Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fb8e0ed-8340-3f13-8570-d4be84c205a1.roa
File:                     8fb8e0ed-8340-3f13-8570-d4be84c205a1.roa (raw, json)
Hash identifier:          i90qMTO9vV5eM1UpMx48hJHiYaY+IPvvkUQ8c2mggBY=
Subject key identifier:   14:E9:CF:DD:90:87:B8:8A:6B:F1:E7:85:80:B5:0A:32:38:CE:75:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB322DB3DDA6A241DEC380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fb8e0ed-8340-3f13-8570-d4be84c205a1.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2603:3011:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:32:2d:b3:dd:a6:a2:41:de:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=309e881a-8140-4318-b4aa-75e8b6b9bb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:a4:8d:4d:72:e6:94:b5:49:19:c8:b2:0b:
                    8f:c0:5e:61:4a:18:b0:22:fa:09:2f:46:fd:6f:15:
                    79:fb:70:15:86:b8:60:2a:6b:3b:a1:f5:d7:fb:42:
                    b5:0e:14:e8:7d:56:d2:94:22:dc:78:b0:cd:e4:61:
                    be:c1:7a:6d:9f:8e:f7:6f:1b:23:a1:29:df:f0:f0:
                    04:d3:c7:aa:5b:58:e6:5e:eb:bb:d0:4d:d6:07:64:
                    04:cc:61:c0:5d:f7:96:4b:3b:a5:66:70:52:03:b0:
                    12:f2:66:de:3b:4e:b2:89:16:47:ff:86:8c:c7:a0:
                    f1:fc:28:1d:b0:a3:a7:6a:f8:96:08:67:98:31:99:
                    dc:5b:0b:0f:ef:11:ca:32:d3:20:99:af:7b:b4:45:
                    f2:96:4d:b5:92:a8:43:6e:cd:22:5a:04:d0:c5:49:
                    6f:86:ae:c1:46:fe:9f:9e:cd:2b:21:e1:fc:e6:1e:
                    94:cb:da:9f:62:44:7b:db:e8:22:5e:71:b8:77:09:
                    ea:c8:62:9a:4a:30:d4:c2:bc:d3:38:d5:fa:98:95:
                    fa:99:40:73:4f:b6:f2:b7:a3:5b:da:1a:b9:b2:f1:
                    ea:d6:8e:75:bd:62:d5:f0:4c:25:6b:f1:23:5c:1b:
                    b7:c9:7a:bc:f6:65:a0:f3:45:71:eb:9f:33:7a:40:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:CF:DD:90:87:B8:8A:6B:F1:E7:85:80:B5:0A:32:38:CE:75:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fb8e0ed-8340-3f13-8570-d4be84c205a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3011:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b4:44:32:c4:2c:31:c8:16:2b:39:f0:59:94:cd:bf:f1:33:
         f4:c9:d0:6e:f8:94:81:c4:38:97:ab:db:7d:ee:c4:d9:78:1a:
         77:0e:92:eb:75:73:97:76:d8:b2:7a:65:65:bd:74:bf:93:8d:
         2e:7f:4d:1f:11:12:93:c4:c2:c0:0e:3e:cd:a8:1a:47:8e:77:
         af:76:bc:d9:43:45:18:23:81:2a:28:6d:88:5e:e1:4a:42:2e:
         a9:18:72:11:c6:e3:be:bc:f2:dd:f3:b7:1d:50:1e:ed:8f:1d:
         15:99:f3:10:72:e7:0f:53:83:10:7d:c0:a7:dc:0f:7b:80:d0:
         99:79:57:e6:1d:2d:e1:aa:10:1a:3b:af:46:13:2f:99:4c:af:
         6f:89:04:e9:3a:16:0b:e6:de:0d:ac:91:05:d6:19:a0:13:d5:
         3f:84:72:1d:f0:7c:af:f0:23:b8:ad:97:eb:e1:0c:3e:03:0e:
         8e:1c:57:84:35:0b:12:7c:7d:7f:cd:0c:f3:8d:2f:f3:0d:e8:
         e9:ac:dd:e8:21:12:0b:72:46:d4:ac:ee:d1:7a:28:01:0b:35:
         bf:4f:4e:25:08:fc:bc:b9:48:c5:a9:6d:7c:38:cb:81:8f:12:
         a6:18:23:0f:ed:68:82:f9:e1:14:a9:3e:1e:16:42:69:11:92:
         c0:26:a8:09
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUfqzIts92mokHew4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MzA5ZTg4MWEtODE0MC00MzE4LWI0YWEtNzVlOGI2YjliYjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiCkjU1y5pS1SRnIsguPwF5hShiwIvoJL0b9
bxV5+3AVhrhgKms7ofXX+0K1DhTofVbSlCLceLDN5GG+wXptn473bxsjoSnf8PAE
08eqW1jmXuu70E3WB2QEzGHAXfeWSzulZnBSA7AS8mbeO06yiRZH/4aMx6Dx/Cgd
sKOnaviWCGeYMZncWwsP7xHKMtMgma97tEXylk21kqhDbs0iWgTQxUlvhq7BRv6f
ns0rIeH85h6Uy9qfYkR72+giXnG4dwnqyGKaSjDUwrzTONX6mJX6mUBzT7byt6Nb
2hq5svHq1o51vWLV8Ewla/EjXBu3yXq89mWg80Vx658zekB4+QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBTpz92Qh7iKa/HnhYC1CjI4znVhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGZiOGUwZWQtODM0MC0z
ZjEzLTg1NzAtZDRiZTg0YzIwNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwEQcw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhbREMsQsMcgWKznwWZTNv/Ez9MnQbviUgcQ4l6vbfe7E2Xgadw6S
63Vzl3bYsnplZb10v5ONLn9NHxESk8TCwA4+zagaR453r3a82UNFGCOBKihtiF7h
SkIuqRhyEcbjvrzy3fO3HVAe7Y8dFZnzEHLnD1ODEH3Ap9wPe4DQmXlX5h0t4aoQ
GjuvRhMvmUyvb4kE6ToWC+beDayRBdYZoBPVP4RyHfB8r/AjuK2X6+EMPgMOjhxX
hDULEnx9f80M840v8w3o6azd6CESC3JG1Kzu0XooAQs1v09OJQj8vLlIxaltfDjL
gY8SphgjD+1ogvnhFKk+HhZCaRGSwCaoCQ==
-----END CERTIFICATE-----
Generated at Sun May 5 01:31:51 2024 by rpki-client on console-fra.rpki-client.org