Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11c37892-03bb-3f86-bb48-d5eaff6d21ed.roa
File:                     11c37892-03bb-3f86-bb48-d5eaff6d21ed.roa (raw, json)
Hash identifier:          Hq8d1+q92L+h38vV1iRD0SsP1/5nEytY7S9eOjkNCDI=
Subject key identifier:   A6:9B:79:8F:ED:96:82:74:BF:E5:3B:EA:EC:3C:E9:90:D7:4D:C9:FA
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845CBB622EC38CFB9D4C6049A00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11c37892-03bb-3f86-bb48-d5eaff6d21ed.roa
Signing time:             Tue 07 May 2024 17:02:09 +0000
ROA not before:           Tue 07 May 2024 17:02:09 +0000
ROA not after:            Mon 05 Aug 2024 17:02:09 +0000
asID:                     11232
IP address blocks:        2001:48f8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:b6:22:ec:38:cf:b9:d4:c6:04:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May  7 17:02:09 2024 GMT
            Not After : Aug  5 17:02:09 2024 GMT
        Subject: CN=c9466c8c-b885-475c-ae69-53892eb1b66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:d2:57:69:99:40:06:1a:bb:0d:d0:2d:4a:
                    35:f1:ba:26:39:57:e8:16:8f:f0:f3:a2:89:c8:4c:
                    56:1c:87:70:42:4e:83:45:db:48:71:b4:58:f3:d8:
                    ce:dd:aa:b5:c3:58:68:c3:2d:42:c2:3a:3a:c5:d4:
                    dc:33:e8:dc:56:61:56:bf:f1:42:78:35:e7:60:70:
                    53:d9:36:74:53:e5:d1:81:f1:b0:54:19:dc:c3:c1:
                    3b:e1:8a:8c:2a:f8:80:5b:e1:9c:e4:0a:a8:37:97:
                    30:ce:2d:c9:38:71:7e:89:f1:80:9b:28:ab:96:00:
                    81:9e:57:6c:9b:e3:50:09:bd:42:5d:38:f2:12:b2:
                    24:c5:e8:31:d1:1a:e1:fc:cf:21:66:bc:38:c1:5d:
                    7e:20:16:67:1c:05:57:83:49:42:71:66:32:a2:05:
                    6a:83:fc:12:a4:ff:ef:e2:62:d6:39:59:52:fe:0a:
                    da:e7:44:d8:c1:16:89:c1:65:44:df:54:5e:36:8b:
                    bb:05:e2:69:cc:3a:77:81:c3:37:6d:50:6f:14:84:
                    92:da:08:82:0c:03:6a:02:cd:9b:af:69:fd:48:fb:
                    fa:34:9c:35:0c:f6:ef:89:fd:ef:97:76:4b:a2:b3:
                    b2:de:b4:cb:ab:47:7d:eb:f5:06:de:8b:f5:f2:34:
                    a7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9B:79:8F:ED:96:82:74:BF:E5:3B:EA:EC:3C:E9:90:D7:4D:C9:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/11c37892-03bb-3f86-bb48-d5eaff6d21ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:e5:93:26:17:29:a2:bb:5d:82:0f:9c:03:ff:a8:a2:2a:
         60:87:a8:ec:e5:da:17:bd:dc:d2:c9:33:ec:8a:db:00:45:5c:
         32:d0:65:23:84:3c:48:ed:75:7b:9b:c4:c6:49:cb:3c:3e:b5:
         e2:be:28:18:bb:db:f9:17:f3:fd:1b:50:13:d3:df:2f:cf:a0:
         a4:a2:9a:94:a8:af:c3:93:9f:d8:c4:8f:9f:63:03:01:f4:ce:
         38:8a:e0:bc:75:a0:a0:58:a6:f3:5e:4f:d2:d7:5b:10:c3:88:
         ab:14:61:e6:8a:68:4f:d8:ed:41:1d:11:df:6e:b0:e6:cc:f8:
         5d:74:3b:87:da:eb:d6:8e:91:e1:6d:30:26:29:ff:61:1a:99:
         a2:38:2c:12:75:c7:c8:41:b7:ad:3b:ca:11:10:88:c6:8d:5a:
         31:d2:b6:89:ef:b7:dc:bd:00:30:c0:61:8c:0f:33:9f:fe:5f:
         6a:53:e5:43:6e:07:bd:2c:bb:f9:79:d1:cd:0d:1b:cb:ae:03:
         fd:63:24:86:23:a6:1a:94:a4:d2:0c:ec:7a:fb:93:67:19:9a:
         e2:7d:34:44:8e:32:17:38:d9:f7:fc:17:bd:43:b1:88:76:ac:
         7e:d1:0f:ba:02:81:33:b1:f0:0a:1c:a9:e7:81:f3:68:2b:63:
         72:14:2d:e9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEXLtiLsOM+51MYEmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI0MDUwNzE3MDIwOVoXDTI0MDgwNTE3MDIwOVowLzEtMCsGA1UEAxMk
Yzk0NjZjOGMtYjg4NS00NzVjLWFlNjktNTM4OTJlYjFiNjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4TSV2mZQAYauw3QLUo18bomOVfoFo/w86KJ
yExWHIdwQk6DRdtIcbRY89jO3aq1w1howy1Cwjo6xdTcM+jcVmFWv/FCeDXnYHBT
2TZ0U+XRgfGwVBncw8E74YqMKviAW+Gc5AqoN5cwzi3JOHF+ifGAmyirlgCBnlds
m+NQCb1CXTjyErIkxegx0Rrh/M8hZrw4wV1+IBZnHAVXg0lCcWYyogVqg/wSpP/v
4mLWOVlS/gra50TYwRaJwWVE31ReNou7BeJpzDp3gcM3bVBvFISS2giCDANqAs2b
r2n9SPv6NJw1DPbvif3vl3ZLorOy3rTLq0d96/UG3ov18jSnawIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKabeY/tloJ0v+U76uw86ZDXTcn6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMTFjMzc4OTItMDNiYi0z
Zjg2LWJiNDgtZDVlYWZmNmQyMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFI+DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCCLOWTJhcportdgg+cA/+ooipgh6js5doXvdzSyTPsitsARVwy0GUj
hDxI7XV7m8TGScs8PrXivigYu9v5F/P9G1AT098vz6CkopqUqK/Dk5/YxI+fYwMB
9M44iuC8daCgWKbzXk/S11sQw4irFGHmimhP2O1BHRHfbrDmzPhddDuH2uvWjpHh
bTAmKf9hGpmiOCwSdcfIQbetO8oREIjGjVox0raJ77fcvQAwwGGMDzOf/l9qU+VD
bge9LLv5edHNDRvLrgP9YySGI6YalKTSDOx6+5NnGZrifTREjjIXONn3/Be9Q7GI
dqx+0Q+6AoEzsfAKHKnngfNoK2NyFC3p
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:33:09 2024 by rpki-client on console-fra.rpki-client.org