Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa
File:                     dd906173-242b-3137-a918-86b3c41a58d9.roa (raw, json)
Hash identifier:          LJOO+F472kA7l+zvvhspvuYTUlARxhLlvqBcw2XbXhQ=
Subject key identifier:   06:45:7F:81:A4:98:8A:6C:55:1B:0C:0E:14:0A:01:1D:D7:89:8C:77
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584762D65FE54BB1AD8FFBED8000
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     20253
IP address blocks:        2606:bc40:f20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5f:e5:4b:b1:ad:8f:fb:ed:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=67511899-2243-47b6-b93b-c84ac3dba536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:62:a2:42:5e:b4:b2:2c:12:9d:04:3a:8a:43:
                    42:4c:1b:bb:9d:ec:b6:e8:5d:18:36:09:f8:2f:d5:
                    2a:06:a0:2c:7f:8f:62:d4:0e:69:fe:c6:1a:c5:2a:
                    7b:b4:3c:26:39:a1:e2:70:cb:da:e5:56:07:68:b9:
                    ad:c7:5a:30:a2:96:8a:9b:97:98:88:e3:59:f0:fc:
                    bc:ad:90:07:1c:15:c9:44:45:cb:62:3b:94:9c:3e:
                    47:c3:42:1a:1d:fc:80:ea:d9:58:ae:b4:eb:b0:ba:
                    e1:7c:d4:f9:35:8f:3f:5b:99:41:ba:21:16:b4:aa:
                    c2:89:55:b6:09:f4:86:22:9e:ad:03:cf:c2:9c:77:
                    a0:bc:1b:81:c8:74:29:f5:bc:63:03:25:17:12:d2:
                    aa:56:95:a0:a4:58:8e:3d:0b:0d:8b:d8:47:75:e5:
                    39:eb:42:0f:8e:64:3e:39:0c:1f:8e:8f:ae:48:19:
                    18:86:fb:1e:b1:d1:95:ee:65:5b:7a:61:b4:23:3c:
                    62:a9:8e:f3:1a:b2:6c:35:5b:0c:ba:68:74:14:2d:
                    34:28:6d:90:fd:cc:66:81:51:8a:db:3f:de:9d:88:
                    a6:3e:64:51:c7:af:ed:b1:6f:cb:92:ec:8b:06:6c:
                    56:5a:37:92:cf:9a:97:1a:3b:1d:0a:66:b7:54:c2:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:45:7F:81:A4:98:8A:6C:55:1B:0C:0E:14:0A:01:1D:D7:89:8C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3b:4c:d1:7e:87:a5:b5:43:66:88:36:7c:ba:48:5e:a5:10:
         03:7e:6b:92:05:30:e1:c6:05:5e:52:44:cc:99:08:37:e5:f9:
         d5:58:69:8f:1a:01:71:23:ee:54:c5:35:ec:8d:29:fc:1d:c2:
         64:38:ad:50:ab:34:79:77:35:c8:78:44:aa:91:08:6c:82:73:
         31:d5:e3:b0:b3:40:fe:50:92:bd:7c:54:45:89:32:9c:47:1f:
         ac:91:59:03:93:7d:a7:fd:0e:08:c0:7e:a2:f9:03:12:b4:e9:
         4c:a0:9e:73:d3:93:7e:0d:2a:73:d1:c1:a9:02:28:cc:f6:f9:
         b0:a8:ff:5f:0a:0f:b2:ad:15:5f:11:e4:11:78:f5:7b:20:af:
         59:97:0c:0c:a4:8d:8c:04:ee:10:e9:bf:89:a6:e4:f2:40:d7:
         b5:cb:9e:16:80:20:50:dc:b4:de:bc:d9:56:0c:ac:ce:0a:0f:
         bc:04:b6:e1:a9:2e:d8:28:3e:2c:5d:f6:7d:05:8d:55:6e:b5:
         d2:2d:7c:a0:15:35:75:88:d0:ee:9b:c4:be:ef:5e:f6:19:fa:
         89:fe:76:26:38:c2:e1:e3:2d:2d:46:0a:9d:22:75:1f:69:06:
         82:b6:8b:63:e9:da:42:7b:f2:3d:a5:79:31:f0:21:c3:36:d3:
         ef:90:ae:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdi1l/lS7Gtj/vtgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
Njc1MTE4OTktMjI0My00N2I2LWI5M2ItYzg0YWMzZGJhNTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGKiQl60siwSnQQ6ikNCTBu7ney26F0YNgn4
L9UqBqAsf49i1A5p/sYaxSp7tDwmOaHicMva5VYHaLmtx1owopaKm5eYiONZ8Py8
rZAHHBXJREXLYjuUnD5Hw0IaHfyA6tlYrrTrsLrhfNT5NY8/W5lBuiEWtKrCiVW2
CfSGIp6tA8/CnHegvBuByHQp9bxjAyUXEtKqVpWgpFiOPQsNi9hHdeU560IPjmQ+
OQwfjo+uSBkYhvsesdGV7mVbemG0IzxiqY7zGrJsNVsMumh0FC00KG2Q/cxmgVGK
2z/enYimPmRRx6/tsW/LkuyLBmxWWjeSz5qXGjsdCma3VMIvnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAZFf4GkmIpsVRsMDhQKAR3XiYx3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGQ5MDYxNzMtMjQyYi0z
MTM3LWE5MTgtODZiM2M0MWE1OGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJI7TNF+h6W1Q2aINny6SF6lEAN+a5IFMOHGBV5SRMyZCDfl+dVY
aY8aAXEj7lTFNeyNKfwdwmQ4rVCrNHl3Nch4RKqRCGyCczHV47CzQP5Qkr18VEWJ
MpxHH6yRWQOTfaf9DgjAfqL5AxK06UygnnPTk34NKnPRwakCKMz2+bCo/18KD7Kt
FV8R5BF49Xsgr1mXDAykjYwE7hDpv4mm5PJA17XLnhaAIFDctN682VYMrM4KD7wE
tuGpLtgoPixd9n0FjVVutdItfKAVNXWI0O6bxL7vXvYZ+on+diY4wuHjLS1GCp0i
dR9pBoK2i2Pp2kJ78j2leTHwIcM20++Qrtc=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:43 2024 by rpki-client on console-fra.rpki-client.org