Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ab017d8-0349-3f53-b1f2-7e6f4ce65f3b.roa
File:                     7ab017d8-0349-3f53-b1f2-7e6f4ce65f3b.roa (raw, json)
Hash identifier:          tesV/tt0aR0j/J8BVl4t2MsC7yg3YADlTvWrv9rPWLg=
Subject key identifier:   2B:05:53:3A:D5:21:DF:55:15:E2:2D:22:5D:67:3B:9C:B0:FF:64:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C77405E74A30F9500B3140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ab017d8-0349-3f53-b1f2-7e6f4ce65f3b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        2603:3015:1b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:74:05:e7:4a:30:f9:50:0b:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d1afefcd-3d2c-48c7-841d-2dc24acf0a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d3:4b:b2:d5:14:81:2c:de:99:10:ab:37:b6:
                    47:88:cf:0d:e2:b2:38:e5:fb:ba:ef:c5:d0:a0:2c:
                    86:dd:b5:70:a3:34:f6:0e:e9:dc:32:51:66:cc:7e:
                    3f:96:2e:b4:61:b5:a3:62:43:99:a2:7a:6c:3c:b2:
                    65:23:e9:c0:ec:94:9f:94:42:ab:12:21:cb:cb:57:
                    3e:88:2b:ff:cc:f1:d0:3e:6d:54:44:33:9e:a9:a6:
                    40:8f:65:ad:f0:53:54:df:f8:e1:2d:0c:9e:e8:07:
                    7d:45:62:ee:99:7a:b5:8b:a9:a9:36:bc:b6:6e:0c:
                    4d:b5:6c:c7:52:b7:57:9c:23:1c:f3:40:da:76:53:
                    74:48:34:d9:17:35:dc:c5:ad:84:67:17:0e:e2:3b:
                    ba:b1:2b:32:1a:01:e5:76:d2:7d:8f:e2:19:f1:bd:
                    39:91:56:87:dd:51:16:37:b2:85:78:fb:dd:f3:ea:
                    ea:a1:09:7b:8b:7f:d4:e3:fc:c1:82:6b:31:e8:93:
                    15:ef:8f:ce:f1:ce:20:c7:20:6c:df:0e:cb:64:52:
                    6a:2a:77:4a:d0:44:12:97:1d:d1:54:68:ea:b6:0d:
                    cf:7d:a3:0a:57:5d:57:a2:6b:18:3e:63:2d:6b:f0:
                    3b:d1:25:1f:25:2f:62:4e:12:99:fb:39:be:3b:36:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:05:53:3A:D5:21:DF:55:15:E2:2D:22:5D:67:3B:9C:B0:FF:64:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ab017d8-0349-3f53-b1f2-7e6f4ce65f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:1b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:98:93:e6:0e:de:86:00:5e:a0:e9:2c:a3:dd:37:a5:f9:d8:
         92:8e:3d:f5:c5:a8:ae:b1:49:64:f3:94:32:e9:d1:45:12:9e:
         d0:b3:0a:25:ac:99:37:33:b8:4b:7b:4b:6a:8d:c7:21:eb:93:
         98:27:a0:63:03:f4:9e:e0:4c:c6:ea:f6:fd:71:50:40:7b:98:
         c0:7b:6d:b0:fc:5d:df:61:e7:08:f3:ec:0e:83:52:05:ef:14:
         2d:a6:4e:b9:8a:63:59:7c:15:d1:25:24:7e:3a:6f:eb:d2:6e:
         cf:83:d0:c0:1d:35:90:28:e0:3c:f8:42:c9:30:ab:0c:40:99:
         0d:ce:5f:b0:ed:22:1a:c1:54:ad:e0:ab:d7:33:ea:b5:bc:ee:
         72:28:00:37:24:65:1d:7f:2e:a9:95:03:56:43:c4:a8:5c:6e:
         ad:f4:df:76:16:cf:f9:1a:81:5f:d7:5e:52:95:a0:16:09:f0:
         38:03:5e:c2:65:73:b6:63:03:e6:b3:87:70:4c:14:fe:c0:cc:
         c2:bc:82:81:73:01:43:a7:19:ed:e8:18:b4:ae:4d:7d:b1:f8:
         88:c3:c9:74:aa:41:66:13:f3:bd:38:d5:71:11:4a:26:e0:f3:
         84:73:f8:88:08:ae:c4:55:a0:c7:10:eb:49:1d:58:8d:9c:77:
         58:67:3e:c9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEc0x3QF50ow+VALMUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZDFhZmVmY2QtM2QyYy00OGM3LTg0MWQtMmRjMjRhY2YwYTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNNLstUUgSzemRCrN7ZHiM8N4rI45fu678XQ
oCyG3bVwozT2DuncMlFmzH4/li60YbWjYkOZonpsPLJlI+nA7JSflEKrEiHLy1c+
iCv/zPHQPm1URDOeqaZAj2Wt8FNU3/jhLQye6Ad9RWLumXq1i6mpNry2bgxNtWzH
UrdXnCMc80DadlN0SDTZFzXcxa2EZxcO4ju6sSsyGgHldtJ9j+IZ8b05kVaH3VEW
N7KFePvd8+rqoQl7i3/U4/zBgmsx6JMV74/O8c4gxyBs3w7LZFJqKndK0EQSlx3R
VGjqtg3PfaMKV11XomsYPmMta/A70SUfJS9iThKZ+zm+OzbTIwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCsFUzrVId9VFeItIl1nO5yw/2RjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2FiMDE3ZDgtMDM0OS0z
ZjUzLWIxZjItN2U2ZjRjZTY1ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFRsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAh5iT5g7ehgBeoOkso903pfnYko499cWorrFJZPOUMunRRRKe0LMK
JayZNzO4S3tLao3HIeuTmCegYwP0nuBMxur2/XFQQHuYwHttsPxd32HnCPPsDoNS
Be8ULaZOuYpjWXwV0SUkfjpv69Juz4PQwB01kCjgPPhCyTCrDECZDc5fsO0iGsFU
reCr1zPqtbzucigANyRlHX8uqZUDVkPEqFxurfTfdhbP+RqBX9deUpWgFgnwOANe
wmVztmMD5rOHcEwU/sDMwryCgXMBQ6cZ7egYtK5NfbH4iMPJdKpBZhPzvTjVcRFK
JuDzhHP4iAiuxFWgxxDrSR1YjZx3WGc+yQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:50:05 2024 by rpki-client on console-fra.rpki-client.org