Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa
File:                     98edf705-d568-3a9d-8a83-619621b2b369.roa (raw, json)
Hash identifier:          KFENLYQ1XNvss5BosZcRDjEnv3ySBPrZUYcihNFC2vw=
Subject key identifier:   58:24:02:C1:B3:AC:55:E9:3A:7D:51:5C:B4:CE:B2:AD:FD:83:23:88
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F432858475EA628D12E8FD71E0C66D100
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     3423
IP address blocks:        2620:bf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:28:d1:2e:8f:d7:1e:0c:66:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=bfb80ee8-3cf4-4dad-9fc7-fb00a7d09818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:8d:75:80:f1:cc:1f:a1:bd:b4:0d:c6:58:
                    24:06:8f:17:09:07:cf:73:c4:0a:68:df:8d:f7:04:
                    59:0b:8d:07:8a:e5:c2:18:c2:7e:00:d9:66:bf:0e:
                    74:c2:52:d5:b0:4e:cd:33:4a:a4:23:a8:1e:80:ae:
                    94:28:27:3d:cc:d2:52:c5:58:2b:2b:72:76:19:78:
                    ab:2e:bc:cb:bf:e3:cb:d1:eb:4b:00:96:67:8b:ce:
                    ea:82:d9:de:b0:36:94:d6:2d:67:38:dc:7c:03:52:
                    d2:08:af:39:4c:25:72:19:36:8d:f3:8b:22:dd:05:
                    0f:e5:61:46:d0:b5:6a:66:33:73:e1:10:43:20:3d:
                    46:b6:4b:06:f5:05:fc:dd:6f:28:01:2f:c3:c5:2c:
                    e8:31:0e:d8:98:36:1f:a2:15:b7:f5:9a:23:cb:0c:
                    9f:be:89:d3:7b:aa:71:98:5b:35:05:3d:1f:9b:6d:
                    52:b9:48:11:51:38:24:1b:80:95:92:db:66:20:a9:
                    a9:80:99:3f:13:39:73:40:9e:1b:66:ac:8f:3a:f0:
                    6b:58:e5:0d:86:7a:b3:66:f0:15:9b:3e:47:e5:6d:
                    9f:aa:cb:d7:8e:53:a8:24:68:77:2a:f4:a1:c1:3c:
                    a9:cf:06:e5:eb:3d:09:33:7a:bd:01:22:8e:ad:14:
                    e8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:02:C1:B3:AC:55:E9:3A:7D:51:5C:B4:CE:B2:AD:FD:83:23:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:9d:80:18:52:37:18:ac:a1:58:f8:c3:3f:d8:93:35:39:ec:
         3a:f6:b6:e8:1e:d3:e7:a0:6b:06:b2:f4:80:af:e3:ff:ab:11:
         40:51:47:9a:01:23:5e:f9:ec:d0:78:21:95:93:01:b5:2a:42:
         c5:5a:30:32:14:90:9e:00:30:84:63:af:d6:42:95:8e:90:f6:
         c3:29:8e:a3:94:d9:84:3e:32:8b:8a:cc:18:d8:ce:49:37:01:
         f8:55:eb:3e:19:a2:64:6e:25:e7:96:f1:cc:5e:40:19:f6:61:
         fe:c9:26:ca:d3:1b:f5:b4:55:a2:fe:e7:e7:e6:84:29:53:58:
         eb:33:91:c8:38:20:95:05:d5:42:de:96:e6:a0:63:d5:cc:90:
         3c:9b:38:f3:1f:fc:22:c2:cf:80:19:62:84:ea:55:d4:d4:9e:
         ba:8b:7b:a5:fd:0a:c0:1f:7c:6b:12:31:8e:b8:0c:72:a0:13:
         5e:4a:81:dd:12:37:1e:ed:a2:c5:b5:8d:d5:cf:73:94:ce:c1:
         c1:4e:c7:73:30:37:0e:59:66:98:73:1c:3e:c5:e6:c6:dc:dc:
         c1:3a:bd:85:9b:bb:21:5e:d7:2d:f7:60:3a:95:2b:64:2b:22:
         73:52:05:b2:d8:f6:52:fd:09:c9:e0:06:ef:b6:ce:e5:5d:83:
         14:7d:fb:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdepijRLo/XHgxm0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk
YmZiODBlZTgtM2NmNC00ZGFkLTlmYzctZmIwMGE3ZDA5ODE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUqNdYDxzB+hvbQNxlgkBo8XCQfPc8QKaN+N
9wRZC40HiuXCGMJ+ANlmvw50wlLVsE7NM0qkI6gegK6UKCc9zNJSxVgrK3J2GXir
LrzLv+PL0etLAJZni87qgtnesDaU1i1nONx8A1LSCK85TCVyGTaN84si3QUP5WFG
0LVqZjNz4RBDID1GtksG9QX83W8oAS/DxSzoMQ7YmDYfohW39ZojywyfvonTe6px
mFs1BT0fm21SuUgRUTgkG4CVkttmIKmpgJk/EzlzQJ4bZqyPOvBrWOUNhnqzZvAV
mz5H5W2fqsvXjlOoJGh3KvShwTypzwbl6z0JM3q9ASKOrRTonwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFgkAsGzrFXpOn1RXLTOsq39gyOIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvOThlZGY3MDUtZDU2OC0z
YTlkLThhODMtNjE5NjIxYjJiMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALqdgBhSNxisoVj4wz/YkzU57Dr2tuge0+egaway9ICv4/+rEUBR
R5oBI1757NB4IZWTAbUqQsVaMDIUkJ4AMIRjr9ZClY6Q9sMpjqOU2YQ+MouKzBjY
zkk3AfhV6z4ZomRuJeeW8cxeQBn2Yf7JJsrTG/W0VaL+5+fmhClTWOszkcg4IJUF
1ULeluagY9XMkDybOPMf/CLCz4AZYoTqVdTUnrqLe6X9CsAffGsSMY64DHKgE15K
gd0SNx7tosW1jdXPc5TOwcFOx3MwNw5ZZphzHD7F5sbc3ME6vYWbuyFe1y33YDqV
K2QrInNSBbLY9lL9CcngBu+2zuVdgxR9+0g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org