Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa
File:                     3aa84767-460c-349d-872b-57420ab5927b.roa (raw, json)
Hash identifier:          QdAR4q5AMSC22JCFTgZpvReVmK1G3Ry1Brz7GM1jdIQ=
Subject key identifier:   63:CC:C0:13:17:00:26:97:1A:CC:95:8B:48:D0:00:ED:41:1D:E5:92
Certificate issuer:       /CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047
Certificate serial:       010D0C9F4328584561286495068CFB3D168A4A00
Authority key identifier: B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     40216
IP address blocks:        2620:12f:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:64:95:06:8c:fb:3d:16:8a:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=639b13d5-6847-4eb6-b7fd-959b4a86809b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:94:5a:d9:c8:24:9a:53:58:8c:78:4c:16:cc:
                    66:d0:76:13:5e:b2:0b:00:db:a1:35:e4:3f:e8:43:
                    00:09:8f:e0:c0:af:b6:05:77:f7:18:4a:68:35:83:
                    2b:6c:8f:d1:c4:b8:05:3b:a3:46:5b:e8:34:a0:9d:
                    c6:4d:64:ec:c4:a8:c0:20:1d:6a:b9:45:ff:54:b3:
                    d5:a8:30:eb:2d:56:7d:ae:5b:7a:f3:d6:a6:ed:1a:
                    10:19:5a:b8:92:b3:d0:05:a0:3f:4c:5b:b1:dd:a0:
                    7e:b3:48:f8:85:93:85:d3:25:aa:95:a4:b8:38:97:
                    41:41:07:5f:a3:a1:c3:b1:75:fa:09:87:72:5c:8f:
                    13:8d:c8:6d:4f:25:ea:ad:56:33:0e:e9:32:f8:af:
                    ba:72:69:86:7b:03:09:41:16:4e:0d:ca:e9:a4:88:
                    aa:d6:74:21:9e:98:db:cf:e4:2e:95:3c:f0:dc:20:
                    40:5f:8b:99:e9:b0:96:f2:df:78:28:4a:58:fe:8e:
                    8d:27:0c:77:36:c2:bd:34:91:4f:a3:ae:59:01:6b:
                    f8:65:d4:1a:1b:82:74:ad:04:a5:51:5f:4c:93:46:
                    0e:19:0f:d3:5f:4c:b3:fc:18:f6:23:cd:8c:87:e5:
                    c6:97:78:1c:c1:45:93:56:47:c3:12:e2:0b:60:b8:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:C0:13:17:00:26:97:1A:CC:95:8B:48:D0:00:ED:41:1D:E5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:32:ea:05:fa:5d:92:e4:67:6f:ed:66:2b:6a:b2:c1:dd:
         bf:b7:1b:3f:2f:c2:f2:40:ec:47:d2:a5:91:dd:83:8b:1b:13:
         a4:93:f3:8b:bb:9f:72:40:13:0d:2e:0b:8b:5c:19:12:ee:ed:
         60:a2:00:d7:b6:2c:89:e0:cc:b9:e2:3e:e6:32:ed:f3:1c:ce:
         70:02:b8:9c:05:d0:c5:19:18:87:f0:db:68:bf:80:a3:a7:15:
         2e:da:89:8f:eb:98:20:e4:82:2a:9c:c5:33:09:e4:41:66:6d:
         49:27:0c:bd:66:24:ba:a0:bc:00:11:b1:3f:5f:fc:02:46:74:
         4c:14:76:71:a7:cc:57:ed:91:b0:c7:8c:0b:33:12:c9:0b:8d:
         dd:5a:9a:6e:68:b1:47:ff:7f:60:be:6a:85:72:af:1a:3b:b4:
         6d:6f:3e:4a:53:0f:c2:7d:4f:8b:58:81:30:98:b9:e0:49:3e:
         c3:33:ab:49:c4:64:3d:3b:b4:30:ef:1c:31:e2:14:56:09:10:
         17:a1:19:47:5c:b7:6e:34:d7:6b:c3:93:9e:49:90:d6:c3:da:
         e2:75:db:03:36:e3:99:14:b8:10:ca:d6:08:89:89:d3:3b:2e:
         da:e7:7b:13:82:f5:40:d5:ab:32:d0:5f:d0:44:e0:e5:68:14:
         d1:45:4f:24
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVhKGSVBoz7PRaKSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFiNmVjN2QtY2EyZC00Y2RiLTllMGItOWZjNGE2YjYz
MDQ3MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
NjM5YjEzZDUtNjg0Ny00ZWI2LWI3ZmQtOTU5YjRhODY4MDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJRa2cgkmlNYjHhMFsxm0HYTXrILANuhNeQ/
6EMACY/gwK+2BXf3GEpoNYMrbI/RxLgFO6NGW+g0oJ3GTWTsxKjAIB1quUX/VLPV
qDDrLVZ9rlt689am7RoQGVq4krPQBaA/TFux3aB+s0j4hZOF0yWqlaS4OJdBQQdf
o6HDsXX6CYdyXI8TjchtTyXqrVYzDuky+K+6cmmGewMJQRZODcrppIiq1nQhnpjb
z+QulTzw3CBAX4uZ6bCW8t94KEpY/o6NJwx3NsK9NJFPo65ZAWv4ZdQaG4J0rQSl
UV9Mk0YOGQ/TX0yz/Bj2I82Mh+XGl3gcwUWTVkfDEuILYLh7dQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGPMwBMXACaXGsyVi0jQAO1BHeWSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2
ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0YTZiNjMwNDcvM2FhODQ3NjctNDYwYy0z
NDlkLTg3MmItNTc0MjBhYjU5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzFiNmVjN2QtY2EyZC00Y2RiLTll
MGItOWZjNGE2YjYzMDQ3LzMxYjZlYzdkLWNhMmQtNGNkYi05ZTBiLTlmYzRhNmI2
MzA0Ny5jcmwwHwYDVR0jBBgwFoAUtdECXlWBNDCKtbOUa/RkFl4E+lYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0
YTZiNjMwNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABL+Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAC4Ay6gX6XZLkZ2/tZitqssHdv7cbPy/C8kDsR9Klkd2DixsTpJPz
i7ufckATDS4Li1wZEu7tYKIA17YsieDMueI+5jLt8xzOcAK4nAXQxRkYh/DbaL+A
o6cVLtqJj+uYIOSCKpzFMwnkQWZtSScMvWYkuqC8ABGxP1/8AkZ0TBR2cafMV+2R
sMeMCzMSyQuN3VqabmixR/9/YL5qhXKvGju0bW8+SlMPwn1Pi1iBMJi54Ek+wzOr
ScRkPTu0MO8cMeIUVgkQF6EZR1y3bjTXa8OTnkmQ1sPa4nXbAzbjmRS4EMrWCImJ
0zsu2ud7E4L1QNWrMtBf0ETg5WgU0UVPJA==
-----END CERTIFICATE-----
Generated at Thu May 9 15:11:07 2024 by rpki-client on console-ams.rpki-client.org