Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
File:                     4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json)
Hash identifier:          LWj+YCf69J+YDMckfBRa1kxHApBbebL+9aeG1sL6/Yw=
Subject key identifier:   F9:50:C2:24:A5:B2:3F:65:80:7D:E2:78:58:CF:1C:88:8C:D6:73:07
Certificate issuer:       /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial:       010D0C9F43285847EFEF7BED98F174134BA53F00
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     394449
IP address blocks:        2604:3dc0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:7b:ed:98:f1:74:13:4b:a5:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=e00897d8-d316-4a47-877f-d7590595a113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:2b:bc:ef:37:7c:b7:3b:89:c2:ea:f3:8e:
                    8d:9b:77:36:e6:35:2e:86:ae:32:67:b6:d0:ba:55:
                    a2:27:00:dc:5c:86:00:d2:9a:14:08:41:79:5c:2d:
                    ae:a7:42:b8:e3:40:89:f4:ef:e5:78:79:84:7b:18:
                    e8:6f:1a:6d:61:63:1b:70:d5:99:5b:dc:24:bb:5e:
                    5b:38:11:c7:9e:e8:a1:a3:3d:73:27:ab:6f:2f:4a:
                    2b:c0:00:e7:9c:e1:fa:7f:ab:fe:31:d1:2d:1b:68:
                    cc:ef:db:fe:c3:88:5e:67:8c:ff:f3:7d:50:3c:ef:
                    eb:20:4a:5e:3c:0d:36:26:35:79:cd:c4:55:2e:b7:
                    c4:3d:99:cd:0a:f3:61:5c:5f:61:f1:81:b9:d1:4c:
                    28:f1:e4:25:c9:b2:cc:47:7e:d8:fe:e9:ef:8a:2e:
                    13:27:73:48:e5:24:5e:cd:1b:ee:a3:4c:03:4b:4c:
                    47:6b:68:9a:64:42:e3:b2:9c:3e:63:b0:ae:e7:80:
                    10:a5:f1:1e:34:6a:02:7c:38:63:d2:69:3d:c3:5e:
                    0f:99:e5:b3:4f:59:4a:fb:06:39:eb:ea:0e:cf:a7:
                    9f:7c:07:23:aa:7c:dc:cb:a4:07:49:47:06:e6:22:
                    a7:09:fe:b7:4e:81:ea:57:2e:dd:f8:9b:ec:0e:3d:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:50:C2:24:A5:B2:3F:65:80:7D:E2:78:58:CF:1C:88:8C:D6:73:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl

            X509v3 Authority Key Identifier:
                keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3dc0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:70:b6:ec:00:f6:6f:36:e3:b4:fc:0b:88:34:a2:08:69:
         02:52:8d:0e:25:ad:04:b0:b8:18:be:80:92:9a:91:64:1d:cd:
         4a:63:65:3a:c9:3e:7d:10:52:5c:cb:41:94:80:11:c9:e8:ed:
         d3:30:24:6b:17:0d:81:f2:ca:5e:3c:10:c1:91:71:36:53:55:
         1b:13:32:f8:fa:16:91:fc:c8:00:0b:6b:cf:22:a5:b3:e2:54:
         ac:a0:f1:c2:8e:43:c5:7f:d1:96:4d:4f:61:90:48:4c:13:1b:
         ed:cc:c9:5b:6b:3a:3b:b0:ce:bc:a3:66:f6:52:26:a4:5c:09:
         b2:1e:26:df:c5:1e:3e:b3:b3:65:92:74:10:cb:ee:26:ed:ba:
         40:22:c5:05:bf:34:00:6b:4c:a4:3a:47:e5:71:a8:fd:cc:ab:
         38:0a:eb:50:13:9e:9e:26:fc:18:1c:83:b6:e7:6a:c0:49:df:
         20:7b:e5:47:87:ed:64:d8:a1:60:43:4d:a7:a1:2e:7f:0c:03:
         7c:47:8d:7e:f9:63:f0:90:ad:b1:b1:6b:f8:03:0b:41:cd:e9:
         e4:2e:a7:49:b4:9b:2c:47:a9:1d:7e:aa:33:d1:f3:c3:c3:ce:
         4e:b3:85:e7:e5:ea:29:fd:09:35:5c:9d:59:3d:e0:e9:bd:6f:
         db:70:63:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfv73vtmPF0E0ulPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx
OTc5MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
ZTAwODk3ZDgtZDMxNi00YTQ3LTg3N2YtZDc1OTA1OTVhMTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtIrvO83fLc7icLq846Nm3c25jUuhq4yZ7bQ
ulWiJwDcXIYA0poUCEF5XC2up0K440CJ9O/leHmEexjobxptYWMbcNWZW9wku15b
OBHHnuihoz1zJ6tvL0orwADnnOH6f6v+MdEtG2jM79v+w4heZ4z/831QPO/rIEpe
PA02JjV5zcRVLrfEPZnNCvNhXF9h8YG50Uwo8eQlybLMR37Y/unvii4TJ3NI5SRe
zRvuo0wDS0xHa2iaZELjspw+Y7Cu54AQpfEeNGoCfDhj0mk9w14PmeWzT1lK+wY5
6+oOz6effAcjqnzcy6QHSUcG5iKnCf63ToHqVy7d+JvsDj23QwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPlQwiSlsj9lgH3ieFjPHIiM1nMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3
ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNDQ0M2VhM2UtNTUxNS0z
OTNmLTliNmMtNzFlZDU4MTYzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk
OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj
MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0
NThmYzE5NzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ9wAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABGMcLbsAPZvNuO0/AuINKIIaQJSjQ4lrQSwuBi+gJKakWQdzUpj
ZTrJPn0QUlzLQZSAEcno7dMwJGsXDYHyyl48EMGRcTZTVRsTMvj6FpH8yAALa88i
pbPiVKyg8cKOQ8V/0ZZNT2GQSEwTG+3MyVtrOjuwzryjZvZSJqRcCbIeJt/FHj6z
s2WSdBDL7ibtukAixQW/NABrTKQ6R+VxqP3MqzgK61ATnp4m/Bgcg7bnasBJ3yB7
5UeH7WTYoWBDTaehLn8MA3xHjX75Y/CQrbGxa/gDC0HN6eQup0m0myxHqR1+qjPR
88PDzk6zhefl6in9CTVcnVk94Om9b9twYz8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:59:13 2024 by rpki-client on console-fra.rpki-client.org