Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4019af23-0ee9-38a5-8380-d0dc3a0c1db8.roa
File:                     4019af23-0ee9-38a5-8380-d0dc3a0c1db8.roa (raw, json)
Hash identifier:          CYFZhS6EaAI5eJ+PND2Ys8ay3iGejt5qcVTNaeuhfcg=
Subject key identifier:   CE:7C:A0:12:58:B8:18:ED:86:52:DD:61:DD:67:35:F7:61:35:F0:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584731FB333EE1A6739B918C9E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4019af23-0ee9-38a5-8380-d0dc3a0c1db8.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     7016
IP address blocks:        2601:547:b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:33:3e:e1:a6:73:9b:91:8c:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=04ff9fca-55a6-4ec9-8abd-aeb3e5a4d540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:8b:9d:17:0d:71:a3:a7:7d:a4:bb:be:75:
                    c1:57:19:da:a1:3e:44:c6:a9:fb:95:40:95:1f:f8:
                    8a:0f:66:ea:5f:da:7f:32:f0:ce:17:c5:45:1d:04:
                    71:6f:e8:ef:91:30:4d:d7:26:25:8f:33:2d:7c:5f:
                    69:a7:69:50:00:88:ab:ca:0c:23:b1:be:f2:9c:e9:
                    f4:56:93:c4:eb:5e:ef:81:2f:54:42:86:25:55:bc:
                    db:68:f3:2b:e4:f0:96:b7:be:64:fb:2b:0a:6f:88:
                    0b:5c:28:87:02:2f:3f:32:90:8a:32:e0:6c:0a:f9:
                    c4:02:04:e8:b7:1c:e9:ea:59:65:a0:73:67:10:ac:
                    47:df:b7:06:af:fd:05:70:18:fc:62:5b:11:c9:b4:
                    73:2e:30:d4:44:ee:42:83:0d:3f:44:a9:1d:03:e3:
                    b3:b7:67:bd:94:9e:08:47:7d:90:44:b7:c7:6a:96:
                    b3:26:de:ed:49:47:00:30:6b:b7:4a:4c:57:d3:d8:
                    44:d1:a0:0a:23:17:46:a9:ea:69:41:12:5b:4f:fe:
                    6a:6d:7d:e3:ab:02:f3:0f:a5:de:53:84:1f:ca:29:
                    5e:c2:05:c1:e8:4e:e6:37:2a:39:db:de:94:c0:5c:
                    c5:da:25:b5:33:f2:39:5d:5b:ae:a5:05:50:63:e1:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7C:A0:12:58:B8:18:ED:86:52:DD:61:DD:67:35:F7:61:35:F0:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4019af23-0ee9-38a5-8380-d0dc3a0c1db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:547:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7e:30:33:3a:af:ed:19:44:66:56:57:66:fb:e9:4c:bd:58:
         d7:26:c2:f5:0b:8e:fc:f8:d2:9c:5c:17:de:a0:e3:bd:9d:e1:
         a4:db:75:95:7d:50:5f:35:fb:97:de:46:1f:bd:de:7e:11:7e:
         96:60:03:8d:9e:2b:ba:ed:0b:28:4b:13:68:b9:86:6b:a5:13:
         e5:1b:d1:92:fb:04:39:d0:38:7e:46:62:87:70:b8:23:91:4b:
         94:2f:d4:3f:74:fb:78:f4:48:74:48:38:49:7b:bb:fc:3b:fe:
         b5:b9:fc:87:3c:52:4e:ef:21:ae:50:d1:7b:3f:71:3c:df:b2:
         28:7a:dc:a2:06:2a:7a:3e:8a:53:ea:aa:56:bd:c0:d2:01:6f:
         48:fd:60:a6:6b:99:5f:67:98:1c:ed:ab:5a:a8:98:b6:18:01:
         4e:2c:63:c6:60:d6:ee:57:3c:6f:bf:18:a6:e1:00:88:f5:04:
         c7:85:f0:a3:94:cf:8f:6d:f3:41:0d:10:6e:71:e0:a4:97:2b:
         e6:ee:c3:8b:0f:43:d5:35:be:cf:e3:d6:44:b6:e6:0f:19:ef:
         7c:06:f9:42:ad:9f:82:f5:57:a4:f4:b8:78:52:33:d3:08:75:
         ef:00:5a:17:0e:73:28:8f:14:88:35:47:3b:ce:10:f8:65:a1:
         4c:df:5c:d0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEcx+zM+4aZzm5GMnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxMzAxMDAzMloXDTI0MTIxMjAyMDAzMlowLzEtMCsGA1UEAxMk
MDRmZjlmY2EtNTVhNi00ZWM5LThhYmQtYWViM2U1YTRkNTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygSLnRcNcaOnfaS7vnXBVxnaoT5Exqn7lUCV
H/iKD2bqX9p/MvDOF8VFHQRxb+jvkTBN1yYljzMtfF9pp2lQAIirygwjsb7ynOn0
VpPE617vgS9UQoYlVbzbaPMr5PCWt75k+ysKb4gLXCiHAi8/MpCKMuBsCvnEAgTo
txzp6llloHNnEKxH37cGr/0FcBj8YlsRybRzLjDURO5Cgw0/RKkdA+Ozt2e9lJ4I
R32QRLfHapazJt7tSUcAMGu3SkxX09hE0aAKIxdGqeppQRJbT/5qbX3jqwLzD6Xe
U4QfyilewgXB6E7mNyo5296UwFzF2iW1M/I5XVuupQVQY+Gz6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM58oBJYuBjthlLdYd1nNfdhNfBUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDAxOWFmMjMtMGVlOS0z
OGE1LTgzODAtZDBkYzNhMGMxZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgEFRwsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoH4wMzqv7RlEZlZXZvvpTL1Y1ybC9QuO/PjSnFwX3qDjvZ3hpNt1
lX1QXzX7l95GH73efhF+lmADjZ4ruu0LKEsTaLmGa6UT5RvRkvsEOdA4fkZih3C4
I5FLlC/UP3T7ePRIdEg4SXu7/Dv+tbn8hzxSTu8hrlDRez9xPN+yKHrcogYqej6K
U+qqVr3A0gFvSP1gpmuZX2eYHO2rWqiYthgBTixjxmDW7lc8b78YpuEAiPUEx4Xw
o5TPj23zQQ0QbnHgpJcr5u7Diw9D1TW+z+PWRLbmDxnvfAb5Qq2fgvVXpPS4eFIz
0wh17wBaFw5zKI8UiDVHO84Q+GWhTN9c0A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:00:21 2024 by rpki-client on console-ams.rpki-client.org