Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
File:                     5d90001b-d20e-331c-8bd3-6c3305994bbd.roa (raw, json)
Hash identifier:          y9OSkALEhQSg0DZUGJMlefVlhOdzRaU8yNND6q+v3FI=
Subject key identifier:   0B:2F:7B:FE:E7:BA:2F:50:68:54:4F:0A:FA:A3:53:ED:FC:F6:7C:61
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858474420BC4F50D3A4D0A95D19C0
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     53488
IP address blocks:        2607:ce00::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:bc:4f:50:d3:a4:d0:a9:5d:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=770d0232-dd41-4eef-847a-e2a279e7a870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:7b:ca:26:92:16:7b:a5:10:70:72:53:af:
                    f6:44:3c:e0:34:8e:f2:8b:ee:61:64:0d:b5:1b:3b:
                    ec:9d:85:57:2b:8f:5a:76:4e:d7:d5:3e:6e:6a:50:
                    01:1a:0b:96:f1:be:10:20:c0:16:1c:1c:df:91:11:
                    66:b1:6d:48:5f:18:ec:cf:74:d2:04:7c:b0:88:6e:
                    2b:cc:da:84:e2:af:e0:2f:8c:ee:c6:b7:47:01:82:
                    71:1f:7c:6f:e7:87:8e:25:e4:30:47:a8:48:9e:26:
                    2b:b6:3a:a0:30:ad:14:c9:38:15:97:3b:16:9a:70:
                    13:b9:61:44:b5:27:0d:a0:8a:1e:38:81:36:6f:61:
                    62:4f:d6:ea:7d:17:ee:14:da:0c:60:9a:1c:00:56:
                    0a:9f:b9:28:4e:47:fe:42:d0:7f:8f:e1:4e:b4:e3:
                    9b:b6:df:65:0c:85:cb:27:34:a3:ca:5d:24:c4:2a:
                    75:b7:9a:1f:5b:5a:a0:94:be:74:34:13:de:64:39:
                    91:0b:00:85:da:5b:40:c6:15:b5:c9:42:ef:89:67:
                    9f:2a:73:ec:be:c6:03:7a:1b:38:bd:27:41:9e:1d:
                    c3:d0:7a:3d:9a:9e:a8:f6:0c:9f:42:98:a1:46:d8:
                    30:66:14:70:6c:e0:3e:99:b4:25:a0:cb:bb:6e:b5:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:7B:FE:E7:BA:2F:50:68:54:4F:0A:FA:A3:53:ED:FC:F6:7C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ce00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:6f:4c:e9:39:62:6a:cc:9b:f4:17:a6:17:e2:1a:9e:de:c7:
         18:39:f8:23:e9:61:0e:ff:09:15:66:81:d9:83:c1:b3:6e:8e:
         04:3b:a5:41:bb:43:d4:9e:45:61:a4:2f:43:4f:58:2b:96:1e:
         c0:46:bf:1e:f4:d5:ca:17:f2:b9:fb:39:ee:9e:5f:8e:0b:bc:
         18:4f:9c:1e:b0:1c:5f:52:d4:5b:bf:7f:aa:60:6f:5d:1f:ce:
         5c:88:dc:38:b2:19:02:1b:f4:5d:17:27:77:37:37:85:0d:13:
         c8:53:b3:d5:65:77:36:2e:47:08:82:7d:5e:91:98:f2:00:1d:
         12:28:fe:c5:6e:da:f2:9d:3b:b6:e3:b9:d5:94:77:f7:d1:c5:
         25:25:e7:47:51:32:8c:be:8c:a0:b7:54:85:d1:5e:40:06:ac:
         5e:d3:b2:7f:3e:a4:8d:3d:d0:91:8f:3d:02:38:7e:ed:51:26:
         d2:63:69:e7:ec:a6:b6:16:cb:0e:9c:ec:bc:67:d6:1a:12:91:
         78:33:20:7a:0d:be:6f:0a:ef:51:cb:1b:fe:ef:87:1b:f6:de:
         e8:fd:e8:7e:6e:6f:1e:ed:79:c6:d4:f1:7e:d2:a8:90:78:9e:
         32:13:8e:50:f4:67:8d:75:9e:56:a4:62:60:03:3d:62:81:fb:
         fe:8d:7d:af
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdEILxPUNOk0KldGcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi
MGRlMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
NzcwZDAyMzItZGQ0MS00ZWVmLTg0N2EtZTJhMjc5ZTdhODcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtF7yiaSFnulEHByU6/2RDzgNI7yi+5hZA21
GzvsnYVXK49adk7X1T5ualABGguW8b4QIMAWHBzfkRFmsW1IXxjsz3TSBHywiG4r
zNqE4q/gL4zuxrdHAYJxH3xv54eOJeQwR6hIniYrtjqgMK0UyTgVlzsWmnATuWFE
tScNoIoeOIE2b2FiT9bqfRfuFNoMYJocAFYKn7koTkf+QtB/j+FOtOObtt9lDIXL
JzSjyl0kxCp1t5ofW1qglL50NBPeZDmRCwCF2ltAxhW1yULviWefKnPsvsYDehs4
vSdBnh3D0Ho9mp6o9gyfQpihRtgwZhRwbOA+mbQloMu7brWNUwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAsve/7nui9QaFRPCvqjU+389nxhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1
OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvNWQ5MDAwMWItZDIwZS0z
MzFjLThiZDMtNmMzMzA1OTk0YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj
NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx
YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy
MzhmMWIwZGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfOADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAab0zpOWJqzJv0F6YX4hqe3scYOfgj6WEO/wkVZoHZg8Gzbo4EO6VB
u0PUnkVhpC9DT1grlh7ARr8e9NXKF/K5+znunl+OC7wYT5wesBxfUtRbv3+qYG9d
H85ciNw4shkCG/RdFyd3NzeFDRPIU7PVZXc2LkcIgn1ekZjyAB0SKP7FbtrynTu2
47nVlHf30cUlJedHUTKMvoygt1SF0V5ABqxe07J/PqSNPdCRjz0COH7tUSbSY2nn
7Ka2FssOnOy8Z9YaEpF4MyB6Db5vCu9Ryxv+74cb9t7o/eh+bm8e7XnG1PF+0qiQ
eJ4yE45Q9GeNdZ5WpGJgAz1igfv+jX2v
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:49 2024 by rpki-client on console-fra.rpki-client.org