Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa
File:                     3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa (raw, json)
Hash identifier:          j0GYqgIPfzVtKa0x3r3HI22Gn03aHScMLqy+J6Z30y0=
Subject key identifier:   B9:B3:01:F7:88:F6:7C:A3:07:8B:F1:8A:5C:81:92:A8:64:58:68:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584773964F8C0B64E82CAA87D180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     36632
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:4f:8c:0b:64:e8:2c:aa:87:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=7088ede2-cc18-4cc3-be65-359ccf8c24f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:9a:48:e4:ec:98:8f:dc:e5:75:42:f5:e0:
                    44:af:ed:85:1a:8b:93:82:21:02:69:b8:17:88:bc:
                    94:25:25:f8:9e:d3:e3:e3:04:57:3a:61:88:f6:72:
                    db:88:c5:38:df:ec:6c:5b:46:72:fd:f5:52:cc:9b:
                    50:e8:2b:fc:e1:18:7f:36:9b:3b:ad:52:1c:75:3d:
                    58:c4:7d:b2:83:72:05:73:96:44:f5:2b:2b:46:22:
                    a3:a8:54:8a:d2:ab:48:e1:65:26:42:92:74:11:b2:
                    0a:56:15:61:34:cd:00:01:1e:66:9f:0b:14:dd:2b:
                    df:e7:65:fc:50:49:fd:af:06:6b:1c:65:a0:ba:45:
                    5c:ba:1f:d1:8b:1d:e7:24:32:e6:75:de:78:87:bc:
                    99:7a:8a:d8:1e:d8:e0:34:6d:75:23:b4:e9:f0:e1:
                    df:91:c3:a3:ab:38:be:82:fd:a3:c0:c3:12:8a:13:
                    3c:7d:6d:d5:f7:0b:f1:c8:f1:cb:53:64:e0:5d:f7:
                    81:2b:dc:be:89:16:2f:b0:c0:4f:b4:08:54:8e:2b:
                    7e:0e:4e:15:d5:1c:2a:a6:00:cb:19:82:ec:d2:62:
                    a7:37:e1:1c:ce:1c:fd:53:2c:b7:f6:41:49:30:9d:
                    19:8a:77:36:2f:fb:af:5a:ee:5a:5a:20:ba:77:8d:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B3:01:F7:88:F6:7C:A3:07:8B:F1:8A:5C:81:92:A8:64:58:68:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f5:00:3f:6c:44:92:ee:ae:d4:6b:c2:74:15:9d:88:fa:6f:
         d9:b2:cf:64:37:a6:1a:76:85:e0:8c:4f:ea:9c:ec:d1:5d:4a:
         a6:07:29:2d:28:33:b3:8b:56:64:3b:0d:50:c3:b5:e6:93:90:
         f1:1a:55:5e:01:92:f6:98:e7:23:1e:24:6f:50:41:c7:b3:b5:
         0d:d0:40:c5:4a:39:da:12:6e:09:e1:2e:5f:63:c9:60:af:b6:
         81:69:20:a5:7b:34:64:a0:9e:41:fd:7f:2d:39:3e:5c:64:d7:
         c5:f1:5b:04:4d:18:aa:27:27:7b:d8:87:10:9b:03:f5:a0:26:
         a0:ae:03:09:9d:19:64:4c:90:c9:1f:bc:f1:19:5e:fb:d3:6a:
         90:98:58:85:79:98:57:b5:2b:58:d3:e2:8c:b9:38:2a:17:8e:
         24:95:41:12:26:26:8f:10:ee:38:7e:ff:da:2a:3f:bd:5a:65:
         e8:ee:d7:44:b6:34:da:78:60:6c:80:3f:e3:41:9b:37:ba:8d:
         16:5e:d0:9e:6f:70:0e:86:61:bf:3b:7a:c3:f4:0e:37:84:bb:
         8f:22:0f:cd:84:51:aa:80:ee:3c:fb:c8:36:b5:99:e2:5a:cd:
         fc:f3:a4:51:f7:05:68:26:58:09:b9:b6:de:0a:0c:ec:ab:c7:
         45:4b:16:3e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEdzlk+MC2ToLKqH0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzA4OGVkZTItY2MxOC00Y2MzLWJlNjUtMzU5Y2NmOGMyNGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTmaSOTsmI/c5XVC9eBEr+2FGouTgiECabgX
iLyUJSX4ntPj4wRXOmGI9nLbiMU43+xsW0Zy/fVSzJtQ6Cv84Rh/Nps7rVIcdT1Y
xH2yg3IFc5ZE9SsrRiKjqFSK0qtI4WUmQpJ0EbIKVhVhNM0AAR5mnwsU3Svf52X8
UEn9rwZrHGWgukVcuh/Rix3nJDLmdd54h7yZeorYHtjgNG11I7Tp8OHfkcOjqzi+
gv2jwMMSihM8fW3V9wvxyPHLU2TgXfeBK9y+iRYvsMBPtAhUjit+Dk4V1RwqpgDL
GYLs0mKnN+Eczhz9Uyy39kFJMJ0Zinc2L/uvWu5aWiC6d41I5QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLmzAfeI9nyjB4vxilyBkqhkWGiYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U1N2IxYWYtNWMwZC0z
NzVmLWE2YzctOWZhNWVhZTAwZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAZ9QA/bESS7q7Ua8J0FZ2I+m/Zss9kN6YadoXg
jE/qnOzRXUqmByktKDOzi1ZkOw1Qw7Xmk5DxGlVeAZL2mOcjHiRvUEHHs7UN0EDF
SjnaEm4J4S5fY8lgr7aBaSClezRkoJ5B/X8tOT5cZNfF8VsETRiqJyd72IcQmwP1
oCagrgMJnRlkTJDJH7zxGV7702qQmFiFeZhXtStY0+KMuTgqF44klUESJiaPEO44
fv/aKj+9WmXo7tdEtjTaeGBsgD/jQZs3uo0WXtCeb3AOhmG/O3rD9A43hLuPIg/N
hFGqgO48+8g2tZniWs3886RR9wVoJlgJubbeCgzsq8dFSxY+
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org