Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/17b03b4a-bdf6-3836-a326-f63024f8e445.roa
File:                     17b03b4a-bdf6-3836-a326-f63024f8e445.roa (raw, json)
Hash identifier:          W42ZOQhzU3AoyXSufbE3TOhtM89trPamTlK9ns7z1x8=
Subject key identifier:   00:E3:24:62:B0:6B:39:A9:D6:91:66:3D:12:1D:08:DE:F8:A5:50:DA
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F432858479AABE8FCE91EF7088B46F5E0
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/17b03b4a-bdf6-3836-a326-f63024f8e445.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     26810
IP address blocks:        2607:f220:610::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e8:fc:e9:1e:f7:08:8b:46:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=ff827bd2-15b7-433e-80f4-b7759294e682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:92:de:14:37:18:bd:98:92:67:e5:1a:ab:
                    96:c0:a4:66:77:80:ce:f1:be:88:b7:f3:db:69:1e:
                    7c:23:66:4e:55:ae:a9:4e:8f:cf:91:7c:e4:2b:8d:
                    22:e5:d7:99:2c:0a:57:d6:2f:ee:89:67:c8:c3:f4:
                    62:c0:54:9e:be:61:37:04:1d:b5:44:85:d4:c3:e0:
                    02:36:41:4f:09:59:32:18:1f:37:c6:a9:67:dc:9e:
                    0e:52:63:5e:7b:0c:5b:1b:75:b9:7c:31:da:dd:de:
                    e8:5e:59:d7:7c:a1:71:7a:c3:49:98:3b:8b:7f:d2:
                    07:6c:6e:de:cc:21:13:75:37:ed:76:4c:b9:d9:8e:
                    8b:88:db:57:e5:a4:43:ae:ce:b7:d0:ee:cc:f5:a8:
                    3c:4f:f4:c3:5b:00:84:a9:ab:29:5e:7e:c1:83:95:
                    b2:ad:81:c3:d9:6c:e7:ef:dc:be:c7:10:af:2f:20:
                    17:8d:f3:0f:d0:c0:63:46:a2:33:f3:1a:e6:53:9c:
                    55:18:ea:1d:b7:e0:4c:67:84:47:82:0e:4b:27:46:
                    ad:f4:42:ac:c0:d1:8a:28:e5:15:13:3d:ce:53:fa:
                    84:85:93:9f:8b:ec:3d:17:12:e0:74:f8:1a:cc:1f:
                    6f:29:01:cf:96:d5:02:3c:43:a9:b0:35:3c:7b:66:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E3:24:62:B0:6B:39:A9:D6:91:66:3D:12:1D:08:DE:F8:A5:50:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/17b03b4a-bdf6-3836-a326-f63024f8e445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f220:610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:42:2b:52:8d:89:29:71:71:e2:e9:b1:bb:34:a5:8f:74:77:
         03:76:ac:a1:20:33:94:d9:ff:7c:8a:8c:cd:dc:12:cb:33:18:
         8d:9d:dd:c7:83:e4:96:2f:c5:cb:bc:5e:44:52:f7:d4:7d:8d:
         9e:40:f4:df:e6:1f:93:1d:16:25:66:8f:a7:96:cf:3d:7d:85:
         6e:6d:8f:46:46:63:7d:fb:13:b5:e8:c6:51:41:93:41:b7:fd:
         93:ac:e7:84:f1:d3:6e:84:06:f0:7a:0e:cf:8e:e4:ee:2c:ad:
         86:b5:2e:29:37:ce:d6:bd:b8:b4:c9:5d:c2:c9:fb:d5:a1:72:
         11:53:27:24:4b:42:e2:b7:e5:f4:a1:b1:2e:2a:91:95:c8:5c:
         9f:b2:f3:cb:06:5d:21:45:04:9e:c4:44:b6:15:91:cb:05:5d:
         c7:ca:a3:f4:38:f4:ed:06:36:5b:0f:e8:da:00:ab:90:42:01:
         88:cc:da:4d:42:2e:aa:51:bc:14:bc:9b:af:98:0e:8e:fa:03:
         df:ed:9c:b2:4b:7b:64:13:eb:d7:ca:e7:33:6c:4d:ff:5a:b6:
         cb:e2:6e:79:47:6a:b8:00:3e:92:e8:06:61:c2:f8:b9:3b:f5:
         54:51:9b:6a:4f:c0:fc:21:fa:7f:07:c8:2d:a1:33:d1:32:e6:
         b7:57:19:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeaq+j86R73CItG9eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmEzMGIyMDctZGUwNC00MjVmLTk0ZTktZWUxMmQ0NTI5
ZjU2MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk
ZmY4MjdiZDItMTViNy00MzNlLTgwZjQtYjc3NTkyOTRlNjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFCS3hQ3GL2YkmflGquWwKRmd4DO8b6It/Pb
aR58I2ZOVa6pTo/PkXzkK40i5deZLApX1i/uiWfIw/RiwFSevmE3BB21RIXUw+AC
NkFPCVkyGB83xqln3J4OUmNeewxbG3W5fDHa3d7oXlnXfKFxesNJmDuLf9IHbG7e
zCETdTftdky52Y6LiNtX5aRDrs630O7M9ag8T/TDWwCEqaspXn7Bg5WyrYHD2Wzn
79y+xxCvLyAXjfMP0MBjRqIz8xrmU5xVGOodt+BMZ4RHgg5LJ0at9EKswNGKKOUV
Ez3OU/qEhZOfi+w9FxLgdPgazB9vKQHPltUCPEOpsDU8e2YP2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFADjJGKwazmp1pFmPRIdCN74pVDaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YTMw
YjIwNy1kZTA0LTQyNWYtOTRlOS1lZTEyZDQ1MjlmNTYvMTdiMDNiNGEtYmRmNi0z
ODM2LWEzMjYtZjYzMDI0ZjhlNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmEzMGIyMDctZGUwNC00MjVmLTk0
ZTktZWUxMmQ0NTI5ZjU2LzZhMzBiMjA3LWRlMDQtNDI1Zi05NGU5LWVlMTJkNDUy
OWY1Ni5jcmwwHwYDVR0jBBgwFoAUT/I+sSc3DCrh5M6hhc6s7CFLddYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YTMwYjIwNy1kZTA0LTQyNWYtOTRlOS1lZTEy
ZDQ1MjlmNTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfyIAYQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADNCK1KNiSlxceLpsbs0pY90dwN2rKEgM5TZ/3yKjM3cEsszGI2d
3ceD5JYvxcu8XkRS99R9jZ5A9N/mH5MdFiVmj6eWzz19hW5tj0ZGY337E7XoxlFB
k0G3/ZOs54Tx026EBvB6Ds+O5O4srYa1Lik3zta9uLTJXcLJ+9WhchFTJyRLQuK3
5fShsS4qkZXIXJ+y88sGXSFFBJ7ERLYVkcsFXcfKo/Q49O0GNlsP6NoAq5BCAYjM
2k1CLqpRvBS8m6+YDo76A9/tnLJLe2QT69fK5zNsTf9atsvibnlHargAPpLoBmHC
+Lk79VRRm2pPwPwh+n8HyC2hM9Ey5rdXGUk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:05 2024 by rpki-client on console-fra.rpki-client.org