Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa
File:                     1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa (raw, json)
Hash identifier:          FW4Qp6zRtuvE5vIrpx+Fu/9aIqG14I103cgN3YRjqV8=
Subject key identifier:   B8:F0:34:3C:05:4D:AC:E2:81:5C:AA:54:82:5D:83:A0:AB:77:2C:F6
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F43285845B21E31727D5A88823480B180
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     398813
IP address blocks:        2607:2240:5000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:31:72:7d:5a:88:82:34:80:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=31993e3a-a531-4594-bead-f24302db85b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:e6:36:7c:87:fd:ea:60:fa:cc:a9:6b:43:
                    42:84:33:9b:7b:c8:57:7f:36:5f:41:09:d1:c2:1f:
                    05:ca:37:ee:cb:06:eb:29:49:88:4c:99:7d:e1:9f:
                    be:d4:b5:96:c4:18:36:14:11:77:90:3b:f9:54:4a:
                    bb:7e:29:32:bd:4c:ee:7e:dc:7a:6d:dd:d2:25:72:
                    23:2f:9b:8c:3f:49:78:3a:de:34:e5:cd:5d:24:07:
                    9b:de:e1:7d:de:83:e8:6c:bd:c0:e4:c9:4c:ed:0e:
                    0d:a9:42:e4:ce:31:e4:d6:84:72:5e:3a:be:92:20:
                    dc:e5:0e:e0:f4:5a:4a:c9:db:6f:04:b9:f4:56:35:
                    19:93:a2:b3:51:ce:dd:d1:a4:c8:b9:b9:95:ed:1c:
                    6e:6b:56:e2:af:f4:56:fa:e8:38:64:c1:6f:e4:7d:
                    76:98:a2:37:e2:7f:a1:7e:37:8d:53:01:9b:6b:0f:
                    c0:a7:a5:c9:11:79:ab:8f:04:fe:75:ea:ce:d3:32:
                    6b:15:48:31:ee:b0:9c:53:87:d8:06:a8:53:b0:2e:
                    8d:14:eb:fc:53:f4:c6:5a:0d:58:82:f5:35:34:26:
                    ca:4c:f8:d9:14:c0:f2:f9:26:a7:da:fd:1c:5f:c6:
                    ea:b1:5e:61:d5:21:4e:05:59:6f:40:b4:1a:54:59:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F0:34:3C:05:4D:AC:E2:81:5C:AA:54:82:5D:83:A0:AB:77:2C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d9:2f:b8:c2:53:f6:75:66:48:b5:d0:93:cf:8e:d0:3f:59:
         b2:67:96:ed:bf:79:e2:ca:c3:f3:70:84:f0:44:4a:40:8e:74:
         85:9f:66:68:b2:b2:c9:d5:85:04:1a:9e:b4:ca:da:b3:fd:9b:
         56:10:b0:a0:89:cf:c9:d1:c1:5d:99:22:52:9b:d2:f5:3a:5c:
         a4:4e:b8:46:bb:15:4e:b8:ed:10:a9:2c:2c:6c:d2:fb:4b:43:
         c0:93:f0:9e:5e:76:c1:fe:b4:16:94:09:62:3a:22:b8:85:aa:
         26:72:44:1c:35:54:58:93:9e:17:e1:96:2f:57:c1:a9:45:05:
         c8:af:c4:68:a7:ab:1e:93:23:5d:7f:cd:2b:4a:41:04:62:1d:
         76:f5:ef:5b:59:93:8e:aa:f4:ef:f1:5d:69:7a:9a:20:d9:c4:
         63:e2:6d:f5:3c:54:43:e2:43:14:4f:f5:6c:29:c9:e2:b4:2b:
         de:70:ee:85:d3:f4:9c:d6:df:d6:d8:e2:ab:1d:64:58:cd:e5:
         24:f2:64:91:04:52:ee:0f:1d:cd:a3:a5:a5:1d:27:fa:75:c3:
         7c:43:68:95:15:93:b6:2b:e2:5b:95:d6:b1:15:e1:9c:97:d7:
         27:a5:ad:60:80:39:b6:1d:04:fc:92:d2:07:4f:95:c6:1f:96:
         56:69:df:89
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEWyHjFyfVqIgjSAsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTNjYWE5ZmUtZDA4MS00ZTE4LWFkNjYtNDk5YTkyMDk5
NDVlMB4XDTI0MDQyODEzMDAzNFoXDTI0MDcyNzEzMDAzNFowLzEtMCsGA1UEAxMk
MzE5OTNlM2EtYTUzMS00NTk0LWJlYWQtZjI0MzAyZGI4NWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCLmNnyH/epg+sypa0NChDObe8hXfzZfQQnR
wh8FyjfuywbrKUmITJl94Z++1LWWxBg2FBF3kDv5VEq7fikyvUzuftx6bd3SJXIj
L5uMP0l4Ot405c1dJAeb3uF93oPobL3A5MlM7Q4NqULkzjHk1oRyXjq+kiDc5Q7g
9FpKydtvBLn0VjUZk6KzUc7d0aTIubmV7Rxua1bir/RW+ug4ZMFv5H12mKI34n+h
fjeNUwGbaw/Ap6XJEXmrjwT+derO0zJrFUgx7rCcU4fYBqhTsC6NFOv8U/TGWg1Y
gvU1NCbKTPjZFMDy+San2v0cX8bqsV5h1SFOBVlvQLQaVFnTPQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLjwNDwFTazigVyqVIJdg6Crdyz2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85M2Nh
YTlmZS1kMDgxLTRlMTgtYWQ2Ni00OTlhOTIwOTk0NWUvMWM1NWRmM2UtOWQ4YS0z
YzVmLTlhM2EtODhhYjhjZjAwZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTNjYWE5ZmUtZDA4MS00ZTE4LWFk
NjYtNDk5YTkyMDk5NDVlLzkzY2FhOWZlLWQwODEtNGUxOC1hZDY2LTQ5OWE5MjA5
OTQ1ZS5jcmwwHwYDVR0jBBgwFoAUNK7eDz6RKTe1CzdmL3JPv2I8+6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85M2NhYTlmZS1kMDgxLTRlMTgtYWQ2Ni00OTlh
OTIwOTk0NWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgciQFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMdkvuMJT9nVmSLXQk8+O0D9ZsmeW7b954srD83CE8ERKQI50hZ9m
aLKyydWFBBqetMras/2bVhCwoInPydHBXZkiUpvS9TpcpE64RrsVTrjtEKksLGzS
+0tDwJPwnl52wf60FpQJYjoiuIWqJnJEHDVUWJOeF+GWL1fBqUUFyK/EaKerHpMj
XX/NK0pBBGIddvXvW1mTjqr07/FdaXqaINnEY+Jt9TxUQ+JDFE/1bCnJ4rQr3nDu
hdP0nNbf1tjiqx1kWM3lJPJkkQRS7g8dzaOlpR0n+nXDfENolRWTtiviW5XWsRXh
nJfXJ6WtYIA5th0E/JLSB0+Vxh+WVmnfiQ==
-----END CERTIFICATE-----
Generated at Mon May 20 14:55:25 2024 by rpki-client on console-ams.rpki-client.org