Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa
File:                     dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa (raw, json)
Hash identifier:          mDGJuzTkQ+jMTHelbeXJ2UysPWIdYaCW7s+09YThDz4=
Subject key identifier:   0D:57:1B:29:9F:55:6F:33:97:A4:72:1F:8D:7D:C2:63:BE:61:51:0A
Certificate issuer:       /CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Certificate serial:       010D0C9F43285844B9C4F5EEEE56A553792E6900
Authority key identifier: F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa
Signing time:             Tue 30 Jan 2024 14:00:30 +0000
ROA not before:           Tue 30 Jan 2024 14:00:30 +0000
ROA not after:            Mon 29 Apr 2024 13:00:30 +0000
asID:                     397142
IP address blocks:        2605:b40:f0c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b9:c4:f5:ee:ee:56:a5:53:79:2e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
        Validity
            Not Before: Jan 30 14:00:30 2024 GMT
            Not After : Apr 29 13:00:30 2024 GMT
        Subject: CN=d261eaa4-7225-4c06-a016-856b26e0c76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:4e:71:c4:c2:39:d2:ba:71:3d:06:20:a3:
                    87:43:4c:f6:61:5b:7d:97:8e:23:20:48:d4:ae:fb:
                    ae:e5:81:86:b2:2a:f7:a5:e2:54:3a:92:7a:91:23:
                    34:88:96:e9:d1:49:9a:b8:cf:b9:a9:9d:2e:d5:75:
                    16:2b:b3:11:e7:cf:a4:20:60:50:c9:05:22:29:c6:
                    bc:0f:1f:60:fc:d0:e0:96:4d:fc:80:07:d7:55:76:
                    0b:99:92:ac:17:8a:da:af:68:8a:91:28:f3:db:61:
                    38:d2:8b:8e:9b:0b:00:a6:81:1b:9d:86:70:37:30:
                    b5:d2:bf:17:39:16:bb:ec:4a:d0:da:f4:2c:7a:e7:
                    4c:a1:21:05:de:78:ad:32:b8:b2:cb:80:ac:58:d5:
                    5e:77:d4:cb:57:aa:f6:61:c9:f5:6b:ad:ea:92:d0:
                    09:6c:c5:da:11:db:13:25:01:6f:7c:d5:19:22:46:
                    f3:ce:2b:99:81:c3:28:ee:81:55:d2:d1:2c:2e:b0:
                    a2:1d:04:4a:c1:35:55:17:55:20:4e:bb:ae:4a:72:
                    30:41:82:23:3e:b3:0a:f1:87:aa:11:26:1f:66:60:
                    c1:e5:38:7f:26:28:a4:96:cf:7c:a5:f9:71:db:a7:
                    d6:27:a3:68:08:79:dc:93:aa:94:bb:ee:a0:f7:e8:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:1B:29:9F:55:6F:33:97:A4:72:1F:8D:7D:C2:63:BE:61:51:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/dfd3ee90-cddf-3aba-a97f-09d40278ec5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl

            X509v3 Authority Key Identifier:
                keyid:F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b40:f0c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:30:11:2f:df:21:03:97:90:15:db:80:b7:9a:87:a6:a9:7d:
         34:0e:b3:31:3c:70:3e:98:bc:fe:df:b8:79:0b:e0:e6:6f:50:
         46:bf:f0:04:c2:d1:c7:b7:a0:35:f9:19:7e:d7:6e:e6:75:e8:
         4a:f5:04:eb:69:e0:69:93:5e:63:68:b4:75:3c:e3:30:c5:f3:
         38:f0:44:33:dc:77:7d:da:c0:a0:1c:45:c4:5d:a9:43:1a:75:
         9d:d1:57:ae:39:0a:87:0b:8b:18:97:9e:2f:2c:ea:00:bb:9c:
         04:de:00:ea:d9:15:b9:04:f7:b3:db:1e:2f:16:f8:06:d1:a2:
         0b:e9:0e:b6:c2:2c:3d:3d:a3:3d:0d:7a:80:26:24:be:76:a9:
         44:e6:a4:7d:73:6b:19:7f:3d:dc:0e:ba:2c:fd:b2:48:11:4a:
         2d:d5:34:7e:dd:81:a2:85:4a:db:02:78:af:07:ed:a7:43:e3:
         1a:f4:fb:8f:be:9f:49:66:72:e6:fd:e8:fb:f4:6a:06:d0:b8:
         0e:19:79:e6:21:d5:02:d6:82:65:1e:93:59:29:50:a2:47:47:
         ec:e2:2c:bd:e5:3c:10:ef:8f:72:78:14:82:25:56:95:c9:b9:
         8e:2a:27:bb:6b:75:36:3c:b8:db:16:10:de:46:c1:3f:1e:f4:
         36:2d:20:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWES5xPXu7lalU3kuaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI0YTQwZjYtMjNiYS00YWRmLWEyYTUtNDJlMmZmZjQy
YzA4MB4XDTI0MDEzMDE0MDAzMFoXDTI0MDQyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZDI2MWVhYTQtNzIyNS00YzA2LWEwMTYtODU2YjI2ZTBjNzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6NOccTCOdK6cT0GIKOHQ0z2YVt9l44jIEjU
rvuu5YGGsir3peJUOpJ6kSM0iJbp0UmauM+5qZ0u1XUWK7MR58+kIGBQyQUiKca8
Dx9g/NDglk38gAfXVXYLmZKsF4rar2iKkSjz22E40ouOmwsApoEbnYZwNzC10r8X
ORa77ErQ2vQseudMoSEF3nitMriyy4CsWNVed9TLV6r2Ycn1a63qktAJbMXaEdsT
JQFvfNUZIkbzziuZgcMo7oFV0tEsLrCiHQRKwTVVF1UgTruuSnIwQYIjPrMK8Yeq
ESYfZmDB5Th/Jiikls98pflx26fWJ6NoCHnck6qUu+6g9+ivIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA1XGymfVW8zl6RyH419wmO+YVEKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjRh
NDBmNi0yM2JhLTRhZGYtYTJhNS00MmUyZmZmNDJjMDgvZGZkM2VlOTAtY2RkZi0z
YWJhLWE5N2YtMDlkNDAyNzhlYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzI0YTQwZjYtMjNiYS00YWRmLWEy
YTUtNDJlMmZmZjQyYzA4L2MyNGE0MGY2LTIzYmEtNGFkZi1hMmE1LTQyZTJmZmY0
MmMwOC5jcmwwHwYDVR0jBBgwFoAU+OS4V02pk1smacY6Sg/HueNR+QwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjRhNDBmNi0yM2JhLTRhZGYtYTJhNS00MmUy
ZmZmNDJjMDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgULQPDA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQwES/fIQOXkBXbgLeah6apfTQOszE8cD6YvP7fuHkL4OZvUEa/
8ATC0ce3oDX5GX7XbuZ16Er1BOtp4GmTXmNotHU84zDF8zjwRDPcd33awKAcRcRd
qUMadZ3RV645CocLixiXni8s6gC7nATeAOrZFbkE97PbHi8W+AbRogvpDrbCLD09
oz0NeoAmJL52qUTmpH1zaxl/PdwOuiz9skgRSi3VNH7dgaKFStsCeK8H7adD4xr0
+4++n0lmcub96Pv0agbQuA4ZeeYh1QLWgmUek1kpUKJHR+ziLL3lPBDvj3J4FIIl
VpXJuY4qJ7trdTY8uNsWEN5GwT8e9DYtINo=
-----END CERTIFICATE-----
Generated at Fri Mar 29 07:34:32 2024 by rpki-client on console-fra.rpki-client.org