Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa
File:                     87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa (raw, json)
Hash identifier:          TNMK18B7My8jbFLZjgQ/f25Fb/cXwT2l7LTjYfl0LC4=
Subject key identifier:   0A:9A:86:ED:70:B4:29:DA:F9:1C:B2:23:8B:EF:CF:CB:21:B4:E9:48
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F43285847A73BEBAB7518366D391AFA00
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     0
IP address blocks:        2620:2f:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:eb:ab:75:18:36:6d:39:1a:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=9e2ab7db-2f35-47c7-b184-7080c57562c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c6:2c:5d:29:a5:28:6d:bb:e2:fe:e5:36:88:
                    c5:8e:b3:83:75:12:e1:0d:04:c3:dd:10:3f:6c:14:
                    5a:4d:bc:3f:e8:67:67:b4:2b:84:5c:91:24:6f:9a:
                    09:20:7f:95:9e:49:bd:45:a4:85:00:28:e0:27:ec:
                    95:1b:4c:40:01:83:2f:6b:d3:34:3b:94:f0:e0:75:
                    ed:80:6e:02:7a:42:52:1c:60:38:73:c8:7a:7c:7c:
                    f5:83:c0:62:fb:95:2e:fc:b2:dc:72:6c:7e:f0:e9:
                    9c:ea:55:50:d6:1d:80:9d:d9:6d:9d:1c:5b:5c:3c:
                    a6:c9:60:bf:d5:d6:9e:1b:90:d5:ac:2b:2d:41:6c:
                    a0:5f:36:a5:99:09:a3:4a:5a:95:ab:40:3f:16:1d:
                    cd:1c:b6:09:0d:30:de:a1:fa:20:20:ea:ca:8e:5a:
                    33:b2:f5:62:e5:6f:b0:b3:4a:57:6f:f2:4c:71:03:
                    0c:d3:b3:8c:d9:43:ad:f0:1a:c3:f3:f2:7b:ff:1c:
                    f1:ec:de:ee:f7:20:f8:c0:85:77:98:48:45:45:a0:
                    e3:51:c6:63:b2:2e:2b:e3:ee:fd:3a:c9:65:4d:3b:
                    77:df:8e:99:bc:db:22:46:be:4f:cd:67:19:47:5c:
                    3d:2e:1a:61:1b:24:49:af:3f:bf:36:68:51:b4:2f:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9A:86:ED:70:B4:29:DA:F9:1C:B2:23:8B:EF:CF:CB:21:B4:E9:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2f:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:1a:ad:e1:99:bc:80:fa:f1:16:93:c8:22:3e:75:bc:3a:
         8a:ed:23:0a:54:f4:7e:81:2c:21:00:63:f6:ab:15:b9:ee:a5:
         aa:21:f9:c4:38:8f:90:bc:00:91:e7:43:21:79:ee:25:de:f1:
         ef:6e:cc:85:af:48:f7:8b:bd:4e:80:0d:d0:32:21:4a:25:14:
         da:94:58:40:e2:31:43:b6:68:cf:82:49:4a:79:55:a6:c6:1a:
         f6:c9:5a:0d:89:3c:86:5f:89:97:95:ed:46:aa:26:58:89:4c:
         f4:95:16:7b:6c:be:15:57:dd:48:bf:e4:de:2d:fb:ca:98:b0:
         73:fa:fb:d4:3b:2f:6e:87:70:07:81:d8:85:66:c6:0b:f5:84:
         ba:48:a4:f0:0b:41:69:7d:bf:96:6d:7f:11:09:fd:93:c0:10:
         84:29:ab:80:73:c6:f7:4f:75:51:c4:8e:6a:5a:e0:64:f7:8b:
         29:21:02:a5:d9:63:58:f4:c9:d7:08:6f:8b:08:12:e1:80:36:
         3f:e9:65:79:26:9c:6e:dd:f0:ef:cd:b7:28:7d:ce:57:28:2c:
         38:b1:bc:d5:4a:e2:6b:a2:8e:8d:35:42:2d:22:58:f3:ee:da:
         16:eb:1d:3e:4e:1e:d5:b0:b6:7f:ce:73:ff:12:7f:34:ce:46:
         01:4c:f2:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEenO+urdRg2bTka+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk
OWUyYWI3ZGItMmYzNS00N2M3LWIxODQtNzA4MGM1NzU2MmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9sYsXSmlKG274v7lNojFjrODdRLhDQTD3RA/
bBRaTbw/6GdntCuEXJEkb5oJIH+Vnkm9RaSFACjgJ+yVG0xAAYMva9M0O5Tw4HXt
gG4CekJSHGA4c8h6fHz1g8Bi+5Uu/LLccmx+8Omc6lVQ1h2AndltnRxbXDymyWC/
1daeG5DVrCstQWygXzalmQmjSlqVq0A/Fh3NHLYJDTDeofogIOrKjlozsvVi5W+w
s0pXb/JMcQMM07OM2UOt8BrD8/J7/xzx7N7u9yD4wIV3mEhFRaDjUcZjsi4r4+79
OsllTTt3346ZvNsiRr5PzWcZR1w9LhphGyRJrz+/NmhRtC+/XwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAqahu1wtCna+RyyI4vvz8shtOlIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvODdmMzU3YjYtNTQ1YS0z
NmEyLTk5ZjYtZjlkYWIyYTVlNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAL8AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADr8Gq3hmbyA+vEWk8giPnW8OortIwpU9H6BLCEAY/arFbnupaoh
+cQ4j5C8AJHnQyF57iXe8e9uzIWvSPeLvU6ADdAyIUolFNqUWEDiMUO2aM+CSUp5
VabGGvbJWg2JPIZfiZeV7UaqJliJTPSVFntsvhVX3Ui/5N4t+8qYsHP6+9Q7L26H
cAeB2IVmxgv1hLpIpPALQWl9v5ZtfxEJ/ZPAEIQpq4BzxvdPdVHEjmpa4GT3iykh
AqXZY1j0ydcIb4sIEuGANj/pZXkmnG7d8O/Ntyh9zlcoLDixvNVK4muijo01Qi0i
WPPu2hbrHT5OHtWwtn/Oc/8SfzTORgFM8lw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:36 2024 by rpki-client on console-fra.rpki-client.org