Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
File:                     2e58d574-11fd-3248-8d46-82d8c4d93007.roa (raw, json)
Hash identifier:          zDse0aVUsvHjZWeST+pPvkDLpTXIm3Hi7JvplC6e0NE=
Subject key identifier:   41:ED:74:A2:B4:0D:0F:58:D4:4B:67:2B:63:EF:51:24:7E:2B:BF:63
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F432858479DEF3D0B1A45DE8844DE46A0
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
Signing time:             Mon 21 Oct 2024 17:03:54 +0000
ROA not before:           Mon 21 Oct 2024 17:03:54 +0000
ROA not after:            Sun 19 Jan 2025 18:03:54 +0000
asID:                     396026
IP address blocks:        2607:fc30:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:ef:3d:0b:1a:45:de:88:44:de:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Oct 21 17:03:54 2024 GMT
            Not After : Jan 19 18:03:54 2025 GMT
        Subject: CN=5c54cd13-8967-4ade-b07f-998203eed198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:93:c0:d0:e2:83:9b:43:a6:8e:f4:de:4c:
                    e0:44:39:7c:07:73:7b:b7:71:81:73:32:f9:74:15:
                    e1:91:37:b8:6b:88:e2:31:9a:d5:80:ac:45:2d:1f:
                    ee:e2:95:b7:23:f1:bf:1c:37:bc:aa:f5:ba:81:2a:
                    19:1a:e0:94:aa:2a:0b:2a:9c:97:9b:34:ea:26:1a:
                    03:07:05:40:13:cf:f0:4f:df:ff:5b:3a:33:1e:b0:
                    ed:22:21:c0:9a:a8:0d:44:f9:a5:f1:da:f0:e3:97:
                    0a:b1:26:f9:f0:0d:ff:55:00:08:8c:9e:e3:9e:34:
                    37:58:0e:6c:4e:34:78:35:72:f5:77:ba:6b:9d:21:
                    9a:d2:88:55:85:ec:b3:c9:4f:52:0f:b6:9b:3b:65:
                    c5:6c:7c:68:8f:91:f1:9f:28:3d:7e:ac:09:8c:da:
                    bf:a7:b8:83:0e:f2:8a:be:4c:97:60:34:59:fe:78:
                    f2:0f:4c:c5:f2:b2:40:87:71:7d:87:6e:99:1e:b5:
                    42:e0:41:2c:03:23:8a:4a:ed:de:14:05:ca:5e:0f:
                    84:ef:42:43:2a:f5:fd:aa:35:f1:7b:84:b8:82:5e:
                    b0:3f:d3:d8:8d:11:58:0d:30:9d:a8:0e:b3:ef:4c:
                    38:44:75:bf:1a:f9:5f:74:36:91:88:18:53:58:92:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:ED:74:A2:B4:0D:0F:58:D4:4B:67:2B:63:EF:51:24:7E:2B:BF:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:12:19:8f:d5:ba:8f:36:e1:81:2f:06:ed:da:15:a0:e0:66:
         91:37:a6:7b:7d:5a:99:51:e6:81:b4:b8:3b:dd:5c:64:72:3d:
         53:93:2c:85:4c:7c:ae:40:84:17:58:1c:d8:de:7e:a8:43:ea:
         ba:bf:19:d7:20:fe:f3:43:b9:24:5d:08:8f:8a:e5:a6:11:22:
         d9:e4:cc:c5:b7:8b:5c:ca:83:7f:b2:2b:1e:1e:aa:fa:f0:e9:
         d2:e9:91:ef:a3:c5:90:b2:e0:6c:b0:e9:3f:74:a2:e4:6e:df:
         ce:3c:21:00:b8:51:18:fb:29:b2:8a:d0:bd:20:47:75:a2:d3:
         96:45:26:01:1c:85:1a:4c:2e:8d:ac:9f:ec:18:35:49:a2:f8:
         c5:cc:72:e2:bd:47:6d:e6:e6:75:29:cd:b2:9e:c6:1f:35:7d:
         04:a3:00:3b:b5:2f:4f:4b:00:4d:80:37:62:9a:cc:49:79:ae:
         f0:c1:af:f8:ac:c4:d3:5e:31:03:a2:48:1a:bc:04:a4:92:52:
         48:ba:17:03:af:d7:52:7a:89:1b:18:13:05:7c:0d:94:82:62:
         96:02:4b:56:6f:2b:e2:20:7b:8f:be:eb:31:6d:a4:c4:b4:ee:
         31:47:b2:ed:48:1f:9f:8e:fb:e3:52:9f:69:91:91:83:22:18:
         19:e7:c3:6a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEed7z0LGkXeiETeRqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2
NDdhMB4XDTI0MTAyMTE3MDM1NFoXDTI1MDExOTE4MDM1NFowLzEtMCsGA1UEAxMk
NWM1NGNkMTMtODk2Ny00YWRlLWIwN2YtOTk4MjAzZWVkMTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUWTwNDig5tDpo703kzgRDl8B3N7t3GBczL5
dBXhkTe4a4jiMZrVgKxFLR/u4pW3I/G/HDe8qvW6gSoZGuCUqioLKpyXmzTqJhoD
BwVAE8/wT9//WzozHrDtIiHAmqgNRPml8drw45cKsSb58A3/VQAIjJ7jnjQ3WA5s
TjR4NXL1d7prnSGa0ohVheyzyU9SD7abO2XFbHxoj5Hxnyg9fqwJjNq/p7iDDvKK
vkyXYDRZ/njyD0zF8rJAh3F9h26ZHrVC4EEsAyOKSu3eFAXKXg+E70JDKvX9qjXx
e4S4gl6wP9PYjRFYDTCdqA6z70w4RHW/GvlfdDaRiBhTWJJMhwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEHtdKK0DQ9Y1EtnK2PvUSR+K79jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj
NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMmU1OGQ1NzQtMTFmZC0z
MjQ4LThkNDYtODJkOGM0ZDkzMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0
YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0
NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5
MWEzNDY0N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf8MAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJRIZj9W6jzbhgS8G7doVoOBmkTeme31amVHmgbS4O91cZHI9U5Ms
hUx8rkCEF1gc2N5+qEPqur8Z1yD+80O5JF0Ij4rlphEi2eTMxbeLXMqDf7IrHh6q
+vDp0umR76PFkLLgbLDpP3Si5G7fzjwhALhRGPspsorQvSBHdaLTlkUmARyFGkwu
jayf7Bg1SaL4xcxy4r1HbebmdSnNsp7GHzV9BKMAO7UvT0sATYA3YprMSXmu8MGv
+KzE014xA6JIGrwEpJJSSLoXA6/XUnqJGxgTBXwNlIJilgJLVm8r4iB7j77rMW2k
xLTuMUey7Ugfn47741KfaZGRgyIYGefDag==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:16 2024 by rpki-client on console-fra.rpki-client.org