Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a55387c1-0a12-39ec-aa1a-1f428f77d523.roa
File:                     a55387c1-0a12-39ec-aa1a-1f428f77d523.roa (raw, json)
Hash identifier:          Guz7ygEOCD5ymxVov75idqyVNhGWwDRB7wLeZUJ8dUI=
Subject key identifier:   06:DC:04:62:57:63:69:99:5D:2A:4A:F1:ED:E7:C3:EF:C6:FA:2A:2A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847A425B56D6890713D8CB4BB00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a55387c1-0a12-39ec-aa1a-1f428f77d523.roa
Signing time:             Wed 23 Oct 2024 22:28:30 +0000
ROA not before:           Wed 23 Oct 2024 22:28:30 +0000
ROA not after:            Tue 21 Jan 2025 23:28:30 +0000
asID:                     62651
IP address blocks:        2604:ea80:4800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:25:b5:6d:68:90:71:3d:8c:b4:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 23 22:28:30 2024 GMT
            Not After : Jan 21 23:28:30 2025 GMT
        Subject: CN=b5ef1065-0694-4644-ab50-bff5b47394c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:30:ad:ed:73:49:ec:ce:20:e8:80:1d:88:
                    05:cd:d3:92:89:52:db:fc:3b:49:62:54:46:69:c6:
                    80:ec:ec:23:d0:eb:df:52:36:84:57:f3:ad:33:b0:
                    a6:58:c9:d1:e5:f7:90:2d:d7:10:96:d1:04:14:75:
                    ac:4e:14:14:6f:e6:eb:5b:d5:49:c6:fe:be:b5:33:
                    fa:bf:a8:d6:5a:36:cd:a1:3c:cd:79:7d:87:aa:d2:
                    98:df:00:5e:c4:5d:1e:ce:82:22:3f:a3:e1:53:4d:
                    0e:1b:9f:04:37:b7:1d:eb:75:8b:9c:e8:3d:38:86:
                    03:e7:03:7f:27:dc:45:47:55:3e:3a:35:e1:f1:ff:
                    5c:71:a9:04:56:f1:b3:4a:25:05:f4:ac:dc:d0:ea:
                    cc:54:88:bd:f7:0a:d2:01:c3:94:69:81:26:3a:c5:
                    be:38:fc:16:8e:f5:bc:77:03:9e:5f:f0:17:25:46:
                    d4:42:57:a7:b4:4a:52:7d:3f:c4:86:89:ea:13:9d:
                    52:2b:30:d2:26:f9:8b:d6:3b:4c:98:07:d5:f0:d2:
                    80:c9:cb:d1:38:d7:1c:16:e1:5e:b7:34:df:5c:8f:
                    22:d8:dd:44:ec:87:42:1c:e1:c7:a8:96:70:a1:d2:
                    64:41:9f:eb:22:a9:0a:b5:47:4d:45:c9:f8:b9:b5:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DC:04:62:57:63:69:99:5D:2A:4A:F1:ED:E7:C3:EF:C6:FA:2A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a55387c1-0a12-39ec-aa1a-1f428f77d523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ea80:4800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:65:b4:9d:fe:47:69:4d:f7:eb:5a:ce:9e:94:c2:85:7e:a0:
         8c:6a:0b:e2:6c:94:8e:c6:52:99:d7:e6:1f:a5:cb:4b:30:13:
         37:b4:84:34:ad:d3:ae:20:92:dc:95:13:b3:c2:34:94:3f:e0:
         62:32:4e:67:2e:24:d6:67:7d:f2:95:56:8b:5f:be:ac:1d:00:
         dd:4e:0b:80:6a:ef:ab:0d:65:d1:a9:a3:76:90:3e:83:2b:6a:
         67:e9:2d:b3:2f:91:56:f0:c9:b9:47:3d:73:d3:86:05:05:97:
         20:78:a1:ac:5d:ce:c8:d3:9d:0a:b7:db:09:c2:b6:a9:19:b8:
         e3:22:b0:0b:bd:15:c6:25:69:37:8b:e6:5a:6a:29:16:c4:43:
         98:7e:7c:7b:ad:ce:98:a8:0c:42:69:e3:8d:f1:bd:15:ca:3f:
         3e:37:db:ea:b0:a8:9f:9a:6f:15:05:89:57:c0:24:b3:b8:b1:
         54:7e:05:6f:90:19:50:1e:f4:ba:e8:1a:4b:32:12:16:e9:57:
         05:82:20:2c:3c:50:f8:bc:ff:65:63:b7:11:ee:08:a1:6e:2d:
         15:4b:52:bb:10:a4:d5:00:27:3f:68:f6:7e:8d:e0:6a:b6:98:
         10:87:88:ab:50:7a:cb:e8:0a:62:65:51:98:12:14:3d:1a:9a:
         9a:17:50:5e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEekJbVtaJBxPYy0uwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MTAyMzIyMjgzMFoXDTI1MDEyMTIzMjgzMFowLzEtMCsGA1UEAxMk
YjVlZjEwNjUtMDY5NC00NjQ0LWFiNTAtYmZmNWI0NzM5NGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDMwre1zSezOIOiAHYgFzdOSiVLb/DtJYlRG
acaA7Owj0OvfUjaEV/OtM7CmWMnR5feQLdcQltEEFHWsThQUb+brW9VJxv6+tTP6
v6jWWjbNoTzNeX2HqtKY3wBexF0ezoIiP6PhU00OG58EN7cd63WLnOg9OIYD5wN/
J9xFR1U+OjXh8f9ccakEVvGzSiUF9Kzc0OrMVIi99wrSAcOUaYEmOsW+OPwWjvW8
dwOeX/AXJUbUQlentEpSfT/EhonqE51SKzDSJvmL1jtMmAfV8NKAycvRONccFuFe
tzTfXI8i2N1E7IdCHOHHqJZwodJkQZ/rIqkKtUdNRcn4ubUYHQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAbcBGJXY2mZXSpK8e3nw+/G+ioqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYTU1Mzg3YzEtMGExMi0z
OWVjLWFhMWEtMWY0MjhmNzdkNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgEgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdGW0nf5HaU3361rOnpTChX6gjGoL4myUjsZSmdfmH6XLSzATN7SE
NK3TriCS3JUTs8I0lD/gYjJOZy4k1md98pVWi1++rB0A3U4LgGrvqw1l0amjdpA+
gytqZ+ktsy+RVvDJuUc9c9OGBQWXIHihrF3OyNOdCrfbCcK2qRm44yKwC70VxiVp
N4vmWmopFsRDmH58e63OmKgMQmnjjfG9Fco/Pjfb6rCon5pvFQWJV8Aks7ixVH4F
b5AZUB70uugaSzISFulXBYIgLDxQ+Lz/ZWO3Ee4IoW4tFUtSuxCk1QAnP2j2fo3g
araYEIeIq1B6y+gKYmVRmBIUPRqamhdQXg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:19 2024 by rpki-client on console-ams.rpki-client.org