Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa
File:                     18a7b006-bca2-30b0-b588-6f3437d24a3c.roa (raw, json)
Hash identifier:          AgLuS9desAzDeyzgk+fE10OQ5SdlZJOOAOFffqhZBjs=
Subject key identifier:   AC:08:B9:48:19:82:A0:5B:33:8E:C6:D9:F0:6F:B1:D4:05:E9:A1:2A
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E20E495F6955B5DAF5140
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        2606:3600:130::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:20:e4:95:f6:95:5b:5d:af:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=3479b9a2-621e-4e02-bc55-ff20781f5e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:98:ea:a1:b6:76:f1:e0:56:08:18:17:a4:
                    fd:81:5b:a1:b3:23:80:d9:7c:70:89:80:88:79:6d:
                    62:dd:fe:ef:71:da:e1:fe:17:08:5d:8b:4a:34:93:
                    04:b2:32:93:5c:ad:ff:ea:2d:9f:ce:25:22:1c:26:
                    fa:96:30:a6:08:e6:b4:97:f9:ab:48:01:8f:11:79:
                    3b:77:b5:a5:d5:84:01:21:b8:50:bb:97:72:29:9f:
                    a7:18:cc:f8:f7:06:bf:f5:a4:3a:93:94:f1:5e:b7:
                    d2:93:14:54:4a:e7:5a:54:37:3d:ca:73:a7:b7:77:
                    f6:05:c4:13:c0:46:fc:59:0d:a1:b1:25:37:9f:07:
                    1b:e7:cb:16:a2:6a:2a:18:af:c0:66:d1:29:0a:51:
                    91:32:4c:ff:1c:56:c3:c1:88:a5:a4:63:2c:2d:e9:
                    d6:62:5d:24:e0:8d:6c:b5:ca:17:bc:c8:6a:e3:ca:
                    9f:d1:c9:64:2e:26:ff:fa:a2:22:ed:9d:bd:4b:ee:
                    39:98:bf:18:02:3f:a1:29:2e:9e:23:f1:2a:e9:4f:
                    4f:22:12:2c:ab:62:9a:05:57:b2:7c:03:fb:63:d0:
                    58:26:2a:2f:ca:49:a2:7b:d0:08:cf:7b:03:91:5c:
                    0c:92:ec:9d:28:77:6b:c2:2b:24:70:27:a2:a0:9b:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:B9:48:19:82:A0:5B:33:8E:C6:D9:F0:6F:B1:D4:05:E9:A1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:130::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:28:95:87:5c:de:45:bb:2a:30:f5:89:5e:6c:38:8f:67:bb:
         62:8c:dd:53:f5:68:b9:fe:ba:79:94:7e:55:dd:38:b7:d0:3c:
         99:19:62:96:ff:7c:25:3e:14:ac:c1:30:39:52:d4:69:dc:5a:
         4e:d1:98:3c:97:89:b5:62:07:c1:fb:7e:1b:72:b4:56:e1:07:
         45:46:05:c7:bd:81:bc:ba:a2:95:fd:03:f3:49:ca:b1:68:f5:
         96:15:fa:70:57:b5:9d:e2:e5:00:c0:ff:b3:c0:a1:cd:12:cd:
         46:2b:7b:ca:fd:49:8e:5e:d4:b4:86:31:bd:4c:38:77:96:fc:
         f4:6e:93:56:75:b6:4b:68:a3:55:91:85:27:ed:3d:25:e5:9d:
         b1:54:2b:3a:8d:9b:b9:35:65:91:ac:9b:1f:50:2e:7a:d9:65:
         ed:8e:10:3d:48:0a:f1:84:4f:ef:12:23:51:f9:b4:3d:22:86:
         31:e4:27:19:6f:14:e1:58:67:02:01:c0:7a:70:50:c7:dd:6f:
         58:00:a5:9b:7e:a8:3e:2f:45:3d:cb:6c:89:75:67:22:08:0c:
         fc:7d:fa:08:58:06:80:1f:b5:3b:14:c7:f8:99:b9:c1:b2:9f:
         09:d8:e3:01:8a:92:12:fb:7b:4c:0f:a2:c1:4f:a4:ee:a0:a8:
         60:0d:df:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWhXiDklfaVW12vUUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
MzQ3OWI5YTItNjIxZS00ZTAyLWJjNTUtZmYyMDc4MWY1ZTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eqY6qG2dvHgVggYF6T9gVuhsyOA2XxwiYCI
eW1i3f7vcdrh/hcIXYtKNJMEsjKTXK3/6i2fziUiHCb6ljCmCOa0l/mrSAGPEXk7
d7Wl1YQBIbhQu5dyKZ+nGMz49wa/9aQ6k5TxXrfSkxRUSudaVDc9ynOnt3f2BcQT
wEb8WQ2hsSU3nwcb58sWomoqGK/AZtEpClGRMkz/HFbDwYilpGMsLenWYl0k4I1s
tcoXvMhq48qf0clkLib/+qIi7Z29S+45mL8YAj+hKS6eI/Eq6U9PIhIsq2KaBVey
fAP7Y9BYJiovykmie9AIz3sDkVwMkuydKHdrwiskcCeioJu7jQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKwIuUgZgqBbM47G2fBvsdQF6aEqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMThhN2IwMDYtYmNhMi0z
MGIwLWI1ODgtNmYzNDM3ZDI0YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK4olYdc3kW7KjD1iV5sOI9nu2KM3VP1aLn+unmUflXdOLfQPJkZ
Ypb/fCU+FKzBMDlS1GncWk7RmDyXibViB8H7fhtytFbhB0VGBce9gby6opX9A/NJ
yrFo9ZYV+nBXtZ3i5QDA/7PAoc0SzUYre8r9SY5e1LSGMb1MOHeW/PRuk1Z1tkto
o1WRhSftPSXlnbFUKzqNm7k1ZZGsmx9QLnrZZe2OED1ICvGET+8SI1H5tD0ihjHk
JxlvFOFYZwIBwHpwUMfdb1gApZt+qD4vRT3LbIl1ZyIIDPx9+ghYBoAftTsUx/iZ
ucGynwnY4wGKkhL7e0wPosFPpO6gqGAN31o=
-----END CERTIFICATE-----
Generated at Wed May 8 22:48:49 2024 by rpki-client on console-ams.rpki-client.org