Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa
File:                     ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa (raw, json)
Hash identifier:          qUiDEdvxajgndehIQ5gMlD/qOucq7LyZTw0STJ4YwGY=
Subject key identifier:   41:1F:10:BF:48:E9:AA:FF:E7:6C:69:0E:48:F7:1B:0F:52:58:9D:41
Certificate issuer:       /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Certificate serial:       010D0C9F432858477230E42A81356B0DA7CE5580
Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     7311
IP address blocks:        2605:8100::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e4:2a:81:35:6b:0d:a7:ce:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=b1ee58ec-5db8-41f5-82ae-a628bc4effff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:48:9e:f0:d4:fc:7d:29:f4:9a:17:78:be:cc:
                    f6:8a:4c:73:48:40:df:cc:52:ad:83:a3:7f:a4:bf:
                    ca:4f:97:b3:91:1e:69:a4:dd:2d:fb:72:61:ec:a5:
                    fe:8d:0d:3c:26:c9:25:93:66:00:69:e2:aa:c8:72:
                    00:08:86:e3:7a:6f:6c:ab:22:9a:a9:5c:be:d5:c0:
                    9a:a3:3d:ab:e1:6d:e1:d3:2c:b1:12:09:55:ff:d9:
                    fb:d9:2e:3a:b7:b0:df:52:49:ee:1d:20:60:df:2d:
                    1b:f2:7e:df:e5:2f:6c:62:cb:03:c4:bb:a2:1c:95:
                    43:45:70:c7:ea:cf:1d:4b:25:1a:27:24:44:86:a3:
                    1c:17:43:0f:2b:ba:ee:ab:7c:28:e2:f6:dc:da:7a:
                    ea:c0:7a:c2:43:1d:0a:18:cd:f1:a9:ba:9c:74:49:
                    96:ab:dc:88:ba:88:3f:99:b3:31:e1:fe:22:98:a1:
                    1d:f7:b8:9e:73:03:fc:99:b4:3e:1d:30:62:a5:91:
                    7c:5a:9d:7e:5c:67:f8:94:7b:37:63:e7:45:7a:92:
                    4f:f8:a9:7b:82:2d:00:fb:67:9e:bf:d9:a0:cc:0f:
                    32:f4:49:a1:a6:3d:1d:78:1b:43:7f:b2:be:d9:86:
                    ee:94:a6:cd:ea:a4:5f:f9:ef:bc:a4:69:c7:43:00:
                    9c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:10:BF:48:E9:AA:FF:E7:6C:69:0E:48:F7:1B:0F:52:58:9D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl

            X509v3 Authority Key Identifier:
                keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:91:69:58:7e:22:b0:ac:31:1e:1d:20:53:62:e6:5e:12:65:
         a8:d2:64:7d:fb:54:cd:1e:bf:66:6c:b0:50:50:8f:6c:ea:c6:
         84:52:44:3c:ca:db:e6:8c:66:cd:83:63:69:4a:58:a5:56:60:
         55:04:d8:43:a9:e5:b0:f7:73:ed:d7:33:9a:0d:21:ec:38:ff:
         9f:9f:32:ee:84:82:e4:25:45:34:07:2c:65:f0:97:49:83:fc:
         56:70:62:cd:53:eb:27:e4:c2:0d:c6:90:70:b9:e7:cc:50:46:
         63:01:0f:b2:7d:25:d8:7d:f7:3f:51:5c:2c:06:d9:37:2d:20:
         af:df:91:83:14:fa:01:8e:79:c7:6b:17:b7:56:ac:6c:04:01:
         1f:46:8a:c3:a9:3c:0a:64:ef:35:b4:4c:19:c2:61:f6:95:c3:
         01:e3:7f:83:f4:ea:94:a1:ef:9e:46:a2:c3:7e:f4:ce:61:af:
         a8:a7:7e:9d:05:c2:5e:0b:58:7e:3f:7f:25:45:aa:26:b2:fb:
         4c:6c:88:b8:ae:3f:8e:f9:b0:35:a5:52:d0:97:d9:5f:4b:f9:
         41:ca:78:87:fc:3d:a0:d2:03:b8:7c:92:33:2a:c1:9d:f4:63:
         ab:fe:aa:1d:0f:1f:15:2e:44:73:59:84:bf:98:79:c4:42:45:
         b2:48:10:8f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdyMOQqgTVrDafOVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5
NTBlMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
YjFlZTU4ZWMtNWRiOC00MWY1LTgyYWUtYTYyOGJjNGVmZmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEie8NT8fSn0mhd4vsz2ikxzSEDfzFKtg6N/
pL/KT5ezkR5ppN0t+3Jh7KX+jQ08Jsklk2YAaeKqyHIACIbjem9sqyKaqVy+1cCa
oz2r4W3h0yyxEglV/9n72S46t7DfUknuHSBg3y0b8n7f5S9sYssDxLuiHJVDRXDH
6s8dSyUaJyREhqMcF0MPK7ruq3wo4vbc2nrqwHrCQx0KGM3xqbqcdEmWq9yIuog/
mbMx4f4imKEd97iecwP8mbQ+HTBipZF8Wp1+XGf4lHs3Y+dFepJP+Kl7gi0A+2ee
v9mgzA8y9Emhpj0deBtDf7K+2YbulKbN6qRf+e+8pGnHQwCcewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEEfEL9I6ar/52xpDkj3Gw9SWJ1BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj
ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZWU4ZjA5ZmUtMWI3Yi0z
MTA0LWIyZjYtZWExODM0NmY2ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw
MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz
OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1
YjNlMzk1MGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWBADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBDkWlYfiKwrDEeHSBTYuZeEmWo0mR9+1TNHr9mbLBQUI9s6saEUkQ8
ytvmjGbNg2NpSlilVmBVBNhDqeWw93Pt1zOaDSHsOP+fnzLuhILkJUU0Byxl8JdJ
g/xWcGLNU+sn5MINxpBwuefMUEZjAQ+yfSXYffc/UVwsBtk3LSCv35GDFPoBjnnH
axe3VqxsBAEfRorDqTwKZO81tEwZwmH2lcMB43+D9OqUoe+eRqLDfvTOYa+op36d
BcJeC1h+P38lRaomsvtMbIi4rj+O+bA1pVLQl9lfS/lByniH/D2g0gO4fJIzKsGd
9GOr/qodDx8VLkRzWYS/mHnEQkWySBCP
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:27 2024 by rpki-client on console-fra.rpki-client.org