Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b2b33401-6615-3e00-adcf-77340a5fe529.roa
File:                     b2b33401-6615-3e00-adcf-77340a5fe529.roa (raw, json)
Hash identifier:          masgGxR4gvCt+x4scUR96V7Wme5IucWpwq769lqlgB8=
Subject key identifier:   A7:E3:C5:AA:51:98:86:FA:E2:88:80:38:59:DA:25:F2:FB:ED:4A:FA
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285844F5CAA351B4F21E338ACC8030
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b2b33401-6615-3e00-adcf-77340a5fe529.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     54203
IP address blocks:        2606:b300:8100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:a3:51:b4:f2:1e:33:8a:cc:80:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=7a74feef-e718-42db-83c7-c4ab04a4b66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:3c:7b:84:4d:53:46:96:ce:52:d2:b1:da:
                    f0:ae:27:31:f2:cf:41:7d:7d:a3:ad:5d:ab:85:de:
                    27:16:a3:82:f0:59:a0:e4:7d:96:aa:aa:bc:fa:46:
                    7e:93:68:37:83:b5:fe:c2:b3:28:ff:d9:af:99:cd:
                    e4:a1:98:b0:fd:b5:9f:69:e1:7a:8e:a4:f3:4e:35:
                    6f:e7:a4:12:6d:5f:2e:6d:82:7b:39:06:ef:db:59:
                    bc:4e:74:39:a8:75:8e:93:64:4d:0e:db:73:b1:ac:
                    cc:be:7a:0b:cb:5e:8a:97:a3:78:ed:ea:57:e7:b4:
                    79:60:f0:d5:f0:c7:c5:1c:de:98:c7:94:32:03:4e:
                    c6:62:56:8b:f8:d7:cf:65:d3:54:7e:39:72:4c:bd:
                    ee:28:94:9b:2c:4d:66:ca:2c:c6:79:bf:c6:31:7b:
                    b3:e7:c1:c1:cb:81:42:bb:81:42:51:9c:7b:ed:15:
                    56:22:3b:df:6a:89:90:25:72:ce:68:dc:a4:cf:36:
                    08:e5:4f:aa:65:94:6f:cd:db:2e:86:4f:87:d4:7c:
                    22:02:97:89:c3:ec:17:b1:91:34:f8:2f:95:2f:ac:
                    48:65:1f:9e:30:7e:ef:a0:70:9c:f4:02:87:8c:c6:
                    95:e2:5d:8a:7d:54:71:02:48:1f:b5:84:68:b1:90:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:C5:AA:51:98:86:FA:E2:88:80:38:59:DA:25:F2:FB:ED:4A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b2b33401-6615-3e00-adcf-77340a5fe529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:8100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:96:5b:47:c0:cb:44:cf:ba:6b:9d:fa:a6:5e:7a:94:b0:
         6a:21:ae:31:3e:ab:50:89:54:80:f9:e4:31:13:af:fa:ae:29:
         a0:c8:43:06:83:75:56:90:16:36:25:49:0b:6c:9d:a2:43:19:
         03:07:a7:62:03:ce:84:5e:04:84:c3:bc:b9:ed:cb:5e:c2:2f:
         7d:5c:e0:50:fd:86:ed:5f:f6:0c:75:5c:ad:51:33:e7:b9:f4:
         cb:b8:3d:35:0a:d7:fc:cf:12:10:7c:f1:a8:be:4f:ca:4a:cb:
         c0:6b:70:45:80:e0:43:c0:2a:a7:57:f9:a1:03:c0:35:fe:c6:
         41:eb:c4:e4:21:8e:1f:bc:1f:60:5d:8e:2d:13:c5:7b:b5:05:
         d5:a8:86:f8:a6:b0:b1:8a:d0:77:ef:9a:e3:e8:99:ae:31:b5:
         08:88:e6:45:87:38:73:ea:2c:db:4b:f4:2e:64:a6:dd:a5:e7:
         6b:08:68:10:45:e7:0b:5a:a8:e6:61:84:bd:57:5f:91:00:7a:
         64:54:2f:c7:28:f9:58:0e:92:dc:51:e4:52:e6:2d:76:41:f0:
         1e:68:10:ab:9e:41:9e:44:94:0f:98:40:ed:5d:b3:f6:ac:50:
         99:9b:c8:44:a5:16:1c:2e:86:97:dc:90:4f:fd:d2:4a:99:91:
         b2:60:66:89
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWET1yqNRtPIeM4rMgDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk
N2E3NGZlZWYtZTcxOC00MmRiLTgzYzctYzRhYjA0YTRiNjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk08e4RNU0aWzlLSsdrwricx8s9BfX2jrV2r
hd4nFqOC8Fmg5H2Wqqq8+kZ+k2g3g7X+wrMo/9mvmc3koZiw/bWfaeF6jqTzTjVv
56QSbV8ubYJ7OQbv21m8TnQ5qHWOk2RNDttzsazMvnoLy16Kl6N47epX57R5YPDV
8MfFHN6Yx5QyA07GYlaL+NfPZdNUfjlyTL3uKJSbLE1myizGeb/GMXuz58HBy4FC
u4FCUZx77RVWIjvfaomQJXLOaNykzzYI5U+qZZRvzdsuhk+H1HwiApeJw+wXsZE0
+C+VL6xIZR+eMH7voHCc9AKHjMaV4l2KfVRxAkgftYRosZC95wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKfjxapRmIb64oiAOFnaJfL77Ur6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjJiMzM0MDEtNjYxNS0z
ZTAwLWFkY2YtNzczNDBhNWZlNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgazAIEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACcKWW0fAy0TPumud+qZeepSwaiGuMT6rUIlUgPnkMROv+q4poMhD
BoN1VpAWNiVJC2ydokMZAwenYgPOhF4EhMO8ue3LXsIvfVzgUP2G7V/2DHVcrVEz
57n0y7g9NQrX/M8SEHzxqL5PykrLwGtwRYDgQ8Aqp1f5oQPANf7GQevE5CGOH7wf
YF2OLRPFe7UF1aiG+KawsYrQd++a4+iZrjG1CIjmRYc4c+os20v0LmSm3aXnawho
EEXnC1qo5mGEvVdfkQB6ZFQvxyj5WA6S3FHkUuYtdkHwHmgQq55BnkSUD5hA7V2z
9qxQmZvIRKUWHC6Gl9yQT/3SSpmRsmBmiQ==
-----END CERTIFICATE-----
Generated at Fri May 10 03:03:07 2024 by rpki-client on console-ams.rpki-client.org