Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa
File:                     7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa (raw, json)
Hash identifier:          OZJpmPmj0KafpRo6L1byNuOK8cbdPe9UwJnV0eBCPQc=
Subject key identifier:   E7:83:1F:05:B8:EF:A9:FF:72:E0:5C:7A:D4:63:20:C5:31:BB:AE:55
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910C4BD3CA9EDD62D208EEA
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     1225
IP address blocks:        2001:418:3ff:8::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c4:bd:3c:a9:ed:d6:2d:20:8e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=ba987ddd-1b09-4dc0-b49c-0d3fe208d697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:80:8b:d6:4f:ef:17:bd:b3:c3:ee:29:6a:
                    f8:3b:3e:04:86:db:7b:4f:6b:d7:64:ba:a4:db:33:
                    fc:d2:81:d8:1d:ac:22:8c:ab:43:a7:51:03:9d:65:
                    de:a3:e7:93:76:e5:88:29:aa:5b:ba:5f:65:8e:13:
                    e3:47:17:be:09:bc:b8:ae:39:3b:47:f4:bb:7a:c5:
                    af:ce:ff:05:4f:86:06:68:e2:cf:af:62:d2:87:0c:
                    d8:d0:a9:29:f8:c7:cb:0c:fb:e4:bf:95:a6:6e:41:
                    fc:c4:8e:9c:ed:36:c1:12:45:02:9a:0b:21:6b:41:
                    23:02:52:a8:f1:54:9c:df:95:f1:d7:7d:64:cb:2e:
                    1a:68:2f:28:58:15:53:5e:76:72:20:22:d0:68:5b:
                    e1:18:fa:2c:28:b4:55:33:4f:1e:54:31:98:b5:76:
                    64:03:7c:16:4c:68:f5:bd:1a:eb:89:98:57:4a:75:
                    ad:12:46:a8:c4:80:55:4c:ac:c9:be:8d:aa:38:94:
                    98:05:a3:4c:bf:d0:47:a8:7a:b1:66:05:8b:0b:17:
                    10:2d:d0:97:78:7c:d0:26:d7:58:b1:8c:e9:b0:90:
                    e6:a3:39:6e:69:53:e2:c0:d0:53:d2:5e:ef:2b:87:
                    fe:d8:e5:56:fa:ee:46:83:d5:af:bc:a4:7d:e8:18:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:83:1F:05:B8:EF:A9:FF:72:E0:5C:7A:D4:63:20:C5:31:BB:AE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:24:55:30:0d:9b:3e:71:86:4b:4c:f0:f5:67:9a:9f:79:16:
         cc:3d:a4:db:d7:86:f3:b5:c2:26:2f:09:c2:9a:5d:ed:a4:9a:
         55:08:9d:e4:ed:1d:f2:7a:87:ae:2d:d5:01:99:5c:fe:88:cc:
         3e:ba:4e:af:8b:4b:00:24:6f:de:a0:2d:74:1e:03:00:99:e3:
         bb:e4:68:01:a2:33:90:b2:ac:ea:99:7c:f0:7c:01:aa:db:02:
         14:10:c9:46:26:1a:00:4c:f5:9b:9e:1e:1f:66:a1:9d:3d:4c:
         17:d3:c2:6b:52:5d:cc:a6:a0:00:25:b7:8d:d6:65:b0:15:be:
         c5:a3:a5:04:30:9e:a5:cd:86:14:3c:59:48:d7:7a:9f:e2:b1:
         a0:53:45:b4:5a:6c:f1:b2:77:e1:10:6a:6e:da:28:cb:5b:ce:
         d6:15:a4:09:be:85:a2:20:73:55:4a:78:f1:c4:d4:e3:18:d3:
         f4:39:61:9b:5f:25:e2:bd:3e:87:47:90:1c:8b:9b:37:9e:8f:
         78:e1:ef:f7:c4:fc:46:d5:e4:26:24:03:e9:6d:d2:f1:60:95:
         2f:02:45:f9:46:df:71:99:58:21:89:60:6d:9f:8e:b1:7a:2a:
         a0:97:fd:5c:75:6b:e1:e2:5c:3b:b4:4e:ce:29:ab:a8:82:4c:
         4f:f3:fe:28
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEdZEMS9PKnt1i0gjuowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
YmE5ODdkZGQtMWIwOS00ZGMwLWI0OWMtMGQzZmUyMDhkNjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwuAi9ZP7xe9s8PuKWr4Oz4Ehtt7T2vXZLqk
2zP80oHYHawijKtDp1EDnWXeo+eTduWIKapbul9ljhPjRxe+Cby4rjk7R/S7esWv
zv8FT4YGaOLPr2LShwzY0Kkp+MfLDPvkv5WmbkH8xI6c7TbBEkUCmgsha0EjAlKo
8VSc35Xx131kyy4aaC8oWBVTXnZyICLQaFvhGPosKLRVM08eVDGYtXZkA3wWTGj1
vRrriZhXSnWtEkaoxIBVTKzJvo2qOJSYBaNMv9BHqHqxZgWLCxcQLdCXeHzQJtdY
sYzpsJDmozluaVPiwNBT0l7vK4f+2OVW+u5Gg9WvvKR96BgfUQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFOeDHwW476n/cuBcetRjIMUxu65VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2M5ZDFmYTEtZjRmYS0z
ZTdiLTk4OTUtZDMyM2YyMDdiZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAP/
AAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEATiRVMA2bPnGGS0zw9Wean3kWzD2k29eG87XCJi8Jwppd7aSa
VQid5O0d8nqHri3VAZlc/ojMPrpOr4tLACRv3qAtdB4DAJnju+RoAaIzkLKs6pl8
8HwBqtsCFBDJRiYaAEz1m54eH2ahnT1MF9PCa1JdzKagACW3jdZlsBW+xaOlBDCe
pc2GFDxZSNd6n+KxoFNFtFps8bJ34RBqbtooy1vO1hWkCb6FoiBzVUp48cTU4xjT
9Dlhm18l4r0+h0eQHIubN56PeOHv98T8RtXkJiQD6W3S8WCVLwJF+UbfcZlYIYlg
bZ+OsXoqoJf9XHVr4eJcO7ROzimrqIJMT/P+KA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:13 2024 by rpki-client on console-ams.rpki-client.org