81:5c:57:91:7c:88:47:08:d0:ff:ea:
                    c8:24:25:6e:17:56:39:09:0b:7d:47:cf:21:6c:a3:
                    8c:4f:c7:18:af:4d:f2:c7:96:28:35:94:e5:e2:73:
                    30:5a:dc:7b:7a:23:17:4e:e4:bd:a1:f4:47:80:57:
                    05:65:79:48:39:55:91:2c:c4:4a:64:70:36:3f:06:
                    4e:af:42:da:31:19:bc:57:b1:bd:3e:e2:11:21:43:
                    3f:cc:81:2c:ee:43:8d:a0:4a:fe:9f:0e:51:96:21:
                    2b:4b:2a:92:6f:56:bf:d0:72:9c:87:37:4b:0a:97:
                    c3:66:13:e8:ea:52:45:d5:0e:3f:4e:fb:1d:5d:d7:
                    2c:58:bf:7a:b9:99:6b:4d:cf:6a:9d:8b:5c:f3:c0:
                    e2:4a:b9:08:bb:7e:7e:49:3c:89:76:53:1f:dc:06:
                    25:86:ae:60:69:0f:83:f5:14:99:ba:40:20:5c:3e:
                    67:bb:fc:48:d3:3a:d9:be:06:67:a6:55:1d:e9:f1:
                    83:ce:83:0e:e9:a9:59:1e:d9:39:7a:7b:9f:60:ac:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:69:8B:D6:29:44:36:E3:8E:8B:BF:4B:D3:DB:DF:FD:DC:AE:32:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:4824::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:95:f1:09:a2:9e:2d:69:17:bd:5d:05:21:c6:c0:12:0f:35:
         00:4e:fb:a8:b6:13:32:83:b9:c3:88:f7:23:a2:f4:11:3a:37:
         56:73:60:f0:4e:3e:b5:40:93:0f:05:63:b9:45:00:6b:34:9a:
         a2:90:bd:d6:43:9a:f1:17:49:b2:18:4f:41:cd:fb:de:c1:39:
         4a:45:31:6b:36:3f:71:91:c6:f3:46:51:38:12:5b:2c:81:f5:
         74:2a:70:6e:2a:d3:22:ce:c6:bb:14:7c:a3:da:57:9c:bb:04:
         0e:e4:9a:3c:45:48:a2:9c:7c:2f:ea:58:45:fc:36:49:93:f8:
         c7:12:4d:67:db:f1:6b:c1:ba:ea:7e:64:4a:9a:dd:57:68:25:
         e0:9d:1d:b9:29:2f:38:96:9f:ef:78:0d:f9:2d:bb:bd:1e:e7:
         bb:1e:ef:e0:3e:2a:a5:ae:80:c7:ac:0c:26:83:59:77:68:e3:
         02:57:9e:51:1f:27:1c:36:f7:cc:55:55:25:eb:07:ba:18:f1:
         a7:79:2a:39:33:01:61:6a:f7:2d:fe:4d:e4:f8:ae:56:17:5e:
         04:c9:ad:62:fb:49:d8:4b:42:b6:61:1c:4b:3a:a2:78:7f:6d:
         d1:62:59:f9:81:f0:56:9e:35:86:02:0f:14:81:d1:91:ac:28:
         69:6d:9c:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVGL7Fq2kk4FobK3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyMDIxMDg0NVoXDTI0MDYxODIxMDg0NVowLzEtMCsGA1UEAxMk
NDU5YzI0MmItNWVjNS00ZDhkLTkzYjAtZDM2OTMwNGIyNzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzPmNaHA0HMHPyFKL1FWeYkJw+EDFCxAtsj2
pezoBelOrKR5eTV8ENv5/v5DVjZwgVxXkXyIRwjQ/+rIJCVuF1Y5CQt9R88hbKOM
T8cYr03yx5YoNZTl4nMwWtx7eiMXTuS9ofRHgFcFZXlIOVWRLMRKZHA2PwZOr0La
MRm8V7G9PuIRIUM/zIEs7kONoEr+nw5RliErSyqSb1a/0HKchzdLCpfDZhPo6lJF
1Q4/TvsdXdcsWL96uZlrTc9qnYtc88DiSrkIu35+STyJdlMf3AYlhq5gaQ+D9RSZ
ukAgXD5nu/xI0zrZvgZnplUd6fGDzoMO6alZHtk5enufYKxoiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN1pi9YpRDbjjou/S9Pb3/3crjIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2RiMWUxZTgtMzdiYi0z
NTBmLThlZTgtYTNiMzQ1ODU4OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABGV8Qmini1pF71dBSHGwBIPNQBO+6i2EzKDucOI9yOi9BE6N1Zz
YPBOPrVAkw8FY7lFAGs0mqKQvdZDmvEXSbIYT0HN+97BOUpFMWs2P3GRxvNGUTgS
WyyB9XQqcG4q0yLOxrsUfKPaV5y7BA7kmjxFSKKcfC/qWEX8NkmT+McSTWfb8WvB
uup+ZEqa3VdoJeCdHbkpLziWn+94Dfktu70e57se7+A+KqWugMesDCaDWXdo4wJX
nlEfJxw298xVVSXrB7oY8ad5KjkzAWFq9y3+TeT4rlYXXgTJrWL7SdhLQrZhHEs6
onh/bdFiWfmB8FaeNYYCDxSB0ZGsKGltnNg=
-----END CERTIFICATE-----
Generated at Fri May 17 20:58:21 2024 by rpki-client on console-fra.rpki-client.org