Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa
File:                     1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa (raw, json)
Hash identifier:          edXWrHSPOx1tLeiRj+x0MpxyEXi1rKmwFks8VqBGbwA=
Subject key identifier:   9E:9B:A0:7F:5C:38:BA:26:FD:18:E7:78:BA:F9:56:24:C4:27:CA:1F
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F43285844FB600A1F4FE8A53F284BFAC0
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     33211
IP address blocks:        2606:ca40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:0a:1f:4f:e8:a5:3f:28:4b:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=389a1745-c8c8-4ada-aa1c-5c1c54e21b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:c6:5c:86:bc:d6:cd:49:19:87:99:0e:bd:
                    a3:d3:a0:2e:b6:f0:81:67:c6:24:5a:88:1a:26:ac:
                    83:44:16:ab:f0:cc:d2:8c:e5:e2:a5:a4:f1:31:b4:
                    da:e8:a8:64:e9:c7:a1:89:5c:ad:96:3e:78:9c:cb:
                    40:5d:d6:22:e6:61:76:ab:5d:f3:d8:c6:6f:28:62:
                    77:71:41:78:12:1d:b9:c3:ad:35:3b:a5:ba:13:09:
                    c5:60:54:77:e1:54:43:03:f7:24:87:59:06:06:dc:
                    3b:c5:be:ef:3f:89:2b:0f:ac:bc:2c:26:cb:c2:cc:
                    6a:b1:72:c9:98:0f:7b:6a:9d:d1:93:19:48:d3:5f:
                    49:1a:b7:6b:30:0e:42:3f:2a:52:6d:23:79:cf:ee:
                    22:c1:86:53:43:cd:e3:56:39:15:38:36:f5:52:37:
                    6a:5e:10:7d:73:ca:77:19:f4:cf:dc:02:d0:0e:05:
                    35:c4:07:09:91:81:8e:8d:6a:70:aa:fa:b7:bb:07:
                    4c:54:8b:60:a5:15:7d:de:90:f0:ff:40:6c:e0:86:
                    62:17:8e:ae:a6:c2:8a:fa:82:58:26:c4:5a:71:b2:
                    33:ea:51:a8:54:25:fe:4b:5a:a8:cb:b3:b3:2f:2e:
                    6d:86:e6:d0:e7:52:f5:30:5d:3f:ea:0c:53:56:fb:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:A0:7F:5C:38:BA:26:FD:18:E7:78:BA:F9:56:24:C4:27:CA:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ca40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ec:bf:15:3d:ff:64:75:85:36:81:bd:26:3f:0a:61:c4:4f:
         42:b8:70:18:c7:51:bc:49:68:27:4d:d4:2c:ab:32:35:c1:e0:
         04:06:1d:5c:02:ff:1c:87:18:97:88:36:11:30:0b:26:87:62:
         76:89:5a:65:29:91:01:24:38:34:02:d8:84:e6:22:2b:18:9e:
         bf:80:f5:16:f9:61:a6:b5:9a:3d:ef:2a:ce:62:71:34:a9:61:
         18:c0:5d:2b:45:82:a2:e7:59:0a:3c:df:85:4b:97:18:14:f9:
         9c:cc:d8:a6:05:1a:f2:45:ab:59:66:0b:b2:fd:d1:7c:ff:e3:
         70:b7:7d:8f:a9:ff:37:84:76:ea:58:17:a7:57:08:49:77:ef:
         67:10:79:ce:ed:4c:f4:42:71:02:e1:de:44:38:95:13:98:05:
         c9:ba:06:bd:9d:bb:72:9d:b0:e1:18:e4:36:7d:69:ef:d9:95:
         83:7d:3f:95:bc:1c:32:e2:56:96:a1:e2:ad:df:86:04:a3:98:
         96:c6:a2:90:77:0d:4e:e9:10:19:f1:ad:2c:48:ce:45:da:49:
         64:71:0e:03:d1:bd:47:93:24:23:29:d3:34:f1:29:27:44:aa:
         b8:f6:ba:66:6d:cd:e8:16:3c:64:5d:b4:da:14:c1:83:7d:54:
         03:85:91:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWET7YAofT+ilPyhL+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0
ZDZlMB4XDTI0MDIyMzAyMDAyNloXDTI0MDUyMzAxMDAyNlowLzEtMCsGA1UEAxMk
Mzg5YTE3NDUtYzhjOC00YWRhLWFhMWMtNWMxYzU0ZTIxYjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxLGXIa81s1JGYeZDr2j06AutvCBZ8YkWoga
JqyDRBar8MzSjOXipaTxMbTa6Khk6cehiVytlj54nMtAXdYi5mF2q13z2MZvKGJ3
cUF4Eh25w601O6W6EwnFYFR34VRDA/ckh1kGBtw7xb7vP4krD6y8LCbLwsxqsXLJ
mA97ap3RkxlI019JGrdrMA5CPypSbSN5z+4iwYZTQ83jVjkVODb1UjdqXhB9c8p3
GfTP3ALQDgU1xAcJkYGOjWpwqvq3uwdMVItgpRV93pDw/0Bs4IZiF46upsKK+oJY
JsRacbIz6lGoVCX+S1qoy7OzLy5thubQ51L1MF0/6gxTVvuqPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ6boH9cOLom/RjneLr5ViTEJ8ofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz
MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvMTg0OWJjNmQtZGEyYy0z
NzdmLTliZDQtZmY2ZGM2Mzg4MzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz
MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl
NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy
MDJhZTRkNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbKQAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFvsvxU9/2R1hTaBvSY/CmHET0K4cBjHUbxJaCdN1CyrMjXB4AQG
HVwC/xyHGJeINhEwCyaHYnaJWmUpkQEkODQC2ITmIisYnr+A9Rb5Yaa1mj3vKs5i
cTSpYRjAXStFgqLnWQo834VLlxgU+ZzM2KYFGvJFq1lmC7L90Xz/43C3fY+p/zeE
dupYF6dXCEl372cQec7tTPRCcQLh3kQ4lROYBcm6Br2du3KdsOEY5DZ9ae/ZlYN9
P5W8HDLiVpah4q3fhgSjmJbGopB3DU7pEBnxrSxIzkXaSWRxDgPRvUeTJCMp0zTx
KSdEqrj2umZtzegWPGRdtNoUwYN9VAOFkQo=
-----END CERTIFICATE-----
Generated at Thu May 9 18:15:27 2024 by rpki-client on console-fra.rpki-client.org