Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa
File:                     15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa (raw, json)
Hash identifier:          ZS8YQeikdxi1Yqcyu1hPmBHAlHgwIjjElB3PatGudC4=
Subject key identifier:   C6:DD:92:4C:F1:DB:3A:D3:FA:8D:89:70:15:24:4A:CA:C7:9D:4B:1F
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F432858484C101AD70D0C788A50E6DB40
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     11039
IP address blocks:        2606:69c0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:1a:d7:0d:0c:78:8a:50:e6:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=e30e86f2-2204-4dc5-8653-2b6788470599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:3c:36:24:78:6f:ea:e5:fb:16:10:50:9a:
                    0a:d4:8b:0a:40:09:15:74:2c:f6:1d:71:9c:fb:43:
                    f4:bc:48:de:0e:74:a3:7c:ae:e4:3a:eb:6c:d3:81:
                    48:ea:d0:e2:36:ff:8f:af:9d:21:d5:78:55:b7:07:
                    c0:06:9e:32:be:b9:52:95:ef:49:7b:e5:4d:bc:74:
                    f5:f2:88:c0:77:1f:18:8f:4c:b3:75:4e:9d:63:f8:
                    4c:c0:29:3a:88:97:fd:de:cc:27:ee:7c:0f:c6:45:
                    96:38:29:85:b1:10:84:89:80:1b:90:a0:b3:3c:f7:
                    04:ce:2b:fd:ec:10:ab:67:c8:44:c3:10:73:f1:68:
                    f4:bd:6c:4d:f1:d6:77:4a:83:3e:95:d4:8d:db:65:
                    24:74:61:98:b6:8b:0f:f3:c4:13:f1:d9:4a:ea:68:
                    48:7a:83:43:99:ef:18:6b:9a:87:d9:dd:15:c3:ea:
                    96:22:fb:14:d4:91:3b:8c:04:f6:28:fd:7d:5b:fd:
                    d8:2b:19:c2:37:74:54:7e:b8:d6:14:05:a6:bf:58:
                    97:7a:0b:76:21:91:13:ef:89:bd:0a:7d:0b:a7:8d:
                    73:b4:27:9c:28:c1:eb:5a:fa:3a:af:87:a4:b0:ca:
                    a4:6e:9b:0e:63:45:ae:06:f7:58:ee:70:9f:da:76:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DD:92:4C:F1:DB:3A:D3:FA:8D:89:70:15:24:4A:CA:C7:9D:4B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c0:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b7:94:49:a4:f8:fc:07:6f:05:aa:73:57:d7:b7:73:96:b7:
         8d:49:50:85:67:2b:4b:4a:3f:8b:7e:01:2d:8b:9f:28:ec:4e:
         41:cc:9d:de:26:2b:0a:6b:41:34:3d:66:22:42:6e:62:59:7b:
         27:ab:eb:be:b5:59:18:11:d7:dc:b8:89:03:ce:cf:38:1d:e8:
         7f:f0:ea:ac:2f:fe:bc:e5:a8:b9:46:55:03:13:c1:b2:8c:ec:
         fc:db:fd:30:87:8e:37:1a:41:9b:08:08:85:0b:9d:e9:1b:75:
         ef:0d:ab:e9:af:e9:82:6b:4c:ff:41:81:3a:e3:88:e8:e0:84:
         0e:11:10:24:49:88:1e:d8:7f:81:74:5f:db:21:1c:29:96:9b:
         81:6d:27:5f:d1:ac:8b:84:33:7f:b6:cc:66:8c:6d:77:fa:73:
         42:c5:56:0a:99:34:ef:e0:c2:25:87:89:f6:de:b2:39:fa:5b:
         98:94:2f:8a:e1:56:40:40:b4:81:e2:92:3a:67:bd:38:44:56:
         49:76:2b:1c:3c:b3:39:af:23:c5:4d:82:b3:a9:e4:9b:e8:b4:
         f6:49:44:07:4a:d3:2a:84:d5:df:bc:73:2f:a5:1d:a1:bd:44:
         e9:4d:79:f8:73:3d:ae:47:ab:c3:1a:b9:22:84:68:bc:18:64:
         c8:78:9f:cb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhMEBrXDQx4ilDm20AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkyMDA5MmYtMzA3ZS00NGIzLWI1NWEtY2M1YThjNjIy
NGRjMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTMwZTg2ZjItMjIwNC00ZGM1LTg2NTMtMmI2Nzg4NDcwNTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSw8NiR4b+rl+xYQUJoK1IsKQAkVdCz2HXGc
+0P0vEjeDnSjfK7kOuts04FI6tDiNv+Pr50h1XhVtwfABp4yvrlSle9Je+VNvHT1
8ojAdx8Yj0yzdU6dY/hMwCk6iJf93swn7nwPxkWWOCmFsRCEiYAbkKCzPPcEziv9
7BCrZ8hEwxBz8Wj0vWxN8dZ3SoM+ldSN22UkdGGYtosP88QT8dlK6mhIeoNDme8Y
a5qH2d0Vw+qWIvsU1JE7jAT2KP19W/3YKxnCN3RUfrjWFAWmv1iXegt2IZET74m9
Cn0Lp41ztCecKMHrWvo6r4eksMqkbpsOY0WuBvdY7nCf2nZ2uQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMbdkkzx2zrT+o2JcBUkSsrHnUsfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80OTIw
MDkyZi0zMDdlLTQ0YjMtYjU1YS1jYzVhOGM2MjI0ZGMvMTVjZjk1YWYtN2Y1NS0z
ZjU0LWExYTEtNzU0MmRmZjJjZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDkyMDA5MmYtMzA3ZS00NGIzLWI1
NWEtY2M1YThjNjIyNGRjLzQ5MjAwOTJmLTMwN2UtNDRiMy1iNTVhLWNjNWE4YzYy
MjRkYy5jcmwwHwYDVR0jBBgwFoAU2uEK04DVy5MIaCALI4wo08iWDL0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80OTIwMDkyZi0zMDdlLTQ0YjMtYjU1YS1jYzVh
OGM2MjI0ZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgZpwFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAc7eUSaT4/AdvBapzV9e3c5a3jUlQhWcrS0o/i34BLYufKOxOQcyd
3iYrCmtBND1mIkJuYll7J6vrvrVZGBHX3LiJA87POB3of/DqrC/+vOWouUZVAxPB
sozs/Nv9MIeONxpBmwgIhQud6Rt17w2r6a/pgmtM/0GBOuOI6OCEDhEQJEmIHth/
gXRf2yEcKZabgW0nX9Gsi4Qzf7bMZoxtd/pzQsVWCpk07+DCJYeJ9t6yOfpbmJQv
iuFWQEC0geKSOme9OERWSXYrHDyzOa8jxU2Cs6nkm+i09klEB0rTKoTV37xzL6Ud
ob1E6U15+HM9rkerwxq5IoRovBhkyHifyw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:14 2025 by rpki-client