Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/704353db-ab26-3b20-a1e4-a49b16d7dd2e.roa
File:                     704353db-ab26-3b20-a1e4-a49b16d7dd2e.roa (raw, json)
Hash identifier:          xfUdlO3fEPgzhBc6Rb1KEgAzOMXgttfCVWV3rzyqlB4=
Subject key identifier:   7C:77:D0:52:B7:53:D0:32:89:1C:7F:78:80:EB:87:F7:3E:C3:C1:1F
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F432858476B364396167AE1574BEFAB80
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/704353db-ab26-3b20-a1e4-a49b16d7dd2e.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     3477
IP address blocks:        2601:a010::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:43:96:16:7a:e1:57:4b:ef:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=7147da9c-92b2-4944-84f7-aac2de7138a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:e3:61:12:2d:87:ab:95:66:3a:49:5e:4f:
                    f3:a8:84:10:b1:87:04:2f:88:79:f4:d0:04:ba:1e:
                    7c:33:ae:69:9b:26:34:b3:4d:a0:c1:ab:25:de:e2:
                    4c:d3:ee:35:6e:72:60:bc:35:69:5d:ab:72:e8:da:
                    b7:13:95:de:7b:ec:5a:33:33:9a:c4:ec:da:74:ad:
                    a5:c6:7f:b5:bb:c9:a2:60:a4:dd:92:64:ac:c5:a2:
                    0d:9a:6d:e9:13:41:93:da:3d:7f:fa:c9:c3:be:47:
                    22:50:4a:d2:18:8e:a9:28:df:0c:fb:24:b7:75:b7:
                    58:aa:ee:54:ae:e4:88:ea:4b:89:0a:9c:81:eb:dc:
                    36:50:07:ad:c0:cb:08:fb:b4:f5:85:c9:e6:69:a4:
                    0a:15:f8:2e:88:ea:bb:0e:f0:ee:e3:9f:5c:e2:17:
                    ec:b5:73:d0:a6:ec:31:eb:17:6e:08:f3:60:1b:05:
                    1b:5a:f5:e6:a3:c4:97:fc:6c:5a:c4:ca:78:f5:45:
                    a0:25:5d:bd:1a:3e:9f:0e:4b:a5:5b:79:cc:3e:bb:
                    1d:d7:7c:df:9b:06:05:9b:bd:2b:b3:6a:a6:ea:63:
                    74:dc:f6:d8:5b:c1:41:7d:cd:10:20:92:ff:e5:6f:
                    ea:90:82:f5:03:f0:31:36:c3:16:d6:72:f6:59:bd:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:77:D0:52:B7:53:D0:32:89:1C:7F:78:80:EB:87:F7:3E:C3:C1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/704353db-ab26-3b20-a1e4-a49b16d7dd2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a010::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:3e:3e:13:52:51:e7:a9:e4:2b:56:34:25:df:b1:de:c8:
         fe:84:52:d5:ca:15:17:c7:5f:5c:42:3c:29:b7:8e:25:d1:de:
         52:5c:16:b5:76:db:ac:20:23:6a:64:5d:5f:bd:65:58:ee:a1:
         84:ee:94:ed:55:b4:ef:17:f2:67:5e:39:53:50:5d:2e:98:3c:
         cb:59:c6:2a:d0:7a:89:ca:22:48:a8:a8:83:9a:37:db:2b:ed:
         cb:04:3d:89:11:95:43:cf:90:8b:07:20:ac:ae:d9:06:98:d3:
         3f:39:02:40:fa:c9:8f:8f:65:93:a6:51:58:e5:fe:55:c2:33:
         06:b4:87:ef:d4:73:d7:33:a2:c4:61:eb:42:e0:e5:ad:50:e4:
         92:f0:b8:39:90:4c:dc:76:ca:2a:84:9c:ac:d5:91:cc:03:09:
         88:f4:9d:16:41:64:a7:e4:95:95:be:03:7c:50:49:cc:63:54:
         b0:fd:a3:83:c8:77:3d:99:6d:78:a3:9f:0f:8e:f2:6a:d7:c4:
         76:9c:1d:43:16:3f:78:d9:37:c1:80:b8:a3:fb:8e:0d:17:f4:
         9d:fb:50:56:a2:90:f1:d8:0b:f3:e4:c3:b0:3f:02:89:d5:4a:
         7c:6e:0c:26:1c:d3:09:72:cd:67:f8:df:b7:a1:a6:b0:1f:96:
         37:7e:b4:c4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdrNkOWFnrhV0vvq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk
NzE0N2RhOWMtOTJiMi00OTQ0LTg0ZjctYWFjMmRlNzEzOGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRzjYRIth6uVZjpJXk/zqIQQsYcEL4h59NAE
uh58M65pmyY0s02gwasl3uJM0+41bnJgvDVpXaty6Nq3E5Xee+xaMzOaxOzadK2l
xn+1u8miYKTdkmSsxaINmm3pE0GT2j1/+snDvkciUErSGI6pKN8M+yS3dbdYqu5U
ruSI6kuJCpyB69w2UAetwMsI+7T1hcnmaaQKFfguiOq7DvDu459c4hfstXPQpuwx
6xduCPNgGwUbWvXmo8SX/GxaxMp49UWgJV29Gj6fDkulW3nMPrsd13zfmwYFm70r
s2qm6mN03PbYW8FBfc0QIJL/5W/qkIL1A/AxNsMW1nL2Wb0iFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHx30FK3U9AyiRx/eIDrh/c+w8EfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvNzA0MzUzZGItYWIyNi0z
YjIwLWExZTQtYTQ5YjE2ZDdkZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgEDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCe9j4+E1JR56nkK1Y0Jd+x3sj+hFLVyhUXx19cQjwpt44l0d5SXBa1
dtusICNqZF1fvWVY7qGE7pTtVbTvF/JnXjlTUF0umDzLWcYq0HqJyiJIqKiDmjfb
K+3LBD2JEZVDz5CLByCsrtkGmNM/OQJA+smPj2WTplFY5f5VwjMGtIfv1HPXM6LE
YetC4OWtUOSS8Lg5kEzcdsoqhJys1ZHMAwmI9J0WQWSn5JWVvgN8UEnMY1Sw/aOD
yHc9mW14o58PjvJq18R2nB1DFj942TfBgLij+44NF/Sd+1BWopDx2Avz5MOwPwKJ
1Up8bgwmHNMJcs1n+N+3oaawH5Y3frTE
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org