Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bcccf7a-1e46-33ad-8808-6bdda229ed77.roa
File:                     1bcccf7a-1e46-33ad-8808-6bdda229ed77.roa (raw, json)
Hash identifier:          xaWWa8gQ4Zcs82ykLMsrZ36jlsu0LquHRBaZZOpjUz8=
Subject key identifier:   C2:D3:0D:60:D7:F1:6E:90:63:0D:D2:47:9B:1C:86:3A:B0:F8:8B:52
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858476F663AC92EAD06630D589000
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bcccf7a-1e46-33ad-8808-6bdda229ed77.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     2914
IP address blocks:        2001:418:1401:68::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:3a:c9:2e:ad:06:63:0d:58:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=aeb8a897-bea9-4fa8-86f1-929fd50d041b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:14:b6:73:19:b2:75:3a:eb:24:8c:88:45:
                    2a:32:80:24:8a:23:65:0a:f4:1a:33:ec:5e:80:02:
                    99:f7:3c:1a:57:49:d5:e8:0c:71:1e:34:31:db:bf:
                    91:1d:ec:0a:17:9b:b7:b7:8c:8f:a0:52:e4:95:d8:
                    f8:8f:d0:fa:1d:93:2b:bc:88:7c:88:25:0c:11:f2:
                    2c:b3:b3:50:11:88:e9:40:28:05:ff:81:03:40:b9:
                    7f:7c:ca:b6:99:bb:6c:4f:41:3a:6f:4c:34:7e:45:
                    f1:63:ad:4d:d8:ee:ca:84:f3:86:ee:95:4e:6f:fc:
                    c0:65:2a:c7:dc:37:be:6a:8e:17:5b:51:b9:7c:9c:
                    06:62:65:fc:39:8b:9b:ee:ff:c1:21:6d:53:c2:f3:
                    62:23:c2:95:2a:ca:84:e0:ec:4a:26:26:16:8d:52:
                    81:02:a3:a8:aa:32:8f:f4:0c:a9:13:31:cf:7b:51:
                    09:18:98:d1:53:66:bc:44:3f:f4:41:9f:5a:f7:41:
                    87:38:f0:d1:53:7d:57:3a:66:af:5f:e3:cc:96:41:
                    02:d6:15:93:84:82:f2:76:fc:e8:6a:25:7a:ae:ee:
                    fd:77:70:35:4d:af:1d:57:56:79:83:fc:5e:c8:39:
                    38:4c:f1:fe:3e:f3:50:a0:04:33:69:02:c8:f8:13:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D3:0D:60:D7:F1:6E:90:63:0D:D2:47:9B:1C:86:3A:B0:F8:8B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1bcccf7a-1e46-33ad-8808-6bdda229ed77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:68::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:11:cd:95:c7:22:21:14:50:cd:c1:b7:43:b8:12:88:57:16:
         41:30:14:bf:67:55:88:56:c1:1b:e0:c2:d5:62:85:33:e4:18:
         c6:84:8f:a1:2b:8e:a0:f2:95:c7:5e:2c:85:ec:b4:0b:d8:e8:
         26:4d:fd:86:68:9d:ce:af:81:9b:9d:e7:4f:1e:37:9f:dd:77:
         fd:29:e8:b7:d1:c6:84:93:2b:d7:81:0b:24:c9:c3:41:14:6e:
         1b:b6:e6:c2:61:f5:08:7d:e0:e3:d4:86:4c:18:25:ca:fa:79:
         72:94:7c:d8:23:59:29:d0:63:74:6b:5b:dc:fe:fa:40:47:46:
         cd:f5:a3:4e:21:37:2d:d6:af:c9:3c:78:49:dd:06:53:eb:a1:
         f9:ad:59:24:ed:d3:32:92:f5:78:c8:0f:28:61:90:8b:c3:49:
         de:ef:e5:ab:31:ba:7c:8f:c3:47:8e:ae:e7:8c:06:e4:57:30:
         2a:ac:8a:32:f6:a8:67:2c:a4:e0:86:4f:52:10:2b:a3:94:03:
         56:42:62:88:cf:b4:31:74:06:c5:68:ad:df:a6:17:87:20:39:
         ad:3e:12:69:02:0c:8b:62:c5:e2:f5:88:fb:36:95:f3:b6:84:
         e1:d8:06:28:0c:77:be:fd:5c:b1:3e:91:be:7a:01:65:e8:ad:
         6b:17:d7:6c
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEdvZjrJLq0GYw1YkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk
YWViOGE4OTctYmVhOS00ZmE4LTg2ZjEtOTI5ZmQ1MGQwNDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/4UtnMZsnU66ySMiEUqMoAkiiNlCvQaM+xe
gAKZ9zwaV0nV6AxxHjQx27+RHewKF5u3t4yPoFLkldj4j9D6HZMrvIh8iCUMEfIs
s7NQEYjpQCgF/4EDQLl/fMq2mbtsT0E6b0w0fkXxY61N2O7KhPOG7pVOb/zAZSrH
3De+ao4XW1G5fJwGYmX8OYub7v/BIW1TwvNiI8KVKsqE4OxKJiYWjVKBAqOoqjKP
9AypEzHPe1EJGJjRU2a8RD/0QZ9a90GHOPDRU31XOmavX+PMlkEC1hWThILydvzo
aiV6ru79d3A1Ta8dV1Z5g/xeyDk4TPH+PvNQoAQzaQLI+BOeaQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFMLTDWDX8W6QYw3SR5schjqw+ItSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWJjY2NmN2EtMWU0Ni0z
M2FkLTg4MDgtNmJkZGEyMjllZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB
AGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAyBHNlcciIRRQzcG3Q7gSiFcWQTAUv2dViFbBG+DC1WKFM+QY
xoSPoSuOoPKVx14shey0C9joJk39hmidzq+Bm53nTx43n913/Snot9HGhJMr14EL
JMnDQRRuG7bmwmH1CH3g49SGTBglyvp5cpR82CNZKdBjdGtb3P76QEdGzfWjTiE3
LdavyTx4Sd0GU+uh+a1ZJO3TMpL1eMgPKGGQi8NJ3u/lqzG6fI/DR46u54wG5Fcw
KqyKMvaoZyyk4IZPUhAro5QDVkJiiM+0MXQGxWit36YXhyA5rT4SaQIMi2LF4vWI
+zaV87aE4dgGKAx3vv1csT6RvnoBZeitaxfXbA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:08 2024 by rpki-client on console-ams.rpki-client.org