Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/4f695749-673d-3dba-a5fd-b9779252ab4e.roa
File:                     4f695749-673d-3dba-a5fd-b9779252ab4e.roa (raw, json)
Hash identifier:          Oi97Citn9emubyN+XBflPhxl3hbagmANnfa7v/jpAUM=
Subject key identifier:   D5:7A:7A:6D:03:3F:20:DD:8C:91:81:41:E5:A4:37:33:BC:17:BD:91
Certificate issuer:       /CN=e102a5ad-786a-444b-bd0b-6bd116f20466
Certificate serial:       010D0C9F432858472405BD2C0E17A5A3CB1FFF80
Authority key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/4f695749-673d-3dba-a5fd-b9779252ab4e.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     6315
IP address blocks:        2604:9d40:120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:bd:2c:0e:17:a5:a3:cb:1f:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=f0b68d8d-54c4-4eb3-a916-21236120b7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:71:ca:01:25:ac:1b:0e:21:1b:db:a7:5c:
                    f9:9e:4d:8c:19:98:73:b1:0f:04:0c:7c:54:39:26:
                    82:e8:3c:63:51:e5:b8:5e:eb:93:ba:c1:1f:8f:c2:
                    5e:07:85:c5:9f:33:30:c3:f7:7b:b5:5a:0d:97:f8:
                    f2:ff:61:62:2b:81:0e:a4:d6:f6:4b:38:07:34:0e:
                    c9:3f:d8:66:32:c7:71:c9:38:ca:5b:6b:71:0b:03:
                    cc:7b:db:f0:36:8d:aa:c3:aa:73:c6:e2:5e:b1:5c:
                    3a:a5:df:22:90:6e:a8:9b:d3:f9:4d:9f:20:3e:f7:
                    20:6d:fb:a6:50:7c:64:2a:c4:8c:04:b7:c8:52:0b:
                    b8:b0:b1:08:90:f1:c4:08:4a:e4:f4:f0:1f:0b:85:
                    5e:6d:5e:60:b2:ce:f1:d9:81:7d:1a:c8:c2:71:50:
                    b9:27:ad:3e:de:5b:3b:9e:c1:c6:69:32:09:b8:13:
                    b7:58:92:1c:2e:54:a0:8c:be:30:48:b5:f3:37:db:
                    1e:25:76:05:a6:70:fc:64:7c:0e:90:d9:a9:ae:05:
                    7d:c0:53:bf:6a:3b:2d:8d:ab:86:64:d5:9c:eb:d9:
                    ec:db:b9:f2:ef:f6:57:0e:e1:36:e1:68:9d:6c:a4:
                    88:7e:03:08:bd:fe:53:22:6c:24:18:6f:c2:cd:a2:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7A:7A:6D:03:3F:20:DD:8C:91:81:41:E5:A4:37:33:BC:17:BD:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/4f695749-673d-3dba-a5fd-b9779252ab4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl

            X509v3 Authority Key Identifier:
                keyid:98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9d40:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:9d:f7:1b:ea:7f:00:6a:c4:6e:c6:8d:9a:40:09:a9:7b:
         b6:55:1b:90:5d:d3:67:11:b6:d4:3f:7a:29:98:34:d2:30:33:
         81:e3:3f:bc:82:0b:91:1c:39:26:84:a4:8e:32:4f:8d:e6:7e:
         c3:10:5d:b6:dc:44:58:cb:da:c1:ae:b9:8a:cc:87:4e:47:4a:
         04:4f:e1:b8:ed:a4:1c:58:6a:7b:1c:fe:fe:d7:15:3f:b4:cf:
         96:e3:2c:30:57:17:74:fe:36:00:9c:27:00:61:d6:7c:03:e2:
         12:b1:8b:78:65:e9:a1:9b:aa:88:68:48:51:91:71:d2:1e:2f:
         6f:cd:e4:41:db:2c:00:87:6b:c2:79:76:16:58:52:a8:f5:6b:
         69:a4:3f:67:6f:30:f5:d5:c6:04:d9:cd:db:ac:d3:0d:a0:7e:
         21:7e:5b:45:07:6a:5f:d6:35:69:9e:0f:65:2a:9e:d0:9e:f7:
         47:b3:ab:01:e7:44:5c:ac:42:c2:16:99:88:28:b2:8f:0a:a6:
         ee:13:a4:2e:d5:54:bd:2d:7e:c9:d0:61:a7:8a:9b:3b:56:f1:
         84:49:d5:4e:06:c4:51:44:6f:ff:73:07:7d:f5:7d:36:f3:bb:
         87:19:38:b2:e2:b7:d2:ae:77:85:5d:67:2d:1d:31:0e:e0:72:
         db:34:e3:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEckBb0sDhelo8sf/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTEwMmE1YWQtNzg2YS00NDRiLWJkMGItNmJkMTE2ZjIw
NDY2MB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZjBiNjhkOGQtNTRjNC00ZWIzLWE5MTYtMjEyMzYxMjBiN2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz5xygElrBsOIRvbp1z5nk2MGZhzsQ8EDHxU
OSaC6DxjUeW4XuuTusEfj8JeB4XFnzMww/d7tVoNl/jy/2FiK4EOpNb2SzgHNA7J
P9hmMsdxyTjKW2txCwPMe9vwNo2qw6pzxuJesVw6pd8ikG6om9P5TZ8gPvcgbfum
UHxkKsSMBLfIUgu4sLEIkPHECErk9PAfC4VebV5gss7x2YF9GsjCcVC5J60+3ls7
nsHGaTIJuBO3WJIcLlSgjL4wSLXzN9seJXYFpnD8ZHwOkNmprgV9wFO/ajstjauG
ZNWc69ns27ny7/ZXDuE24WidbKSIfgMIvf5TImwkGG/CzaLZ4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNV6em0DPyDdjJGBQeWkNzO8F72RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTAy
YTVhZC03ODZhLTQ0NGItYmQwYi02YmQxMTZmMjA0NjYvNGY2OTU3NDktNjczZC0z
ZGJhLWE1ZmQtYjk3NzkyNTJhYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTEwMmE1YWQtNzg2YS00NDRiLWJk
MGItNmJkMTE2ZjIwNDY2L2UxMDJhNWFkLTc4NmEtNDQ0Yi1iZDBiLTZiZDExNmYy
MDQ2Ni5jcmwwHwYDVR0jBBgwFoAUmOuumIaU+Z26tSR7THaZ3Uuit+8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTAyYTVhZC03ODZhLTQ0NGItYmQwYi02YmQx
MTZmMjA0NjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSdQAEg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI2Rnfcb6n8AasRuxo2aQAmpe7ZVG5Bd02cRttQ/eimYNNIwM4Hj
P7yCC5EcOSaEpI4yT43mfsMQXbbcRFjL2sGuuYrMh05HSgRP4bjtpBxYansc/v7X
FT+0z5bjLDBXF3T+NgCcJwBh1nwD4hKxi3hl6aGbqohoSFGRcdIeL2/N5EHbLACH
a8J5dhZYUqj1a2mkP2dvMPXVxgTZzdus0w2gfiF+W0UHal/WNWmeD2UqntCe90ez
qwHnRFysQsIWmYgoso8Kpu4TpC7VVL0tfsnQYaeKmztW8YRJ1U4GxFFEb/9zB331
fTbzu4cZOLLit9Kud4VdZy0dMQ7gcts04zE=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:27:51 2024 by rpki-client on console-ams.rpki-client.org