Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bab5bfcd-854c-3b80-9833-27403f97b597.roa
File:                     bab5bfcd-854c-3b80-9833-27403f97b597.roa (raw, json)
Hash identifier:          CHwfDyl6FpzUg7PhfPU1QC2j3TGETk+vuG/yBVl2pIM=
Subject key identifier:   7F:F2:41:F7:E1:98:AF:29:61:7D:B9:2A:65:91:03:B5:5F:A3:AE:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF713F99A2CC421A3883680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bab5bfcd-854c-3b80-9833-27403f97b597.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        2603:3018:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:13:f9:9a:2c:c4:21:a3:88:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=dfd17065-2347-4162-b364-1f1e2fbe321d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:5b:af:b3:53:92:3b:e3:8c:bb:c0:c3:2d:
                    29:c3:52:d5:ba:ad:39:30:1c:46:90:0a:1b:e9:f3:
                    5a:4a:7f:25:60:df:40:51:76:08:da:27:cd:cd:1a:
                    4e:88:85:b3:85:91:82:ac:b9:06:ab:22:27:34:9f:
                    e4:da:a5:84:bd:55:1b:7f:e3:d6:7c:49:85:76:8d:
                    cf:a5:eb:fc:9a:54:28:07:80:00:7f:e5:13:7b:99:
                    f9:7c:a6:cb:95:bf:ff:f3:d3:0f:3a:de:e5:1f:b4:
                    64:a6:f4:45:c8:c2:13:79:af:70:fb:e9:28:38:ff:
                    16:1b:a6:d0:c6:d7:a4:e7:22:5a:51:32:2b:ac:c2:
                    63:df:5d:5c:76:c9:7d:11:1a:1d:2b:0f:c4:7a:0c:
                    34:c0:7a:95:d9:c4:83:eb:55:50:78:45:88:e4:91:
                    39:30:dc:d4:08:51:d1:c3:ba:80:93:79:70:b9:ed:
                    fd:82:e7:46:ce:9b:6e:73:36:01:02:09:1f:a9:fe:
                    61:f2:f7:b5:ff:8c:aa:8f:52:62:5d:a3:b7:04:7c:
                    74:25:2e:32:d8:a6:44:42:52:a1:22:d5:ef:50:75:
                    8b:f4:ef:d8:af:96:83:b0:fe:c8:ed:cf:20:fb:26:
                    4b:25:d9:09:ab:7e:1b:f5:66:78:eb:ad:d3:bd:21:
                    2c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F2:41:F7:E1:98:AF:29:61:7D:B9:2A:65:91:03:B5:5F:A3:AE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bab5bfcd-854c-3b80-9833-27403f97b597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3018:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:08:97:9a:c9:5e:66:76:6d:0e:b9:b2:59:4b:0a:75:c2:63:
         de:30:58:04:7c:b2:f1:65:67:a8:d3:67:7a:fd:f4:03:4f:c6:
         41:96:da:8c:67:aa:5a:89:c7:80:c0:96:cf:53:50:c9:2b:ed:
         2d:43:bc:79:cd:25:83:57:14:41:53:25:81:12:c6:cc:fa:8c:
         98:b6:7b:ff:d6:c8:4c:10:34:a1:35:4a:b7:2e:29:9d:4b:af:
         a1:29:85:b1:d0:92:e9:dd:fb:81:ed:6a:61:7a:4b:d8:9f:db:
         3d:a3:45:1f:a1:d2:d4:d6:c3:32:d3:a0:b2:4f:86:7b:7f:ca:
         fe:36:16:11:7c:8e:7f:ab:71:c4:ae:dd:7c:d1:74:62:88:b4:
         81:8f:30:6f:8b:65:b1:cc:fd:97:95:78:6e:21:fa:7d:d9:4d:
         0c:38:40:a6:4e:2c:e9:5c:44:01:79:e4:62:19:c8:3b:0a:4c:
         58:35:fe:c3:9f:0e:08:61:ec:50:f3:7a:01:4b:71:7c:39:92:
         f5:5b:cd:cb:69:d5:c3:09:f4:d8:1d:c7:a9:15:7c:2f:18:aa:
         0c:8a:58:42:c5:3d:5e:30:ef:ac:5a:3f:b8:78:90:73:56:9e:
         85:a7:1a:39:ae:92:b8:c3:30:34:65:ce:35:ae:bf:5b:3f:47:
         e2:3a:77:cb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEe+9xP5mizEIaOINoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZGZkMTcwNjUtMjM0Ny00MTYyLWIzNjQtMWYxZTJmYmUzMjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb9br7NTkjvjjLvAwy0pw1LVuq05MBxGkAob
6fNaSn8lYN9AUXYI2ifNzRpOiIWzhZGCrLkGqyInNJ/k2qWEvVUbf+PWfEmFdo3P
pev8mlQoB4AAf+UTe5n5fKbLlb//89MPOt7lH7RkpvRFyMITea9w++koOP8WG6bQ
xtek5yJaUTIrrMJj311cdsl9ERodKw/Eegw0wHqV2cSD61VQeEWI5JE5MNzUCFHR
w7qAk3lwue39gudGzptuczYBAgkfqf5h8ve1/4yqj1JiXaO3BHx0JS4y2KZEQlKh
ItXvUHWL9O/Yr5aDsP7I7c8g+yZLJdkJq34b9WZ4663TvSEssQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH/yQffhmK8pYX25KmWRA7Vfo65dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFiNWJmY2QtODU0Yy0z
YjgwLTk4MzMtMjc0MDNmOTdiNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGAcw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfgiXmsleZnZtDrmyWUsKdcJj3jBYBHyy8WVnqNNnev30A0/GQZba
jGeqWonHgMCWz1NQySvtLUO8ec0lg1cUQVMlgRLGzPqMmLZ7/9bITBA0oTVKty4p
nUuvoSmFsdCS6d37ge1qYXpL2J/bPaNFH6HS1NbDMtOgsk+Ge3/K/jYWEXyOf6tx
xK7dfNF0Yoi0gY8wb4tlscz9l5V4biH6fdlNDDhApk4s6VxEAXnkYhnIOwpMWDX+
w58OCGHsUPN6AUtxfDmS9VvNy2nVwwn02B3HqRV8LxiqDIpYQsU9XjDvrFo/uHiQ
c1aehacaOa6SuMMwNGXONa6/Wz9H4jp3yw==
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:29:13 2024 by rpki-client on console-fra.rpki-client.org