Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9dcf3fe-fb32-34be-9aa2-589d781c02ac.roa
File:                     a9dcf3fe-fb32-34be-9aa2-589d781c02ac.roa (raw, json)
Hash identifier:          wetxBcA8VRcbDLPVGtVzeguOJ9FNzL+bgBlHPq94vjA=
Subject key identifier:   D8:3F:44:FA:59:81:54:41:86:5D:23:5F:69:DB:62:5B:DB:04:39:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C681E7B07A07B39F47FC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9dcf3fe-fb32-34be-9aa2-589d781c02ac.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        2603:3005:b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:81:e7:b0:7a:07:b3:9f:47:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=fff85499-0591-4e2f-833f-028892bbd357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:8d:72:b3:ec:2c:45:09:c5:5c:8f:e7:8f:
                    93:95:26:72:d2:b6:c0:89:45:1e:31:14:d6:75:3b:
                    e9:1f:c4:30:6d:d2:4c:0f:50:2e:d2:29:4a:4c:37:
                    e7:65:e3:75:da:7f:70:aa:63:49:8e:37:b4:4d:49:
                    28:55:14:fc:4b:4f:e1:28:c7:be:41:c2:43:4e:12:
                    ff:99:d5:54:c4:4e:6d:6f:b5:73:db:56:cf:7c:cf:
                    14:59:d6:ec:f5:c9:f6:da:20:6d:d3:c0:8a:ab:77:
                    49:91:8d:51:b8:01:d5:a1:7c:b1:af:e4:d1:d4:62:
                    fd:99:ea:ae:b9:b7:2c:d8:0b:7f:45:a3:9d:1c:ce:
                    37:e7:b9:d1:6e:8d:aa:be:85:ee:f8:03:e8:28:b0:
                    7e:bb:35:13:fa:67:43:b6:8d:3f:93:c4:8d:a9:7d:
                    7d:73:fa:24:3e:81:db:7e:75:56:9c:61:46:ca:ea:
                    5c:f9:c1:ca:25:40:f4:00:81:e1:36:0a:54:f5:2f:
                    be:a9:a9:8a:69:73:ca:ed:13:e4:6c:92:de:c1:ce:
                    44:b6:de:4e:ee:4f:d1:92:f1:f2:93:a2:e7:77:93:
                    e7:4f:fe:13:66:de:06:61:a4:aa:7e:0a:45:04:ca:
                    fd:0b:33:17:7e:aa:fb:7b:86:e2:40:0e:29:c4:fc:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3F:44:FA:59:81:54:41:86:5D:23:5F:69:DB:62:5B:DB:04:39:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9dcf3fe-fb32-34be-9aa2-589d781c02ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:70:74:7b:2a:58:00:30:10:8c:02:d5:e4:28:94:7d:b9:62:
         f6:26:d2:2f:12:46:48:38:56:fd:8c:2a:38:49:f4:69:5c:4c:
         af:e0:4f:05:c9:63:be:56:4f:ec:7c:e1:a3:be:c1:bd:ec:7b:
         83:7a:85:1e:70:a4:80:a3:f8:65:23:fe:20:b8:33:84:46:d1:
         07:9d:f9:2c:07:2f:8a:62:1a:87:be:2d:64:04:d9:60:ff:ea:
         7b:70:a1:11:a7:ab:74:35:74:62:67:67:30:16:52:0e:48:dc:
         50:d1:f8:cb:39:96:25:76:c1:12:e5:1d:3c:bc:65:2a:5c:35:
         d0:0f:98:01:88:45:fc:79:a6:97:19:8b:35:c1:de:1d:7e:f8:
         c5:5a:c3:a7:89:c8:8e:eb:69:35:5d:4c:cd:f7:c6:53:6e:d9:
         1b:9b:60:46:dd:e3:5b:bc:1a:df:eb:97:a9:aa:da:fe:37:78:
         df:17:ed:82:24:23:69:1b:ce:9b:f5:27:24:cc:90:e4:50:14:
         7e:7d:c9:39:9d:6f:85:23:73:a4:eb:bc:26:0b:8e:18:48:15:
         70:f0:dd:95:a0:7a:e6:54:81:1f:12:b6:67:ba:c2:27:98:d2:
         cc:6d:25:ad:c2:51:82:fd:b2:8d:79:f6:7f:0c:0d:44:93:a2:
         68:9e:5b:aa
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEc0xoHnsHoHs59H/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZmZmODU0OTktMDU5MS00ZTJmLTgzM2YtMDI4ODkyYmJkMzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCaNcrPsLEUJxVyP54+TlSZy0rbAiUUeMRTW
dTvpH8QwbdJMD1Au0ilKTDfnZeN12n9wqmNJjje0TUkoVRT8S0/hKMe+QcJDThL/
mdVUxE5tb7Vz21bPfM8UWdbs9cn22iBt08CKq3dJkY1RuAHVoXyxr+TR1GL9mequ
ubcs2At/RaOdHM4357nRbo2qvoXu+APoKLB+uzUT+mdDto0/k8SNqX19c/okPoHb
fnVWnGFGyupc+cHKJUD0AIHhNgpU9S++qamKaXPK7RPkbJLewc5Ett5O7k/RkvHy
k6Lnd5PnT/4TZt4GYaSqfgpFBMr9CzMXfqr7e4biQA4pxPxgZQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNg/RPpZgVRBhl0jX2nbYlvbBDneMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlkY2YzZmUtZmIzMi0z
NGJlLTlhYTItNTg5ZDc4MWMwMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBQsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAI3B0eypYADAQjALV5CiUfbli9ibSLxJGSDhW/YwqOEn0aVxMr+BP
BcljvlZP7Hzho77Bvex7g3qFHnCkgKP4ZSP+ILgzhEbRB535LAcvimIah74tZATZ
YP/qe3ChEaerdDV0YmdnMBZSDkjcUNH4yzmWJXbBEuUdPLxlKlw10A+YAYhF/Hmm
lxmLNcHeHX74xVrDp4nIjutpNV1MzffGU27ZG5tgRt3jW7wa3+uXqara/jd43xft
giQjaRvOm/UnJMyQ5FAUfn3JOZ1vhSNzpOu8JguOGEgVcPDdlaB65lSBHxK2Z7rC
J5jSzG0lrcJRgv2yjXn2fwwNRJOiaJ5bqg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:03:00 2024 by rpki-client on console-ams.rpki-client.org