Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8edad766-61d4-3a9c-84fa-0c95f320ffbf.roa
File:                     8edad766-61d4-3a9c-84fa-0c95f320ffbf.roa (raw, json)
Hash identifier:          +rSYE9sNSKijAZ9ambJcGiikRphBtxYmi28h7TPOP1Y=
Subject key identifier:   56:96:1B:16:13:61:AC:28:CD:C8:6F:C6:CE:91:3F:39:94:20:6F:3D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475A763B541E703AF88D1C36C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8edad766-61d4-3a9c-84fa-0c95f320ffbf.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        2001:418:1401:2f::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3b:54:1e:70:3a:f8:8d:1c:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=2241c907-ab68-4e79-bd26-1476bf28ccc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:58:63:d2:62:d0:e4:ac:88:03:00:1f:ec:
                    98:27:ee:d2:30:e1:c8:38:cf:7d:c9:ed:10:22:fb:
                    84:d4:29:79:ae:8f:88:f9:e0:d1:34:fc:93:bf:7d:
                    db:be:eb:8d:c0:60:1d:23:97:4d:5a:9f:d5:bf:95:
                    5f:12:34:60:c4:ce:64:1a:fb:a7:5c:90:3d:ff:8a:
                    ea:9a:9c:6c:ed:21:cf:b2:55:b7:d3:9c:c2:e2:a1:
                    df:c7:f3:7c:c0:dd:ef:e9:fe:79:1a:70:1f:ae:e3:
                    27:54:76:b8:10:69:bc:bd:fe:86:dc:5a:75:4c:d1:
                    47:13:7c:81:8a:39:72:1e:07:b5:a5:f9:b0:7d:07:
                    55:5f:eb:22:5c:e4:60:8a:18:37:fe:3a:ab:05:89:
                    f4:5a:5e:17:06:1f:b2:02:7f:1b:19:c8:c3:aa:26:
                    be:e4:fa:7a:82:83:3a:21:d2:6d:97:64:fb:ad:2b:
                    23:a9:28:31:a0:8e:6b:d3:90:48:33:a0:65:09:08:
                    44:37:94:de:e0:4c:82:4c:99:49:e7:c6:d1:8b:ed:
                    75:3e:d0:10:f2:4b:cb:6a:3c:2f:ad:0b:4c:c0:d1:
                    7d:6d:ac:d1:13:9d:a0:b2:1f:90:15:a0:2c:34:4b:
                    f0:d3:69:74:ea:b2:47:36:f2:d8:fa:6c:d5:0c:c7:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:1B:16:13:61:AC:28:CD:C8:6F:C6:CE:91:3F:39:94:20:6F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8edad766-61d4-3a9c-84fa-0c95f320ffbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:2f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cc:d8:c0:bd:4a:c9:e5:2a:b4:f5:88:d4:ac:a4:37:e5:bc:
         5c:04:20:e4:1d:68:32:d4:0c:b6:f8:da:1a:63:db:ab:6f:4b:
         c5:3b:e5:6b:e2:c8:3d:11:ce:e2:cf:35:bd:33:05:8f:8d:af:
         6e:df:55:16:ef:7d:91:f5:34:51:34:70:2a:a2:cd:5a:13:fa:
         74:f3:2b:e0:80:b9:89:99:71:a0:ef:fd:fe:25:04:af:24:62:
         72:9a:06:dd:38:69:c6:b2:9d:09:e9:ab:8b:51:4e:c0:65:7a:
         a2:fb:5d:e3:7d:65:88:f2:fb:cd:ec:0e:50:e4:cc:e8:35:a1:
         26:36:62:2d:8b:07:ce:ec:f2:8e:19:e8:06:e9:d8:0a:59:b1:
         8a:3e:e5:bb:23:c5:59:7e:b3:85:cf:b7:36:2e:50:52:56:ab:
         52:9e:4d:f4:ca:6a:21:c8:b7:da:0c:48:7a:a1:1e:2e:1e:49:
         c7:be:e9:11:dc:8a:5b:ac:69:e5:22:87:71:b0:74:8a:57:fb:
         e2:e1:08:aa:36:3d:d9:c3:e4:07:15:c1:ed:c7:70:2a:1e:80:
         12:1c:6a:62:26:ec:35:83:99:ef:b7:c9:39:89:17:51:b5:3e:
         5f:39:96:f6:2e:ff:fb:ef:56:26:f9:7a:f4:53:37:8c:59:ba:
         06:12:0d:c5
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEdadjtUHnA6+I0cNsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
MjI0MWM5MDctYWI2OC00ZTc5LWJkMjYtMTQ3NmJmMjhjY2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0hYY9Ji0OSsiAMAH+yYJ+7SMOHIOM99ye0Q
IvuE1Cl5ro+I+eDRNPyTv33bvuuNwGAdI5dNWp/Vv5VfEjRgxM5kGvunXJA9/4rq
mpxs7SHPslW305zC4qHfx/N8wN3v6f55GnAfruMnVHa4EGm8vf6G3Fp1TNFHE3yB
ijlyHge1pfmwfQdVX+siXORgihg3/jqrBYn0Wl4XBh+yAn8bGcjDqia+5Pp6goM6
IdJtl2T7rSsjqSgxoI5r05BIM6BlCQhEN5Te4EyCTJlJ58bRi+11PtAQ8kvLajwv
rQtMwNF9bazRE52gsh+QFaAsNEvw02l06rJHNvLY+mzVDMe2rQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFaWGxYTYawozchvxs6RPzmUIG89MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGVkYWQ3NjYtNjFkNC0z
YTljLTg0ZmEtMGM5NWYzMjBmZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB
AC8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAdszYwL1KyeUqtPWI1KykN+W8XAQg5B1oMtQMtvjaGmPbq29L
xTvla+LIPRHO4s81vTMFj42vbt9VFu99kfU0UTRwKqLNWhP6dPMr4IC5iZlxoO/9
/iUEryRicpoG3ThpxrKdCemri1FOwGV6ovtd431liPL7zewOUOTM6DWhJjZiLYsH
zuzyjhnoBunYClmxij7luyPFWX6zhc+3Ni5QUlarUp5N9MpqIci32gxIeqEeLh5J
x77pEdyKW6xp5SKHcbB0ilf74uEIqjY92cPkBxXB7cdwKh6AEhxqYibsNYOZ77fJ
OYkXUbU+XzmW9i7/++9WJvl69FM3jFm6BhINxQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:15 2024 by rpki-client on console-ams.rpki-client.org