Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa
File:                     3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa (raw, json)
Hash identifier:          BC9X0B0zseIY6apU+07k4cBEpN3KNy7BehLHZcW72nI=
Subject key identifier:   5F:E7:17:4E:07:2B:A4:BF:D1:3E:70:6D:18:C8:57:F6:47:EA:BB:37
Certificate issuer:       /CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8
Certificate serial:       010D0C9F43285845C5A8E961EFD8A7DC69B89120
Authority key identifier: 0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     63178
IP address blocks:        2607:6840::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e9:61:ef:d8:a7:dc:69:b8:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=33b04b47-2d6e-4732-9646-d7af1357f3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:cc:39:91:77:dc:d7:56:c2:57:72:70:d1:
                    58:02:fa:a2:e9:ce:5f:53:e6:0f:44:93:e5:f1:17:
                    3e:98:42:6e:22:9d:70:d7:ae:ab:02:e0:34:71:23:
                    9d:a1:18:a1:2f:7b:4d:4b:9d:0c:52:c8:1a:e0:af:
                    05:e3:e9:51:6d:af:1c:27:5a:e5:30:1f:8a:d6:95:
                    ed:96:4a:59:9d:ce:2f:72:9f:fc:95:a2:ca:dc:dd:
                    21:da:95:f3:73:0e:d8:61:f0:c5:5a:9a:0b:3b:a8:
                    22:41:d2:a9:59:7a:e1:4a:f7:e7:20:62:90:80:2f:
                    47:18:87:b0:f7:fa:35:76:c5:74:a9:a1:4e:47:89:
                    a4:4d:2e:1b:ce:14:89:e5:89:e5:22:3c:b1:25:d0:
                    42:93:d3:82:c8:6f:fc:a9:89:a9:e5:c5:57:0d:1f:
                    96:42:57:a4:a6:d1:87:17:08:0a:e6:c1:9a:13:eb:
                    df:0b:c6:18:1c:4e:66:75:48:c1:f5:66:71:53:5b:
                    a0:16:3b:69:c9:d0:46:e0:dc:af:16:08:29:8b:f7:
                    6c:82:f6:0f:d4:7b:1a:b0:84:36:21:49:23:14:10:
                    fc:9b:6d:15:a6:99:07:b5:10:9e:d8:f7:19:64:69:
                    be:8b:5b:60:77:14:4a:72:be:94:80:c8:36:0a:1d:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E7:17:4E:07:2B:A4:BF:D1:3E:70:6D:18:C8:57:F6:47:EA:BB:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:7e:38:51:00:0c:11:03:af:00:cc:a7:09:44:66:d5:10:
         f0:f7:05:81:00:c5:4b:80:7a:65:58:0f:7e:1a:cb:01:ce:f4:
         af:2d:20:cf:83:a3:8a:07:fb:8e:5c:3e:e7:86:c0:21:da:60:
         74:d9:30:49:8e:96:e7:f6:e3:d3:64:18:68:51:6f:99:d8:34:
         f5:06:d7:14:f4:34:d7:6c:4d:20:2c:14:c4:ec:f5:60:ea:fe:
         ba:fd:ed:83:63:9d:c6:6e:4e:19:a2:62:a7:73:c7:d7:10:84:
         07:5c:76:a2:92:39:2b:85:95:fa:90:1f:ea:de:dd:8c:4a:2d:
         d1:4c:b1:a9:4c:2a:04:ff:cd:35:15:4c:60:39:be:1e:8c:ea:
         f0:42:ed:3a:ec:83:07:68:8c:6b:51:47:a4:d6:4c:0f:d4:23:
         c8:96:1e:dd:90:40:27:e5:4a:9e:0e:2c:5a:64:50:dc:ea:b4:
         38:02:e2:d3:91:ca:8a:07:b6:47:fb:32:03:3b:01:07:a9:cf:
         50:fa:f1:24:8a:e1:84:2d:fa:a5:47:b8:2e:6f:99:69:8d:81:
         7e:ac:68:72:19:2f:33:e4:26:00:e5:06:db:01:31:24:99:e8:
         dd:62:c9:df:b4:97:66:6f:3d:50:18:50:00:d7:d0:a3:25:53:
         a9:02:06:cb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEXFqOlh79in3Gm4kSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmUzZTY2NDYtN2M5OS00OWMwLTljYjAtNTRiOGU0NTc4
OGI4MB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk
MzNiMDRiNDctMmQ2ZS00NzMyLTk2NDYtZDdhZjEzNTdmM2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qLMOZF33NdWwldycNFYAvqi6c5fU+YPRJPl
8Rc+mEJuIp1w166rAuA0cSOdoRihL3tNS50MUsga4K8F4+lRba8cJ1rlMB+K1pXt
lkpZnc4vcp/8laLK3N0h2pXzcw7YYfDFWpoLO6giQdKpWXrhSvfnIGKQgC9HGIew
9/o1dsV0qaFOR4mkTS4bzhSJ5YnlIjyxJdBCk9OCyG/8qYmp5cVXDR+WQlekptGH
FwgK5sGaE+vfC8YYHE5mdUjB9WZxU1ugFjtpydBG4NyvFggpi/dsgvYP1HsasIQ2
IUkjFBD8m20VppkHtRCe2PcZZGm+i1tgdxRKcr6UgMg2Ch0eswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF/nF04HK6S/0T5wbRjIV/ZH6rs3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNl
NjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4ZTQ1Nzg4YjgvM2IzYWY3ZTItMTFjMy0z
ZTEzLTkyY2QtMTljMmQyOTFiNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmUzZTY2NDYtN2M5OS00OWMwLTlj
YjAtNTRiOGU0NTc4OGI4LzJlM2U2NjQ2LTdjOTktNDljMC05Y2IwLTU0YjhlNDU3
ODhiOC5jcmwwHwYDVR0jBBgwFoAUDMaPYFMxrylXqe3x1gkGXUdmhO0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNlNjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4
ZTQ1Nzg4YjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdoQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBbzX44UQAMEQOvAMynCURm1RDw9wWBAMVLgHplWA9+GssBzvSvLSDP
g6OKB/uOXD7nhsAh2mB02TBJjpbn9uPTZBhoUW+Z2DT1BtcU9DTXbE0gLBTE7PVg
6v66/e2DY53Gbk4ZomKnc8fXEIQHXHaikjkrhZX6kB/q3t2MSi3RTLGpTCoE/801
FUxgOb4ejOrwQu067IMHaIxrUUek1kwP1CPIlh7dkEAn5UqeDixaZFDc6rQ4AuLT
kcqKB7ZH+zIDOwEHqc9Q+vEkiuGELfqlR7gub5lpjYF+rGhyGS8z5CYA5QbbATEk
mejdYsnftJdmbz1QGFAA19CjJVOpAgbL
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:02 2024 by rpki-client on console-ams.rpki-client.org