Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa
File:                     fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa (raw, json)
Hash identifier:          hVLWcxOSu5UhilWE6Ed0R3l1O+W3LJua01B6g9SW1Ys=
Subject key identifier:   2B:FC:73:C5:64:A7:DE:F0:1E:DA:46:4D:84:9B:A0:8D:EC:C2:30:1E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E62ABDBA0E6754FB8E226D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        2620:0:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:bd:ba:0e:67:54:fb:8e:22:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=dc986c28-5e64-41b3-8047-bc1e2dce978b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:cb:13:b6:ea:34:c0:52:84:2f:22:e7:eb:
                    c2:95:c3:1f:ce:19:bb:61:8c:91:ce:09:48:93:43:
                    31:ba:91:37:9b:e3:b5:2e:3d:f3:5a:a3:07:3d:55:
                    ad:4e:f4:08:ef:c9:93:4e:c6:b8:25:e6:9a:30:56:
                    1c:a1:5d:dc:c0:3f:b9:52:54:78:46:71:37:b8:47:
                    41:a0:35:a6:2c:0c:e7:9d:1a:b2:ae:44:af:41:47:
                    0c:99:60:a6:bc:52:45:f9:ac:af:ae:dc:7d:78:d2:
                    5d:65:2d:09:16:14:82:67:c0:08:e7:ca:6e:47:a5:
                    a7:05:f8:09:58:d8:df:ef:49:5b:38:7d:3e:fc:f3:
                    26:d1:82:e2:d7:d2:99:73:d3:a2:a9:c7:f4:67:e7:
                    29:5c:09:48:cf:4e:80:e2:9e:31:02:6c:bc:a1:b1:
                    a7:07:da:7d:31:ec:b2:0f:3b:27:fd:77:c1:82:bd:
                    94:32:f8:90:fe:3c:6c:d9:cd:81:0a:74:53:cc:70:
                    28:4d:27:fa:b5:b8:6a:51:e7:a1:7f:c9:d3:fe:a0:
                    30:cc:18:6c:a1:d4:b7:fe:18:24:2a:11:35:2f:0a:
                    4e:44:85:ec:b3:1e:8c:93:cf:c6:f3:5f:c1:dd:62:
                    e0:77:82:43:2e:19:5f:fa:de:22:02:37:ae:59:01:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FC:73:C5:64:A7:DE:F0:1E:DA:46:4D:84:9B:A0:8D:EC:C2:30:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbaa1e81-f0ba-3c94-ad29-aca4a58fcfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9b:b2:9f:32:a2:a4:f4:d0:3c:d6:53:59:c6:06:cf:85:28:
         e1:5b:99:72:0d:6f:7f:1b:ba:4a:8e:6e:0d:53:11:a7:f0:22:
         bb:69:46:4b:a3:52:fb:ed:98:82:39:80:cc:d0:45:76:13:bc:
         55:25:53:a2:53:42:8f:85:19:b8:b4:24:11:78:45:63:3a:62:
         5e:35:df:5d:60:ac:07:19:16:35:71:48:1c:19:18:a3:da:6a:
         97:b1:aa:69:65:8c:e3:53:7c:b7:12:f5:cb:3c:28:ad:9a:df:
         02:a0:81:97:73:25:14:05:23:b1:d6:e4:8c:e3:b1:4d:5b:55:
         f6:93:49:6b:76:0b:8a:fe:fe:7d:fb:b0:57:aa:30:bd:2c:37:
         da:7f:b3:53:f7:6b:60:5f:7a:78:f1:39:59:0b:11:da:e4:d7:
         3f:4f:8f:7e:ec:d4:08:39:95:3a:7d:c4:d7:6a:7b:2d:d4:4b:
         39:9e:46:51:f5:b4:c6:b1:07:1c:8c:e0:99:86:fb:cc:61:27:
         57:ba:89:44:a8:2e:5d:47:40:45:a0:17:6c:de:c9:5e:02:9d:
         7a:26:f1:02:69:e8:e9:6c:04:c1:e7:73:19:24:b0:7c:b6:94:
         ba:19:cd:0e:3a:fe:50:08:ca:2f:b9:8b:9d:42:ca:58:55:5f:
         e8:8f:33:9f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfmKr26DmdU+44ibYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZGM5ODZjMjgtNWU2NC00MWIzLTgwNDctYmMxZTJkY2U5NzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt3LE7bqNMBShC8i5+vClcMfzhm7YYyRzglI
k0MxupE3m+O1Lj3zWqMHPVWtTvQI78mTTsa4JeaaMFYcoV3cwD+5UlR4RnE3uEdB
oDWmLAznnRqyrkSvQUcMmWCmvFJF+ayvrtx9eNJdZS0JFhSCZ8AI58puR6WnBfgJ
WNjf70lbOH0+/PMm0YLi19KZc9Oiqcf0Z+cpXAlIz06A4p4xAmy8obGnB9p9Meyy
Dzsn/XfBgr2UMviQ/jxs2c2BCnRTzHAoTSf6tbhqUeehf8nT/qAwzBhsodS3/hgk
KhE1LwpORIXssx6Mk8/G81/B3WLgd4JDLhlf+t4iAjeuWQHTDQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCv8c8Vkp97wHtpGTYSboI3swjAeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmJhYTFlODEtZjBiYS0z
Yzk0LWFkMjktYWNhNGE1OGZjZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAAABAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHJuynzKipPTQPNZTWcYGz4Uo4VuZcg1vfxu6So5uDVMRp/Aiu2lG
S6NS++2YgjmAzNBFdhO8VSVTolNCj4UZuLQkEXhFYzpiXjXfXWCsBxkWNXFIHBkY
o9pql7GqaWWM41N8txL1yzworZrfAqCBl3MlFAUjsdbkjOOxTVtV9pNJa3YLiv7+
ffuwV6owvSw32n+zU/drYF96ePE5WQsR2uTXP0+PfuzUCDmVOn3E12p7LdRLOZ5G
UfW0xrEHHIzgmYb7zGEnV7qJRKguXUdARaAXbN7JXgKdeibxAmno6WwEwedzGSSw
fLaUuhnNDjr+UAjKL7mLnULKWFVf6I8znw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:51 2024 by rpki-client on console-ams.rpki-client.org