Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/ecc7708c-3213-3e68-8e58-d048a743fac9.roa
File:                     ecc7708c-3213-3e68-8e58-d048a743fac9.roa (raw, json)
Hash identifier:          7Y9kWvbSpXQIB8BetQj0H4m9aDtC+5wjVD65dPckDiE=
Subject key identifier:   CD:B2:60:B3:FE:95:95:52:1D:7E:E2:59:B1:10:99:65:61:53:6D:F7
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584581430A8C6B341F35A63BCA40
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/ecc7708c-3213-3e68-8e58-d048a743fac9.roa
Signing time:             Thu 11 Apr 2024 01:00:25 +0000
ROA not before:           Thu 11 Apr 2024 01:00:25 +0000
ROA not after:            Wed 10 Jul 2024 01:00:25 +0000
asID:                     399077
IP address blocks:        2606:4dc0:3100::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:81:43:0a:8c:6b:34:1f:35:a6:3b:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Apr 11 01:00:25 2024 GMT
            Not After : Jul 10 01:00:25 2024 GMT
        Subject: CN=a757cdf7-bfcf-4c23-a8b3-054e59e471a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:e2:61:ce:75:49:54:3f:42:0e:2e:1a:a9:
                    e0:8f:76:f3:30:c2:ef:33:0a:f3:37:62:63:55:df:
                    66:56:d8:b5:ec:a4:fc:f6:ce:59:fb:7e:e0:76:95:
                    70:e6:44:d6:2f:93:c9:19:4a:23:8c:bd:a7:f5:da:
                    b6:5c:b7:6a:2f:88:d1:a0:13:f8:28:dc:cb:99:64:
                    d6:2f:12:53:95:9d:73:06:2c:f4:91:60:fb:04:b5:
                    48:80:ae:ee:0b:07:97:e5:f4:8a:ab:a0:60:11:ca:
                    f3:09:18:a5:a3:ab:62:ca:8f:b9:44:4f:4a:f6:d1:
                    9c:b4:34:28:8e:4b:02:73:96:24:22:76:39:d0:59:
                    25:39:fa:7a:8b:3e:e7:d8:9e:3f:0d:40:c2:33:fa:
                    1c:0a:de:95:0d:6f:d9:36:52:eb:9b:34:13:ef:44:
                    a1:59:7f:77:05:2a:a2:cd:7a:60:49:91:ed:49:a3:
                    27:0d:e9:c2:19:13:9e:0b:d5:3d:b5:3b:e8:59:89:
                    87:4a:df:3f:d5:48:e3:23:36:9f:49:66:b4:54:e9:
                    f6:11:76:93:d9:93:c4:75:81:c2:4d:43:e8:9c:db:
                    f4:c2:d7:29:64:e3:7c:f2:04:d8:5e:71:26:ea:95:
                    93:a4:f5:ac:b2:b6:07:d9:ab:71:19:78:41:52:ba:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:60:B3:FE:95:95:52:1D:7E:E2:59:B1:10:99:65:61:53:6D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/ecc7708c-3213-3e68-8e58-d048a743fac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:59:ce:05:a8:56:c0:41:44:b3:a6:2e:f5:87:ad:c1:89:38:
         81:74:dd:e6:ae:f4:95:9f:19:32:66:d8:a5:2e:55:a3:ef:15:
         42:6b:18:33:5f:1d:82:6e:c7:fe:2c:e3:0b:cb:34:df:6f:c9:
         4c:81:9a:47:12:6f:4d:73:13:a5:22:c7:90:0b:e4:06:fd:ca:
         24:44:78:3f:43:e7:d6:f0:3d:dc:ed:bb:2b:ac:2e:d7:c6:2d:
         a6:05:c4:aa:38:cb:d1:50:69:3d:b7:20:79:a1:8e:51:46:bd:
         f5:34:9a:dc:0f:5a:ba:d2:07:3d:a9:9f:2a:f0:2d:e3:1f:30:
         ba:9a:16:ac:7f:82:13:1e:00:21:38:08:48:dd:12:f7:d0:f0:
         b7:b4:11:64:60:89:93:e1:a5:77:ba:c4:d7:b7:d8:ed:5d:ea:
         70:75:57:ba:ec:af:74:1c:34:88:bd:a5:e4:c6:d6:1a:a6:bf:
         1b:11:ec:9d:02:bd:cb:85:d5:5c:d5:dc:ca:48:b3:d3:1f:05:
         d7:6c:52:50:b2:da:72:b3:7f:73:e8:6e:35:23:6d:ea:90:f4:
         79:42:5b:ac:96:5b:e7:c6:31:f7:f0:de:54:e1:42:05:a8:23:
         83:b8:21:84:4f:21:96:40:67:b2:cc:0e:7c:8a:5d:74:39:72:
         56:89:0a:27
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEWBQwqMazQfNaY7ykAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWJhYzU0YjktNjZkYy00OTU2LTg2M2QtMTgwNGNmYjll
ODUzMB4XDTI0MDQxMTAxMDAyNVoXDTI0MDcxMDAxMDAyNVowLzEtMCsGA1UEAxMk
YTc1N2NkZjctYmZjZi00YzIzLWE4YjMtMDU0ZTU5ZTQ3MWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqjiYc51SVQ/Qg4uGqngj3bzMMLvMwrzN2Jj
Vd9mVti17KT89s5Z+37gdpVw5kTWL5PJGUojjL2n9dq2XLdqL4jRoBP4KNzLmWTW
LxJTlZ1zBiz0kWD7BLVIgK7uCweX5fSKq6BgEcrzCRilo6tiyo+5RE9K9tGctDQo
jksCc5YkInY50FklOfp6iz7n2J4/DUDCM/ocCt6VDW/ZNlLrmzQT70ShWX93BSqi
zXpgSZHtSaMnDenCGROeC9U9tTvoWYmHSt8/1UjjIzafSWa0VOn2EXaT2ZPEdYHC
TUPonNv0wtcpZON88gTYXnEm6pWTpPWssrYH2atxGXhBUrqN3QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM2yYLP+lZVSHX7iWbEQmWVhU233MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YmFj
NTRiOS02NmRjLTQ5NTYtODYzZC0xODA0Y2ZiOWU4NTMvZWNjNzcwOGMtMzIxMy0z
ZTY4LThlNTgtZDA0OGE3NDNmYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWJhYzU0YjktNjZkYy00OTU2LTg2
M2QtMTgwNGNmYjllODUzLzViYWM1NGI5LTY2ZGMtNDk1Ni04NjNkLTE4MDRjZmI5
ZTg1My5jcmwwHwYDVR0jBBgwFoAUf0qap0BizW2/cBkWzv2bKifmLp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YmFjNTRiOS02NmRjLTQ5NTYtODYzZC0xODA0
Y2ZiOWU4NTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgZNwDEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIlnOBahWwEFEs6Yu9YetwYk4gXTd5q70lZ8ZMmbYpS5Vo+8VQmsY
M18dgm7H/izjC8s032/JTIGaRxJvTXMTpSLHkAvkBv3KJER4P0Pn1vA93O27K6wu
18YtpgXEqjjL0VBpPbcgeaGOUUa99TSa3A9autIHPamfKvAt4x8wupoWrH+CEx4A
ITgISN0S99Dwt7QRZGCJk+Gld7rE17fY7V3qcHVXuuyvdBw0iL2l5MbWGqa/GxHs
nQK9y4XVXNXcykiz0x8F12xSULLacrN/c+huNSNt6pD0eUJbrJZb58Yx9/DeVOFC
Bagjg7ghhE8hlkBnsswOfIpddDlyVokKJw==
-----END CERTIFICATE-----
Generated at Mon May 6 22:48:06 2024 by rpki-client on console-ams.rpki-client.org