Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2a3dd8f0-dd98-3fff-ba16-b208c7ac1895.roa
File:                     2a3dd8f0-dd98-3fff-ba16-b208c7ac1895.roa (raw, json)
Hash identifier:          4v03Q8sZGPOgC/YHThKN5fiPwkfJiMSbDcx3TT64rgE=
Subject key identifier:   99:E1:2A:0B:03:D6:FE:63:57:0E:38:71:D8:60:BF:5B:2D:B6:01:57
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285847B406AF519CBD700E7DD6E000
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2a3dd8f0-dd98-3fff-ba16-b208c7ac1895.roa
Signing time:             Tue 29 Oct 2024 14:58:55 +0000
ROA not before:           Tue 29 Oct 2024 14:58:55 +0000
ROA not after:            Mon 27 Jan 2025 15:58:55 +0000
asID:                     20253
IP address blocks:        2606:bc40:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b4:06:af:51:9c:bd:70:0e:7d:d6:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct 29 14:58:55 2024 GMT
            Not After : Jan 27 15:58:55 2025 GMT
        Subject: CN=07442541-3958-4fcd-ab9d-d6a3ea7d0206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d4:ba:39:18:8e:c8:f5:0b:1f:04:ae:21:16:
                    49:6c:61:f3:64:06:83:76:a5:af:9f:a2:f8:69:ab:
                    d6:2f:61:97:5f:d7:f5:35:af:66:97:92:48:43:26:
                    f7:ae:41:3e:dc:62:ea:6f:48:97:7b:02:3d:55:3f:
                    a3:33:ce:3c:f1:ad:60:97:53:14:9b:a2:1b:34:17:
                    00:db:89:60:b0:d8:4f:00:75:d2:91:ea:22:36:0b:
                    99:00:e1:58:84:83:13:94:f6:1c:2a:01:d6:8c:36:
                    21:74:37:92:93:b1:62:45:31:d3:7d:11:66:80:39:
                    c2:ab:1b:a2:fc:2b:3e:33:04:9e:da:96:b0:48:8c:
                    ac:fc:d1:97:8a:a7:e8:29:aa:ad:1a:1b:b3:d9:6b:
                    b9:4a:1b:f4:9d:bb:0c:34:38:a0:7e:21:e3:aa:28:
                    d2:42:a1:75:c8:fd:07:a9:b8:80:d8:7a:fa:1b:c4:
                    ec:65:a6:6b:8e:44:0c:d3:37:41:6e:d0:5d:11:cd:
                    35:8f:f3:69:65:e3:b0:3a:a2:d1:87:f4:81:0b:08:
                    d7:12:16:ad:79:d2:56:e7:a3:ee:94:99:50:16:24:
                    56:03:45:97:dd:4c:3a:d5:6f:af:c4:70:ef:d4:49:
                    fc:52:0e:43:19:48:3b:e8:99:7b:4e:6a:40:e2:ec:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E1:2A:0B:03:D6:FE:63:57:0E:38:71:D8:60:BF:5B:2D:B6:01:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2a3dd8f0-dd98-3fff-ba16-b208c7ac1895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:b4:d6:7b:bb:68:69:2e:62:78:e8:65:53:11:90:5d:a0:
         c1:18:6f:be:65:f0:f0:2a:60:23:a4:87:49:e5:01:f7:75:43:
         5e:9d:3d:4d:3a:78:c6:c4:39:29:da:47:8b:22:5a:8f:b7:64:
         2f:bc:71:c8:e1:f6:30:72:66:18:dd:76:ba:bd:4b:4c:9c:f3:
         60:7d:75:47:48:7b:4e:18:bc:ad:b8:d1:b4:5b:5b:dc:98:9e:
         6a:7a:12:79:41:82:0b:3d:22:df:cb:5c:f3:41:46:12:22:35:
         f5:7e:7c:4a:45:d9:67:40:a1:69:8f:06:df:75:ff:e1:c3:6c:
         d8:b4:d3:13:2d:c2:4c:fc:b0:bd:83:a7:85:71:c6:56:75:89:
         9d:f4:2e:e5:fa:7e:be:be:f3:a4:c7:8f:cc:f8:f9:df:01:12:
         6a:02:d7:dc:50:01:17:59:1d:c1:fb:11:bf:eb:a9:95:9e:cc:
         eb:78:ea:59:18:1c:7e:ee:12:6d:a9:e2:f7:ac:17:45:58:e1:
         14:c8:c6:2c:02:8c:3d:9e:9c:12:08:2a:6f:a9:1c:87:62:14:
         22:6b:c2:bd:7f:c4:a1:95:33:62:29:8a:9d:de:34:7a:e3:46:
         83:65:df:14:0d:52:8f:8f:d4:71:70:99:65:4f:c5:d3:b9:d1:
         56:67:e4:74
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEe0Bq9RnL1wDn3W4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MTAyOTE0NTg1NVoXDTI1MDEyNzE1NTg1NVowLzEtMCsGA1UEAxMk
MDc0NDI1NDEtMzk1OC00ZmNkLWFiOWQtZDZhM2VhN2QwMjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tS6ORiOyPULHwSuIRZJbGHzZAaDdqWvn6L4
aavWL2GXX9f1Na9ml5JIQyb3rkE+3GLqb0iXewI9VT+jM8488a1gl1MUm6IbNBcA
24lgsNhPAHXSkeoiNguZAOFYhIMTlPYcKgHWjDYhdDeSk7FiRTHTfRFmgDnCqxui
/Cs+MwSe2pawSIys/NGXiqfoKaqtGhuz2Wu5Shv0nbsMNDigfiHjqijSQqF1yP0H
qbiA2Hr6G8TsZaZrjkQM0zdBbtBdEc01j/NpZeOwOqLRh/SBCwjXEhatedJW56Pu
lJlQFiRWA0WX3Uw61W+vxHDv1En8Ug5DGUg76Jl7TmpA4uwbqwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJnhKgsD1v5jVw44cdhgv1sttgFXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMmEzZGQ4ZjAtZGQ5OC0z
ZmZmLWJhMTYtYjIwOGM3YWMxODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJga8QOAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXdq01nu7aGkuYnjoZVMRkF2gwRhvvmXw8CpgI6SHSeUB93VDXp09
TTp4xsQ5KdpHiyJaj7dkL7xxyOH2MHJmGN12ur1LTJzzYH11R0h7Thi8rbjRtFtb
3JieanoSeUGCCz0i38tc80FGEiI19X58SkXZZ0ChaY8G33X/4cNs2LTTEy3CTPyw
vYOnhXHGVnWJnfQu5fp+vr7zpMePzPj53wESagLX3FABF1kdwfsRv+uplZ7M63jq
WRgcfu4Sbani96wXRVjhFMjGLAKMPZ6cEggqb6kch2IUImvCvX/EoZUzYimKnd40
euNGg2XfFA1Sj4/UcXCZZU/F07nRVmfkdA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:26 2024 by rpki-client on console-fra.rpki-client.org