Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/84d8c664-abe4-33bb-a4fb-17a1feda43fc.roa
File:                     84d8c664-abe4-33bb-a4fb-17a1feda43fc.roa (raw, json)
Hash identifier:          2lIE+tRsCDjHmT0PXaMrLqG2N1A63VEhxsM0zH9D9fc=
Subject key identifier:   CD:3F:FE:FA:16:80:86:49:BD:76:BA:B6:9B:9B:33:0E:4D:4C:6D:FB
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F432858478F8136B1C245EDC71A838900
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/84d8c664-abe4-33bb-a4fb-17a1feda43fc.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:36:b1:c2:45:ed:c7:1a:83:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=3a947933-0e93-4be8-a603-de944cc52c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:bc:65:cc:bb:e7:f6:ac:ae:73:77:27:f8:
                    ec:f4:e6:b3:fc:6b:c8:d4:4e:ce:0a:80:c5:a8:5c:
                    a4:4b:41:0d:f8:4e:25:e3:02:f8:9f:07:00:1f:ab:
                    62:dc:bd:d3:fd:60:8b:e9:be:2b:72:77:8e:ae:6a:
                    92:79:7b:9d:bc:f2:65:31:c8:7a:f1:20:13:4d:b8:
                    86:03:7f:49:25:4b:72:62:dd:f7:53:b5:1b:70:0f:
                    2f:78:08:ab:dc:da:f6:ae:29:8b:1a:e4:c0:50:60:
                    ed:8a:bb:7a:83:fb:5e:33:96:2a:58:33:64:5e:68:
                    ac:53:be:b0:ce:30:7b:8d:a0:44:69:36:ba:24:e7:
                    28:c0:5d:cb:0a:dd:bf:98:74:44:0d:0d:dd:c0:82:
                    30:c3:22:ee:4b:d4:c3:97:8f:36:30:ee:a2:6a:34:
                    15:12:f3:7c:d5:bd:26:3f:a6:00:5b:b8:0d:24:8f:
                    8c:e6:02:ad:ec:c4:29:35:53:8e:0b:96:cd:86:2d:
                    47:cb:fe:b1:82:25:ba:6d:6c:3a:01:b6:e9:cc:e1:
                    b5:a1:fd:84:f4:51:1c:cc:d9:7d:b7:97:4f:2a:8e:
                    61:6f:31:db:de:a8:21:39:a9:1e:21:28:ce:41:af:
                    72:1e:78:3d:5f:db:cb:e7:f8:fb:02:73:39:71:c3:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:FE:FA:16:80:86:49:BD:76:BA:B6:9B:9B:33:0E:4D:4C:6D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/84d8c664-abe4-33bb-a4fb-17a1feda43fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:66:cf:8a:2e:be:33:60:33:55:e3:37:aa:25:33:5f:bd:7a:
         b1:2b:f5:65:1b:6e:c2:fb:8d:2f:51:ba:d6:d8:22:dd:6f:5b:
         5b:9a:d3:1e:79:2c:67:f2:61:38:03:db:17:94:6a:4f:82:f3:
         18:7d:14:ac:7c:50:73:69:7d:bb:91:72:31:5c:1f:23:27:7d:
         c3:5d:71:f8:5e:7b:a7:66:2e:d2:37:f8:71:84:75:40:33:d5:
         34:d9:b1:22:1b:2e:15:c7:be:24:46:d6:1d:f8:88:3d:01:74:
         b5:28:a2:98:e4:bd:b6:89:ca:ac:ca:a5:45:d4:23:4d:28:39:
         69:c2:b2:1c:41:3e:b4:5c:de:ba:99:77:00:f5:6c:61:a3:c1:
         aa:c2:cf:fd:28:29:58:7c:b1:30:7c:9c:23:7a:1b:ea:e7:ad:
         1e:2f:50:f6:e4:55:cf:99:d5:45:40:4b:7e:d0:2b:50:30:88:
         66:10:65:b4:2a:14:59:de:f2:ae:19:8f:d0:40:3e:b9:24:fb:
         6d:ef:d2:9f:35:fd:fe:78:91:2f:83:3f:85:57:f5:27:c1:78:
         84:3d:f2:eb:94:07:2f:47:db:6f:53:c0:fe:ff:7b:2e:0b:b2:
         f7:20:ef:ce:49:4b:b0:7f:d3:ef:f0:5e:37:d8:a2:17:48:84:
         29:23:f5:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEePgTaxwkXtxxqDiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk
M2E5NDc5MzMtMGU5My00YmU4LWE2MDMtZGU5NDRjYzUyYzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDm8Zcy75/asrnN3J/js9Oaz/GvI1E7OCoDF
qFykS0EN+E4l4wL4nwcAH6ti3L3T/WCL6b4rcneOrmqSeXudvPJlMch68SATTbiG
A39JJUtyYt33U7UbcA8veAir3Nr2rimLGuTAUGDtirt6g/teM5YqWDNkXmisU76w
zjB7jaBEaTa6JOcowF3LCt2/mHREDQ3dwIIwwyLuS9TDl482MO6iajQVEvN81b0m
P6YAW7gNJI+M5gKt7MQpNVOOC5bNhi1Hy/6xgiW6bWw6AbbpzOG1of2E9FEczNl9
t5dPKo5hbzHb3qghOakeISjOQa9yHng9X9vL5/j7AnM5ccMIjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM0//voWgIZJvXa6tpubMw5NTG37MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvODRkOGM2NjQtYWJlNC0z
M2JiLWE0ZmItMTdhMWZlZGE0M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgVKgO8A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAANmz4ouvjNgM1XjN6olM1+9erEr9WUbbsL7jS9RutbYIt1vW1ua
0x55LGfyYTgD2xeUak+C8xh9FKx8UHNpfbuRcjFcHyMnfcNdcfhee6dmLtI3+HGE
dUAz1TTZsSIbLhXHviRG1h34iD0BdLUoopjkvbaJyqzKpUXUI00oOWnCshxBPrRc
3rqZdwD1bGGjwarCz/0oKVh8sTB8nCN6G+rnrR4vUPbkVc+Z1UVAS37QK1AwiGYQ
ZbQqFFne8q4Zj9BAPrkk+23v0p81/f54kS+DP4VX9SfBeIQ98uuUBy9H229TwP7/
ey4Lsvcg785JS7B/0+/wXjfYohdIhCkj9UY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:46 2024 by rpki-client on console-ams.rpki-client.org