Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
File:                     86d17516-6609-38bc-b9c5-1de3645b206a.roa (raw, json)
Hash identifier:          oVKLluAdHqEs31qhXZvrqdYzldvfM9Tls1utXzUAMD0=
Subject key identifier:   76:A0:BF:BB:EC:9E:5B:E9:4C:B4:BB:62:B2:34:FA:08:A8:A3:FF:4E
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858472F307BF6B09A1E58F8C9AC80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     20253
IP address blocks:        2606:bc40:202::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7b:f6:b0:9a:1e:58:f8:c9:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=eba839c4-cc5a-4732-9ebd-37ef428fe489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:22:4f:75:17:3e:20:68:9e:23:4b:31:e2:
                    42:1c:b9:fc:5b:2f:d4:94:86:1e:d0:f2:8c:14:ba:
                    7a:8a:6e:5d:d2:7c:5f:b1:27:5c:d7:c9:55:a6:9d:
                    0c:a9:61:8c:2d:c7:2e:6d:2b:16:e6:62:f4:44:cf:
                    93:ad:00:d8:e7:1c:c6:e6:0e:53:f1:be:c2:ff:ba:
                    93:8d:8c:e1:7f:80:bd:53:16:70:2f:76:09:6a:43:
                    d7:a7:f4:53:ee:d0:a9:e7:54:c5:b8:54:a4:58:be:
                    ed:03:b9:93:08:84:0a:82:66:d9:5c:f4:57:53:99:
                    87:92:60:c1:ad:a1:4f:6f:14:e3:e3:20:c6:20:3f:
                    c1:bb:ba:ed:83:4b:24:02:f7:43:ef:32:12:14:9c:
                    44:53:ba:d0:12:c7:c9:a0:52:18:8d:f9:9f:da:c5:
                    5f:37:e4:16:d8:ea:c2:e4:8f:3f:2f:60:42:5f:6c:
                    44:94:72:17:f2:5c:12:6d:21:ac:76:87:8d:d6:7f:
                    83:37:1c:d8:ee:b5:f1:66:d2:35:82:6b:01:08:ed:
                    ce:63:7e:92:48:6e:dc:06:13:a6:7f:1b:f6:2a:db:
                    01:fb:d6:26:09:ca:1b:0c:b8:44:ef:e3:6c:1b:74:
                    5f:90:2b:1a:f5:cd:25:98:d2:bb:7c:40:bb:e0:c6:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A0:BF:BB:EC:9E:5B:E9:4C:B4:BB:62:B2:34:FA:08:A8:A3:FF:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:04:70:f5:04:de:c1:c9:f0:69:d5:13:68:84:08:ce:cc:88:
         50:f0:4f:e4:1d:2d:3c:7d:d7:77:d8:71:97:e6:8f:2a:80:9c:
         9b:a7:61:a8:33:88:d8:40:9c:2f:38:59:fa:a8:ea:0c:85:53:
         eb:6d:69:ee:f0:00:69:b5:13:9d:b6:be:11:19:c4:9a:e9:b1:
         d4:78:62:66:6a:2d:b4:95:29:61:1e:dc:0c:9c:e2:fa:41:7e:
         0d:76:c2:bb:f0:3e:1c:61:d7:3b:48:c5:56:99:2b:4d:39:94:
         22:a1:ae:c4:f9:e0:d5:83:45:93:bc:f7:b7:d0:f4:a9:a0:76:
         0e:44:fd:d5:dc:97:1b:a5:90:e0:49:c3:f3:9e:90:fb:bf:a9:
         f7:a4:77:d6:fc:93:bf:5b:2c:98:9e:78:13:c9:c6:cb:b1:4e:
         fa:b1:27:67:6b:26:18:6e:07:58:32:4a:36:59:0d:55:2e:d4:
         1e:53:d0:db:fd:e2:6a:2c:00:ee:c6:1f:51:5a:03:16:27:2a:
         27:fc:51:02:6b:ef:03:a2:95:c0:04:f8:1c:51:76:59:71:0f:
         ec:47:07:35:cc:e4:3d:0f:94:f8:73:df:35:c3:d7:2e:f2:cf:
         a9:0f:bb:15:e6:02:fc:57:30:87:b1:27:9f:af:45:36:e2:a1:
         14:82:f3:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcvMHv2sJoeWPjJrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZWJhODM5YzQtY2M1YS00NzMyLTllYmQtMzdlZjQyOGZlNDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DYiT3UXPiBoniNLMeJCHLn8Wy/UlIYe0PKM
FLp6im5d0nxfsSdc18lVpp0MqWGMLccubSsW5mL0RM+TrQDY5xzG5g5T8b7C/7qT
jYzhf4C9UxZwL3YJakPXp/RT7tCp51TFuFSkWL7tA7mTCIQKgmbZXPRXU5mHkmDB
raFPbxTj4yDGID/Bu7rtg0skAvdD7zISFJxEU7rQEsfJoFIYjfmf2sVfN+QW2OrC
5I8/L2BCX2xElHIX8lwSbSGsdoeN1n+DNxzY7rXxZtI1gmsBCO3OY36SSG7cBhOm
fxv2KtsB+9YmCcobDLhE7+NsG3RfkCsa9c0lmNK7fEC74MaTtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHagv7vsnlvpTLS7YrI0+gioo/9OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODZkMTc1MTYtNjYwOS0z
OGJjLWI5YzUtMWRlMzY0NWIyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAIC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHEEcPUE3sHJ8GnVE2iECM7MiFDwT+QdLTx913fYcZfmjyqAnJun
YagziNhAnC84Wfqo6gyFU+ttae7wAGm1E522vhEZxJrpsdR4YmZqLbSVKWEe3Ayc
4vpBfg12wrvwPhxh1ztIxVaZK005lCKhrsT54NWDRZO897fQ9Kmgdg5E/dXclxul
kOBJw/OekPu/qfekd9b8k79bLJieeBPJxsuxTvqxJ2drJhhuB1gySjZZDVUu1B5T
0Nv94mosAO7GH1FaAxYnKif8UQJr7wOilcAE+BxRdllxD+xHBzXM5D0PlPhz3zXD
1y7yz6kPuxXmAvxXMIexJ5+vRTbioRSC8zQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:04 2024 by rpki-client on console-ams.rpki-client.org