Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/fa13b473-27de-3246-b085-a63f76b5cf31.roa
File:                     fa13b473-27de-3246-b085-a63f76b5cf31.roa (raw, json)
Hash identifier:          W8Th4Dwpn8loi6U6zeu8KcgHsRTwRp7MWeo5+DBIYaU=
Subject key identifier:   4E:C8:50:15:5B:1A:86:59:9F:BD:FA:2F:58:A8:70:9B:A7:D6:60:0D
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285845734DB053D73CD39B4DCD0F20
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/fa13b473-27de-3246-b085-a63f76b5cf31.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     396955
IP address blocks:        2001:468:2630::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b0:53:d7:3c:d3:9b:4d:cd:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=4c91673b-a8d3-4fbb-98a4-c53f7e4a3607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:73:1e:c7:c5:b8:bb:e9:ef:1a:13:3c:15:a5:
                    f1:32:ab:e1:83:85:fe:a9:6f:55:3b:4c:b4:7a:46:
                    3f:2d:03:23:8c:57:2c:ef:21:5a:5e:74:4f:8d:ed:
                    7e:c1:fe:57:23:f6:e1:b7:70:73:88:da:92:47:99:
                    b6:59:34:9a:08:66:7f:17:a2:6e:6a:12:9a:f9:db:
                    8a:d9:9f:00:64:2a:b9:f6:45:dd:b4:c9:d1:f0:1a:
                    2a:e5:7b:4a:fe:bd:44:17:c3:e5:c1:58:94:5c:54:
                    f4:3b:ff:12:4f:31:a3:33:0f:f7:d2:01:3d:a6:3c:
                    9d:7b:68:ac:04:6f:3f:72:d5:d5:10:50:53:03:af:
                    e9:04:67:ef:65:97:e3:62:8c:77:fa:65:57:37:55:
                    90:16:10:e9:61:8a:e1:90:ba:40:b3:35:5e:fc:8f:
                    a6:f3:69:36:d9:a2:e4:99:1e:e7:f4:e2:05:0c:dd:
                    6e:48:dd:d4:97:21:f0:4b:23:b3:5f:02:e9:3d:90:
                    16:e8:2c:83:e0:f5:33:54:b8:b4:d9:2e:08:ca:30:
                    a1:f5:16:41:6f:2b:a3:ff:a1:66:59:d9:ca:88:94:
                    84:7d:ca:be:30:c6:87:90:7a:e9:2c:82:68:b1:52:
                    71:29:d1:65:33:53:a2:80:9f:58:02:d5:4a:db:b5:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C8:50:15:5B:1A:86:59:9F:BD:FA:2F:58:A8:70:9B:A7:D6:60:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/fa13b473-27de-3246-b085-a63f76b5cf31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2630::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:cd:7f:e1:52:d5:80:f1:97:8c:ab:65:e2:65:f1:39:5f:
         29:e7:11:cc:26:04:5c:7d:98:af:a5:f7:f4:41:d3:af:cf:c4:
         41:50:3f:3f:ec:69:87:11:49:fb:c9:21:47:8d:e4:a4:65:ed:
         06:59:47:3d:ba:2d:db:12:3a:fb:16:fd:64:97:58:3c:a5:24:
         1d:53:7d:8b:65:4c:b3:f0:ea:2b:9b:44:bb:c9:8b:48:86:e3:
         ed:73:42:41:c0:94:6f:62:91:af:1c:c7:c2:4e:fd:87:e0:e2:
         ae:40:b4:32:e0:69:cc:cb:0e:23:3f:fe:d5:26:81:af:44:75:
         ad:e6:19:56:2a:e8:b0:ca:71:52:3c:f9:e3:8e:b7:8c:6a:10:
         b2:93:cf:cf:8b:62:35:d2:59:9f:4f:25:07:d6:d9:7f:b7:58:
         a5:7a:ce:cc:7c:5f:41:cb:76:76:bf:1a:36:1c:12:74:47:5c:
         c1:a8:4d:be:1d:ea:52:2d:a4:41:21:15:40:c5:ea:22:83:f0:
         5d:8e:65:5d:fe:78:ab:5d:9b:81:f9:a1:1b:1e:07:6a:70:40:
         16:17:06:6a:18:2f:bf:ef:41:fd:a2:fd:ed:c5:38:63:79:ca:
         84:c7:ea:45:e6:b2:05:ba:d4:ea:6e:2c:69:e2:5a:87:68:b6:
         8f:27:cc:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVzTbBT1zzTm03NDyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
NGM5MTY3M2ItYThkMy00ZmJiLTk4YTQtYzUzZjdlNGEzNjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXMex8W4u+nvGhM8FaXxMqvhg4X+qW9VO0y0
ekY/LQMjjFcs7yFaXnRPje1+wf5XI/bht3BziNqSR5m2WTSaCGZ/F6JuahKa+duK
2Z8AZCq59kXdtMnR8Boq5XtK/r1EF8PlwViUXFT0O/8STzGjMw/30gE9pjyde2is
BG8/ctXVEFBTA6/pBGfvZZfjYox3+mVXN1WQFhDpYYrhkLpAszVe/I+m82k22aLk
mR7n9OIFDN1uSN3UlyHwSyOzXwLpPZAW6CyD4PUzVLi02S4IyjCh9RZBbyuj/6Fm
WdnKiJSEfcq+MMaHkHrpLIJosVJxKdFlM1OigJ9YAtVK27VaTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE7IUBVbGoZZn736L1iocJun1mANMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZmExM2I0NzMtMjdkZS0z
MjQ2LWIwODUtYTYzZjc2YjVjZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCYw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKu8zX/hUtWA8ZeMq2XiZfE5XynnEcwmBFx9mK+l9/RB06/PxEFQ
Pz/saYcRSfvJIUeN5KRl7QZZRz26LdsSOvsW/WSXWDylJB1TfYtlTLPw6iubRLvJ
i0iG4+1zQkHAlG9ika8cx8JO/Yfg4q5AtDLgaczLDiM//tUmga9Eda3mGVYq6LDK
cVI8+eOOt4xqELKTz8+LYjXSWZ9PJQfW2X+3WKV6zsx8X0HLdna/GjYcEnRHXMGo
Tb4d6lItpEEhFUDF6iKD8F2OZV3+eKtdm4H5oRseB2pwQBYXBmoYL7/vQf2i/e3F
OGN5yoTH6kXmsgW61OpuLGniWodoto8nzCQ=
-----END CERTIFICATE-----
Generated at Thu May 2 18:02:55 2024 by rpki-client on console-fra.rpki-client.org