Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/f5e7ff0a-066e-31cc-a9e9-29cfe129e2f0.roa
File:                     f5e7ff0a-066e-31cc-a9e9-29cfe129e2f0.roa (raw, json)
Hash identifier:          gkhVb4+ohr7hLmCX9K6Sj1u4ZVmIbkW56aJ7nbgADbE=
Subject key identifier:   8A:33:E4:5B:69:28:9D:86:2E:69:FF:E4:96:E0:00:E2:C3:23:7B:A9
Certificate issuer:       /CN=0265af60-e6e1-4613-b159-33bc6053852a
Certificate serial:       010D0C9F4328584561285FCBE3B264A5D7C63880
Authority key identifier: CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/f5e7ff0a-066e-31cc-a9e9-29cfe129e2f0.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     394256
IP address blocks:        2606:9580::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5f:cb:e3:b2:64:a5:d7:c6:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0265af60-e6e1-4613-b159-33bc6053852a
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=9d2614e0-153e-4c22-a9a2-45e506e432a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:01:f0:3f:28:2d:ca:5d:bd:78:a8:55:98:
                    43:d4:0d:29:79:a8:d9:ab:f5:4d:2f:1c:2b:6a:27:
                    1a:e3:72:52:28:f7:54:c4:09:e2:be:77:20:36:cc:
                    02:80:c8:41:d9:80:37:eb:2e:e1:c2:dd:5e:90:c0:
                    17:8d:a4:d2:13:97:6a:16:9f:8b:96:b9:ef:a6:93:
                    b6:ca:4f:22:37:e3:50:ba:40:60:30:e3:2e:18:ef:
                    72:c5:56:45:8e:5c:c7:e2:6b:2c:70:ec:4f:c1:26:
                    5b:b5:e5:67:36:59:72:47:61:93:a9:0e:4f:3b:a2:
                    1c:11:06:c1:76:4d:56:5a:c7:85:62:3d:42:87:0d:
                    91:1d:01:b5:5f:d5:56:2f:85:9b:d0:6e:a4:72:50:
                    99:dd:a9:82:7a:b5:f9:a5:44:b3:fe:8f:d0:e5:4c:
                    cc:bc:9e:9b:9d:e7:8e:34:8b:4e:43:ff:47:00:d0:
                    c1:73:9e:5b:74:97:ea:c2:fc:a9:6b:db:6d:5f:17:
                    d4:d2:f9:de:c3:3c:77:6c:2d:f1:67:ba:47:33:f1:
                    32:c8:70:f0:a1:95:23:6a:10:1d:45:e3:a4:85:ea:
                    9c:28:f6:1b:14:ba:5a:f2:ab:88:16:61:16:3c:07:
                    0f:42:df:ec:49:98:a7:be:c7:9a:fa:83:bf:de:89:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:33:E4:5B:69:28:9D:86:2E:69:FF:E4:96:E0:00:E2:C3:23:7B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/f5e7ff0a-066e-31cc-a9e9-29cfe129e2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c5:a1:33:85:a3:09:17:45:8e:b2:5a:e5:45:5c:05:0b:48:
         14:11:61:ad:d9:fa:17:68:d1:53:4e:f6:4a:be:30:bb:28:22:
         69:1f:2c:d8:ab:d9:4d:20:f9:db:e3:fb:4a:45:60:91:4e:6f:
         81:f8:74:76:5f:81:64:f6:f8:a1:d3:dd:5b:d2:a9:78:f4:09:
         ab:7b:d5:48:6a:3f:2c:55:cb:66:8a:ae:b7:46:d8:8f:81:94:
         fa:32:e9:19:8f:14:d5:33:b0:f0:0a:63:fd:25:b5:f4:83:0b:
         b8:23:ba:9a:0e:40:7f:07:12:51:1e:be:c0:eb:c1:6e:55:96:
         da:97:89:1d:48:57:41:83:84:62:fb:2d:8e:92:17:ba:7a:9d:
         93:d1:f2:0e:34:c1:46:7b:ee:bc:86:ec:49:65:fd:a6:d0:37:
         ea:2a:79:0b:0c:a9:93:83:e0:a8:ea:d1:a8:67:55:e2:4f:03:
         64:57:99:53:f8:4f:0c:d8:db:2d:46:c6:47:4c:63:25:23:fc:
         be:ca:af:ea:63:54:9d:80:08:00:f3:d9:11:ca:1b:60:a2:94:
         1c:dc:71:0f:8a:f6:4c:2d:15:8c:62:d3:e1:99:14:ba:86:0e:
         64:ee:42:36:90:93:ec:d8:8c:fe:69:12:79:bb:d5:9f:3e:58:
         84:a9:25:3d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVhKF/L47JkpdfGOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI2NWFmNjAtZTZlMS00NjEzLWIxNTktMzNiYzYwNTM4
NTJhMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
OWQyNjE0ZTAtMTUzZS00YzIyLWE5YTItNDVlNTA2ZTQzMmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibsB8D8oLcpdvXioVZhD1A0peajZq/VNLxwr
aica43JSKPdUxAnivncgNswCgMhB2YA36y7hwt1ekMAXjaTSE5dqFp+LlrnvppO2
yk8iN+NQukBgMOMuGO9yxVZFjlzH4msscOxPwSZbteVnNllyR2GTqQ5PO6IcEQbB
dk1WWseFYj1Chw2RHQG1X9VWL4Wb0G6kclCZ3amCerX5pUSz/o/Q5UzMvJ6bneeO
NItOQ/9HANDBc55bdJfqwvypa9ttXxfU0vnewzx3bC3xZ7pHM/EyyHDwoZUjahAd
ReOkheqcKPYbFLpa8quIFmEWPAcPQt/sSZinvsea+oO/3on1MwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIoz5FtpKJ2GLmn/5JbgAOLDI3upMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMjY1
YWY2MC1lNmUxLTQ2MTMtYjE1OS0zM2JjNjA1Mzg1MmEvZjVlN2ZmMGEtMDY2ZS0z
MWNjLWE5ZTktMjljZmUxMjllMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDI2NWFmNjAtZTZlMS00NjEzLWIx
NTktMzNiYzYwNTM4NTJhLzAyNjVhZjYwLWU2ZTEtNDYxMy1iMTU5LTMzYmM2MDUz
ODUyYS5jcmwwHwYDVR0jBBgwFoAUzq0Q+c7m2tmdbeHCEIRCbYXyFVkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMjY1YWY2MC1lNmUxLTQ2MTMtYjE1OS0zM2Jj
NjA1Mzg1MmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaVgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBJxaEzhaMJF0WOslrlRVwFC0gUEWGt2foXaNFTTvZKvjC7KCJpHyzY
q9lNIPnb4/tKRWCRTm+B+HR2X4Fk9vih091b0ql49Amre9VIaj8sVctmiq63RtiP
gZT6MukZjxTVM7DwCmP9JbX0gwu4I7qaDkB/BxJRHr7A68FuVZbal4kdSFdBg4Ri
+y2Okhe6ep2T0fIONMFGe+68huxJZf2m0DfqKnkLDKmTg+Co6tGoZ1XiTwNkV5lT
+E8M2NstRsZHTGMlI/y+yq/qY1SdgAgA89kRyhtgopQc3HEPivZMLRWMYtPhmRS6
hg5k7kI2kJPs2Iz+aRJ5u9WfPliEqSU9
-----END CERTIFICATE-----
Generated at Tue Apr 30 15:53:50 2024 by rpki-client on console-fra.rpki-client.org