Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa
File:                     c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa (raw, json)
Hash identifier:          zSp56jB3uon+euHj6S/b5xNSWYCkXCUNXqps7NnDMmw=
Subject key identifier:   87:C4:26:13:BF:C1:55:57:A2:BC:75:51:60:56:8D:7B:40:A9:5A:15
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584574B30D4F138459951539CF00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     20253
IP address blocks:        2606:bc40:f100::/48 maxlen: 48
                          2606:bc40:f101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:0d:4f:13:84:59:95:15:39:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=d9bdd0e5-b57e-434a-ac33-a37379ebec74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:6a:31:b8:7d:72:e4:aa:f4:6c:d4:8b:e9:
                    5a:59:73:b1:e7:60:cd:7f:35:ee:27:2b:b0:6c:31:
                    88:5e:e2:9d:c2:48:24:05:58:12:b7:8d:38:5e:12:
                    e0:72:ad:72:22:1e:77:f2:78:e0:0f:7d:29:e9:ec:
                    e6:f9:a7:80:6f:73:db:17:a5:8c:61:d9:ff:29:db:
                    e6:31:db:cb:29:8c:9a:f6:ab:43:af:32:7a:15:a4:
                    a5:c4:7c:6d:29:a6:33:4f:fa:a4:14:04:93:05:30:
                    81:e3:0a:62:1c:bf:23:66:5e:9b:23:43:ab:68:ad:
                    87:c2:a3:c3:53:90:d0:6b:aa:70:93:ff:9b:24:e0:
                    e4:d2:13:b4:bf:94:f0:36:cf:bc:79:a1:bd:33:8a:
                    cc:c0:f0:6a:f8:16:20:d2:a3:92:1a:af:7e:68:2c:
                    cc:70:f2:16:0d:53:61:1f:92:5e:a2:05:69:62:62:
                    bc:fb:8b:27:b0:54:09:2a:39:2e:8f:88:ae:6c:9d:
                    bc:0f:cf:a9:87:93:3a:32:b2:af:c7:fb:d1:fe:e9:
                    1e:d2:48:21:60:48:fd:72:eb:ae:aa:49:c4:33:7e:
                    ae:ab:0e:71:a1:14:07:be:68:ff:1c:07:0d:77:ed:
                    c1:b0:44:54:d0:ed:aa:8a:e2:0f:2b:67:9a:e1:00:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:26:13:BF:C1:55:57:A2:BC:75:51:60:56:8D:7B:40:A9:5A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f100::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9f:58:d0:a7:4e:94:62:d3:9f:9b:28:67:fd:9a:07:fe:60:
         48:63:47:ef:9c:ab:15:21:09:b6:cb:dc:31:6e:90:9e:41:c7:
         36:4a:c4:9f:d1:5a:ea:89:87:76:c4:78:5c:64:05:dd:ff:b0:
         8f:86:29:ce:2d:ff:3b:0e:45:8c:26:31:9b:43:71:1a:70:9a:
         8e:53:8c:0c:7b:ce:44:8a:12:1d:fd:60:69:72:4d:1e:34:3f:
         38:2b:ff:ce:ed:e4:77:ab:3a:f6:df:27:46:4d:9e:92:f3:fa:
         94:d0:97:6c:b6:5e:45:c3:b6:56:53:30:97:98:08:06:98:39:
         4c:9a:c9:ee:2a:c2:b6:62:78:9b:bc:3c:f3:37:9f:eb:53:60:
         5b:2a:7e:b1:1a:50:3b:19:5b:81:18:76:10:22:5a:03:2e:5d:
         af:a2:1f:33:bc:eb:78:4a:8c:07:d8:fa:aa:eb:0e:36:98:b5:
         be:6b:fb:3b:08:5e:cc:e9:b4:cc:3c:f6:01:e9:29:ce:91:62:
         07:e9:50:81:0d:72:9d:92:cf:57:64:e5:cc:75:47:3f:ea:3a:
         e4:d9:45:c2:e4:8c:79:84:04:3d:c3:39:73:ff:32:2c:37:97:
         91:2b:74:23:21:e1:79:39:90:12:d5:81:b0:d4:8f:70:2a:c6:
         21:20:96:d0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV0sw1PE4RZlRU5zwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZDliZGQwZTUtYjU3ZS00MzRhLWFjMzMtYTM3Mzc5ZWJlYzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdtqMbh9cuSq9GzUi+laWXOx52DNfzXuJyuw
bDGIXuKdwkgkBVgSt404XhLgcq1yIh538njgD30p6ezm+aeAb3PbF6WMYdn/Kdvm
MdvLKYya9qtDrzJ6FaSlxHxtKaYzT/qkFASTBTCB4wpiHL8jZl6bI0OraK2HwqPD
U5DQa6pwk/+bJODk0hO0v5TwNs+8eaG9M4rMwPBq+BYg0qOSGq9+aCzMcPIWDVNh
H5JeogVpYmK8+4snsFQJKjkuj4iubJ28D8+ph5M6MrKvx/vR/uke0kghYEj9cuuu
qknEM36uqw5xoRQHvmj/HAcNd+3BsERU0O2qiuIPK2ea4QDT+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIfEJhO/wVVXorx1UWBWjXtAqVoVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvYzJhZmUwNGQtOGQ3My0z
YmVmLWI1YzQtMjE3YWMxMmU3Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJga8QPEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHyfWNCnTpRi05+bKGf9mgf+YEhjR++cqxUhCbbL3DFukJ5BxzZK
xJ/RWuqJh3bEeFxkBd3/sI+GKc4t/zsORYwmMZtDcRpwmo5TjAx7zkSKEh39YGly
TR40Pzgr/87t5HerOvbfJ0ZNnpLz+pTQl2y2XkXDtlZTMJeYCAaYOUyaye4qwrZi
eJu8PPM3n+tTYFsqfrEaUDsZW4EYdhAiWgMuXa+iHzO863hKjAfY+qrrDjaYtb5r
+zsIXszptMw89gHpKc6RYgfpUIENcp2Sz1dk5cx1Rz/qOuTZRcLkjHmEBD3DOXP/
Miw3l5ErdCMh4Xk5kBLVgbDUj3AqxiEgltA=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:44 2024 by rpki-client on console-fra.rpki-client.org