Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7387f0d0-9219-321a-9b76-4e48a47da62c.roa
File:                     7387f0d0-9219-321a-9b76-4e48a47da62c.roa (raw, json)
Hash identifier:          Db46plGPn6fOFh8eZ6skfNxWYR6P8sHL7mixEq3lrOU=
Subject key identifier:   B6:4F:B8:E2:3E:8B:50:BA:34:49:00:BD:FA:98:A5:E4:70:9E:90:3E
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847A634FF111D2713F251D0E300
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7387f0d0-9219-321a-9b76-4e48a47da62c.roa
Signing time:             Thu 24 Oct 2024 16:10:55 +0000
ROA not before:           Thu 24 Oct 2024 16:10:55 +0000
ROA not after:            Wed 22 Jan 2025 17:10:55 +0000
asID:                     22781
IP address blocks:        2607:fb50:1000::/36 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:34:ff:11:1d:27:13:f2:51:d0:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 24 16:10:55 2024 GMT
            Not After : Jan 22 17:10:55 2025 GMT
        Subject: CN=bc7082a5-4478-4742-b77a-b13d85ed071c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:37:55:b6:40:7c:b3:95:f0:78:40:c0:4e:
                    87:4e:6f:15:a1:14:c1:22:72:ea:8d:d3:7a:8d:e8:
                    11:ba:6a:ca:02:1a:a7:62:72:5f:40:2a:37:49:1f:
                    a9:d1:59:c3:81:68:a7:6d:6c:68:72:6e:68:0f:17:
                    46:88:f6:57:1d:6c:dc:24:8c:a6:e8:63:5b:b4:97:
                    b3:3b:db:52:be:03:9b:1c:e0:61:e7:b7:80:06:e7:
                    d2:72:fd:d2:97:f4:84:b8:e9:e0:93:1d:31:c3:2d:
                    41:d5:24:4d:e3:9e:90:45:b7:c2:d7:b7:e3:75:52:
                    a0:82:19:3f:2e:c2:aa:9a:9a:5a:60:35:2b:d0:aa:
                    f9:ed:d5:d8:65:fc:25:03:ca:a5:75:07:86:c4:01:
                    a7:a7:c5:d9:50:aa:43:03:88:89:e9:fb:88:7c:14:
                    a2:95:e8:94:fe:a5:72:dd:10:aa:38:f6:0d:18:4a:
                    b6:6f:d7:30:7c:08:83:7d:ea:44:22:35:ff:08:45:
                    e8:1b:4f:1b:e6:7e:8b:02:db:84:0d:1d:8f:a6:b0:
                    ef:68:37:b3:fd:dc:57:00:14:42:90:7e:c7:46:44:
                    e6:bc:d7:6f:d4:b6:6d:25:59:15:d5:fc:c6:d1:69:
                    0a:9b:73:d6:e4:76:cb:25:52:7e:90:4e:2b:74:db:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4F:B8:E2:3E:8B:50:BA:34:49:00:BD:FA:98:A5:E4:70:9E:90:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7387f0d0-9219-321a-9b76-4e48a47da62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:de:a1:88:bf:4c:96:ca:b8:88:43:33:8e:a6:17:87:5e:b0:
         2b:40:21:54:89:38:be:a1:18:fc:07:40:81:71:e3:cf:3d:66:
         e6:70:19:1a:be:8c:4a:30:a5:72:4f:b2:43:24:3b:d7:cb:66:
         bf:e8:92:0a:a3:33:fa:44:e3:b0:33:b2:f1:b0:d2:8c:06:40:
         cc:b5:11:b1:2a:d2:8b:2f:90:a1:8d:cf:17:25:8d:91:78:12:
         45:d6:0a:29:d6:5e:35:d8:96:ca:1c:48:f0:78:dd:33:ba:82:
         78:dc:4b:1f:83:de:ba:1e:c3:d3:94:5e:f4:4c:46:75:a8:9d:
         ac:c6:c0:52:0a:61:65:b8:df:81:9f:a4:6c:d7:14:fe:3c:05:
         57:af:36:d5:d2:b0:e7:fd:af:a8:c8:82:9c:87:19:9f:be:17:
         04:93:ec:2b:cc:ab:49:9f:ba:b5:59:dc:4b:c8:f6:c1:5c:fa:
         81:3c:0d:1e:dd:35:fe:d9:b9:46:54:59:80:53:87:ee:5f:bb:
         76:6c:58:42:23:fc:fe:0a:e4:16:0e:8e:40:34:36:5d:67:fb:
         28:d5:da:08:e9:40:c3:11:92:a0:32:67:e1:23:98:89:9b:5c:
         62:87:62:79:fd:6c:1b:38:0a:07:9a:41:3d:9d:27:81:56:07:
         ae:2d:e9:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEemNP8RHScT8lHQ4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MTAyNDE2MTA1NVoXDTI1MDEyMjE3MTA1NVowLzEtMCsGA1UEAxMk
YmM3MDgyYTUtNDQ3OC00NzQyLWI3N2EtYjEzZDg1ZWQwNzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt03VbZAfLOV8HhAwE6HTm8VoRTBInLqjdN6
jegRumrKAhqnYnJfQCo3SR+p0VnDgWinbWxocm5oDxdGiPZXHWzcJIym6GNbtJez
O9tSvgObHOBh57eABufScv3Sl/SEuOngkx0xwy1B1SRN456QRbfC17fjdVKgghk/
LsKqmppaYDUr0Kr57dXYZfwlA8qldQeGxAGnp8XZUKpDA4iJ6fuIfBSileiU/qVy
3RCqOPYNGEq2b9cwfAiDfepEIjX/CEXoG08b5n6LAtuEDR2PprDvaDez/dxXABRC
kH7HRkTmvNdv1LZtJVkV1fzG0WkKm3PW5HbLJVJ+kE4rdNsvyQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLZPuOI+i1C6NEkAvfqYpeRwnpA+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNzM4N2YwZDAtOTIxOS0z
MjFhLTliNzYtNGU0OGE0N2RhNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgf7UBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAR96hiL9Mlsq4iEMzjqYXh16wK0AhVIk4vqEY/AdAgXHjzz1m5nAZ
Gr6MSjClck+yQyQ718tmv+iSCqMz+kTjsDOy8bDSjAZAzLURsSrSiy+QoY3PFyWN
kXgSRdYKKdZeNdiWyhxI8HjdM7qCeNxLH4Peuh7D05Re9ExGdaidrMbAUgphZbjf
gZ+kbNcU/jwFV6821dKw5/2vqMiCnIcZn74XBJPsK8yrSZ+6tVncS8j2wVz6gTwN
Ht01/tm5RlRZgFOH7l+7dmxYQiP8/grkFg6OQDQ2XWf7KNXaCOlAwxGSoDJn4SOY
iZtcYodief1sGzgKB5pBPZ0ngVYHri3pqw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:50 2024 by rpki-client on console-ams.rpki-client.org