Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/65396976-9144-3801-a7b5-4b24a3fb56a0.roa
File:                     65396976-9144-3801-a7b5-4b24a3fb56a0.roa (raw, json)
Hash identifier:          tCBKjRCjXzrSyxr9Rx8rpJN9EZpj095Ubfp83JVtVQY=
Subject key identifier:   90:7B:0B:29:27:52:9E:C0:7E:E8:36:8E:F0:9D:36:53:4F:90:BC:CA
Certificate issuer:       /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Certificate serial:       010D0C9F432858470161BA454110682E27DB9080
Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/65396976-9144-3801-a7b5-4b24a3fb56a0.roa
Signing time:             Mon 26 Aug 2024 15:12:40 +0000
ROA not before:           Mon 26 Aug 2024 15:12:40 +0000
ROA not after:            Sun 24 Nov 2024 16:12:40 +0000
asID:                     3580
IP address blocks:        2607:f8d8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:61:ba:45:41:10:68:2e:27:db:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
        Validity
            Not Before: Aug 26 15:12:40 2024 GMT
            Not After : Nov 24 16:12:40 2024 GMT
        Subject: CN=004541bb-8ba5-4f96-a9f9-d3e3726d40ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:82:6a:8f:be:04:04:26:cb:4e:47:90:8e:
                    d8:be:f2:a9:a4:fb:0a:00:2c:bf:23:26:75:be:7f:
                    db:e9:e6:eb:38:4c:ab:e3:eb:4f:d9:ac:92:86:96:
                    83:f3:9d:40:f2:06:0c:77:0a:42:94:b6:c1:25:b8:
                    68:22:3a:71:ba:c7:e5:88:d1:40:45:36:01:8b:33:
                    f2:50:72:70:e6:43:ac:57:83:af:e8:cd:f9:c2:bc:
                    53:91:1c:8c:4e:bd:e5:7e:18:d3:05:68:73:2c:a6:
                    83:ee:0e:c4:fb:7b:72:01:75:23:a9:d5:ec:15:ae:
                    ff:6c:25:24:f2:9e:97:36:1e:a3:76:e1:cb:1f:56:
                    85:dd:1b:43:e4:50:8d:39:b2:cd:9e:94:e7:dc:7d:
                    1c:17:32:a7:2e:05:1e:4c:8d:e3:9e:3b:bf:4b:a9:
                    fa:97:0b:83:c3:17:3a:63:72:ec:f7:62:df:e7:52:
                    02:60:98:8a:da:86:09:c1:35:06:5d:18:f9:6e:47:
                    15:15:ff:a4:df:d6:b9:31:2d:b6:50:8f:78:3c:2a:
                    86:47:a3:2d:d9:59:4b:3d:07:b2:ee:49:3e:73:8d:
                    a0:4d:d9:2e:19:d9:61:7a:39:71:ae:e2:81:8b:15:
                    d0:df:ff:40:b9:07:ac:13:2b:c7:43:f2:f2:3b:b7:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7B:0B:29:27:52:9E:C0:7E:E8:36:8E:F0:9D:36:53:4F:90:BC:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/65396976-9144-3801-a7b5-4b24a3fb56a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl

            X509v3 Authority Key Identifier:
                keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8d8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:a6:be:23:7c:21:da:4f:24:cc:e3:34:03:3b:97:fe:c8:
         21:d2:dd:4d:0b:77:06:a6:bd:58:fa:f1:24:84:48:e3:23:39:
         86:3b:36:aa:af:d4:5f:28:40:4b:f0:b9:af:54:53:68:b9:39:
         50:78:1a:e5:15:42:e9:1f:9e:99:3d:48:8e:2b:44:f7:a7:24:
         2b:ff:e7:20:d7:ee:11:35:04:42:ef:d9:f6:47:02:15:c4:80:
         f2:4a:4b:d8:d5:ad:b0:dc:7d:cd:b3:1d:ad:10:7b:36:d8:1f:
         f0:ca:68:af:f1:2f:3a:be:30:5b:e1:67:65:eb:48:b9:5c:aa:
         2a:ff:6f:a4:b5:f6:35:ca:32:e6:b2:55:42:dd:97:d3:98:41:
         56:f2:fe:d1:b6:22:ab:78:b3:e4:a7:a6:09:e4:ea:cf:db:ce:
         93:e1:d2:3d:e4:28:be:92:a6:2a:28:ee:8f:b6:64:c1:e8:6b:
         16:0a:71:cb:85:89:2b:95:b0:e8:4e:74:82:66:3f:9c:31:e7:
         41:3d:4b:26:d7:e3:71:ca:b9:3b:0f:92:e4:c0:69:62:c5:0f:
         17:a8:81:35:35:72:1e:9d:d5:64:11:f9:9c:d8:82:ee:67:a0:
         15:dd:24:f0:c3:38:f7:2c:36:5d:df:7b:ba:f7:6e:ca:c5:ad:
         28:ba:73:66
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcBYbpFQRBoLifbkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZhNjI3NTgtYjNkNi00ZDNkLWEzZTUtM2NlNjFiYWY5
YzgxMB4XDTI0MDgyNjE1MTI0MFoXDTI0MTEyNDE2MTI0MFowLzEtMCsGA1UEAxMk
MDA0NTQxYmItOGJhNS00Zjk2LWE5ZjktZDNlMzcyNmQ0MGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQSCao++BAQmy05HkI7YvvKppPsKACy/IyZ1
vn/b6ebrOEyr4+tP2ayShpaD851A8gYMdwpClLbBJbhoIjpxusfliNFARTYBizPy
UHJw5kOsV4Ov6M35wrxTkRyMTr3lfhjTBWhzLKaD7g7E+3tyAXUjqdXsFa7/bCUk
8p6XNh6jduHLH1aF3RtD5FCNObLNnpTn3H0cFzKnLgUeTI3jnju/S6n6lwuDwxc6
Y3Ls92Lf51ICYJiK2oYJwTUGXRj5bkcVFf+k39a5MS22UI94PCqGR6Mt2VlLPQey
7kk+c42gTdkuGdlhejlxruKBixXQ3/9AuQesEyvHQ/LyO7fEcwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJB7CyknUp7Afug2jvCdNlNPkLzKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2
Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2MWJhZjljODEvNjUzOTY5NzYtOTE0NC0z
ODAxLWE3YjUtNGIyNGEzZmI1NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZhNjI3NTgtYjNkNi00ZDNkLWEz
ZTUtM2NlNjFiYWY5YzgxL2FmYTYyNzU4LWIzZDYtNGQzZC1hM2U1LTNjZTYxYmFm
OWM4MS5jcmwwHwYDVR0jBBgwFoAUu0kEYIzjyKOONgsMxSsza5gXIs8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2
MWJhZjljODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf42DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAXv6a+I3wh2k8kzOM0AzuX/sgh0t1NC3cGpr1Y+vEkhEjjIzmGOzaq
r9RfKEBL8LmvVFNouTlQeBrlFULpH56ZPUiOK0T3pyQr/+cg1+4RNQRC79n2RwIV
xIDySkvY1a2w3H3Nsx2tEHs22B/wymiv8S86vjBb4Wdl60i5XKoq/2+ktfY1yjLm
slVC3ZfTmEFW8v7RtiKreLPkp6YJ5OrP286T4dI95Ci+kqYqKO6PtmTB6GsWCnHL
hYkrlbDoTnSCZj+cMedBPUsm1+Nxyrk7D5LkwGlixQ8XqIE1NXIendVkEfmc2ILu
Z6AV3STwwzj3LDZd33u6927Kxa0ounNm
-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org