Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa
File:                     3607c477-33e0-329a-922b-0339e2172692.roa (raw, json)
Hash identifier:          ixl8wu1RUZCXd7uEdd7OxyqaAulNdprSZHsqlhC6gbY=
Subject key identifier:   78:08:F7:86:3D:66:2B:6B:2C:69:C2:23:2D:99:3A:F6:EA:F5:57:5D
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F432858478B5114D46E2E0EC64BCB9980
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa
Signing time:             Tue 15 Oct 2024 01:00:35 +0000
ROA not before:           Tue 15 Oct 2024 01:00:35 +0000
ROA not after:            Mon 13 Jan 2025 02:00:35 +0000
asID:                     11232
IP address blocks:        2605:4a80:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:51:14:d4:6e:2e:0e:c6:4b:cb:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 15 01:00:35 2024 GMT
            Not After : Jan 13 02:00:35 2025 GMT
        Subject: CN=f05e54e6-dad2-41ff-8d9f-af4c964ef92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:5e:c4:f7:d2:c6:41:1b:4b:43:e1:59:50:
                    30:a3:5c:30:e4:76:8f:06:17:a0:f2:0b:17:89:c6:
                    4d:2b:ef:75:2a:fc:21:60:eb:50:29:a1:68:35:3e:
                    65:98:70:cc:8f:0f:a1:ec:95:2c:37:86:0f:65:4d:
                    bb:b1:12:1f:bd:2d:f2:27:ee:9e:00:e0:a6:76:3a:
                    d7:36:09:86:92:5a:99:1e:9d:96:00:22:40:1b:e3:
                    28:91:d7:19:3f:5a:5c:8f:a9:9c:ea:f0:ed:98:09:
                    38:5f:38:10:bb:66:ba:a8:05:a3:2f:9c:6f:4a:0c:
                    16:83:f4:f4:d5:29:39:82:a9:74:83:68:16:c6:3c:
                    cf:05:18:19:30:33:84:5e:48:6e:d7:59:f4:be:67:
                    cd:22:d5:02:4f:17:93:9a:c0:3a:20:ab:fd:d4:63:
                    e8:7d:f2:4e:15:4f:3b:21:13:74:a5:2e:5a:24:ec:
                    ea:46:d3:9c:62:85:d8:04:bc:95:84:f8:8d:07:ba:
                    da:04:35:bf:4c:d4:a6:54:cd:2d:07:f3:7a:14:1f:
                    2a:18:ce:bc:96:92:97:f1:b9:c5:cb:fc:cd:eb:9e:
                    3c:36:3d:6a:a9:6a:40:ec:92:2f:e2:cc:45:de:1f:
                    ad:a2:12:07:78:ce:31:eb:4e:7f:67:b2:00:17:c0:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:F7:86:3D:66:2B:6B:2C:69:C2:23:2D:99:3A:F6:EA:F5:57:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3607c477-33e0-329a-922b-0339e2172692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:2000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:99:7f:55:f1:88:ee:51:ec:38:2a:0b:d1:ff:94:58:ad:48:
         a7:3e:a8:3c:f9:07:6b:dd:c9:b9:a1:3d:ec:29:ff:97:aa:0e:
         e1:d1:7c:32:14:7c:ae:78:b2:97:53:c6:6e:9e:ac:f1:dd:1f:
         3d:5a:e9:48:46:5a:86:b2:f7:f3:d5:62:e9:32:a6:02:7d:a1:
         10:54:64:9e:3f:c7:ac:51:f8:be:3c:85:e7:d6:e4:34:52:bb:
         06:e7:83:1c:cb:1d:2a:6d:79:8c:f5:f3:e9:64:d4:89:7c:9f:
         8c:1f:50:90:7a:77:7c:ae:a7:72:8b:1b:87:ad:72:5b:88:a9:
         0f:b2:0a:d4:54:1f:47:3e:ba:f3:5e:6d:e7:ab:c4:ea:be:83:
         d2:ce:18:28:52:c8:fb:3e:87:a8:7e:7e:53:57:07:67:64:95:
         ee:7b:3c:40:f3:12:22:25:21:c1:24:e2:40:e3:8e:a2:b6:ec:
         78:7b:a3:92:28:0f:38:b1:fd:ab:7a:bb:48:3c:a9:d3:4c:fd:
         47:52:9a:72:d9:08:88:15:f7:0e:fb:bb:97:c6:e4:3c:49:fb:
         43:2a:6b:63:6d:07:2c:4b:43:63:a9:9f:0b:af:38:61:de:48:
         d9:23:44:8e:7f:ab:77:e4:bc:97:c8:b8:2e:a6:bd:96:83:a9:
         6b:3f:98:fa
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEeLURTUbi4OxkvLmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI0MTAxNTAxMDAzNVoXDTI1MDExMzAyMDAzNVowLzEtMCsGA1UEAxMk
ZjA1ZTU0ZTYtZGFkMi00MWZmLThkOWYtYWY0Yzk2NGVmOTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAillexPfSxkEbS0PhWVAwo1ww5HaPBheg8gsX
icZNK+91KvwhYOtQKaFoNT5lmHDMjw+h7JUsN4YPZU27sRIfvS3yJ+6eAOCmdjrX
NgmGklqZHp2WACJAG+MokdcZP1pcj6mc6vDtmAk4XzgQu2a6qAWjL5xvSgwWg/T0
1Sk5gql0g2gWxjzPBRgZMDOEXkhu11n0vmfNItUCTxeTmsA6IKv91GPoffJOFU87
IRN0pS5aJOzqRtOcYoXYBLyVhPiNB7raBDW/TNSmVM0tB/N6FB8qGM68lpKX8bnF
y/zN6548Nj1qqWpA7JIv4sxF3h+tohIHeM4x605/Z7IAF8BP4wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHgI94Y9ZitrLGnCIy2ZOvbq9VddMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMzYwN2M0NzctMzNlMC0z
MjlhLTkyMmItMDMzOWUyMTcyNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgVKgCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcJl/VfGI7lHsOCoL0f+UWK1Ipz6oPPkHa93JuaE97Cn/l6oO4dF8
MhR8rniyl1PGbp6s8d0fPVrpSEZahrL389Vi6TKmAn2hEFRknj/HrFH4vjyF59bk
NFK7BueDHMsdKm15jPXz6WTUiXyfjB9QkHp3fK6ncosbh61yW4ipD7IK1FQfRz66
815t56vE6r6D0s4YKFLI+z6HqH5+U1cHZ2SV7ns8QPMSIiUhwSTiQOOOorbseHuj
kigPOLH9q3q7SDyp00z9R1KactkIiBX3Dvu7l8bkPEn7QyprY20HLEtDY6mfC684
Yd5I2SNEjn+rd+S8l8i4Lqa9loOpaz+Y+g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:45 2024 by rpki-client on console-ams.rpki-client.org