Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/87bf70e3-bfff-33a2-9195-6e22ad3c19d7.roa
File:                     87bf70e3-bfff-33a2-9195-6e22ad3c19d7.roa (raw, json)
Hash identifier:          orrao/PRDa2e5TIhyB80gepCaltlkes8dKpoJXSPLoo=
Subject key identifier:   3B:BA:14:40:8B:45:11:F3:65:89:E2:A0:CC:21:66:55:78:BD:5F:F2
Certificate issuer:       /CN=6380adc9-f3a5-422f-ae25-f869a9ad1efd
Certificate serial:       010D0C9F4328584523DAFD4F22577A00DCBB88C0
Authority key identifier: 32:CF:E8:38:32:5F:B3:AB:B2:30:B4:CB:81:94:05:31:22:08:04:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/87bf70e3-bfff-33a2-9195-6e22ad3c19d7.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     20360
IP address blocks:        2607:5440::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/6380adc9-f3a5-422f-ae25-f869a9ad1efd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/6380adc9-f3a5-422f-ae25-f869a9ad1efd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fd:4f:22:57:7a:00:dc:bb:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6380adc9-f3a5-422f-ae25-f869a9ad1efd
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=ed293c11-2ac9-4171-b944-e8cb0c495ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:d9:89:12:81:c4:60:9a:be:8a:a3:73:57:
                    e6:d5:e0:e7:cc:55:da:a4:8f:91:3a:3a:19:70:e0:
                    61:10:d5:0e:a5:4b:b2:9d:79:57:57:f3:bb:e8:ba:
                    1d:f9:d0:91:b4:77:72:ae:d3:d5:a4:ca:74:e5:93:
                    cb:bf:a2:6a:ae:9c:1d:b3:d9:86:c2:8a:e1:53:bc:
                    ed:7d:d5:21:6f:54:1e:c6:41:4a:e1:5a:bf:a6:a4:
                    0e:e3:a2:ca:2f:a3:bb:6b:81:18:4f:f7:e7:9b:c1:
                    8c:6a:35:38:ae:5f:e5:1a:df:8a:56:44:97:c1:26:
                    1e:57:6b:75:30:62:ef:f8:af:01:c7:63:bd:2b:f4:
                    7a:1c:fa:62:35:22:ba:bb:2c:68:9b:c1:84:86:7e:
                    9b:80:af:bb:8e:9f:c8:3d:d5:60:19:26:59:4b:15:
                    67:b7:50:af:f6:bd:c9:0b:9a:67:47:e6:ac:c4:ca:
                    69:f8:81:79:99:db:32:c8:56:67:28:54:04:13:7f:
                    65:4a:65:2b:e8:8e:17:1b:07:33:6f:06:a0:a8:e7:
                    10:15:eb:79:98:07:da:85:61:01:1a:54:89:82:11:
                    2a:34:b5:5b:cb:9e:ec:d2:70:76:85:63:9b:c1:ed:
                    0b:b6:7a:41:03:c3:26:8c:14:61:9f:ca:c2:4f:b2:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:14:40:8B:45:11:F3:65:89:E2:A0:CC:21:66:55:78:BD:5F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/87bf70e3-bfff-33a2-9195-6e22ad3c19d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd/6380adc9-f3a5-422f-ae25-f869a9ad1efd.crl

            X509v3 Authority Key Identifier:
                keyid:32:CF:E8:38:32:5F:B3:AB:B2:30:B4:CB:81:94:05:31:22:08:04:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6380adc9-f3a5-422f-ae25-f869a9ad1efd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:3b:b2:cf:07:1b:34:d9:91:ae:df:82:4b:0e:b5:47:ff:5d:
         c2:f1:fb:b5:b2:a0:37:51:c4:88:c6:dc:5f:e9:d3:41:53:5e:
         ab:cc:26:6f:de:42:ed:2d:ff:b4:30:cc:c9:40:4d:81:71:f7:
         1f:cb:6d:01:76:a7:68:f2:5b:1e:5a:4b:d3:c3:19:33:d2:d0:
         ad:68:b1:0f:48:ce:f7:ee:f8:df:40:92:e1:12:ec:09:e3:c1:
         89:41:86:e2:a4:2a:2b:4d:31:7d:51:9e:2f:17:fd:6c:83:8c:
         b5:7a:01:ea:b8:9c:34:a0:d8:98:c6:33:0b:02:09:c4:17:27:
         1d:8c:90:4e:f0:bb:bb:73:d7:44:f5:58:45:01:13:92:4c:c1:
         1f:07:39:78:24:0b:d3:67:43:90:30:21:fd:7f:d1:24:d8:17:
         f7:6f:8e:84:05:fe:10:01:2a:cb:cb:a4:8e:0d:51:63:1d:e1:
         ab:cf:73:2e:a0:9e:35:dd:02:67:75:1f:aa:6b:0b:fd:b3:50:
         d5:ae:82:5c:27:a8:a8:cf:23:23:b4:5c:c5:d6:7c:1d:2b:52:
         d6:9f:ef:7f:a5:12:e2:6b:0f:8c:a5:1b:bd:37:c3:ff:00:1d:
         cb:9a:be:9a:1c:e3:e1:c0:5b:09:7e:cf:5c:ff:e5:09:e5:33:
         99:63:89:89
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUj2v1PIld6ANy7iMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MGFkYzktZjNhNS00MjJmLWFlMjUtZjg2OWE5YWQx
ZWZkMB4XDTI0MDMwODE0MDAzMFoXDTI0MDYwNjEzMDAzMFowLzEtMCsGA1UEAxMk
ZWQyOTNjMTEtMmFjOS00MTcxLWI5NDQtZThjYjBjNDk1Y2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2DZiRKBxGCavoqjc1fm1eDnzFXapI+ROjoZ
cOBhENUOpUuynXlXV/O76Lod+dCRtHdyrtPVpMp05ZPLv6Jqrpwds9mGworhU7zt
fdUhb1QexkFK4Vq/pqQO46LKL6O7a4EYT/fnm8GMajU4rl/lGt+KVkSXwSYeV2t1
MGLv+K8Bx2O9K/R6HPpiNSK6uyxom8GEhn6bgK+7jp/IPdVgGSZZSxVnt1Cv9r3J
C5pnR+asxMpp+IF5mdsyyFZnKFQEE39lSmUr6I4XGwczbwagqOcQFet5mAfahWEB
GlSJghEqNLVby57s0nB2hWObwe0LtnpBA8MmjBRhn8rCT7KD+wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDu6FECLRRHzZYnioMwhZlV4vV/yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Mzgw
YWRjOS1mM2E1LTQyMmYtYWUyNS1mODY5YTlhZDFlZmQvODdiZjcwZTMtYmZmZi0z
M2EyLTkxOTUtNmUyMmFkM2MxOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjM4MGFkYzktZjNhNS00MjJmLWFl
MjUtZjg2OWE5YWQxZWZkLzYzODBhZGM5LWYzYTUtNDIyZi1hZTI1LWY4NjlhOWFk
MWVmZC5jcmwwHwYDVR0jBBgwFoAUMs/oODJfs6uyMLTLgZQFMSIIBG0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MzgwYWRjOS1mM2E1LTQyMmYtYWUyNS1mODY5
YTlhZDFlZmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdUQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnO7LPBxs02ZGu34JLDrVH/13C8fu1sqA3UcSIxtxf6dNBU16rzCZv
3kLtLf+0MMzJQE2Bcfcfy20Bdqdo8lseWkvTwxkz0tCtaLEPSM737vjfQJLhEuwJ
48GJQYbipCorTTF9UZ4vF/1sg4y1egHquJw0oNiYxjMLAgnEFycdjJBO8Lu7c9dE
9VhFAROSTMEfBzl4JAvTZ0OQMCH9f9Ek2Bf3b46EBf4QASrLy6SODVFjHeGrz3Mu
oJ413QJndR+qawv9s1DVroJcJ6iozyMjtFzF1nwdK1LWn+9/pRLiaw+MpRu9N8P/
AB3Lmr6aHOPhwFsJfs9c/+UJ5TOZY4mJ
-----END CERTIFICATE-----
Generated at Mon May 20 14:55:21 2024 by rpki-client on console-ams.rpki-client.org