Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa
File:                     16e258ec-06e2-3e40-90c8-f78e813ff236.roa (raw, json)
Hash identifier:          XMRBWSLlr6HsSy/Ky5URD2veLP6Qnwiqayt+O4Bq1Ys=
Subject key identifier:   18:A6:D3:F8:B0:08:74:4F:02:46:CC:2E:1A:FE:C3:75:BC:AD:5D:AD
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285847B3CC01EEC928CF631B817200
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     32133
IP address blocks:        2606:8e80:800::/37 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:01:ee:c9:28:cf:63:1b:81:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=62a8d52d-af69-4377-9efe-8dad058ced9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e8:b9:bd:17:d1:c7:d5:dc:a1:98:30:0b:8d:
                    b7:ce:4d:83:a7:3d:c4:bc:74:29:3c:e6:bf:3f:40:
                    99:49:24:a3:4d:b1:41:c0:76:e7:a5:ce:f7:05:af:
                    56:f7:84:e2:f7:8b:fe:ca:ae:3e:1b:0e:b5:82:b3:
                    57:c7:96:40:aa:18:57:54:64:b9:07:07:88:62:a6:
                    79:40:66:53:eb:af:0e:7e:79:74:f7:14:82:11:cd:
                    d8:eb:64:88:78:35:a0:39:d2:bd:41:b7:88:f2:68:
                    2d:91:91:e6:a8:1c:7b:71:b9:b4:d2:a4:1c:36:c9:
                    a5:93:b0:d7:80:e1:e6:0f:fd:5b:ce:74:40:ce:c6:
                    7f:32:41:22:f5:12:a7:bb:19:c1:1d:3d:f5:81:76:
                    c8:b8:5b:38:d3:6d:09:af:56:a6:3e:44:0e:55:87:
                    fe:46:40:d0:fc:82:99:b9:d1:39:23:d7:03:a0:9f:
                    a7:b0:cc:25:10:fa:0d:62:cc:62:f8:cc:a0:7b:44:
                    a4:3d:ec:c1:a2:6f:2f:d5:33:25:67:4c:32:84:17:
                    61:d8:b8:79:af:85:8c:c5:49:f4:65:91:ba:c2:91:
                    85:b7:9a:c1:b9:43:e3:8d:af:23:c3:1e:4b:db:24:
                    3e:c5:14:4c:a7:65:1d:43:16:76:99:4f:2a:d0:54:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A6:D3:F8:B0:08:74:4F:02:46:CC:2E:1A:FE:C3:75:BC:AD:5D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:25:1f:82:f5:eb:db:22:90:52:6f:34:67:51:b3:87:2f:52:
         cd:f4:55:af:20:de:f9:97:c9:43:de:76:18:d6:81:77:00:f0:
         5f:bb:0d:d4:6c:9f:4d:a1:df:08:04:06:ee:1c:91:55:2d:a1:
         43:0b:b7:19:de:99:b2:58:51:b1:25:99:b8:73:42:45:b2:19:
         f1:6f:8f:43:cc:ba:09:71:27:ed:f6:26:2c:62:97:bc:eb:a8:
         0e:55:36:74:ef:8e:8d:ab:28:ec:77:25:87:5a:25:1e:4c:48:
         e5:c8:6b:90:79:fe:95:0b:ad:36:76:ce:17:12:5a:d9:98:80:
         c1:61:13:50:45:93:ec:ca:5e:92:74:9f:be:b9:5d:3e:46:38:
         36:40:a6:f5:37:9c:ab:ea:0e:63:b0:65:50:ea:ff:c6:a8:79:
         3a:55:bb:67:01:b5:60:85:7c:86:9c:61:0c:2f:ac:5c:c4:1c:
         87:fb:f2:c7:f7:d3:5c:3c:ed:b6:8f:7e:cb:cf:fd:76:db:10:
         2c:ed:3c:ad:9f:d5:3f:d6:ba:7c:2c:fb:53:57:db:91:df:45:
         6b:64:1d:38:cb:fd:0d:82:22:71:21:b8:ff:1f:a6:18:3d:75:
         81:ca:17:27:c6:a7:a3:b3:e7:80:65:34:69:f5:33:df:1b:55:
         fa:96:20:39
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEezzAHuySjPYxuBcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk
NjJhOGQ1MmQtYWY2OS00Mzc3LTllZmUtOGRhZDA1OGNlZDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Oi5vRfRx9XcoZgwC423zk2Dpz3EvHQpPOa/
P0CZSSSjTbFBwHbnpc73Ba9W94Ti94v+yq4+Gw61grNXx5ZAqhhXVGS5BweIYqZ5
QGZT668Ofnl09xSCEc3Y62SIeDWgOdK9QbeI8mgtkZHmqBx7cbm00qQcNsmlk7DX
gOHmD/1bznRAzsZ/MkEi9RKnuxnBHT31gXbIuFs4020Jr1amPkQOVYf+RkDQ/IKZ
udE5I9cDoJ+nsMwlEPoNYsxi+Myge0SkPezBom8v1TMlZ0wyhBdh2Lh5r4WMxUn0
ZZG6wpGFt5rBuUPjja8jwx5L2yQ+xRRMp2UdQxZ2mU8q0FTlFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBim0/iwCHRPAkbMLhr+w3W8rV2tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvMTZlMjU4ZWMtMDZlMi0z
ZTQwLTkwYzgtZjc4ZTgxM2ZmMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgaOgAgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaCUfgvXr2yKQUm80Z1Gzhy9SzfRVryDe+ZfJQ952GNaBdwDwX7sN
1GyfTaHfCAQG7hyRVS2hQwu3Gd6ZslhRsSWZuHNCRbIZ8W+PQ8y6CXEn7fYmLGKX
vOuoDlU2dO+Ojaso7Hclh1olHkxI5chrkHn+lQutNnbOFxJa2ZiAwWETUEWT7Mpe
knSfvrldPkY4NkCm9Tecq+oOY7BlUOr/xqh5OlW7ZwG1YIV8hpxhDC+sXMQch/vy
x/fTXDztto9+y8/9dtsQLO08rZ/VP9a6fCz7U1fbkd9Fa2QdOMv9DYIicSG4/x+m
GD11gcoXJ8ano7PngGU0afUz3xtV+pYgOQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:00 2024 by rpki-client on console-ams.rpki-client.org