Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa
File:                     61971812-78c9-30bb-a30b-5e5b1ca3855d.roa (raw, json)
Hash identifier:          mulOcBHk8kInsLdvKeek/6n2B3y2kOn8DJ4K7AGOlys=
Subject key identifier:   3E:B2:DE:CF:D5:F8:27:25:30:61:37:35:A0:F8:B8:C2:BD:4E:8F:09
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285845549823F1AE38A1E0B19EAFC0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     62651
IP address blocks:        2604:c980:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:23:f1:ae:38:a1:e0:b1:9e:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=2b8e265b-650a-4ffa-94b4-5bb4c523913f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:aa:6a:da:7d:29:ff:dc:13:2b:ae:ef:34:
                    ec:90:61:b6:44:7a:98:be:41:fc:8f:25:cb:6b:4c:
                    c2:1f:91:47:c3:86:1e:cc:0e:16:f8:06:f6:b3:65:
                    a0:94:1f:ed:0f:04:d3:47:8c:c2:a9:84:70:3e:e3:
                    bd:74:7f:5c:74:32:c8:ae:9a:dc:cd:52:71:d0:06:
                    4e:2f:de:22:aa:27:01:09:76:17:33:11:5d:78:10:
                    06:5f:4b:c0:93:cf:07:fc:62:3b:4a:46:9a:b2:1c:
                    64:78:33:0e:12:86:94:8a:9a:fe:b4:0d:8a:b0:db:
                    25:9a:cd:ce:cf:9b:90:81:33:3c:54:10:19:d0:41:
                    25:36:4d:74:2b:4c:8c:98:55:6d:13:d8:70:6c:34:
                    77:5e:09:2f:34:65:24:ae:97:83:1b:51:38:c0:6d:
                    7b:ef:be:03:cd:9b:8a:eb:9c:d6:64:f0:17:36:90:
                    9c:60:6d:99:35:3e:81:a2:75:55:eb:0a:91:69:13:
                    2d:7f:1c:f4:72:02:4c:f6:bd:48:9c:16:70:3e:72:
                    74:a8:1a:fc:78:c6:03:19:1c:b6:78:b8:61:58:96:
                    88:69:b1:ea:98:e4:a1:f5:fc:dd:50:a4:80:04:bf:
                    31:5f:a6:64:88:92:08:6b:fc:97:b3:10:d0:ec:ae:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:DE:CF:D5:F8:27:25:30:61:37:35:A0:F8:B8:C2:BD:4E:8F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:86:97:57:71:6c:85:d4:de:52:a7:64:98:b8:e2:e5:b9:
         f2:6d:9d:a3:5e:27:d9:1b:aa:77:04:98:d2:d6:73:5e:fd:34:
         01:d0:8b:69:48:7f:0f:41:35:fa:9a:e9:cc:12:59:3d:ca:02:
         df:69:e9:05:02:ac:19:2f:1e:50:cc:6d:67:e0:45:01:00:2d:
         d1:c1:86:1a:58:ab:ca:12:ac:7d:32:e8:98:eb:29:b3:3a:30:
         79:31:9e:79:9c:9b:f8:1c:f6:d5:b2:ec:94:28:a2:92:4f:d2:
         a1:da:b9:41:b4:ed:a9:5a:e1:9c:02:39:8b:8c:f4:8e:69:0b:
         55:35:52:db:95:f8:aa:ad:e4:ae:1e:dc:e6:2c:75:44:82:1a:
         09:4a:ff:c9:be:d9:d2:27:f9:d1:96:95:e1:39:e9:c1:f4:27:
         98:30:17:b8:e9:a5:fd:24:38:81:2f:d9:55:e1:ee:46:27:b7:
         43:94:37:53:56:de:7a:23:ce:f7:4b:5d:4c:0a:cd:a7:a0:90:
         bc:52:10:bd:4c:98:61:16:1f:c5:cc:1c:a8:6a:d1:fb:32:68:
         48:df:07:16:0f:f1:46:a1:1e:86:1f:29:b4:51:d7:34:64:74:
         fd:e6:c1:0b:e3:92:38:65:62:d6:e2:53:e2:50:59:6d:8b:74:
         a6:2e:f2:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVUmCPxrjih4LGer8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MDMyNjAxMDAyNVoXDTI0MDYyNDAxMDAyNVowLzEtMCsGA1UEAxMk
MmI4ZTI2NWItNjUwYS00ZmZhLTk0YjQtNWJiNGM1MjM5MTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofeqatp9Kf/cEyuu7zTskGG2RHqYvkH8jyXL
a0zCH5FHw4YezA4W+Ab2s2WglB/tDwTTR4zCqYRwPuO9dH9cdDLIrprczVJx0AZO
L94iqicBCXYXMxFdeBAGX0vAk88H/GI7SkaashxkeDMOEoaUipr+tA2KsNslms3O
z5uQgTM8VBAZ0EElNk10K0yMmFVtE9hwbDR3XgkvNGUkrpeDG1E4wG17774DzZuK
65zWZPAXNpCcYG2ZNT6BonVV6wqRaRMtfxz0cgJM9r1InBZwPnJ0qBr8eMYDGRy2
eLhhWJaIabHqmOSh9fzdUKSABL8xX6ZkiJIIa/yXsxDQ7K5jbwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD6y3s/V+CclMGE3NaD4uMK9To8JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNjE5NzE4MTItNzhjOS0z
MGJiLWEzMGItNWU1YjFjYTM4NTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgAQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHy+Gl1dxbIXU3lKnZJi44uW58m2do14n2RuqdwSY0tZzXv00AdCL
aUh/D0E1+prpzBJZPcoC32npBQKsGS8eUMxtZ+BFAQAt0cGGGliryhKsfTLomOsp
szoweTGeeZyb+Bz21bLslCiikk/Sodq5QbTtqVrhnAI5i4z0jmkLVTVS25X4qq3k
rh7c5ix1RIIaCUr/yb7Z0if50ZaV4TnpwfQnmDAXuOml/SQ4gS/ZVeHuRie3Q5Q3
U1beeiPO90tdTArNp6CQvFIQvUyYYRYfxcwcqGrR+zJoSN8HFg/xRqEehh8ptFHX
NGR0/ebBC+OSOGVi1uJT4lBZbYt0pi7yFw==
-----END CERTIFICATE-----
Generated at Thu May 9 15:30:21 2024 by rpki-client on console-fra.rpki-client.org