Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
File:                     f6285d45-9269-3c7f-af51-21be86401f66.roa (raw, json)
Hash identifier:          OlAYhRh0eykqyhFYkxxUsvQ6zJBYaETFE5ThOunGQU4=
Subject key identifier:   28:A5:38:07:52:53:F4:1A:34:FB:87:8C:F2:28:08:E3:B3:B1:8C:F9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285845AC88CB9ED3FC7D4AD4FD1100
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     2914
IP address blocks:        2001:418:3ff:8::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:cb:9e:d3:fc:7d:4a:d4:fd:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=77c29c55-f23a-419c-8555-33ac1ace0527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:07:6f:db:b0:4e:95:cb:26:90:1f:82:0b:
                    a8:b1:01:18:64:9f:d6:35:4f:49:9a:f4:9c:bb:c6:
                    61:8a:3b:34:a2:45:c8:ac:58:d5:96:88:2e:6d:47:
                    e4:23:77:d4:72:27:98:3d:ab:9a:52:6e:d6:d0:66:
                    2b:7f:6d:09:b3:11:f8:da:59:4e:e5:27:8c:e3:5c:
                    23:15:25:16:06:a6:d7:85:10:58:69:9c:c8:d3:7f:
                    51:4d:5e:52:34:cc:cc:34:a7:7a:87:c9:17:52:0b:
                    2e:89:90:a9:8f:65:84:ad:7a:a7:1c:49:dc:8e:41:
                    19:5e:bc:ef:48:c9:02:5d:be:61:f0:a3:1a:f0:60:
                    be:45:57:47:c3:08:66:4c:9a:ea:29:ce:5d:99:40:
                    44:5b:c1:a8:6d:20:73:58:06:2e:40:28:da:03:4b:
                    9a:69:77:33:fe:2a:f4:24:42:04:a0:93:ca:37:30:
                    81:f0:d2:4b:c2:78:27:4d:12:a9:2c:fe:a1:55:07:
                    be:67:a0:0a:c5:6f:d1:55:2f:b3:bd:77:bf:f6:68:
                    41:b2:48:09:1a:64:2b:85:71:c8:49:22:81:7e:9c:
                    c8:f5:92:9d:e5:03:cd:7f:d1:a8:98:c7:b8:2b:1d:
                    d7:95:06:e8:85:05:5a:6d:fb:eb:45:fc:31:6b:0c:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:38:07:52:53:F4:1A:34:FB:87:8C:F2:28:08:E3:B3:B1:8C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:91:a3:c7:1b:ff:50:77:1d:db:42:f6:4c:09:fc:d9:32:
         c6:1b:d3:38:6a:cd:3a:b9:ce:6e:aa:d9:96:b9:d1:05:b9:65:
         ae:04:a0:06:a8:f7:76:7b:57:0c:eb:61:cd:8b:0a:3c:b4:c2:
         a4:e6:07:ec:32:a8:3f:2a:b3:2f:d6:92:bf:b3:84:b8:50:b0:
         4f:4e:8f:ff:6f:d4:db:a2:d9:e2:97:aa:e6:db:a8:46:1e:35:
         df:1c:66:a5:8e:46:ca:f4:72:8b:4f:20:c6:1d:c1:54:fb:94:
         4b:7c:fb:59:3a:8b:b9:a4:5a:d6:a5:9c:e8:36:9a:b0:45:ec:
         19:89:93:a1:48:e7:03:51:9d:be:7b:28:96:04:cb:68:b4:d4:
         6f:91:80:df:9e:27:dd:77:5d:5a:9f:70:22:64:ef:00:ac:06:
         6f:b0:c7:3d:4c:50:31:10:77:50:8b:ff:ae:65:21:b0:eb:c1:
         5d:e2:bd:a4:b1:3d:c4:5d:af:31:e9:d8:25:f5:50:2f:fc:39:
         38:cb:77:e8:5d:da:6e:ac:4e:d7:6e:64:49:ce:e4:44:93:d7:
         2f:e0:b6:df:5e:4b:c0:17:c5:ef:6d:fd:33:b1:16:3f:9e:28:
         31:da:35:07:37:5a:c4:79:e2:47:7f:01:ed:ce:a0:0c:49:71:
         cc:78:9f:eb
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEWsiMue0/x9StT9EQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
NzdjMjljNTUtZjIzYS00MTljLTg1NTUtMzNhYzFhY2UwNTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjogHb9uwTpXLJpAfgguosQEYZJ/WNU9JmvSc
u8Zhijs0okXIrFjVlogubUfkI3fUcieYPauaUm7W0GYrf20JsxH42llO5SeM41wj
FSUWBqbXhRBYaZzI039RTV5SNMzMNKd6h8kXUgsuiZCpj2WErXqnHEncjkEZXrzv
SMkCXb5h8KMa8GC+RVdHwwhmTJrqKc5dmUBEW8GobSBzWAYuQCjaA0uaaXcz/ir0
JEIEoJPKNzCB8NJLwngnTRKpLP6hVQe+Z6AKxW/RVS+zvXe/9mhBskgJGmQrhXHI
SSKBfpzI9ZKd5QPNf9GomMe4Kx3XlQbohQVabfvrRfwxawy2SwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFCilOAdSU/QaNPuHjPIoCOOzsYz5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjYyODVkNDUtOTI2OS0z
YzdmLWFmNTEtMjFiZTg2NDAxZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAP/
AAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEARtaRo8cb/1B3HdtC9kwJ/NkyxhvTOGrNOrnObqrZlrnRBbll
rgSgBqj3dntXDOthzYsKPLTCpOYH7DKoPyqzL9aSv7OEuFCwT06P/2/U26LZ4peq
5tuoRh413xxmpY5GyvRyi08gxh3BVPuUS3z7WTqLuaRa1qWc6DaasEXsGYmToUjn
A1GdvnsolgTLaLTUb5GA354n3XddWp9wImTvAKwGb7DHPUxQMRB3UIv/rmUhsOvB
XeK9pLE9xF2vMenYJfVQL/w5OMt36F3abqxO125kSc7kRJPXL+C2315LwBfF7239
M7EWP54oMdo1BzdaxHniR38B7c6gDElxzHif6w==
-----END CERTIFICATE-----
Generated at Mon May 6 17:45:27 2024 by rpki-client on console-ams.rpki-client.org