Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
File:                     307298f7-d8c6-36b2-a709-98bfd0d6750b.roa (raw, json)
Hash identifier:          2m3NQIHa2nZxS7hhv+WuA4rAp4+ojPwam/Gbr+l42nI=
Subject key identifier:   FC:24:B2:1F:21:88:DB:20:EC:77:62:A8:86:D0:EF:F1:51:41:E8:C5
Certificate issuer:       /CN=04610df8-1b67-4eaf-b73b-95f345a33b02
Certificate serial:       010D0C9F43285847B53148F0A5DFA0F36AAA91C0
Authority key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     18519
IP address blocks:        2605:fac0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:48:f0:a5:df:a0:f3:6a:aa:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=8efcb7a3-8a88-46d7-8f58-58a430078a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:d4:5f:fe:97:67:46:b8:d0:ed:2e:3b:0a:
                    2a:c9:02:98:20:05:29:df:0b:63:60:d5:f5:6a:60:
                    b8:e2:8a:d2:8d:20:c8:df:d6:e1:d3:8b:a0:ba:a4:
                    0b:41:64:0d:4e:6a:26:fc:7a:db:1f:d9:36:2b:ff:
                    64:87:68:aa:f3:6e:a2:3c:13:fb:6a:78:86:73:fb:
                    37:26:0d:9e:60:3c:49:72:5e:97:e9:79:3f:b0:32:
                    8c:9f:e6:89:6a:d2:1e:28:c4:a7:60:5e:b6:f2:8c:
                    57:9a:10:66:bd:b4:4e:7d:e7:0e:cd:90:e2:89:3f:
                    c9:5c:9c:97:60:90:6e:76:4d:bb:ec:cc:ee:3d:6d:
                    a0:34:ea:cf:80:d6:24:f6:14:0f:b3:ce:5e:4e:1b:
                    9a:4a:8d:ab:dc:f2:a9:30:b9:36:bf:1c:76:9b:f1:
                    63:97:c4:81:62:0d:3b:38:b5:51:fc:44:1c:6f:6a:
                    5f:3f:16:58:53:bb:bf:c0:14:2a:5a:cb:8c:d0:bc:
                    19:d2:57:84:22:9e:0c:67:e4:38:b8:59:da:7e:ff:
                    30:b7:be:e5:7a:76:01:64:ff:56:43:76:90:27:44:
                    28:04:e4:c4:46:ec:29:ac:ef:11:fc:7e:96:23:c1:
                    82:41:72:53:da:80:6d:a9:6d:d8:b7:90:d8:56:e2:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:24:B2:1F:21:88:DB:20:EC:77:62:A8:86:D0:EF:F1:51:41:E8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a6:34:fe:e9:10:49:5c:83:96:ad:69:ee:ac:b4:93:4c:de:
         60:b2:3c:2a:60:8e:97:ef:97:7b:be:5c:bb:94:4a:16:a6:c7:
         be:2e:d1:8b:32:75:95:42:0e:b5:37:cc:ce:d0:b1:82:f0:3a:
         73:76:a8:d8:b3:54:aa:47:44:24:e5:3e:ac:1e:72:42:d0:90:
         1b:51:e2:04:50:58:45:87:55:6f:a6:e8:bd:15:c5:b1:93:55:
         75:78:09:06:cd:86:65:b3:a5:96:f5:f5:b0:5d:ad:0b:3b:30:
         64:b1:da:53:10:ba:d1:a7:f1:bb:8c:ca:65:fe:0a:94:19:46:
         fc:c8:8c:16:d2:a6:4d:c3:5d:9e:3d:8f:a8:5e:ba:14:65:a0:
         fa:80:d3:3b:ec:e4:31:c0:35:96:c9:48:82:0f:56:1c:60:f4:
         53:af:f0:f7:65:e9:85:62:5c:ef:22:49:85:f4:d2:14:59:ee:
         31:97:7a:f3:fd:94:83:cb:51:cf:3f:8f:17:3d:e5:55:ea:12:
         95:42:55:ce:01:01:dc:b9:80:af:73:9b:f7:42:0a:36:00:26:
         69:db:12:da:f4:85:cd:11:ac:f5:07:47:91:62:91:9c:f7:67:
         14:4c:de:3f:c0:dc:bb:59:66:ab:66:13:e7:12:31:d0:9d:b1:
         a6:4c:5b:d5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe1MUjwpd+g82qqkcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ2MTBkZjgtMWI2Ny00ZWFmLWI3M2ItOTVmMzQ1YTMz
YjAyMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk
OGVmY2I3YTMtOGE4OC00NmQ3LThmNTgtNThhNDMwMDc4YTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBjUX/6XZ0a40O0uOwoqyQKYIAUp3wtjYNX1
amC44orSjSDI39bh04uguqQLQWQNTmom/HrbH9k2K/9kh2iq826iPBP7aniGc/s3
Jg2eYDxJcl6X6Xk/sDKMn+aJatIeKMSnYF628oxXmhBmvbROfecOzZDiiT/JXJyX
YJBudk277MzuPW2gNOrPgNYk9hQPs85eThuaSo2r3PKpMLk2vxx2m/Fjl8SBYg07
OLVR/EQcb2pfPxZYU7u/wBQqWsuM0LwZ0leEIp4MZ+Q4uFnafv8wt77lenYBZP9W
Q3aQJ0QoBOTERuwprO8R/H6WI8GCQXJT2oBtqW3Yt5DYVuKsUQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPwksh8hiNsg7HdiqIbQ7/FRQejFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNDYx
MGRmOC0xYjY3LTRlYWYtYjczYi05NWYzNDVhMzNiMDIvMzA3Mjk4ZjctZDhjNi0z
NmIyLWE3MDktOThiZmQwZDY3NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDQ2MTBkZjgtMWI2Ny00ZWFmLWI3
M2ItOTVmMzQ1YTMzYjAyLzA0NjEwZGY4LTFiNjctNGVhZi1iNzNiLTk1ZjM0NWEz
M2IwMi5jcmwwHwYDVR0jBBgwFoAU5u6ezrLr3a0pwb2sx83fF8aZW/cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNDYxMGRmOC0xYjY3LTRlYWYtYjczYi05NWYz
NDVhMzNiMDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX6wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCdpjT+6RBJXIOWrWnurLSTTN5gsjwqYI6X75d7vly7lEoWpse+LtGL
MnWVQg61N8zO0LGC8DpzdqjYs1SqR0Qk5T6sHnJC0JAbUeIEUFhFh1Vvpui9FcWx
k1V1eAkGzYZls6WW9fWwXa0LOzBksdpTELrRp/G7jMpl/gqUGUb8yIwW0qZNw12e
PY+oXroUZaD6gNM77OQxwDWWyUiCD1YcYPRTr/D3ZemFYlzvIkmF9NIUWe4xl3rz
/ZSDy1HPP48XPeVV6hKVQlXOAQHcuYCvc5v3Qgo2ACZp2xLa9IXNEaz1B0eRYpGc
92cUTN4/wNy7WWarZhPnEjHQnbGmTFvV
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:59 2024 by rpki-client on console-fra.rpki-client.org