Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa
File:                     cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa (raw, json)
Hash identifier:          EJWBGAXbYkxjfnv/e4i2WWXYm4vv3XB3ReEXTFTLl5I=
Subject key identifier:   96:43:5C:BF:22:47:EE:B4:08:9F:BF:49:DB:DD:DF:8C:E1:B1:61:2D
Certificate issuer:       /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
Certificate serial:       010D0C9F432858474C80B8EB0D0D850C13F0E700
Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     203
IP address blocks:        2606:5cc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:b8:eb:0d:0d:85:0c:13:f0:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=1f61392d-a1c2-49d7-985b-36314780a9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:2d:e4:6a:ad:60:2a:e0:b3:fa:4e:ef:48:
                    7a:94:ab:8d:05:a5:23:37:f4:65:2e:8a:a4:ad:dd:
                    ee:93:1b:85:c7:a1:34:f2:e8:bc:9f:76:17:6c:e4:
                    0e:ce:09:0d:c0:d3:f9:8a:1e:13:38:83:6d:7a:7c:
                    03:fc:fb:d5:83:74:a0:9e:f8:5b:be:99:12:62:8b:
                    53:83:5d:69:df:77:90:9b:39:7a:3c:dd:2f:81:01:
                    5f:f8:86:de:b6:7f:fb:3c:6b:8e:a9:ef:35:57:8b:
                    46:e9:57:82:7c:17:f8:2b:24:8a:a8:0b:83:ca:cf:
                    74:82:17:97:c0:9f:5b:d5:1e:de:7f:8f:f3:6d:0c:
                    65:9d:e9:5c:9e:06:d0:3e:3b:e8:ed:96:ce:43:62:
                    ae:e6:6c:ad:a0:2f:0e:fe:f0:2a:2e:e8:94:6d:90:
                    d1:ae:57:0d:b7:d3:64:cb:68:27:e4:d2:ea:7a:40:
                    3d:5a:b5:c0:5c:d1:13:13:93:c4:60:33:1b:87:30:
                    98:52:4d:a9:70:eb:d5:e9:1b:c0:d1:47:e4:b0:cf:
                    49:2f:2b:17:f3:f6:6c:b6:cf:a8:b3:c4:e0:f5:9c:
                    fa:1d:eb:44:6e:47:1a:d6:81:9c:19:b1:e1:8d:43:
                    95:81:d9:a3:d6:e1:97:8e:ea:0c:41:de:86:8e:2f:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:43:5C:BF:22:47:EE:B4:08:9F:BF:49:DB:DD:DF:8C:E1:B1:61:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl

            X509v3 Authority Key Identifier:
                keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:a6:79:67:46:6f:51:08:91:c6:39:7a:d1:5c:5d:67:4c:
         83:01:8b:f8:7c:63:8a:7c:91:aa:87:60:3e:a7:97:ec:f2:2a:
         80:f6:4a:68:53:24:86:82:ee:8f:07:53:34:75:9f:c7:cd:e8:
         d8:08:9b:52:9a:cd:fe:b4:41:8b:3d:5f:2c:dc:d4:c3:22:b0:
         7b:89:56:44:82:3a:07:95:e3:3b:eb:7e:22:69:e5:f9:1c:df:
         aa:b6:bb:ac:c9:0e:ab:b9:9e:7e:2f:40:3b:ab:2f:e9:45:2f:
         0a:1e:e5:a5:5f:53:81:92:1f:69:1a:6d:73:0a:88:46:be:13:
         29:0f:5c:05:ef:20:ae:8d:c8:5f:fc:e8:6b:41:5a:1d:3a:7f:
         90:f1:2b:19:c1:cd:de:11:ec:38:28:f2:14:07:66:4b:66:7d:
         cc:38:0c:73:3d:0d:b2:21:f2:07:21:fe:d8:cd:80:b5:ec:26:
         d4:d3:65:02:19:ee:89:24:d3:1f:0b:b8:98:5c:03:89:d6:73:
         6a:c4:0e:bf:ce:d0:24:27:4b:35:c9:44:64:d6:ed:02:8a:da:
         2d:f6:1b:af:5b:a8:58:df:00:32:db:dc:ab:d8:2f:8a:54:e1:
         27:35:92:1f:b4:fa:9f:b3:9f:ce:df:b7:b6:18:ab:cc:b7:62:
         ef:3b:3a:7e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdMgLjrDQ2FDBPw5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY3NThkNjMtZWJjMi00OWIyLWI4MmMtMDYzZTQ3ZmI3
YTBmMB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
MWY2MTM5MmQtYTFjMi00OWQ3LTk4NWItMzYzMTQ3ODBhOWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQct5GqtYCrgs/pO70h6lKuNBaUjN/RlLoqk
rd3ukxuFx6E08ui8n3YXbOQOzgkNwNP5ih4TOINtenwD/PvVg3SgnvhbvpkSYotT
g11p33eQmzl6PN0vgQFf+Ibetn/7PGuOqe81V4tG6VeCfBf4KySKqAuDys90gheX
wJ9b1R7ef4/zbQxlnelcngbQPjvo7ZbOQ2Ku5mytoC8O/vAqLuiUbZDRrlcNt9Nk
y2gn5NLqekA9WrXAXNETE5PEYDMbhzCYUk2pcOvV6RvA0UfksM9JLysX8/Zsts+o
s8Tg9Zz6HetEbkca1oGcGbHhjUOVgdmj1uGXjuoMQd6Gji/rfQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJZDXL8iR+60CJ+/Sdvd34zhsWEtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1
OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNlNDdmYjdhMGYvY2Q5NDc5NmEtYTdmMC0z
YWIyLThlNmMtMzQzYTkxM2YzZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3NThkNjMtZWJjMi00OWIyLWI4
MmMtMDYzZTQ3ZmI3YTBmLzA2NzU4ZDYzLWViYzItNDliMi1iODJjLTA2M2U0N2Zi
N2EwZi5jcmwwHwYDVR0jBBgwFoAUEf7WaDQ8+aPej63zIAnmKmZHTpIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNl
NDdmYjdhMGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZcwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBr/aZ5Z0ZvUQiRxjl60VxdZ0yDAYv4fGOKfJGqh2A+p5fs8iqA9kpo
UySGgu6PB1M0dZ/HzejYCJtSms3+tEGLPV8s3NTDIrB7iVZEgjoHleM7634iaeX5
HN+qtrusyQ6ruZ5+L0A7qy/pRS8KHuWlX1OBkh9pGm1zCohGvhMpD1wF7yCujchf
/OhrQVodOn+Q8SsZwc3eEew4KPIUB2ZLZn3MOAxzPQ2yIfIHIf7YzYC17CbU02UC
Ge6JJNMfC7iYXAOJ1nNqxA6/ztAkJ0s1yURk1u0Citot9huvW6hY3wAy29yr2C+K
VOEnNZIftPqfs5/O37e2GKvMt2LvOzp+
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:44 2024 by rpki-client on console-fra.rpki-client.org