Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/2d25f0c8-540f-3aea-9bb2-8079ae6a48ad.roa
File:                     2d25f0c8-540f-3aea-9bb2-8079ae6a48ad.roa (raw, json)
Hash identifier:          jWSM+/9arErnwtWd7OmT6Gp5jFEYomV/8HGfO+vFWuQ=
Subject key identifier:   87:0B:29:FB:D5:C7:2F:F5:DC:7B:5E:B9:0E:68:54:35:37:11:2D:3D
Certificate issuer:       /CN=7df7e023-145a-4cd7-8721-998050ab91e2
Certificate serial:       010D0C9F432858478886581D37EFE8AFA0D41500
Authority key identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/2d25f0c8-540f-3aea-9bb2-8079ae6a48ad.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     11848
IP address blocks:        2607:1e80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:58:1d:37:ef:e8:af:a0:d4:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df7e023-145a-4cd7-8721-998050ab91e2
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=6fdeb9c3-c464-46f3-8708-a4bc69a5948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:dc:e4:eb:68:b8:f7:23:8f:5a:15:a8:cf:
                    6e:2b:66:0d:06:a0:12:e4:12:4b:46:cf:18:c3:0b:
                    c6:c0:1b:39:ae:77:c9:d2:74:58:73:3b:78:5d:53:
                    18:9f:2d:56:dd:47:83:50:b1:d3:2f:06:52:5b:17:
                    58:73:61:66:f7:b3:7b:c7:05:f8:6a:cd:fc:61:f3:
                    54:f7:e1:71:5b:cf:4f:ee:7e:d7:9e:e0:81:2f:91:
                    bd:45:4e:aa:36:5c:48:dc:f1:0f:f2:fb:ef:6e:6c:
                    e6:75:46:11:2c:f2:79:b4:a9:5c:ba:19:64:e0:0c:
                    5d:e1:9a:23:64:e2:80:6e:b7:e6:c6:0f:a8:d0:bd:
                    92:62:24:87:1f:92:7e:93:3b:4e:72:4a:b2:d9:da:
                    78:34:90:a6:1a:49:fa:4c:20:50:29:fa:46:ed:11:
                    34:f4:c8:2e:68:01:d8:c7:45:29:90:b4:2a:ac:53:
                    8c:37:f0:57:d7:d5:b1:52:59:c6:3a:93:e9:23:db:
                    bf:95:95:ef:17:0f:0a:19:94:4d:a4:bd:71:23:71:
                    2c:c7:53:b6:4e:0a:27:f0:50:34:5e:c6:05:c9:3e:
                    09:a8:85:99:64:7f:5a:7f:68:51:83:65:fe:4b:f9:
                    18:5e:df:66:e0:f8:2f:12:8d:8b:a5:2d:51:c4:51:
                    95:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0B:29:FB:D5:C7:2F:F5:DC:7B:5E:B9:0E:68:54:35:37:11:2D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/2d25f0c8-540f-3aea-9bb2-8079ae6a48ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.crl

            X509v3 Authority Key Identifier:
                keyid:78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:ce:4f:b9:da:28:ce:a5:90:f8:47:1e:4c:6b:c3:f1:17:
         96:32:d0:89:ad:f0:1a:c7:8e:f1:87:9b:70:77:78:8b:a8:84:
         fb:fd:a7:30:15:7c:fe:13:63:ac:d1:d7:1e:c8:74:33:f6:82:
         c7:db:b0:08:d3:66:90:b9:04:0d:7f:db:f1:d4:e5:01:b8:20:
         c2:e2:4c:5a:6d:a7:d8:2f:1f:03:77:ed:ce:f8:54:c1:b2:3c:
         e3:08:7e:53:f5:7d:bf:fb:f7:15:3a:f1:dc:33:ba:48:ac:e9:
         b7:9a:23:69:f9:bf:7d:fb:bb:7e:6e:df:da:89:f7:48:f6:3e:
         5f:74:2b:99:13:70:ae:fb:ab:92:61:22:0e:e4:3d:95:25:b4:
         e4:5b:45:79:ad:44:bd:e4:25:74:41:f7:4f:dd:89:66:eb:46:
         c9:9c:f0:81:a8:cd:e2:1a:04:1c:79:fe:38:1e:5f:a3:03:b5:
         4d:65:08:c3:38:0f:2f:a5:5f:31:36:29:65:3e:13:96:d4:17:
         81:d3:d6:9d:53:46:b9:b9:0f:cd:40:0a:36:5e:75:1d:bf:24:
         cb:83:ac:16:e7:00:e4:83:35:3e:69:10:bd:02:02:37:a6:39:
         f6:58:28:2c:26:9b:81:44:03:e5:64:54:5f:a2:66:78:68:a1:
         16:85:a6:75
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeIhlgdN+/or6DUFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RmN2UwMjMtMTQ1YS00Y2Q3LTg3MjEtOTk4MDUwYWI5
MWUyMB4XDTI0MTAxNDAxMDAzMVoXDTI1MDExMjAyMDAzMVowLzEtMCsGA1UEAxMk
NmZkZWI5YzMtYzQ2NC00NmYzLTg3MDgtYTRiYzY5YTU5NDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/rc5OtouPcjj1oVqM9uK2YNBqAS5BJLRs8Y
wwvGwBs5rnfJ0nRYczt4XVMYny1W3UeDULHTLwZSWxdYc2Fm97N7xwX4as38YfNU
9+FxW89P7n7XnuCBL5G9RU6qNlxI3PEP8vvvbmzmdUYRLPJ5tKlcuhlk4Axd4Zoj
ZOKAbrfmxg+o0L2SYiSHH5J+kztOckqy2dp4NJCmGkn6TCBQKfpG7RE09MguaAHY
x0UpkLQqrFOMN/BX19WxUlnGOpPpI9u/lZXvFw8KGZRNpL1xI3Esx1O2Tgon8FA0
XsYFyT4JqIWZZH9af2hRg2X+S/kYXt9m4PgvEo2LpS1RxFGVwwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIcLKfvVxy/13HteuQ5oVDU3ES09MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZGY3
ZTAyMy0xNDVhLTRjZDctODcyMS05OTgwNTBhYjkxZTIvMmQyNWYwYzgtNTQwZi0z
YWVhLTliYjItODA3OWFlNmE0OGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2RmN2UwMjMtMTQ1YS00Y2Q3LTg3
MjEtOTk4MDUwYWI5MWUyLzdkZjdlMDIzLTE0NWEtNGNkNy04NzIxLTk5ODA1MGFi
OTFlMi5jcmwwHwYDVR0jBBgwFoAUeC1lMSOk1DU19Ym6y1bRDFjjVu4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83ZGY3ZTAyMy0xNDVhLTRjZDctODcyMS05OTgw
NTBhYjkxZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcegDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB8CM5PudoozqWQ+EceTGvD8ReWMtCJrfAax47xh5twd3iLqIT7/acw
FXz+E2Os0dceyHQz9oLH27AI02aQuQQNf9vx1OUBuCDC4kxabafYLx8Dd+3O+FTB
sjzjCH5T9X2/+/cVOvHcM7pIrOm3miNp+b99+7t+bt/aifdI9j5fdCuZE3Cu+6uS
YSIO5D2VJbTkW0V5rUS95CV0QfdP3Ylm60bJnPCBqM3iGgQcef44Hl+jA7VNZQjD
OA8vpV8xNillPhOW1BeB09adU0a5uQ/NQAo2XnUdvyTLg6wW5wDkgzU+aRC9AgI3
pjn2WCgsJpuBRAPlZFRfomZ4aKEWhaZ1
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:46 2024 by rpki-client on console-ams.rpki-client.org