Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa
File:                     1bfb7689-19f6-30b7-b66c-542dc074defc.roa (raw, json)
Hash identifier:          H90FwxsDXXBZXtWCuYwLIQUy+Ws+yyaq0g4QhKOgHD4=
Subject key identifier:   7B:05:A2:3B:AF:34:E4:C4:17:8B:80:53:09:CE:A2:AA:C3:93:00:A0
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285844E459F2A59B7E67CFC127AD40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa
Signing time:             Wed 14 Feb 2024 20:04:40 +0000
ROA not before:           Wed 14 Feb 2024 20:04:40 +0000
ROA not after:            Tue 14 May 2024 19:04:40 +0000
asID:                     16509
IP address blocks:        2605:4300:2c14::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e4:59:f2:a5:9b:7e:67:cf:c1:27:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Feb 14 20:04:40 2024 GMT
            Not After : May 14 19:04:40 2024 GMT
        Subject: CN=dced61e0-0f07-40f4-89e3-5b6f77b14861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:b3:ab:05:9c:7c:29:57:d9:fe:4b:5f:ce:
                    03:e6:aa:f3:10:8f:f1:aa:76:09:65:0f:26:3e:3c:
                    8e:10:19:13:b7:ab:2e:9c:23:75:c3:16:1e:d3:99:
                    6b:76:8b:4b:36:86:eb:61:c9:7d:de:4c:f5:14:62:
                    c0:20:41:08:08:fb:bb:45:67:f9:2d:57:0e:58:77:
                    7e:29:4c:e9:bf:e4:36:d2:ad:63:ec:c4:83:56:f3:
                    ec:b9:14:a3:b6:20:eb:2f:36:97:3f:a8:18:48:8a:
                    74:4e:c4:c6:a1:a0:a0:08:70:35:5c:c7:b8:cf:d5:
                    f6:fc:94:d6:0e:1d:ff:2c:fa:25:ef:6d:1a:87:1a:
                    64:03:65:99:dc:71:13:e6:95:8d:27:7c:f9:86:ba:
                    1d:0b:f4:7d:0a:64:98:c1:df:b3:fa:b0:6e:17:ad:
                    8a:5c:a4:fa:b8:b7:d9:8d:41:57:f9:48:43:83:dc:
                    5d:16:df:30:67:44:05:a1:b2:69:96:c1:96:5f:c1:
                    cf:85:95:78:4f:d7:d7:f0:5f:9a:54:eb:14:e5:ec:
                    bc:f0:99:ec:0b:81:3e:0e:9c:3d:4d:e0:0b:8a:6c:
                    e8:3e:3b:6e:36:c7:a8:15:ee:59:09:3c:4a:1e:f6:
                    bb:dc:81:25:8b:6f:42:53:08:4f:9f:01:e8:fc:39:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:05:A2:3B:AF:34:E4:C4:17:8B:80:53:09:CE:A2:AA:C3:93:00:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1bfb7689-19f6-30b7-b66c-542dc074defc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:66:ea:48:3d:95:f5:30:50:22:f4:94:57:6b:1a:aa:d3:f5:
         31:db:37:35:1c:2b:89:a6:45:23:37:ae:c0:d3:8e:60:23:b4:
         ea:06:42:5f:00:72:02:5a:79:8b:77:dc:98:b5:74:01:bf:78:
         a0:e4:14:41:84:9e:12:e8:bc:46:ea:33:bd:14:86:dd:e9:be:
         ce:a8:d1:3b:75:28:eb:df:da:80:38:f8:b6:7c:8f:fb:8f:29:
         2c:61:f3:ee:fa:1f:bd:09:1f:d7:4c:0b:7a:57:1f:e5:56:8d:
         49:31:35:25:d6:8e:06:23:d8:65:5d:01:07:4d:34:09:af:bc:
         03:14:b8:0c:a4:a6:ac:11:b9:c9:04:5d:ce:93:07:69:83:71:
         3d:ca:f8:df:a9:39:34:86:31:c2:9a:eb:47:57:10:f2:47:51:
         69:8a:0e:2a:33:40:99:e9:ad:51:26:0e:2a:f5:54:76:ec:e7:
         b8:2a:9a:27:51:75:c1:7d:73:2e:b9:3c:44:67:a6:0d:cb:b9:
         5e:cf:e3:4a:31:e0:b8:8f:f5:08:d0:e1:cf:eb:94:88:81:b7:
         2f:f8:9b:ea:a0:3f:d4:31:46:9a:d5:02:8e:a1:73:35:15:f5:
         ae:fd:95:6c:12:6f:c0:3c:47:d1:20:2c:24:f7:95:85:12:2e:
         2e:99:9b:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETkWfKlm35nz8EnrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI0MDIxNDIwMDQ0MFoXDTI0MDUxNDE5MDQ0MFowLzEtMCsGA1UEAxMk
ZGNlZDYxZTAtMGYwNy00MGY0LTg5ZTMtNWI2Zjc3YjE0ODYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+ezqwWcfClX2f5LX84D5qrzEI/xqnYJZQ8m
PjyOEBkTt6sunCN1wxYe05lrdotLNobrYcl93kz1FGLAIEEICPu7RWf5LVcOWHd+
KUzpv+Q20q1j7MSDVvPsuRSjtiDrLzaXP6gYSIp0TsTGoaCgCHA1XMe4z9X2/JTW
Dh3/LPol720ahxpkA2WZ3HET5pWNJ3z5hrodC/R9CmSYwd+z+rBuF62KXKT6uLfZ
jUFX+UhDg9xdFt8wZ0QFobJplsGWX8HPhZV4T9fX8F+aVOsU5ey88JnsC4E+Dpw9
TeALimzoPjtuNseoFe5ZCTxKHva73IEli29CUwhPnwHo/DnIbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHsFojuvNOTEF4uAUwnOoqrDkwCgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMWJmYjc2ODktMTlmNi0z
MGI3LWI2NmMtNTQyZGMwNzRkZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGhm6kg9lfUwUCL0lFdrGqrT9THbNzUcK4mmRSM3rsDTjmAjtOoG
Ql8AcgJaeYt33Ji1dAG/eKDkFEGEnhLovEbqM70Uht3pvs6o0Tt1KOvf2oA4+LZ8
j/uPKSxh8+76H70JH9dMC3pXH+VWjUkxNSXWjgYj2GVdAQdNNAmvvAMUuAykpqwR
uckEXc6TB2mDcT3K+N+pOTSGMcKa60dXEPJHUWmKDiozQJnprVEmDir1VHbs57gq
midRdcF9cy65PERnpg3LuV7P40ox4LiP9QjQ4c/rlIiBty/4m+qgP9QxRprVAo6h
czUV9a79lWwSb8A8R9EgLCT3lYUSLi6ZmwA=
-----END CERTIFICATE-----
Generated at Thu May 2 14:35:28 2024 by rpki-client on console-fra.rpki-client.org