Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa
File:                     1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa (raw, json)
Hash identifier:          nkEUbtM3Tf2mYo5xu5euIP0s+ixRf6+nop1JRumk0Ew=
Subject key identifier:   74:E8:C2:2D:69:E3:CA:12:B0:F1:B4:05:29:01:D6:7B:9A:B0:D6:E8
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858452952930ECF3676B09534F040
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     9009
IP address blocks:        2607:740:1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:93:0e:cf:36:76:b0:95:34:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=09601caa-4431-4a6f-ad90-c89321dbcf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:3e:c6:53:26:21:8d:b0:a2:6b:a7:b0:6a:
                    5e:90:13:a2:ec:ac:42:ac:f8:40:25:0f:a0:11:24:
                    d9:dd:f3:14:32:ef:b0:b5:3f:2e:e6:1e:a5:3e:d5:
                    55:6c:2c:df:05:8e:89:da:1e:98:43:4a:9d:58:05:
                    5b:79:63:13:ed:b8:23:1b:38:de:4a:52:40:13:d3:
                    9a:48:07:b7:ea:72:59:af:31:a2:5e:1a:01:74:82:
                    94:01:95:3a:8f:99:15:a3:cd:8f:a1:b9:8a:33:e4:
                    9b:08:31:b1:16:28:4b:dc:e8:ab:c3:ac:30:e1:4c:
                    22:64:a8:af:d4:98:07:d2:3d:2b:a8:1c:66:3e:75:
                    a8:95:0b:c5:15:b7:7d:ed:13:e6:7e:e8:3a:a2:78:
                    f8:b5:6e:e9:b3:ab:23:d5:60:a5:73:2c:dc:69:73:
                    58:b2:35:27:70:eb:17:c4:08:d9:63:03:3d:68:8c:
                    df:a6:ca:09:eb:03:72:d1:03:4d:92:1f:3a:af:18:
                    32:5d:09:8a:f8:94:e6:7b:c8:b6:92:b5:71:19:e5:
                    1b:d4:c9:ca:bb:7a:29:a7:65:e5:b3:c4:2f:c1:a8:
                    42:81:8d:0b:58:0c:8d:e4:7b:18:89:ba:56:02:b4:
                    24:b1:62:b8:6b:5f:c9:bc:15:6c:fb:42:00:c8:25:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E8:C2:2D:69:E3:CA:12:B0:F1:B4:05:29:01:D6:7B:9A:B0:D6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e3:43:95:78:a6:47:1f:ee:c2:68:3a:8b:7e:fc:3f:5d:bc:
         11:4e:f0:80:01:45:59:b5:7e:11:bf:a9:40:53:7c:ed:8e:c9:
         0f:5f:40:12:4b:9b:46:10:69:01:ee:c1:59:2f:be:44:b9:d8:
         0f:59:f7:1a:af:5a:25:cd:64:64:b7:13:f0:e8:4e:65:3a:f8:
         f8:e5:08:f0:7b:94:9f:65:f3:f5:cd:4c:b3:5b:e4:56:01:87:
         8e:26:4c:0c:3b:da:54:f9:7c:d3:49:44:84:cd:87:ba:0d:7f:
         bd:8d:f7:fd:e2:99:1d:b9:e2:e7:93:fe:53:e5:f6:99:e9:46:
         1b:01:9f:7f:18:fc:e1:56:f1:f8:66:24:1a:5e:69:f4:10:07:
         5a:6c:18:ca:ff:af:0b:79:86:9e:ba:e5:0a:bf:2c:73:9e:9a:
         0e:41:eb:27:71:49:d4:fb:46:53:bf:d2:72:31:42:75:12:c3:
         4b:d8:9c:3f:72:f0:1e:bf:ca:a7:5e:b6:00:4b:8e:89:c1:72:
         07:b5:28:40:90:cf:51:25:03:02:f5:27:7c:71:81:61:e9:1f:
         f4:e8:df:91:18:54:92:00:98:76:c3:05:9d:cb:48:c1:a9:6f:
         d7:c7:8a:a4:d9:01:bf:88:60:86:ee:b3:1d:7e:32:b0:5c:ad:
         e0:2c:25:e9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUpUpMOzzZ2sJU08EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk
MDk2MDFjYWEtNDQzMS00YTZmLWFkOTAtYzg5MzIxZGJjZjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/0+xlMmIY2womunsGpekBOi7KxCrPhAJQ+g
ESTZ3fMUMu+wtT8u5h6lPtVVbCzfBY6J2h6YQ0qdWAVbeWMT7bgjGzjeSlJAE9Oa
SAe36nJZrzGiXhoBdIKUAZU6j5kVo82PobmKM+SbCDGxFihL3Oirw6ww4UwiZKiv
1JgH0j0rqBxmPnWolQvFFbd97RPmfug6onj4tW7ps6sj1WClcyzcaXNYsjUncOsX
xAjZYwM9aIzfpsoJ6wNy0QNNkh86rxgyXQmK+JTme8i2krVxGeUb1MnKu3opp2Xl
s8QvwahCgY0LWAyN5HsYibpWArQksWK4a1/JvBVs+0IAyCV63QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHTowi1p48oSsPG0BSkB1nuasNboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWYyNjdiOWYtNGViNi0z
ZTQ2LTk5MzEtMjdhZmU5OWEwNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH/jQ5V4pkcf7sJoOot+/D9dvBFO8IABRVm1fhG/qUBTfO2OyQ9f
QBJLm0YQaQHuwVkvvkS52A9Z9xqvWiXNZGS3E/DoTmU6+PjlCPB7lJ9l8/XNTLNb
5FYBh44mTAw72lT5fNNJRITNh7oNf72N9/3imR254ueT/lPl9pnpRhsBn38Y/OFW
8fhmJBpeafQQB1psGMr/rwt5hp665Qq/LHOemg5B6ydxSdT7RlO/0nIxQnUSw0vY
nD9y8B6/yqdetgBLjonBcge1KECQz1ElAwL1J3xxgWHpH/To35EYVJIAmHbDBZ3L
SMGpb9fHiqTZAb+IYIbusx1+MrBcreAsJek=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:32 2024 by rpki-client on console-ams.rpki-client.org