Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5d92a6d-2d9d-3306-9dcf-14c8579e932f.roa
File:                     a5d92a6d-2d9d-3306-9dcf-14c8579e932f.roa (raw, json)
Hash identifier:          MaoGgXrUSeRA18qC5QmiFd8UwLo3impWrsLeO8hy+bA=
Subject key identifier:   2A:0D:87:69:95:FA:94:66:06:65:4E:21:2D:88:68:8B:F5:D4:0A:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DDDF5D97B8AA428E1A000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5d92a6d-2d9d-3306-9dcf-14c8579e932f.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        2603:2680::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:dd:f5:d9:7b:8a:a4:28:e1:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=4e83da43-db7f-4661-9c9b-97ec6f2f39e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:3d:b8:5d:9d:24:51:19:71:6a:d9:40:e6:
                    26:bd:33:1d:a0:36:09:2e:a8:a8:9c:65:f0:81:20:
                    18:88:d7:c4:77:d2:c3:7c:04:dc:a5:76:80:d2:16:
                    8b:e1:a2:66:0d:12:09:34:c8:67:bf:52:ea:71:fa:
                    6d:e9:0d:4c:43:b4:37:b7:11:31:1e:74:40:78:7c:
                    d4:b1:2b:83:73:94:b6:f3:4d:a5:83:0b:d7:0a:ff:
                    ec:c5:c9:93:3c:50:20:6d:61:09:1b:d2:55:4d:f0:
                    f5:dd:60:7f:bc:d2:9a:93:d8:c3:cc:4b:3b:c8:de:
                    3d:1b:4f:ca:ad:18:60:ca:39:c5:f9:87:fb:5e:e3:
                    75:ea:00:aa:f4:0a:ca:df:69:6d:31:36:36:a1:31:
                    5b:58:2c:28:67:c2:4e:38:a8:9b:5d:8a:b7:e7:f0:
                    a1:7a:11:52:ef:08:fd:c4:19:4c:92:16:ec:d3:36:
                    fa:10:37:84:76:cc:f8:84:66:75:e2:95:42:a5:7e:
                    20:14:22:b9:27:00:34:19:94:64:b2:14:42:60:a8:
                    5d:a8:aa:d4:21:ab:b4:fa:1d:21:79:4b:a1:58:b5:
                    c7:5a:2e:59:db:75:19:9a:0c:1b:6a:86:25:3f:46:
                    f1:dd:5a:2c:cf:ea:6b:8f:2b:f8:7b:6e:29:e3:8b:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0D:87:69:95:FA:94:66:06:65:4E:21:2D:88:68:8B:F5:D4:0A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5d92a6d-2d9d-3306-9dcf-14c8579e932f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2680::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:36:cd:f1:b5:7e:f8:7b:63:32:a4:04:ef:f8:13:ed:ea:72:
         42:84:82:ac:28:1c:0f:f4:69:8f:e2:27:b9:e6:0d:a5:66:25:
         c8:51:a3:8e:48:bb:40:48:34:90:25:bc:84:27:fe:a0:15:fd:
         42:19:60:4f:52:2d:6e:7d:cb:f1:69:10:dd:2d:d1:5d:00:9e:
         40:ee:06:e3:7b:db:de:50:20:68:20:0b:34:05:f1:23:be:83:
         e8:3c:6c:b6:ba:23:dd:96:b5:e4:26:fc:cc:d0:e1:b5:f4:6f:
         0c:85:c0:fb:11:e8:f5:bf:c2:c8:7d:93:60:25:d1:bc:68:f1:
         5c:07:0e:ca:81:68:80:f9:ca:58:da:8d:d7:94:3d:f0:a8:87:
         fc:bf:ab:c6:81:b1:3b:87:c3:00:5c:f4:1e:b8:2d:47:ed:c1:
         1e:7f:f3:f4:0d:e8:57:e1:3e:0c:9e:61:7e:1a:c9:5a:12:68:
         1a:a3:e9:77:aa:c6:97:4c:56:cf:55:20:e9:c5:c2:24:b1:dc:
         40:d8:9e:fc:4d:63:9d:4e:69:0d:34:73:39:4e:e9:ad:58:0f:
         db:67:30:ef:0c:8f:c2:c8:9c:dc:e4:1e:01:4d:cf:b8:74:7d:
         b6:8b:07:26:73:cc:de:94:18:43:1b:73:2e:8e:96:1c:ae:a5:
         ee:8f:f0:56
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdsnd312XuKpCjhoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NGU4M2RhNDMtZGI3Zi00NjYxLTljOWItOTdlYzZmMmYzOWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5do9uF2dJFEZcWrZQOYmvTMdoDYJLqionGXw
gSAYiNfEd9LDfATcpXaA0haL4aJmDRIJNMhnv1Lqcfpt6Q1MQ7Q3txExHnRAeHzU
sSuDc5S2802lgwvXCv/sxcmTPFAgbWEJG9JVTfD13WB/vNKak9jDzEs7yN49G0/K
rRhgyjnF+Yf7XuN16gCq9ArK32ltMTY2oTFbWCwoZ8JOOKibXYq35/ChehFS7wj9
xBlMkhbs0zb6EDeEdsz4hGZ14pVCpX4gFCK5JwA0GZRkshRCYKhdqKrUIau0+h0h
eUuhWLXHWi5Z23UZmgwbaoYlP0bx3Vosz+prjyv4e24p44uDkwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCoNh2mV+pRmBmVOIS2IaIv11ApPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVkOTJhNmQtMmQ5ZC0z
MzA2LTlkY2YtMTRjODU3OWU5MzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMmgAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgTbN8bV++HtjMqQE7/gT7epyQoSCrCgcD/Rpj+InueYNpWYlyFGj
jki7QEg0kCW8hCf+oBX9QhlgT1Itbn3L8WkQ3S3RXQCeQO4G43vb3lAgaCALNAXx
I76D6Dxstroj3Za15Cb8zNDhtfRvDIXA+xHo9b/CyH2TYCXRvGjxXAcOyoFogPnK
WNqN15Q98KiH/L+rxoGxO4fDAFz0HrgtR+3BHn/z9A3oV+E+DJ5hfhrJWhJoGqPp
d6rGl0xWz1Ug6cXCJLHcQNie/E1jnU5pDTRzOU7prVgP22cw7wyPwsic3OQeAU3P
uHR9tosHJnPM3pQYQxtzLo6WHK6l7o/wVg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:42:31 2024 by rpki-client on console-fra.rpki-client.org