Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4d5395ef-3076-3f38-8783-38becd51a220.roa
File:                     4d5395ef-3076-3f38-8783-38becd51a220.roa (raw, json)
Hash identifier:          S2ljvrWpvjwBy+dhUQ9BV6HyxFCzwv2hZ+8ZQtyGDsI=
Subject key identifier:   A4:DF:1F:39:68:8D:3C:36:4E:D4:F1:64:D6:32:5D:5F:F6:B7:4B:CB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858459FF893EF842FBBCD41858900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4d5395ef-3076-3f38-8783-38becd51a220.roa
Signing time:             Mon 22 Apr 2024 01:00:25 +0000
ROA not before:           Mon 22 Apr 2024 01:00:25 +0000
ROA not after:            Sun 21 Jul 2024 01:00:25 +0000
asID:                     6461
IP address blocks:        2604:e500::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9f:f8:93:ef:84:2f:bb:cd:41:85:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 22 01:00:25 2024 GMT
            Not After : Jul 21 01:00:25 2024 GMT
        Subject: CN=15e67747-c305-4354-88cb-4204c2513ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:cf:24:b0:20:8d:f8:26:fd:0e:41:a2:3b:
                    95:3b:12:34:5f:37:19:0b:e6:4a:a1:8f:a8:d0:59:
                    e5:e1:0c:78:6c:59:9c:f2:9a:cf:39:39:b7:e7:b0:
                    07:50:5a:5b:60:cd:12:dc:72:ff:a0:5b:2a:02:84:
                    c7:07:c9:58:bb:8c:a6:f9:d2:9d:61:be:35:9e:d1:
                    da:2d:ed:c9:57:3d:69:83:49:95:14:24:7c:c7:bf:
                    25:70:96:1f:ea:f6:9b:1e:fd:65:c3:3d:9b:0f:4c:
                    16:9c:94:45:36:7b:18:9d:2c:4c:87:36:d9:a6:3b:
                    ea:a6:d1:0a:19:fc:e1:49:fc:e5:1e:f5:b8:e7:33:
                    25:d8:c9:5a:36:a2:41:98:ed:27:03:2a:af:ab:1f:
                    fd:14:7f:97:6e:c8:af:2c:62:07:31:02:41:cc:a2:
                    7b:ca:2d:c6:52:72:45:9e:6d:74:1a:7b:59:a4:e1:
                    8d:c4:3d:cb:2f:7e:9b:06:e7:8a:a4:7d:d4:8b:70:
                    a5:31:60:c4:32:40:34:18:82:42:64:08:2c:d6:a1:
                    97:ae:98:85:49:c5:b6:6d:6d:a7:a3:30:03:c6:4b:
                    ec:81:f3:f8:78:9d:4f:e0:2d:6b:d4:f1:56:3d:fd:
                    66:84:21:d0:42:d9:64:19:38:21:af:34:95:62:0d:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:1F:39:68:8D:3C:36:4E:D4:F1:64:D6:32:5D:5F:F6:B7:4B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4d5395ef-3076-3f38-8783-38becd51a220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:a8:33:4d:6c:b7:e3:f8:05:a9:d6:8e:58:e4:6c:45:98:4c:
         ea:e2:9c:dc:b5:5a:ca:0f:fc:cf:a8:4f:0f:6d:0b:b9:41:94:
         73:d6:50:73:e5:62:05:b1:c2:0b:f4:d4:e6:71:7a:17:f2:ea:
         6e:ce:e8:ec:a0:ae:7b:58:b8:1b:81:7c:da:c2:39:1b:87:41:
         ec:ed:82:f6:ca:6d:40:c1:25:3e:e2:c3:23:e9:54:ee:8c:53:
         47:66:a0:f4:ec:0c:30:33:00:64:57:df:00:ee:af:82:2e:3b:
         e1:be:25:24:55:bf:07:49:4a:46:0b:01:f0:9e:76:2d:9c:e6:
         51:d9:3f:7c:e7:03:3e:d8:80:b6:63:a1:a2:9d:02:b7:2b:5a:
         9c:3b:ff:ef:82:e1:d0:b2:55:47:e4:50:b2:e4:d9:35:2c:86:
         e3:bd:54:ea:c9:c7:b5:ab:bf:1c:ab:8b:0e:7a:d1:67:51:ea:
         35:56:48:43:6d:da:b5:9a:75:5c:99:ce:6b:c6:39:3a:1f:78:
         f2:20:d5:ce:be:7b:9b:3f:4d:39:da:f1:40:af:38:c4:29:bc:
         e3:05:87:ea:f5:71:00:6e:78:b8:c3:4d:8a:7d:02:48:28:58:
         c3:85:52:1d:dd:cc:8f:8a:24:be:8b:00:17:8c:2c:56:cf:fa:
         14:aa:b5:7c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWf+JPvhC+7zUGFiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQyMjAxMDAyNVoXDTI0MDcyMTAxMDAyNVowLzEtMCsGA1UEAxMk
MTVlNjc3NDctYzMwNS00MzU0LTg4Y2ItNDIwNGMyNTEzZWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHjPJLAgjfgm/Q5BojuVOxI0XzcZC+ZKoY+o
0Fnl4Qx4bFmc8prPOTm357AHUFpbYM0S3HL/oFsqAoTHB8lYu4ym+dKdYb41ntHa
Le3JVz1pg0mVFCR8x78lcJYf6vabHv1lwz2bD0wWnJRFNnsYnSxMhzbZpjvqptEK
GfzhSfzlHvW45zMl2MlaNqJBmO0nAyqvqx/9FH+XbsivLGIHMQJBzKJ7yi3GUnJF
nm10GntZpOGNxD3LL36bBueKpH3Ui3ClMWDEMkA0GIJCZAgs1qGXrpiFScW2bW2n
ozADxkvsgfP4eJ1P4C1r1PFWPf1mhCHQQtlkGTghrzSVYg2sawIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKTfHzlojTw2TtTxZNYyXV/2t0vLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNGQ1Mzk1ZWYtMzA3Ni0z
ZjM4LTg3ODMtMzhiZWNkNTFhMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTlADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCtqDNNbLfj+AWp1o5Y5GxFmEzq4pzctVrKD/zPqE8PbQu5QZRz1lBz
5WIFscIL9NTmcXoX8upuzujsoK57WLgbgXzawjkbh0Hs7YL2ym1AwSU+4sMj6VTu
jFNHZqD07AwwMwBkV98A7q+CLjvhviUkVb8HSUpGCwHwnnYtnOZR2T985wM+2IC2
Y6GinQK3K1qcO//vguHQslVH5FCy5Nk1LIbjvVTqyce1q78cq4sOetFnUeo1VkhD
bdq1mnVcmc5rxjk6H3jyINXOvnubP0052vFArzjEKbzjBYfq9XEAbni4w02KfQJI
KFjDhVId3cyPiiS+iwAXjCxWz/oUqrV8
-----END CERTIFICATE-----
Generated at Sat May 4 16:50:34 2024 by rpki-client on console-ams.rpki-client.org