Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e601a0e0-81d6-3cc4-b065-2a3e287572ce.roa
File:                     e601a0e0-81d6-3cc4-b065-2a3e287572ce.roa (raw, json)
Hash identifier:          N4k2zQjXGBsbBD4ohgF9joGrA1xuaCwUDpfdsnN0L8I=
Subject key identifier:   89:D3:68:ED:15:C0:51:89:C8:F4:F2:A2:2E:EC:73:60:90:EB:82:49
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285847CA3F7CC87E98DE6CF73B6F00
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e601a0e0-81d6-3cc4-b065-2a3e287572ce.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     32133
IP address blocks:        2606:8e80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7c:c8:7e:98:de:6c:f7:3b:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=f3e72234-2b56-4a60-9e78-7aba67966aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:08:51:3a:68:bc:c6:93:64:0d:c3:81:4d:4d:
                    6f:78:b7:db:62:6e:88:91:2d:5e:9b:4a:61:28:12:
                    a5:6f:53:c5:5a:42:ee:a0:49:65:81:2f:83:e6:a1:
                    0c:a5:80:d0:06:1c:9e:28:0e:69:17:82:ab:1a:56:
                    1b:01:9f:f1:05:12:03:cb:55:8e:98:71:b0:29:16:
                    da:28:55:8b:75:59:85:ef:3d:1f:1d:1a:e9:ca:aa:
                    dd:21:e4:03:91:c7:ce:7c:99:e8:ca:43:ab:32:51:
                    c8:be:29:0a:6e:4b:dd:cf:e3:48:6a:d6:6f:93:be:
                    bc:a8:5b:b7:40:38:9a:e4:63:da:b1:91:2b:99:61:
                    dc:3e:32:fc:f5:dc:cc:1a:ac:dc:79:38:27:a6:10:
                    64:30:99:9a:f6:23:52:12:63:0d:b7:d8:ac:bf:a8:
                    9c:82:57:81:b7:d9:ef:1a:c8:a2:85:96:4b:a6:5b:
                    fe:2e:d9:39:2f:8f:e7:07:9f:2f:c6:5e:ce:0c:fa:
                    e6:b5:c2:bf:1f:5e:4c:6c:16:90:7d:97:db:e1:23:
                    2b:2b:9c:ba:a1:03:61:f8:52:7f:4e:2e:f7:9a:d0:
                    e5:66:d2:7b:86:b8:9c:b1:b6:18:d3:24:aa:00:0d:
                    c9:a1:4c:dd:eb:ef:77:74:aa:59:8c:f6:d9:52:6f:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D3:68:ED:15:C0:51:89:C8:F4:F2:A2:2E:EC:73:60:90:EB:82:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e601a0e0-81d6-3cc4-b065-2a3e287572ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:cb:a6:b7:75:02:50:8e:19:6a:13:9f:e5:35:b8:3c:20:f0:
         8b:ba:33:a2:69:47:46:70:02:01:6d:2d:4d:6d:60:65:6a:6d:
         76:d9:e4:e7:a6:7f:50:f5:19:2b:66:05:dc:9a:4d:9b:12:10:
         b3:05:37:0a:d2:0a:f6:7e:3a:8c:d8:e2:b1:0f:1d:76:80:66:
         1f:b5:b1:a3:09:fc:bc:b2:af:cc:e1:ee:cd:f6:80:b5:15:d3:
         d4:0b:32:56:8d:c8:16:e3:96:10:86:ad:5c:ee:63:c4:24:2c:
         0e:77:d9:67:5e:bd:20:47:cc:61:89:6a:e0:52:b9:66:5b:27:
         7e:11:4f:16:45:5b:92:d3:ff:61:75:7e:d7:0f:4c:ff:aa:71:
         f2:7f:a6:12:79:bf:03:b8:ba:a8:14:ad:29:1c:b2:38:27:e8:
         e2:d2:1e:e1:28:30:41:04:36:e6:a7:f3:a7:3b:7e:fe:cf:0c:
         cb:75:d4:9b:91:30:cc:a2:de:60:1b:9d:0c:7e:67:17:39:c6:
         83:91:91:8a:b0:16:29:16:c1:72:fb:63:8f:8c:be:1a:d3:d8:
         51:99:4e:7d:56:98:c1:0d:4e:68:ae:3e:f1:e9:75:5d:b1:7a:
         89:29:fe:08:f2:63:6c:64:77:bb:f2:1f:69:3f:2c:2b:a4:fe:
         3e:ff:14:50
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfKP3zIfpjebPc7bwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjNlNzIyMzQtMmI1Ni00YTYwLTllNzgtN2FiYTY3OTY2YWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwhROmi8xpNkDcOBTU1veLfbYm6IkS1em0ph
KBKlb1PFWkLuoEllgS+D5qEMpYDQBhyeKA5pF4KrGlYbAZ/xBRIDy1WOmHGwKRba
KFWLdVmF7z0fHRrpyqrdIeQDkcfOfJnoykOrMlHIvikKbkvdz+NIatZvk768qFu3
QDia5GPasZErmWHcPjL89dzMGqzceTgnphBkMJma9iNSEmMNt9isv6icgleBt9nv
GsiihZZLplv+Ltk5L4/nB58vxl7ODPrmtcK/H15MbBaQfZfb4SMrK5y6oQNh+FJ/
Ti73mtDlZtJ7hricsbYY0ySqAA3JoUzd6+93dKpZjPbZUm//EwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFInTaO0VwFGJyPTyoi7sc2CQ64JJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvZTYwMWEwZTAtODFkNi0z
Y2M0LWIwNjUtMmEzZTI4NzU3MmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaOgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA7y6a3dQJQjhlqE5/lNbg8IPCLujOiaUdGcAIBbS1NbWBlam122eTn
pn9Q9RkrZgXcmk2bEhCzBTcK0gr2fjqM2OKxDx12gGYftbGjCfy8sq/M4e7N9oC1
FdPUCzJWjcgW45YQhq1c7mPEJCwOd9lnXr0gR8xhiWrgUrlmWyd+EU8WRVuS0/9h
dX7XD0z/qnHyf6YSeb8DuLqoFK0pHLI4J+ji0h7hKDBBBDbmp/OnO37+zwzLddSb
kTDMot5gG50MfmcXOcaDkZGKsBYpFsFy+2OPjL4a09hRmU59VpjBDU5orj7x6XVd
sXqJKf4I8mNsZHe78h9pPywrpP4+/xRQ
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:51 2024 by rpki-client on console-fra.rpki-client.org