Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa
File:                     3e1febce-a882-390d-b48a-932011598477.roa (raw, json)
Hash identifier:          pdeIUKzoyXIZxfRo8/eq5aVbdHrV5qUf6DIMLrDt7/0=
Subject key identifier:   08:25:14:23:8A:FE:68:68:CE:83:77:F4:E3:26:44:74:0C:CF:0C:CD
Certificate issuer:       /CN=3a000633-c1ee-492c-b730-12e113ab8bd2
Certificate serial:       010D0C9F43285847F84F89131EADF235973CEA80
Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     394710
IP address blocks:        2604:7a40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:89:13:1e:ad:f2:35:97:3c:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=ec5881cc-3db2-4ef1-a4e1-80cec104eb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:db:eb:0e:3b:ac:44:e6:87:a1:84:0e:be:
                    9b:3b:7f:35:86:f8:f9:c7:ed:54:40:5b:60:d5:3f:
                    ce:b3:17:fb:fd:ff:dc:ab:5a:4d:c4:c8:7c:e2:79:
                    1d:f9:87:7d:79:37:07:4b:23:5c:d5:e2:9d:69:31:
                    8b:ee:d2:b1:7e:ab:c6:45:20:49:cc:fd:5d:94:98:
                    21:d6:22:4f:91:4c:31:09:4e:24:b4:e3:01:df:17:
                    59:81:b6:8a:03:4a:e3:6c:b8:aa:6e:06:e7:d9:88:
                    64:84:c4:76:87:23:08:d6:1b:7a:21:7c:8e:af:b9:
                    49:37:23:d9:bc:3d:96:5e:01:99:1b:14:70:80:33:
                    9a:c6:32:32:64:0d:21:81:c8:23:8a:93:9f:28:5f:
                    06:3a:1e:2b:17:89:c8:02:36:98:fc:a3:92:f6:bc:
                    c8:33:b0:c2:f2:08:f5:46:c1:f4:e5:42:2e:b0:bc:
                    e5:fa:19:24:eb:df:57:71:90:63:2a:b4:2e:03:e7:
                    11:af:fa:5d:88:b3:50:c9:f0:4f:ad:16:71:42:7c:
                    52:e2:bc:be:2e:24:f1:85:4f:2c:82:35:03:f8:72:
                    d5:9e:a2:23:38:d8:9d:4a:49:78:f4:52:8d:a1:b3:
                    37:bc:59:23:6a:55:2d:25:78:b1:09:dd:9a:2e:d0:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:25:14:23:8A:FE:68:68:CE:83:77:F4:E3:26:44:74:0C:CF:0C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl

            X509v3 Authority Key Identifier:
                keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:be:6e:d1:88:48:cc:7f:12:41:23:2f:ec:60:5c:2a:95:2e:
         2e:e7:01:48:8a:53:1c:f1:94:d8:7d:50:7f:22:be:d3:ed:b0:
         38:5f:ba:9b:f3:98:a7:a7:bb:43:97:ad:a1:a8:7c:f8:39:cf:
         6f:cd:ef:5e:8b:e6:c9:d5:0d:6a:1d:d4:aa:92:61:3d:86:3e:
         13:0d:59:7c:d9:98:6e:02:65:d9:32:33:de:aa:b2:08:f0:a9:
         14:ea:b6:5a:14:cc:ae:b5:4a:23:3d:46:20:bb:27:af:23:c0:
         04:0d:57:04:eb:9e:3b:e6:81:98:3d:96:a4:2d:a3:c4:7c:81:
         d6:7b:c4:b6:c2:94:58:2d:35:52:ca:63:39:91:fe:46:af:1e:
         dd:ad:c7:00:39:99:61:af:61:03:58:5f:f4:4a:48:a4:46:29:
         1e:fd:5e:ff:dc:3e:86:24:13:a1:e7:c8:b6:ee:1e:05:64:3b:
         3e:7e:ed:ca:47:53:bd:1e:f8:c8:81:56:b3:02:a7:09:b2:57:
         d7:c9:bc:0d:31:99:86:a4:25:10:79:c7:4b:ae:a8:13:60:61:
         6e:7b:b0:c4:aa:0a:9c:73:42:4c:ab:5c:42:94:9c:31:3e:5a:
         15:e3:5b:25:20:23:c3:b4:ca:17:20:31:ce:23:24:6b:c8:ae:
         47:87:d0:4b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEf4T4kTHq3yNZc86oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4
YmQyMB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk
ZWM1ODgxY2MtM2RiMi00ZWYxLWE0ZTEtODBjZWMxMDRlYjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYTb6w47rETmh6GEDr6bO381hvj5x+1UQFtg
1T/Osxf7/f/cq1pNxMh84nkd+Yd9eTcHSyNc1eKdaTGL7tKxfqvGRSBJzP1dlJgh
1iJPkUwxCU4ktOMB3xdZgbaKA0rjbLiqbgbn2YhkhMR2hyMI1ht6IXyOr7lJNyPZ
vD2WXgGZGxRwgDOaxjIyZA0hgcgjipOfKF8GOh4rF4nIAjaY/KOS9rzIM7DC8gj1
RsH05UIusLzl+hkk699XcZBjKrQuA+cRr/pdiLNQyfBPrRZxQnxS4ry+LiTxhU8s
gjUD+HLVnqIjONidSkl49FKNobM3vFkjalUtJXixCd2aLtA/dwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAglFCOK/mhozoN39OMmRHQMzwzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAw
MDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvM2UxZmViY2UtYTg4Mi0z
OTBkLWI0OGEtOTMyMDExNTk4NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMDA2MzMtYzFlZS00OTJjLWI3
MzAtMTJlMTEzYWI4YmQyLzNhMDAwNjMzLWMxZWUtNDkyYy1iNzMwLTEyZTExM2Fi
OGJkMi5jcmwwHwYDVR0jBBgwFoAUFGVxCMW+NO6jxif09m0EUs/PIyAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUx
MTNhYjhiZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR6QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAgvm7RiEjMfxJBIy/sYFwqlS4u5wFIilMc8ZTYfVB/Ir7T7bA4X7qb
85inp7tDl62hqHz4Oc9vze9ei+bJ1Q1qHdSqkmE9hj4TDVl82ZhuAmXZMjPeqrII
8KkU6rZaFMyutUojPUYguyevI8AEDVcE65475oGYPZakLaPEfIHWe8S2wpRYLTVS
ymM5kf5Grx7drccAOZlhr2EDWF/0SkikRike/V7/3D6GJBOh58i27h4FZDs+fu3K
R1O9HvjIgVazAqcJslfXybwNMZmGpCUQecdLrqgTYGFue7DEqgqcc0JMq1xClJwx
PloV41slICPDtMoXIDHOIyRryK5Hh9BL
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:35:24 2024 by rpki-client on console-fra.rpki-client.org