Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ddd4293-6c51-3404-a41b-c624316a44e4.roa
File:                     1ddd4293-6c51-3404-a41b-c624316a44e4.roa (raw, json)
Hash identifier:          cIvSyCIBh9l4pc3nLGW7GvnW4TdvRmZtNw75jMK3IZc=
Subject key identifier:   F1:B5:F7:41:64:6F:7C:45:E6:34:D8:09:BD:27:3A:A9:E5:92:0B:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D036D8EF624774EC74600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ddd4293-6c51-3404-a41b-c624316a44e4.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        2603:3024:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:03:6d:8e:f6:24:77:4e:c7:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=a430f9a3-f868-4f67-9e66-f2477a963770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:82:0c:ff:78:bc:9a:ec:e6:0b:7c:b6:42:
                    f4:c3:ed:d2:a0:ae:5f:5e:a3:0f:bc:09:2f:fc:50:
                    26:69:21:2f:de:db:50:52:be:5c:35:78:92:0c:75:
                    87:79:b6:aa:eb:95:c5:ec:c7:63:a6:b8:7f:ab:d1:
                    b2:c9:68:20:c2:2d:ea:3c:5f:28:b1:3c:06:83:bf:
                    1b:22:63:96:ff:ac:14:2e:68:33:f1:5b:79:37:8b:
                    70:4f:99:b8:62:39:95:66:86:87:38:2c:65:5d:f0:
                    58:f4:15:57:d9:14:f5:7d:6f:21:59:83:ec:c5:14:
                    15:23:47:30:7c:a2:f9:db:f8:a9:ff:d4:2c:70:1b:
                    dd:51:ae:78:44:ba:e8:32:c6:ed:b4:17:7b:bb:d1:
                    2a:8d:94:92:5b:77:79:06:fe:4c:38:e2:ad:5f:0a:
                    21:a0:3a:fc:db:7b:dc:cb:22:55:38:05:0e:a9:fa:
                    73:b6:5c:ee:66:6a:d7:b2:d8:d6:f6:9b:92:12:54:
                    77:96:51:09:3c:92:3e:87:31:10:d6:62:03:12:e6:
                    19:08:e8:8b:89:0c:82:27:84:d6:6a:93:7f:32:03:
                    01:58:c4:82:80:c7:cc:58:79:95:95:96:77:e2:6c:
                    7c:40:3e:e2:8f:90:f5:d1:6a:c5:e9:40:a1:c8:c4:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:F7:41:64:6F:7C:45:E6:34:D8:09:BD:27:3A:A9:E5:92:0B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ddd4293-6c51-3404-a41b-c624316a44e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3024:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:34:8e:0c:a7:f3:cd:bb:74:a5:9b:6d:ca:f9:3d:a5:43:39:
         1c:56:06:3d:94:cb:5b:99:1f:f7:a7:e4:9c:3c:ca:f8:f5:6e:
         0f:6d:54:a3:ba:8f:e6:3e:d6:cb:07:85:fd:9e:95:c2:72:0c:
         62:1d:37:2f:a1:b6:76:87:e0:26:c4:43:a7:08:75:d8:f0:01:
         bd:94:20:9f:82:c9:67:2c:cd:c9:62:8d:8f:d9:38:33:b5:7e:
         55:0d:e2:ac:aa:44:48:95:c8:f1:17:32:71:cd:98:27:47:37:
         72:8c:0f:63:10:92:b1:66:46:4c:76:07:47:47:6f:be:42:fd:
         7c:79:fe:19:52:95:18:4f:c7:8c:ac:c1:e5:d4:a1:3d:a3:99:
         77:81:69:50:cc:a7:6b:69:d7:27:87:28:2a:21:9f:05:98:e2:
         cf:5f:a1:7e:da:5f:93:28:2d:3f:9c:83:e9:39:aa:ed:99:cc:
         6f:57:bf:f4:41:12:c9:15:75:1d:ed:ce:3a:58:93:65:34:f5:
         c4:d0:e3:10:5f:06:99:ce:56:51:81:5b:94:04:1e:5c:83:6b:
         86:d6:81:4d:be:a9:ae:95:c6:b5:a8:7b:7d:e7:17:15:58:46:
         0e:e4:e2:59:eb:20:06:f5:61:4c:f1:dd:48:0c:d6:1d:da:eb:
         fe:f3:5f:24
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdsnQNtjvYkd07HRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
YTQzMGY5YTMtZjg2OC00ZjY3LTllNjYtZjI0NzdhOTYzNzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNqCDP94vJrs5gt8tkL0w+3SoK5fXqMPvAkv
/FAmaSEv3ttQUr5cNXiSDHWHebaq65XF7Mdjprh/q9GyyWggwi3qPF8osTwGg78b
ImOW/6wULmgz8Vt5N4twT5m4YjmVZoaHOCxlXfBY9BVX2RT1fW8hWYPsxRQVI0cw
fKL52/ip/9QscBvdUa54RLroMsbttBd7u9EqjZSSW3d5Bv5MOOKtXwohoDr823vc
yyJVOAUOqfpztlzuZmrXstjW9puSElR3llEJPJI+hzEQ1mIDEuYZCOiLiQyCJ4TW
apN/MgMBWMSCgMfMWHmVlZZ34mx8QD7ij5D10WrF6UChyMQx0QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPG190Fkb3xF5jTYCb0nOqnlkgtqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWRkZDQyOTMtNmM1MS0z
NDA0LWE0MWItYzYyNDMxNmE0NGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwJAkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAITSODKfzzbt0pZttyvk9pUM5HFYGPZTLW5kf96fknDzK+PVuD21U
o7qP5j7WyweF/Z6VwnIMYh03L6G2dofgJsRDpwh12PABvZQgn4LJZyzNyWKNj9k4
M7V+VQ3irKpESJXI8Rcycc2YJ0c3cowPYxCSsWZGTHYHR0dvvkL9fHn+GVKVGE/H
jKzB5dShPaOZd4FpUMyna2nXJ4coKiGfBZjiz1+hftpfkygtP5yD6Tmq7ZnMb1e/
9EESyRV1He3OOliTZTT1xNDjEF8Gmc5WUYFblAQeXINrhtaBTb6prpXGtah7fecX
FVhGDuTiWesgBvVhTPHdSAzWHdrr/vNfJA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:35 2024 by rpki-client on console-ams.rpki-client.org