Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa
File:                     0af64934-80c9-35d5-b6ce-25606aa12a02.roa (raw, json)
Hash identifier:          QEP0tyPq9PIqxcg4wkp847wndPCKkgJX3gyaNNg/l0w=
Subject key identifier:   BF:C5:AA:0A:F7:35:BE:FE:DA:AF:6A:BC:4A:1B:84:92:D5:EB:57:8A
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F43285847D29F81A807A9360757B26080
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     19740
IP address blocks:        2606:1b40:900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:81:a8:07:a9:36:07:57:b2:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=33c164d6-3923-48d6-b094-bf89fe56bbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:2c:9e:57:76:4b:75:27:b8:29:78:30:ea:
                    00:6a:00:4f:f3:8a:81:00:d0:d6:9f:8e:e5:0b:bf:
                    e0:d2:a3:ea:16:14:4a:57:d0:59:ea:44:21:09:d5:
                    fe:ba:8f:8f:a8:3c:86:8c:46:ca:61:ee:0c:d4:62:
                    f1:95:ed:e5:5b:9e:6d:b6:d1:d1:00:96:5c:21:fa:
                    23:fd:4a:c6:fd:91:d7:7d:3d:f1:cb:bb:4d:09:2d:
                    00:59:e5:44:ae:7b:9f:6e:88:40:40:1d:9a:9e:57:
                    96:81:37:c5:88:dc:fe:27:60:4b:96:bc:42:eb:45:
                    39:34:d7:e6:94:b1:03:9a:51:23:6f:df:2a:48:7d:
                    44:dd:bf:2d:3c:8d:c3:00:f4:59:c9:7d:0b:f5:ea:
                    e0:49:1c:d3:8c:ba:7b:c9:7d:ec:37:54:5e:a4:c8:
                    7a:6d:a1:b7:fd:29:05:1a:49:0a:6c:32:ac:f4:6e:
                    aa:eb:f6:be:0a:7d:64:d0:6f:91:69:d5:36:48:ee:
                    94:9f:99:5b:ef:2b:56:4a:0d:8f:1d:8d:cc:b2:20:
                    fd:86:40:5e:aa:c2:08:a1:8c:87:b6:65:d3:b8:59:
                    8d:3b:82:88:80:20:7c:9b:b2:00:0c:50:f7:5e:18:
                    4d:fd:ec:9c:7c:ab:fb:85:b1:2f:a4:ac:5d:8a:a5:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:AA:0A:F7:35:BE:FE:DA:AF:6A:BC:4A:1B:84:92:D5:EB:57:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1b40:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:6b:dd:86:eb:04:ec:51:07:1a:cf:73:79:85:38:7e:fd:5d:
         b3:04:7f:7c:2a:d3:b6:d5:9f:ce:0f:29:d5:24:6e:e8:74:55:
         d5:75:ee:5e:ff:8b:fc:ca:02:23:3b:00:cf:89:18:44:48:a6:
         58:95:8f:69:31:84:1e:25:11:19:57:c8:23:ea:97:40:d9:73:
         8a:92:b0:ca:e6:b9:ab:cf:76:ee:ac:c2:18:df:54:66:d7:85:
         30:56:dd:5a:0d:5c:ed:b4:a6:49:32:b8:a3:29:8d:65:c0:bc:
         fc:47:c2:3a:79:72:cc:e9:ca:02:c6:f4:5a:00:6e:73:3a:5c:
         7d:73:23:da:c5:d2:e3:71:2e:86:2e:5d:0e:ba:b2:67:51:18:
         83:66:e6:85:63:1d:1a:41:66:6e:6e:d1:d6:62:e1:e2:b5:f0:
         b5:51:dd:bb:fa:d7:61:7d:b7:a8:23:3c:58:2b:1f:38:54:c3:
         74:cb:f0:80:2e:ec:6a:f4:ea:ce:f7:4e:0d:00:67:25:2b:74:
         2f:41:2d:32:ea:a7:b4:bc:ff:e3:38:51:6a:3e:31:e4:bf:1d:
         37:02:e2:d3:1a:42:e0:bc:bc:c7:90:86:5b:c7:71:d8:a9:51:
         75:7e:ef:33:c2:12:3f:d9:c1:aa:8c:33:dc:1a:19:75:10:72:
         14:80:a2:93
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfSn4GoB6k2B1eyYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE2YjRkMzQtMzg4MC00YjcyLWI3ODYtMzY1ZmJkZWM4
YmEwMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk
MzNjMTY0ZDYtMzkyMy00OGQ2LWIwOTQtYmY4OWZlNTZiYmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs24snld2S3UnuCl4MOoAagBP84qBANDWn47l
C7/g0qPqFhRKV9BZ6kQhCdX+uo+PqDyGjEbKYe4M1GLxle3lW55tttHRAJZcIfoj
/UrG/ZHXfT3xy7tNCS0AWeVErnufbohAQB2anleWgTfFiNz+J2BLlrxC60U5NNfm
lLEDmlEjb98qSH1E3b8tPI3DAPRZyX0L9ergSRzTjLp7yX3sN1RepMh6baG3/SkF
GkkKbDKs9G6q6/a+Cn1k0G+RadU2SO6Un5lb7ytWSg2PHY3MsiD9hkBeqsIIoYyH
tmXTuFmNO4KIgCB8m7IADFD3XhhN/eycfKv7hbEvpKxdiqUwawIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL/Fqgr3Nb7+2q9qvEobhJLV61eKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84MTZi
NGQzNC0zODgwLTRiNzItYjc4Ni0zNjVmYmRlYzhiYTAvMGFmNjQ5MzQtODBjOS0z
NWQ1LWI2Y2UtMjU2MDZhYTEyYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODE2YjRkMzQtMzg4MC00YjcyLWI3
ODYtMzY1ZmJkZWM4YmEwLzgxNmI0ZDM0LTM4ODAtNGI3Mi1iNzg2LTM2NWZiZGVj
OGJhMC5jcmwwHwYDVR0jBBgwFoAUnyi16wc4cor/+ST8DFEWGFjVQBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84MTZiNGQzNC0zODgwLTRiNzItYjc4Ni0zNjVm
YmRlYzhiYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgYbQAkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEGvdhusE7FEHGs9zeYU4fv1dswR/fCrTttWfzg8p1SRu6HRV1XXu
Xv+L/MoCIzsAz4kYREimWJWPaTGEHiURGVfII+qXQNlzipKwyua5q8927qzCGN9U
ZteFMFbdWg1c7bSmSTK4oymNZcC8/EfCOnlyzOnKAsb0WgBuczpcfXMj2sXS43Eu
hi5dDrqyZ1EYg2bmhWMdGkFmbm7R1mLh4rXwtVHdu/rXYX23qCM8WCsfOFTDdMvw
gC7savTqzvdODQBnJSt0L0EtMuqntLz/4zhRaj4x5L8dNwLi0xpC4Ly8x5CGW8dx
2KlRdX7vM8ISP9nBqowz3BoZdRByFICikw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:49 2024 by rpki-client on console-fra.rpki-client.org