Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/d30bc9ea-20fe-3220-9a39-12b30195bcba.roa
File:                     d30bc9ea-20fe-3220-9a39-12b30195bcba.roa (raw, json)
Hash identifier:          N9+nyOrYHREuYVnCNWQdrdEPou0IpnGnZ+nuaj6hIzs=
Subject key identifier:   95:42:9B:E2:C5:85:1E:BA:75:A2:40:4F:FB:73:80:8F:BC:93:C1:1B
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F432858451CE0334D9DE16FBB77244B80
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/d30bc9ea-20fe-3220-9a39-12b30195bcba.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     400097
IP address blocks:        2606:3d40:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:33:4d:9d:e1:6f:bb:77:24:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=eb052aca-c01e-4a0f-9e21-f13a85c1c337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:2e:23:08:9c:99:0a:22:d8:ee:fd:e1:79:
                    18:e4:a2:8e:c4:b3:b4:fe:41:98:2c:9c:06:87:20:
                    77:ac:71:73:04:af:48:fd:93:37:08:0c:86:fe:aa:
                    42:a2:80:2f:02:17:07:fe:d6:a1:0b:a3:d2:63:ff:
                    85:71:09:39:8c:13:23:22:32:91:43:b5:db:da:f8:
                    1a:b8:2f:9c:43:d2:c7:8b:79:ec:1e:f1:ac:f9:89:
                    68:79:f9:2f:ae:08:f4:d7:ef:07:6f:4c:6b:87:45:
                    8f:8a:b5:f6:45:55:18:d0:7c:fa:13:65:a2:e3:96:
                    b0:f4:6b:a8:58:88:f4:dc:7f:28:65:cf:70:ae:be:
                    3b:d5:2a:d7:ee:bd:55:ef:1f:db:94:0f:21:73:12:
                    be:fe:02:64:c3:69:ba:af:f3:cb:e9:63:c0:2d:ae:
                    38:09:e8:a1:67:da:b6:70:64:90:42:cf:51:c0:56:
                    9d:19:e4:8f:b4:93:71:87:64:bb:d4:6c:14:fb:ed:
                    39:11:53:57:09:d8:26:3a:c5:1e:f5:f1:32:85:af:
                    26:62:cc:7d:46:19:51:4b:79:ef:90:0c:eb:f0:8c:
                    10:0e:70:ca:bd:f9:fc:7b:97:0e:76:e5:5e:ea:c7:
                    55:f1:90:82:3a:0d:d3:b9:4d:20:fe:a3:78:34:07:
                    00:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:42:9B:E2:C5:85:1E:BA:75:A2:40:4F:FB:73:80:8F:BC:93:C1:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/d30bc9ea-20fe-3220-9a39-12b30195bcba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:ee:36:d2:ac:03:02:04:2b:72:4c:e4:a9:77:88:3d:b8:
         3b:2d:b6:db:25:00:be:fe:18:16:ba:f3:80:04:51:a0:58:94:
         62:7c:76:fe:e9:01:40:25:16:be:a4:fc:d1:11:bd:c9:92:5a:
         63:9f:33:00:cd:1d:67:92:db:6d:b0:8a:5e:71:0b:47:81:b8:
         ea:a7:74:7d:a4:19:d5:0b:aa:92:5d:09:06:d3:87:6a:de:b2:
         62:18:61:b5:c6:05:63:9b:ce:37:48:17:db:e4:8e:c9:74:8e:
         19:f9:f5:c1:d0:f8:8c:d2:01:f6:05:f4:39:e3:d1:44:21:b9:
         66:83:12:68:1c:75:1a:ea:70:cd:47:30:9a:2a:ef:b2:b2:dc:
         3d:8c:07:84:03:91:45:2e:dc:e7:a8:92:e7:4d:8f:2c:55:55:
         5a:71:b8:2e:44:6a:1b:29:e8:44:76:ca:3f:93:ca:a8:7f:a4:
         ab:04:92:17:8e:91:fd:19:f6:55:09:4c:fb:ac:00:e5:36:af:
         9c:ce:cf:14:d1:1b:a9:dc:8e:ec:86:bd:11:8f:26:d0:90:f1:
         f1:65:44:2a:2c:c8:1a:f2:82:4f:dd:19:b1:9f:b7:15:b2:0b:
         5a:13:94:34:1c:a3:81:e7:9b:06:f2:28:16:bd:16:f6:a7:a5:
         a9:cb:48:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUc4DNNneFvu3ckS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy
NDVkMB4XDTI0MDMwNjAyMDAyNVoXDTI0MDYwNDAxMDAyNVowLzEtMCsGA1UEAxMk
ZWIwNTJhY2EtYzAxZS00YTBmLTllMjEtZjEzYTg1YzFjMzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywQuIwicmQoi2O794XkY5KKOxLO0/kGYLJwG
hyB3rHFzBK9I/ZM3CAyG/qpCooAvAhcH/tahC6PSY/+FcQk5jBMjIjKRQ7Xb2vga
uC+cQ9LHi3nsHvGs+Yloefkvrgj01+8Hb0xrh0WPirX2RVUY0Hz6E2Wi45aw9Guo
WIj03H8oZc9wrr471SrX7r1V7x/blA8hcxK+/gJkw2m6r/PL6WPALa44CeihZ9q2
cGSQQs9RwFadGeSPtJNxh2S71GwU++05EVNXCdgmOsUe9fEyha8mYsx9RhlRS3nv
kAzr8IwQDnDKvfn8e5cOduVe6sdV8ZCCOg3TuU0g/qN4NAcA9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJVCm+LFhR66daJAT/tzgI+8k8EbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi
NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvZDMwYmM5ZWEtMjBmZS0z
MjIwLTlhMzktMTJiMzAxOTViY2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl
YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi
MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx
MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHpw7jbSrAMCBCtyTOSpd4g9uDstttslAL7+GBa684AEUaBYlGJ8
dv7pAUAlFr6k/NERvcmSWmOfMwDNHWeS222wil5xC0eBuOqndH2kGdULqpJdCQbT
h2resmIYYbXGBWObzjdIF9vkjsl0jhn59cHQ+IzSAfYF9Dnj0UQhuWaDEmgcdRrq
cM1HMJoq77Ky3D2MB4QDkUUu3OeokudNjyxVVVpxuC5Eahsp6ER2yj+Tyqh/pKsE
kheOkf0Z9lUJTPusAOU2r5zOzxTRG6ncjuyGvRGPJtCQ8fFlRCosyBrygk/dGbGf
txWyC1oTlDQco4HnmwbyKBa9FvanpanLSH4=
-----END CERTIFICATE-----
Generated at Mon May 20 01:41:25 2024 by rpki-client on console-fra.rpki-client.org