Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa
File:                     368846e3-400c-37dc-a43c-72e0ba5ecb98.roa (raw, json)
Hash identifier:          tSWx689DGc7MhKMa7T14X8EpTLxtXRxexKgYnsaaa7Y=
Subject key identifier:   AF:0D:CD:40:86:FC:0E:37:2B:1B:EE:6B:B6:5B:C5:55:7D:64:4A:41
Certificate issuer:       /CN=268a5abb-c59d-4272-ae23-caa16eb3b4d2
Certificate serial:       010D0C9F43285847D999F6E7F335F3B1E5A58080
Authority key identifier: 5B:8F:4E:BB:E0:A4:40:79:62:87:93:BD:35:44:F8:57:64:93:27:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     398317
IP address blocks:        2607:5b40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f6:e7:f3:35:f3:b1:e5:a5:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268a5abb-c59d-4272-ae23-caa16eb3b4d2
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=32517a2a-56df-4b16-870d-3eac2571c1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:70:0e:dd:13:1d:5b:eb:e4:6f:7c:fc:73:03:
                    7a:1c:03:ac:a4:95:3c:09:2e:a4:0e:5e:8a:af:fa:
                    15:ad:8c:48:70:10:8b:fe:ad:8f:32:c2:35:23:99:
                    45:66:b5:ee:8e:e3:4e:83:38:68:01:a7:91:9c:53:
                    12:de:38:dd:ce:ce:f3:a0:ed:3d:f5:a7:2a:1c:f6:
                    9e:66:00:80:17:1e:03:09:07:0c:51:4c:c7:ce:f8:
                    80:f8:b2:c3:9b:4e:b1:ca:29:bc:f6:f7:e3:65:18:
                    71:7a:fe:b0:61:74:f3:f2:f5:5d:aa:8b:ca:1c:c5:
                    bf:c2:0a:b3:d7:e8:b5:fb:cc:60:d3:df:25:00:68:
                    c1:e8:b6:f5:fc:05:b5:8b:75:21:8f:17:e3:be:75:
                    be:7e:d1:ec:ef:c5:dd:8c:28:df:e8:2e:fb:29:1d:
                    70:9d:38:96:30:88:fb:32:3a:7e:7c:f8:9f:f6:71:
                    b0:55:a3:70:8f:c0:e6:45:78:1b:c4:90:e5:a8:b5:
                    14:8d:0c:27:b2:46:97:46:d2:77:8f:03:a6:51:c8:
                    31:0c:b1:06:66:35:4c:65:71:bd:b3:50:f5:c6:8b:
                    8d:0a:8d:e4:01:6e:6d:77:b0:61:66:fb:0d:25:3d:
                    bf:94:9c:b2:9e:34:9f:5c:34:fd:1b:31:c7:ce:4a:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0D:CD:40:86:FC:0E:37:2B:1B:EE:6B:B6:5B:C5:55:7D:64:4A:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.crl

            X509v3 Authority Key Identifier:
                keyid:5B:8F:4E:BB:E0:A4:40:79:62:87:93:BD:35:44:F8:57:64:93:27:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b6:7e:b8:75:af:9e:22:ad:37:12:c9:ff:e5:b1:51:07:66:
         ac:a6:cb:d4:3b:64:92:bc:d5:5e:66:20:92:90:a7:bd:e8:d3:
         77:3f:1d:f4:34:3d:dd:30:bd:33:6b:e3:87:8b:e0:89:26:34:
         16:38:c6:16:40:e7:91:ac:9a:3b:9b:93:a9:19:9d:c0:5d:98:
         1d:79:30:d4:61:3e:2a:57:a9:d4:4d:f1:cb:fd:11:82:14:d1:
         42:0c:b5:a6:cc:ab:73:96:c9:c8:ec:84:af:63:32:3c:c3:f5:
         93:49:a3:01:22:90:5d:4c:c1:7b:69:42:85:7f:fc:fa:04:3b:
         c0:07:70:bf:5a:7e:0f:1c:b6:8e:60:5d:29:ea:ab:f8:70:95:
         85:4a:f6:bf:65:bc:1b:df:37:59:0a:58:3d:21:e1:fb:ad:c1:
         ba:d6:96:09:e3:da:1a:46:38:9a:ff:75:1d:e6:70:2d:d7:8d:
         75:0e:96:b6:c5:fe:32:a4:b9:c9:89:93:1a:1e:d3:9b:ab:bb:
         34:e3:8b:f0:de:c5:ce:eb:bc:b2:24:8f:ee:f0:e0:95:92:a0:
         af:87:c5:48:e1:dc:54:2a:9e:96:70:c8:06:8c:b6:f9:73:c8:
         a8:4b:8c:b0:ba:4b:56:aa:6d:7a:30:40:ad:22:a2:22:ff:8b:
         9b:22:d7:32
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfZmfbn8zXzseWlgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjY4YTVhYmItYzU5ZC00MjcyLWFlMjMtY2FhMTZlYjNi
NGQyMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
MzI1MTdhMmEtNTZkZi00YjE2LTg3MGQtM2VhYzI1NzFjMWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnAO3RMdW+vkb3z8cwN6HAOspJU8CS6kDl6K
r/oVrYxIcBCL/q2PMsI1I5lFZrXujuNOgzhoAaeRnFMS3jjdzs7zoO099acqHPae
ZgCAFx4DCQcMUUzHzviA+LLDm06xyim89vfjZRhxev6wYXTz8vVdqovKHMW/wgqz
1+i1+8xg098lAGjB6Lb1/AW1i3UhjxfjvnW+ftHs78XdjCjf6C77KR1wnTiWMIj7
Mjp+fPif9nGwVaNwj8DmRXgbxJDlqLUUjQwnskaXRtJ3jwOmUcgxDLEGZjVMZXG9
s1D1xouNCo3kAW5td7BhZvsNJT2/lJyynjSfXDT9GzHHzkpvIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK8NzUCG/A43Kxvua7ZbxVV9ZEpBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNjhh
NWFiYi1jNTlkLTQyNzItYWUyMy1jYWExNmViM2I0ZDIvMzY4ODQ2ZTMtNDAwYy0z
N2RjLWE0M2MtNzJlMGJhNWVjYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjY4YTVhYmItYzU5ZC00MjcyLWFl
MjMtY2FhMTZlYjNiNGQyLzI2OGE1YWJiLWM1OWQtNDI3Mi1hZTIzLWNhYTE2ZWIz
YjRkMi5jcmwwHwYDVR0jBBgwFoAUW49Ou+CkQHlih5O9NUT4V2STJyIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNjhhNWFiYi1jNTlkLTQyNzItYWUyMy1jYWEx
NmViM2I0ZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdbQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBAtn64da+eIq03Esn/5bFRB2aspsvUO2SSvNVeZiCSkKe96NN3Px30
ND3dML0za+OHi+CJJjQWOMYWQOeRrJo7m5OpGZ3AXZgdeTDUYT4qV6nUTfHL/RGC
FNFCDLWmzKtzlsnI7ISvYzI8w/WTSaMBIpBdTMF7aUKFf/z6BDvAB3C/Wn4PHLaO
YF0p6qv4cJWFSva/Zbwb3zdZClg9IeH7rcG61pYJ49oaRjia/3Ud5nAt1411Dpa2
xf4ypLnJiZMaHtObq7s044vw3sXO67yyJI/u8OCVkqCvh8VI4dxUKp6WcMgGjLb5
c8ioS4ywuktWqm16MECtIqIi/4ubItcy
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:12 2024 by rpki-client on console-ams.rpki-client.org