Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa
File:                     d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa (raw, json)
Hash identifier:          U24ccAy0vHTCmw1V0wjKK4v/aXdrzcqJl0yvRpvZF/I=
Subject key identifier:   64:B8:DA:B6:85:0F:B1:D9:37:22:5E:07:7C:E2:EA:60:AB:73:68:5A
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285847D569FB2CB843F22EEDA5DC80
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     4213
IP address blocks:        2607:dc80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fb:2c:b8:43:f2:2e:ed:a5:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=83f16803-033f-4749-b70a-7d86a28a36c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:15:a8:e4:b2:8d:4f:97:f8:ea:70:cc:e6:
                    3b:6f:d3:aa:ea:d4:f9:22:0a:64:1a:c8:e8:35:7a:
                    bd:83:54:34:63:9c:31:4b:87:a7:63:44:d3:d7:9b:
                    6d:a5:df:1d:36:b0:5f:05:38:5b:c0:5b:73:9d:c5:
                    57:f8:c6:e3:e6:51:c2:eb:a9:64:4f:24:b8:3c:b3:
                    96:ef:a3:fb:8a:bd:71:50:5d:0b:84:48:80:bd:88:
                    38:c5:67:ed:8c:e3:e3:3a:0f:db:e0:58:32:f5:da:
                    1c:37:83:d8:6c:1c:0c:d3:32:bd:78:fa:e1:41:9c:
                    7f:45:5c:70:90:44:b5:3c:c5:71:54:63:8d:62:7f:
                    50:2a:c9:73:3e:5e:51:e6:c6:90:59:8d:a6:e3:89:
                    5f:49:94:71:b2:91:64:f3:a8:f1:6c:f4:32:f1:03:
                    c2:f5:9c:a5:d7:ca:3d:8b:6d:85:d3:02:cd:ae:78:
                    6e:45:09:a9:cd:3c:fd:e7:8d:3e:ea:e8:70:1d:0d:
                    0c:6d:89:86:ec:1a:46:59:26:76:9c:ae:b4:ac:69:
                    8a:f8:87:d1:2c:bb:d6:af:e0:5f:09:5d:be:58:78:
                    05:d5:fc:c4:cb:ae:1d:b8:69:1c:5a:86:a2:fe:64:
                    c3:0a:b8:fa:a9:5a:26:b2:c7:12:5d:c8:e2:33:d6:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:DA:B6:85:0F:B1:D9:37:22:5E:07:7C:E2:EA:60:AB:73:68:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d98d2a02-3b1e-351d-8309-7d13fb77c7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:34:8a:df:31:57:94:1f:9c:58:23:62:84:7d:b0:38:12:
         57:2e:f5:78:a1:9d:6e:3b:3e:c7:37:4e:fa:fc:56:db:b6:40:
         de:9e:b4:55:95:e9:1d:09:55:ec:94:07:db:a3:88:af:4b:a9:
         1b:f1:50:ca:cf:52:52:2a:b1:a2:06:1b:c3:8c:4d:a2:bc:71:
         7b:3f:e4:ee:7f:62:77:e4:43:b3:d9:48:81:80:51:d1:6b:bd:
         cc:c4:81:af:67:02:9f:8f:00:30:fd:76:bf:c6:61:f1:77:70:
         86:03:14:52:cb:22:bb:c6:20:e6:0d:3b:64:74:93:c1:66:5d:
         57:f2:7c:54:00:bd:94:3e:48:72:47:30:31:3e:d2:05:74:32:
         50:f2:b1:28:1b:26:ac:cb:fd:42:af:d8:d4:5c:61:4b:e7:58:
         ca:6c:f2:f9:f7:39:48:5c:87:2e:47:09:7c:13:a9:d9:96:0c:
         3f:48:97:05:34:8c:e4:8e:c5:ff:ec:68:cb:7f:70:e1:a0:a1:
         b3:79:f1:c4:4d:80:2c:4e:41:c5:c3:ff:0b:13:a6:1e:50:b7:
         83:8b:d0:a5:3c:55:1f:41:cd:72:a7:24:03:9f:d4:f2:06:e8:
         3e:92:7d:e5:e3:19:16:16:2f:74:56:13:18:c7:0d:46:f7:d9:
         85:8b:e4:fa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfVafssuEPyLu2l3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk
ODNmMTY4MDMtMDMzZi00NzQ5LWI3MGEtN2Q4NmEyOGEzNmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hUVqOSyjU+X+OpwzOY7b9Oq6tT5IgpkGsjo
NXq9g1Q0Y5wxS4enY0TT15ttpd8dNrBfBThbwFtzncVX+Mbj5lHC66lkTyS4PLOW
76P7ir1xUF0LhEiAvYg4xWftjOPjOg/b4Fgy9docN4PYbBwM0zK9ePrhQZx/RVxw
kES1PMVxVGONYn9QKslzPl5R5saQWY2m44lfSZRxspFk86jxbPQy8QPC9Zyl18o9
i22F0wLNrnhuRQmpzTz9540+6uhwHQ0MbYmG7BpGWSZ2nK60rGmK+IfRLLvWr+Bf
CV2+WHgF1fzEy64duGkcWoai/mTDCrj6qVomsscSXcjiM9YO6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGS42raFD7HZNyJeB3zi6mCrc2haMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZDk4ZDJhMDItM2IxZS0z
NTFkLTgzMDktN2QxM2ZiNzdjN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfcgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAUyDSK3zFXlB+cWCNihH2wOBJXLvV4oZ1uOz7HN076/FbbtkDenrRV
lekdCVXslAfbo4ivS6kb8VDKz1JSKrGiBhvDjE2ivHF7P+Tuf2J35EOz2UiBgFHR
a73MxIGvZwKfjwAw/Xa/xmHxd3CGAxRSyyK7xiDmDTtkdJPBZl1X8nxUAL2UPkhy
RzAxPtIFdDJQ8rEoGyasy/1Cr9jUXGFL51jKbPL59zlIXIcuRwl8E6nZlgw/SJcF
NIzkjsX/7GjLf3DhoKGzefHETYAsTkHFw/8LE6YeULeDi9ClPFUfQc1ypyQDn9Ty
Bug+kn3l4xkWFi90VhMYxw1G99mFi+T6
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:10 2024 by rpki-client on console-fra.rpki-client.org