Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa
File:                     a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa (raw, json)
Hash identifier:          6YGzkBFOjGhCFYG1O6FiIafHVMpZfCEUXi81RyjQ4Qo=
Subject key identifier:   F5:CF:96:AB:06:BB:C5:8F:1B:5B:16:41:2F:E6:AB:6B:7B:51:04:7D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DE83476F33B7F25BBC580
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        2001:4c8:10a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e8:34:76:f3:3b:7f:25:bb:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=562b1fe7-2221-40d7-a63c-654cc9d6bc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:ef:c8:b1:81:bb:69:d9:af:59:c5:0f:61:
                    d3:94:3d:0c:9e:c4:57:6f:42:78:30:b2:d9:fd:fa:
                    2c:83:1d:11:8a:8a:1d:b6:fc:88:fd:58:b5:3c:c4:
                    6e:5e:be:11:84:5e:96:a7:f3:57:a0:54:a5:35:47:
                    93:f6:65:bc:d9:7c:16:a7:ad:e2:3b:80:2c:75:7d:
                    45:ca:ca:a4:7f:95:e1:57:e5:9a:6e:82:4c:76:ea:
                    91:47:fe:d9:df:ba:0e:02:70:db:73:b6:91:21:9f:
                    26:76:78:14:e5:10:76:ac:25:5e:54:80:3f:85:ad:
                    7b:36:05:e0:14:5a:54:65:3a:12:06:2e:16:f7:1c:
                    f3:93:31:d2:9c:a0:f9:69:33:e8:28:34:0f:a5:1f:
                    79:73:97:fd:fd:0e:2e:e9:53:a2:a4:f3:dc:78:99:
                    0c:da:7a:d4:c7:09:2a:30:2b:99:1f:df:fb:4c:8e:
                    0c:43:bd:2f:dd:8f:62:87:ad:53:27:26:fd:9c:ea:
                    fb:fb:ce:b3:ef:3b:d2:85:40:d3:c4:59:94:7a:f0:
                    df:d2:37:5c:a2:37:3b:75:cf:09:b1:09:5b:72:78:
                    3d:42:7f:7a:60:71:83:e8:2b:dd:01:33:17:d8:f1:
                    d6:a8:b1:ed:73:f6:ca:eb:6a:44:5a:3c:8c:a3:77:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CF:96:AB:06:BB:C5:8F:1B:5B:16:41:2F:E6:AB:6B:7B:51:04:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4989051-b709-3221-a7dd-d1ee2f63b9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:10a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:42:68:a9:37:09:6f:c3:9d:47:ad:42:a1:96:a7:98:22:
         8f:17:6d:6d:7b:29:6e:19:8a:db:cc:00:7e:8c:b6:b5:f9:cf:
         ee:f8:9a:07:bd:6c:66:ce:28:53:8c:26:3e:74:20:e9:42:f3:
         7b:4c:11:3e:04:b7:6a:d2:2f:85:d6:7e:4a:8e:81:9c:9b:23:
         4a:4a:4d:49:50:c4:d3:72:1f:ee:2f:d9:00:70:ba:8c:08:24:
         e3:70:26:6f:a8:99:f1:3f:ea:bd:7e:e9:c4:ae:8d:c9:53:a1:
         fc:36:cd:a6:d4:58:88:90:32:1b:e9:21:80:70:e9:b3:d2:f6:
         9e:ea:30:b5:90:dc:df:28:53:4c:12:e9:e8:54:04:b1:82:4b:
         88:f9:d1:71:54:8c:1b:7e:0e:38:3a:8f:98:8a:53:ef:40:52:
         01:3e:22:3a:5e:09:29:48:7d:ea:e8:cd:b4:f5:29:a7:38:fc:
         b4:8c:38:05:c6:f9:42:53:c5:b8:a9:84:dd:dd:59:2a:ef:e8:
         56:d8:6b:78:b3:a5:46:ae:c2:11:2c:07:7b:d7:30:34:1c:5c:
         bc:2c:99:2e:e2:21:fd:f4:d5:cd:7f:3a:eb:56:c0:53:b5:82:
         b3:ae:4e:97:e0:1e:7b:22:ce:53:1b:7f:6b:b2:bb:60:77:59:
         bf:6b:6a:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWdLeg0dvM7fyW7xYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
NTYyYjFmZTctMjIyMS00MGQ3LWE2M2MtNjU0Y2M5ZDZiYzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG/vyLGBu2nZr1nFD2HTlD0MnsRXb0J4MLLZ
/fosgx0RioodtvyI/Vi1PMRuXr4RhF6Wp/NXoFSlNUeT9mW82XwWp63iO4AsdX1F
ysqkf5XhV+WaboJMduqRR/7Z37oOAnDbc7aRIZ8mdngU5RB2rCVeVIA/ha17NgXg
FFpUZToSBi4W9xzzkzHSnKD5aTPoKDQPpR95c5f9/Q4u6VOipPPceJkM2nrUxwkq
MCuZH9/7TI4MQ70v3Y9ih61TJyb9nOr7+86z7zvShUDTxFmUevDf0jdcojc7dc8J
sQlbcng9Qn96YHGD6CvdATMX2PHWqLHtc/bK62pEWjyMo3erawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPXPlqsGu8WPG1sWQS/mq2t7UQR9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYTQ5ODkwNTEtYjcwOS0z
MjIxLWE3ZGQtZDFlZTJmNjNiOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGDOQmipNwlvw51HrUKhlqeYIo8XbW17KW4ZitvMAH6MtrX5z+74
mge9bGbOKFOMJj50IOlC83tMET4Et2rSL4XWfkqOgZybI0pKTUlQxNNyH+4v2QBw
uowIJONwJm+omfE/6r1+6cSujclTofw2zabUWIiQMhvpIYBw6bPS9p7qMLWQ3N8o
U0wS6ehUBLGCS4j50XFUjBt+Djg6j5iKU+9AUgE+IjpeCSlIferozbT1Kac4/LSM
OAXG+UJTxbiphN3dWSrv6FbYa3izpUauwhEsB3vXMDQcXLwsmS7iIf301c1/OutW
wFO1grOuTpfgHnsizlMbf2uyu2B3Wb9raq0=
-----END CERTIFICATE-----
Generated at Sun Jun 2 12:35:28 2024 by rpki-client on console-fra.rpki-client.org