Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e76bd78-9b58-3211-842a-82982cf133ec.roa
File:                     3e76bd78-9b58-3211-842a-82982cf133ec.roa (raw, json)
Hash identifier:          bpV3V7qlf+s3nBdXCfL8ZhRpZPA9qiS7IFQt5WOD1A8=
Subject key identifier:   4C:09:46:05:9C:E2:8E:B6:34:CC:89:97:5F:C2:F4:2B:5F:E9:98:33
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858451CE0364CB12A4943AE42AC80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e76bd78-9b58-3211-842a-82982cf133ec.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     5769
IP address blocks:        2607:fa48::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:36:4c:b1:2a:49:43:ae:42:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=a731ff41-0e27-411b-b348-f78d09ec0630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:76:c9:2d:1b:67:1c:bc:84:bf:98:bc:8a:
                    1c:30:7f:58:00:08:6e:2c:5c:91:3f:67:15:26:30:
                    74:5f:d7:0c:52:97:5c:08:a1:ae:38:17:61:25:70:
                    11:14:99:70:75:da:86:84:1e:07:9d:c5:84:b3:04:
                    4a:34:85:da:68:dd:88:dc:fc:8f:3a:bb:84:10:1b:
                    60:bc:ce:15:b1:2d:54:09:cb:fc:d8:99:67:a1:d7:
                    0b:89:c8:11:6f:d6:e9:eb:2a:05:a4:2e:f7:89:41:
                    49:ae:91:f6:36:44:3b:c5:b2:5d:ef:e8:f9:bb:2a:
                    d3:f6:e2:be:40:27:4b:d0:12:1e:66:27:5e:e5:ed:
                    76:98:1c:49:32:4b:71:4b:63:85:b6:25:58:8b:62:
                    84:b8:c8:2d:26:c3:2f:cc:ec:2f:7d:48:5c:17:33:
                    da:06:24:f7:c8:9d:e9:cb:fe:63:56:7e:d0:ac:df:
                    7b:3e:b5:81:09:13:16:98:7d:aa:71:5a:d5:c9:46:
                    55:73:12:5a:fc:cc:5a:8f:83:55:6c:c4:be:73:e4:
                    ea:b1:a3:14:b4:e8:3a:1a:19:cc:7f:b1:b8:1b:17:
                    83:76:ce:3e:47:ce:06:d3:ed:07:4a:14:f9:1b:d8:
                    58:8d:a6:14:c5:ad:50:91:01:e0:3b:c0:79:81:9c:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:09:46:05:9C:E2:8E:B6:34:CC:89:97:5F:C2:F4:2B:5F:E9:98:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e76bd78-9b58-3211-842a-82982cf133ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa48::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:14:b1:2b:e8:b3:cf:a4:66:d1:45:a2:b9:f8:d9:e5:af:
         ff:a3:6d:cd:12:23:39:b2:60:10:c0:da:27:0f:a2:83:8a:5f:
         a3:fb:25:03:b5:2a:57:97:92:f6:15:4c:be:8a:56:9d:3b:60:
         7b:04:dc:d8:03:bd:0d:f9:1c:6a:de:4e:8e:d9:62:a4:6d:7d:
         81:15:ba:67:b0:f7:8c:57:8d:7f:ae:54:6e:f0:b9:af:31:dc:
         f3:42:c9:41:1c:62:19:af:7e:e4:5d:0f:67:20:5a:73:97:90:
         91:19:97:b8:3a:43:b7:b6:33:36:55:89:83:4b:98:09:dd:69:
         59:48:1e:a2:cd:fc:cf:ac:39:4c:d9:d3:74:7b:b4:b9:9a:c4:
         f2:2b:9e:09:38:76:ca:0c:2d:5f:00:b1:fd:f7:d6:c2:96:cb:
         c1:eb:a9:14:d8:0d:b8:e0:e5:d8:ca:09:cf:6b:de:11:4d:84:
         a4:7d:84:30:5f:6e:5d:7d:6e:61:b3:46:f7:90:30:c8:65:5f:
         f5:69:bd:9c:97:72:31:30:55:6f:3c:e5:b3:68:bb:f0:d0:dd:
         91:e1:2c:c8:41:e3:0d:15:e0:b1:5b:fb:42:0d:fd:bd:f8:3f:
         97:87:aa:d2:15:99:e1:d3:e8:98:b6:b9:5a:97:6e:ff:d6:ef:
         1d:82:66:20
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUc4DZMsSpJQ65CrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI0MDMwNjAyMDAyNVoXDTI0MDYwNDAxMDAyNVowLzEtMCsGA1UEAxMk
YTczMWZmNDEtMGUyNy00MTFiLWIzNDgtZjc4ZDA5ZWMwNjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGZ2yS0bZxy8hL+YvIocMH9YAAhuLFyRP2cV
JjB0X9cMUpdcCKGuOBdhJXARFJlwddqGhB4HncWEswRKNIXaaN2I3PyPOruEEBtg
vM4VsS1UCcv82JlnodcLicgRb9bp6yoFpC73iUFJrpH2NkQ7xbJd7+j5uyrT9uK+
QCdL0BIeZide5e12mBxJMktxS2OFtiVYi2KEuMgtJsMvzOwvfUhcFzPaBiT3yJ3p
y/5jVn7QrN97PrWBCRMWmH2qcVrVyUZVcxJa/Mxaj4NVbMS+c+TqsaMUtOg6GhnM
f7G4GxeDds4+R84G0+0HShT5G9hYjaYUxa1QkQHgO8B5gZxUzwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEwJRgWc4o62NMyJl1/C9Ctf6ZgzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvM2U3NmJkNzgtOWI1OC0z
MjExLTg0MmEtODI5ODJjZjEzM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6SDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAU1BSxK+izz6Rm0UWiufjZ5a//o23NEiM5smAQwNonD6KDil+j+yUD
tSpXl5L2FUy+iladO2B7BNzYA70N+Rxq3k6O2WKkbX2BFbpnsPeMV41/rlRu8Lmv
MdzzQslBHGIZr37kXQ9nIFpzl5CRGZe4OkO3tjM2VYmDS5gJ3WlZSB6izfzPrDlM
2dN0e7S5msTyK54JOHbKDC1fALH999bClsvB66kU2A244OXYygnPa94RTYSkfYQw
X25dfW5hs0b3kDDIZV/1ab2cl3IxMFVvPOWzaLvw0N2R4SzIQeMNFeCxW/tCDf29
+D+Xh6rSFZnh0+iYtrlal27/1u8dgmYg
-----END CERTIFICATE-----
Generated at Sat May 18 15:26:51 2024 by rpki-client on console-fra.rpki-client.org