Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa
File:                     eb9be52d-847f-3773-b517-8ee544c8fd23.roa (raw, json)
Hash identifier:          V29IIhVSMuzobCIeeOccoqjkN3wKmQ0SxEUnJqP9vDE=
Subject key identifier:   31:78:D8:02:05:A7:82:AF:5B:23:D7:E5:F5:C1:B7:A2:CA:E4:40:BF
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858456F1DCBAF2B356FEB962D4FA0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     20253
IP address blocks:        2606:bc40:18::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:cb:af:2b:35:6f:eb:96:2d:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=94b2e1c5-03ce-4b1d-953f-cd38c499d797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:19:10:bd:3c:2a:ae:c0:79:0d:3c:60:51:
                    09:14:1f:9e:f7:1e:a8:63:ee:5e:2c:65:fa:dc:18:
                    f1:e9:47:b9:5d:39:ec:d6:9e:4d:3b:7d:dd:24:02:
                    6c:e1:9d:78:4a:c1:37:10:a3:eb:58:37:8b:12:79:
                    9a:27:b7:9c:d0:fc:15:20:06:5a:cc:ae:8d:ef:67:
                    c7:1b:42:e0:63:de:8e:da:c4:04:62:4e:09:9f:de:
                    fd:d7:76:47:8b:ea:f3:bc:fd:58:69:30:db:35:b7:
                    af:54:db:4f:b4:c3:b3:79:78:8e:1c:f7:a9:0e:77:
                    37:bb:61:3f:61:d5:01:fb:7f:1a:20:a4:70:dc:75:
                    87:10:aa:3c:98:94:cf:75:9f:15:07:42:8f:ac:d9:
                    30:2c:1e:6b:99:e7:d5:2f:88:89:40:de:92:31:7c:
                    bb:14:1d:f6:c5:e8:89:a5:31:a4:7d:4a:46:5e:4d:
                    cf:50:c0:b8:c1:75:36:aa:46:77:01:7d:b8:32:84:
                    e4:35:3d:71:85:76:1e:44:d4:04:ab:4f:2a:46:76:
                    a5:4d:13:fd:35:41:bc:57:bd:3a:6e:f5:0f:0c:b5:
                    a1:77:3b:2c:bb:3f:2d:3e:5d:9e:de:66:8c:6e:34:
                    44:9c:0e:24:2f:6b:c7:d8:a5:ac:cf:66:39:b7:1e:
                    52:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:D8:02:05:A7:82:AF:5B:23:D7:E5:F5:C1:B7:A2:CA:E4:40:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:00:e1:ca:b7:86:7d:99:40:e4:a9:8c:66:c6:b0:1f:44:
         11:86:6b:25:e9:0a:4a:9b:78:5f:9b:cf:e9:bf:0c:21:e1:45:
         af:c9:18:7a:86:36:87:71:bc:12:57:f7:b7:42:28:d8:e4:ae:
         14:44:18:63:4e:94:1f:8c:96:b8:ac:8e:82:91:5f:44:ef:c7:
         42:6e:f3:96:34:99:ec:23:80:d7:4a:f7:85:39:38:4f:fd:36:
         1e:60:fa:9f:7d:1e:86:ea:1e:3e:c3:b2:e4:88:c8:53:bb:06:
         18:21:c2:42:b2:3c:f9:95:35:c5:64:5e:1e:f3:80:1c:e5:08:
         39:fd:dd:54:7f:46:03:99:0f:7f:8a:5e:56:52:87:1d:ec:2d:
         ab:53:c0:34:15:ef:be:1a:e5:eb:b2:93:b2:2e:a6:5b:24:3b:
         51:8c:78:6d:53:1b:6e:b4:f1:cd:66:7a:b8:fb:67:fc:5a:1e:
         ee:b8:ee:33:23:14:d5:15:d4:0d:f9:fc:af:6f:da:0c:32:9b:
         06:3d:ce:a5:24:6d:d7:e1:f5:15:07:97:af:b2:c3:c2:fc:2d:
         1e:38:42:23:c7:9e:3d:1e:e2:1a:03:b7:76:6f:c4:15:bc:46:
         64:3e:80:d2:f9:05:25:20:f8:76:f9:5a:97:9c:73:6d:46:e7:
         f1:35:e7:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVvHcuvKzVv65YtT6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk
OTRiMmUxYzUtMDNjZS00YjFkLTk1M2YtY2QzOGM0OTlkNzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsUZEL08Kq7AeQ08YFEJFB+e9x6oY+5eLGX6
3Bjx6Ue5XTns1p5NO33dJAJs4Z14SsE3EKPrWDeLEnmaJ7ec0PwVIAZazK6N72fH
G0LgY96O2sQEYk4Jn97913ZHi+rzvP1YaTDbNbevVNtPtMOzeXiOHPepDnc3u2E/
YdUB+38aIKRw3HWHEKo8mJTPdZ8VB0KPrNkwLB5rmefVL4iJQN6SMXy7FB32xeiJ
pTGkfUpGXk3PUMC4wXU2qkZ3AX24MoTkNT1xhXYeRNQEq08qRnalTRP9NUG8V706
bvUPDLWhdzssuz8tPl2e3maMbjREnA4kL2vH2KWsz2Y5tx5SpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDF42AIFp4KvWyPX5fXBt6LK5EC/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZWI5YmU1MmQtODQ3Zi0z
NzczLWI1MTctOGVlNTQ0YzhmZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJaAOHKt4Z9mUDkqYxmxrAfRBGGayXpCkqbeF+bz+m/DCHhRa/J
GHqGNodxvBJX97dCKNjkrhREGGNOlB+MlrisjoKRX0Tvx0Ju85Y0mewjgNdK94U5
OE/9Nh5g+p99HobqHj7DsuSIyFO7BhghwkKyPPmVNcVkXh7zgBzlCDn93VR/RgOZ
D3+KXlZShx3sLatTwDQV774a5euyk7IuplskO1GMeG1TG2608c1merj7Z/xaHu64
7jMjFNUV1A35/K9v2gwymwY9zqUkbdfh9RUHl6+yw8L8LR44QiPHnj0e4hoDt3Zv
xBW8RmQ+gNL5BSUg+Hb5Wpecc21G5/E15xA=
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:14 2024 by rpki-client on console-ams.rpki-client.org