Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
File:                     f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa (raw, json)
Hash identifier:          tEMzu8EnxUa5AFJdPgXqHfMBdhgukUoWLYOspyFYYnA=
Subject key identifier:   19:FD:BA:B6:DD:0E:53:8F:EC:EB:A2:2C:E1:34:E3:9D:E5:AC:12:B5
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584754E0E8E58B65964C872532B0
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     46455
IP address blocks:        2604:c880::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e8:e5:8b:65:96:4c:87:25:32:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=d526d485-778d-48cf-b298-4ead1c95781b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:5e:36:ca:d2:23:4b:8b:95:08:75:12:11:
                    e1:34:ed:c2:b9:86:57:d3:be:62:cb:13:0e:ee:7f:
                    aa:78:03:a8:6f:6e:75:82:a2:b7:4b:07:c0:dc:8d:
                    2b:b3:ba:32:6f:18:de:0c:17:5a:36:9f:dd:f7:c1:
                    b7:51:08:3b:47:df:95:4d:cd:ff:54:50:5e:ef:ec:
                    6b:2d:53:e7:6d:1d:7c:09:15:c8:ce:0d:23:de:58:
                    2f:b0:10:56:1c:1e:af:e1:7e:dc:eb:b4:c8:9f:a5:
                    b9:cb:0a:d5:74:ea:57:b1:2e:28:4b:50:47:fd:4e:
                    67:1a:e0:b1:f1:2e:05:94:4f:12:a2:8d:a4:84:0d:
                    c1:e1:06:d7:ec:1b:e0:7b:77:f0:73:7c:47:6c:b1:
                    71:b9:26:3e:90:d0:79:67:7f:13:62:78:30:1b:22:
                    f0:5f:dd:75:c0:6a:4e:8b:80:d9:05:b4:0e:be:a8:
                    60:e5:97:86:e8:d0:f1:35:d3:44:a9:c5:ae:b2:1a:
                    e5:26:ba:0d:88:a9:3a:a5:7c:0d:35:d3:10:4f:11:
                    d3:cb:74:79:b1:ed:a1:e6:d1:1f:64:54:b0:92:22:
                    69:1c:80:3c:90:ea:c9:7a:8f:86:2f:91:b6:de:46:
                    71:75:84:5c:12:28:08:b3:fc:bc:d0:2f:d4:11:58:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FD:BA:B6:DD:0E:53:8F:EC:EB:A2:2C:E1:34:E3:9D:E5:AC:12:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/f5ad28ce-9ae5-3eb5-ae12-d0a71f8ac04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:6c:78:78:ee:2e:ed:e1:81:a9:48:c4:87:71:ad:7a:a4:
         71:88:78:ef:90:76:f3:5a:dd:ee:b7:14:ab:bc:95:5c:f8:4b:
         58:62:ad:56:de:47:e1:e1:70:57:f6:51:48:24:f1:6f:da:8b:
         ad:b2:36:32:f3:c3:ee:7a:e7:dc:a5:54:95:2a:ac:3f:d0:05:
         38:f1:e4:bc:af:8d:af:72:31:ff:28:c4:b0:47:b5:f7:a5:14:
         7c:42:46:8e:12:43:56:d8:59:67:d8:b6:4d:d9:b0:0d:5f:4c:
         9e:29:79:e2:a1:b6:05:a9:29:84:bb:b9:67:41:d0:43:c2:ee:
         7b:b2:e3:05:f5:8d:e7:52:fa:4b:6b:6f:0b:b4:9a:64:1f:3a:
         76:b2:e1:3e:44:0c:56:f4:0f:39:95:e7:ae:33:3e:74:d7:f6:
         be:43:35:d4:11:b8:4b:9d:66:c8:fb:18:66:48:c7:87:d9:77:
         d5:9b:da:47:32:94:11:cb:8d:d9:d9:de:1f:18:a4:22:7f:05:
         62:b6:63:2d:ac:a5:9e:07:32:45:9a:65:f9:0f:62:7a:6d:67:
         92:07:11:ac:5e:b0:b1:13:cc:e6:f1:a3:5f:e5:5b:f2:4e:c7:
         12:1f:9d:a1:39:69:06:49:f1:af:34:c4:26:93:81:30:7d:73:
         b1:d3:80:43
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdU4Ojli2WWTIclMrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw
MTE0MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDUyNmQ0ODUtNzc4ZC00OGNmLWIyOTgtNGVhZDFjOTU3ODFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o1eNsrSI0uLlQh1EhHhNO3CuYZX075iyxMO
7n+qeAOob251gqK3SwfA3I0rs7oybxjeDBdaNp/d98G3UQg7R9+VTc3/VFBe7+xr
LVPnbR18CRXIzg0j3lgvsBBWHB6v4X7c67TIn6W5ywrVdOpXsS4oS1BH/U5nGuCx
8S4FlE8Soo2khA3B4QbX7Bvge3fwc3xHbLFxuSY+kNB5Z38TYngwGyLwX911wGpO
i4DZBbQOvqhg5ZeG6NDxNdNEqcWushrlJroNiKk6pXwNNdMQTxHTy3R5se2h5tEf
ZFSwkiJpHIA8kOrJeo+GL5G23kZxdYRcEigIs/y80C/UEVjdeQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBn9urbdDlOP7OuiLOE0453lrBK1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1
OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvZjVhZDI4Y2UtOWFlNS0z
ZWI1LWFlMTItZDBhNzFmOGFjMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk
MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk
MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4
N2E3ZDAxMTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA9VGx4eO4u7eGBqUjEh3GteqRxiHjvkHbzWt3utxSrvJVc+EtYYq1W
3kfh4XBX9lFIJPFv2outsjYy88PueufcpVSVKqw/0AU48eS8r42vcjH/KMSwR7X3
pRR8QkaOEkNW2Fln2LZN2bANX0yeKXniobYFqSmEu7lnQdBDwu57suMF9Y3nUvpL
a28LtJpkHzp2suE+RAxW9A85leeuMz501/a+QzXUEbhLnWbI+xhmSMeH2XfVm9pH
MpQRy43Z2d4fGKQifwVitmMtrKWeBzJFmmX5D2J6bWeSBxGsXrCxE8zm8aNf5Vvy
TscSH52hOWkGSfGvNMQmk4EwfXOx04BD
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:28 2024 by rpki-client on console-fra.rpki-client.org