Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa
File:                     a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa (raw, json)
Hash identifier:          gNiVT2Ga0tAZ8wQj8cCw3SayVZVjnAJVV2mgL/HpDj0=
Subject key identifier:   4A:FA:AB:F2:99:6E:C1:23:07:E1:DA:8B:57:E9:45:7E:62:39:04:77
Certificate issuer:       /CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6
Certificate serial:       010D0C9F4328584797E13BEA3578369243378800
Authority key identifier: 12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     11399
IP address blocks:        2606:6b40:fff0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3b:ea:35:78:36:92:43:37:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d20240-a3dd-4eb7-a371-edef87e79ba6
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=f983d6b2-f2ce-4d7a-aade-bd0dd829978e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:24:1d:1a:e0:2d:6a:24:a9:2a:93:9e:b4:
                    8b:55:3f:05:50:1f:c2:65:89:67:10:a7:1c:f1:21:
                    a8:20:66:37:51:65:e4:48:a8:96:bd:cd:21:51:d5:
                    bb:7c:b8:79:5c:6e:63:24:1e:50:d3:cc:da:1d:b4:
                    3c:0c:ff:a6:af:fd:f6:e9:f4:7b:f6:ff:79:ff:a1:
                    81:99:79:60:ac:ee:0c:ba:b3:4f:46:9b:73:05:fd:
                    6e:19:4c:64:df:bc:da:dc:e7:90:83:f3:96:e7:1c:
                    20:bc:a9:1c:5d:64:b5:f2:4e:e1:ba:28:42:a1:a3:
                    53:b6:b4:41:db:85:fe:31:3a:06:bd:10:a7:c0:ad:
                    16:e9:23:f2:af:25:bd:22:69:03:d9:71:a2:bd:76:
                    3d:f7:39:1a:57:06:4f:79:2d:70:f3:ea:8e:15:63:
                    39:ab:f5:08:53:2f:da:19:a5:cd:08:cf:8a:d4:5c:
                    fd:e6:fe:a0:92:86:d5:00:87:d7:4d:5c:cf:22:89:
                    ea:05:a5:a4:3d:ee:89:7e:d0:fa:56:06:e8:66:df:
                    ff:2c:c3:71:f0:09:3f:3c:cb:91:b0:4c:d6:48:73:
                    de:57:3b:7c:9a:f0:41:61:51:c2:2d:50:96:04:14:
                    06:20:b2:93:82:ae:a6:65:da:a7:38:44:ff:cf:4d:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FA:AB:F2:99:6E:C1:23:07:E1:DA:8B:57:E9:45:7E:62:39:04:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a8ea2a8d-cb00-3a1f-a6d2-f42ff0e5aee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6/a5d20240-a3dd-4eb7-a371-edef87e79ba6.crl

            X509v3 Authority Key Identifier:
                keyid:12:57:11:32:8D:FF:1B:DB:E6:5E:B3:80:6D:4C:3C:61:BB:F5:51:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d20240-a3dd-4eb7-a371-edef87e79ba6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6b40:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:c3:db:82:ee:24:61:fa:26:73:ae:a0:cc:da:f0:1a:ac:
         e7:a2:ab:a1:f7:dc:d0:2c:0b:58:61:1a:76:99:40:15:91:9e:
         07:89:9a:28:78:69:be:11:8a:df:02:ce:f2:1d:60:bf:44:9e:
         66:2f:77:d4:5e:dd:94:0c:6d:d8:b7:9d:ab:4e:99:27:3e:b0:
         88:47:91:b0:2b:d3:76:5c:5f:fe:f3:49:e3:49:4a:b3:36:0d:
         28:ec:90:ce:59:84:f6:cd:96:d7:3f:70:e5:a5:fc:0e:08:d1:
         fd:c0:0d:fd:e2:a5:94:00:5a:cd:5a:c2:39:17:0b:12:94:a0:
         de:25:59:3b:99:a1:83:50:72:e7:30:d1:fd:69:f1:72:43:d4:
         42:6e:e2:8e:68:85:34:a6:32:cd:0d:a5:61:30:80:24:89:f6:
         cf:60:2b:77:e5:5f:d4:04:d9:77:af:4a:57:9c:8c:da:7d:8e:
         b1:26:9f:09:87:85:bc:d9:72:8c:4d:31:5c:27:ac:c9:65:c0:
         26:2d:06:10:31:8c:01:3b:16:ba:b0:0b:c8:3f:4a:93:68:e6:
         8f:4b:e9:59:3a:75:45:0a:7c:fd:87:11:e3:aa:b5:ec:83:13:
         05:7d:00:9d:ff:f8:68:f0:de:98:5e:f1:ee:20:30:ad:5a:47:
         6f:9f:61:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeX4TvqNXg2kkM3iAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTVkMjAyNDAtYTNkZC00ZWI3LWEzNzEtZWRlZjg3ZTc5
YmE2MB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
Zjk4M2Q2YjItZjJjZS00ZDdhLWFhZGUtYmQwZGQ4Mjk5NzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHEkHRrgLWokqSqTnrSLVT8FUB/CZYlnEKcc
8SGoIGY3UWXkSKiWvc0hUdW7fLh5XG5jJB5Q08zaHbQ8DP+mr/326fR79v95/6GB
mXlgrO4MurNPRptzBf1uGUxk37za3OeQg/OW5xwgvKkcXWS18k7huihCoaNTtrRB
24X+MToGvRCnwK0W6SPyryW9ImkD2XGivXY99zkaVwZPeS1w8+qOFWM5q/UIUy/a
GaXNCM+K1Fz95v6gkobVAIfXTVzPIonqBaWkPe6JftD6VgboZt//LMNx8Ak/PMuR
sEzWSHPeVzt8mvBBYVHCLVCWBBQGILKTgq6mZdqnOET/z03QLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEr6q/KZbsEjB+Hai1fpRX5iOQR3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNWQy
MDI0MC1hM2RkLTRlYjctYTM3MS1lZGVmODdlNzliYTYvYThlYTJhOGQtY2IwMC0z
YTFmLWE2ZDItZjQyZmYwZTVhZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTVkMjAyNDAtYTNkZC00ZWI3LWEz
NzEtZWRlZjg3ZTc5YmE2L2E1ZDIwMjQwLWEzZGQtNGViNy1hMzcxLWVkZWY4N2U3
OWJhNi5jcmwwHwYDVR0jBBgwFoAUElcRMo3/G9vmXrOAbUw8Ybv1USYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNWQyMDI0MC1hM2RkLTRlYjctYTM3MS1lZGVm
ODdlNzliYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZrQP/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKmww9uC7iRh+iZzrqDM2vAarOeiq6H33NAsC1hhGnaZQBWRngeJ
mih4ab4Rit8CzvIdYL9EnmYvd9Re3ZQMbdi3natOmSc+sIhHkbAr03ZcX/7zSeNJ
SrM2DSjskM5ZhPbNltc/cOWl/A4I0f3ADf3ipZQAWs1awjkXCxKUoN4lWTuZoYNQ
cucw0f1p8XJD1EJu4o5ohTSmMs0NpWEwgCSJ9s9gK3flX9QE2XevSlecjNp9jrEm
nwmHhbzZcoxNMVwnrMllwCYtBhAxjAE7FrqwC8g/SpNo5o9L6Vk6dUUKfP2HEeOq
teyDEwV9AJ3/+Gjw3phe8e4gMK1aR2+fYes=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:13 2024 by rpki-client on console-fra.rpki-client.org