Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d4011818-39de-3ba8-ac14-669bf6aa97a1.roa
File:                     d4011818-39de-3ba8-ac14-669bf6aa97a1.roa (raw, json)
Hash identifier:          yQCqSngqzPBCgcpU/n8LF4k7uNJDlT+6vaGewgHHL4s=
Subject key identifier:   33:2A:87:5D:9E:4D:A4:E6:48:D4:48:D5:47:1E:C2:E1:95:AB:BD:F0
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DE7A3BC693669C5F95640
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d4011818-39de-3ba8-ac14-669bf6aa97a1.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        2001:4c8:1093::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e7:a3:bc:69:36:69:c5:f9:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=e946dda4-1ee9-47ed-973d-b58636dfe735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:67:32:5f:ff:c9:3c:47:1d:8e:6f:fd:03:d3:
                    69:8a:6e:a1:1d:7f:99:7c:9c:58:03:9a:ea:1a:44:
                    e7:88:eb:93:42:ef:f6:c9:a7:64:49:cd:e2:29:72:
                    fe:7f:3f:7d:a1:06:4b:89:e7:8e:b5:22:ee:62:08:
                    11:ee:a0:bb:6c:d8:2c:81:b3:1b:21:a0:9a:fc:33:
                    3e:32:70:cc:d1:27:fc:26:3b:cc:4c:c4:42:2c:28:
                    7b:d2:06:70:8a:4e:39:01:63:e4:de:91:55:93:5e:
                    ea:b1:8d:a9:93:7f:77:90:88:bd:0b:28:d5:da:c0:
                    ef:69:aa:f0:19:7d:b6:80:4e:21:20:78:ff:cc:18:
                    17:45:1f:e6:5a:7d:a5:ec:7e:4b:f5:23:64:a8:bd:
                    82:62:14:98:3f:96:6b:c0:00:b6:d2:f2:17:45:cd:
                    0c:e8:3c:ab:47:36:d8:b4:8c:fe:ab:d6:99:a5:4d:
                    8f:77:13:de:9a:63:b2:b2:97:1d:65:dd:11:47:28:
                    24:52:42:1a:75:11:05:8e:67:71:cd:f4:6d:99:0a:
                    f8:77:84:ae:e7:aa:3b:c5:a6:f0:e3:fb:7f:de:1e:
                    63:76:15:d9:41:14:b1:20:68:0c:31:7b:ba:af:b4:
                    08:8f:58:ed:ce:24:8b:36:af:98:30:0c:df:ba:fc:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2A:87:5D:9E:4D:A4:E6:48:D4:48:D5:47:1E:C2:E1:95:AB:BD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d4011818-39de-3ba8-ac14-669bf6aa97a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:e6:d4:b3:14:da:2e:78:c3:c5:39:fe:e2:2d:98:30:3f:
         b9:96:fa:4d:b7:71:79:8e:b7:13:70:50:48:86:00:49:3f:f2:
         a4:56:b4:2e:05:eb:21:0c:30:55:24:0b:c5:e7:f8:12:64:72:
         1d:aa:4f:2e:c1:62:db:a1:bb:4a:82:d3:1e:42:83:27:f8:a7:
         61:87:09:c6:fb:59:db:e9:a1:eb:00:88:78:67:bb:f5:83:f7:
         7f:f4:0f:1c:d5:9e:9e:66:49:12:cf:fb:14:46:5f:eb:14:fb:
         a6:82:1f:cd:eb:b3:bf:04:dd:44:20:d6:41:6e:bf:c0:ab:8d:
         81:84:3a:9e:86:60:30:b5:dc:2c:f0:da:51:b2:d4:a3:35:46:
         49:12:23:49:32:5f:01:28:83:ee:d7:af:e9:73:72:6b:c4:20:
         38:4d:40:1c:a3:57:8e:fc:f0:9f:d8:23:49:f1:40:f1:27:b1:
         eb:94:fa:90:0e:4f:8f:21:84:86:82:31:56:30:cf:55:af:84:
         4c:69:25:30:3e:0e:3f:1d:96:bc:ec:46:bd:2d:87:d4:21:24:
         2d:a7:26:13:ba:c8:15:84:66:8d:1d:72:fe:78:03:3c:27:56:
         52:c6:ed:e8:61:1d:f9:a7:4a:c4:5f:d5:f4:67:2a:41:4f:e2:
         2b:c1:f2:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWdLeejvGk2acX5VkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
ZTk0NmRkYTQtMWVlOS00N2VkLTk3M2QtYjU4NjM2ZGZlNzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2cyX//JPEcdjm/9A9Npim6hHX+ZfJxYA5rq
GkTniOuTQu/2yadkSc3iKXL+fz99oQZLieeOtSLuYggR7qC7bNgsgbMbIaCa/DM+
MnDM0Sf8JjvMTMRCLCh70gZwik45AWPk3pFVk17qsY2pk393kIi9CyjV2sDvaarw
GX22gE4hIHj/zBgXRR/mWn2l7H5L9SNkqL2CYhSYP5ZrwAC20vIXRc0M6DyrRzbY
tIz+q9aZpU2PdxPemmOyspcdZd0RRygkUkIadREFjmdxzfRtmQr4d4Su56o7xabw
4/t/3h5jdhXZQRSxIGgMMXu6r7QIj1jtziSLNq+YMAzfuvw2dwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDMqh12eTaTmSNRI1UcewuGVq73wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZDQwMTE4MTgtMzlkZS0z
YmE4LWFjMTQtNjY5YmY2YWE5N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIWN5tSzFNoueMPFOf7iLZgwP7mW+k23cXmOtxNwUEiGAEk/8qRW
tC4F6yEMMFUkC8Xn+BJkch2qTy7BYtuhu0qC0x5Cgyf4p2GHCcb7WdvpoesAiHhn
u/WD93/0DxzVnp5mSRLP+xRGX+sU+6aCH83rs78E3UQg1kFuv8CrjYGEOp6GYDC1
3Czw2lGy1KM1RkkSI0kyXwEog+7Xr+lzcmvEIDhNQByjV4788J/YI0nxQPEnseuU
+pAOT48hhIaCMVYwz1WvhExpJTA+Dj8dlrzsRr0th9QhJC2nJhO6yBWEZo0dcv54
AzwnVlLG7ehhHfmnSsRf1fRnKkFP4ivB8jY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:10:11 2024 by rpki-client on console-ams.rpki-client.org