Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/119a5b2d-d36d-31d1-aa2b-25c354c2974a.roa
File:                     119a5b2d-d36d-31d1-aa2b-25c354c2974a.roa (raw, json)
Hash identifier:          /m7a+QK8Et8E5G+YDopKofGrxF9yfRHo7j5Z33xHcYc=
Subject key identifier:   8A:76:6D:49:C9:8E:5A:E7:E2:43:B9:71:27:15:41:1A:4D:33:4E:1B
Certificate issuer:       /CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
Certificate serial:       010D0C9F432858476F662FF5F3B8044A69B23DC0
Authority key identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/119a5b2d-d36d-31d1-aa2b-25c354c2974a.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     1742
IP address blocks:        2607:fb60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:2f:f5:f3:b8:04:4a:69:b2:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=13c1a8ed-bf04-4673-89e5-d94c1292471a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:53:6c:11:90:16:71:a1:4c:19:60:51:87:80:
                    53:df:a9:c3:86:d9:4a:6c:28:29:b6:2e:58:d1:6e:
                    35:95:87:08:60:46:65:8c:57:5b:68:04:6a:0d:86:
                    46:af:3e:24:e6:d1:6d:d1:51:79:2f:44:cf:1f:3b:
                    82:f5:cf:26:c6:af:9c:75:cb:0a:98:5b:ac:05:57:
                    e8:c4:4a:90:d5:b6:39:ba:3a:c7:c1:c9:4e:57:0a:
                    48:18:96:97:7a:27:67:27:ad:84:3a:69:8e:66:8b:
                    30:de:a1:5d:d1:7c:54:57:f2:37:71:74:0c:a5:b7:
                    ea:75:f4:d9:1b:85:4e:fb:f6:57:45:1e:0d:40:b2:
                    95:6f:e7:73:05:b8:0b:06:dc:ae:8e:d8:dc:95:95:
                    35:60:54:fe:ca:70:b1:87:73:dc:18:7b:ca:73:9d:
                    03:e6:27:c5:69:1c:3b:4c:bb:d2:16:0d:b9:3f:6d:
                    84:07:3c:72:03:0f:fa:69:73:70:17:d4:75:31:bf:
                    59:2d:0f:1b:bf:30:e1:4d:34:50:ce:2a:23:8e:d7:
                    c7:76:f7:c6:ea:40:64:38:14:2b:bc:a8:73:48:50:
                    a4:a4:f2:fe:3f:18:ba:7d:04:64:b1:37:ca:72:c8:
                    53:73:a9:fd:98:37:3e:63:e6:2f:3c:bf:9c:5f:c0:
                    7f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:76:6D:49:C9:8E:5A:E7:E2:43:B9:71:27:15:41:1A:4D:33:4E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/119a5b2d-d36d-31d1-aa2b-25c354c2974a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl

            X509v3 Authority Key Identifier:
                keyid:54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb60::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:99:77:37:e2:78:37:df:c6:4d:af:0d:6a:00:6c:4b:b1:
         ae:f9:0d:a5:4e:e6:93:75:03:b4:4e:41:05:f4:33:7b:b2:91:
         55:09:74:b3:3c:bd:80:ed:84:1f:df:bc:65:cc:dc:f7:fd:67:
         ac:ed:e8:61:76:15:2a:13:e3:ac:18:ba:05:04:9f:35:39:df:
         fc:47:d5:c8:97:85:51:37:52:62:bd:0b:1d:a9:be:03:db:c5:
         7b:2a:19:ec:b5:b9:e0:bb:0a:08:58:88:4c:eb:67:42:d9:34:
         73:1d:41:27:c5:d9:ce:b4:26:81:b0:df:d7:41:64:20:aa:a6:
         ee:82:5b:d8:ee:c2:67:61:d1:c6:df:15:94:17:77:77:5f:e5:
         88:45:e8:0f:15:b1:34:84:5e:c3:76:48:8c:85:a2:d7:ed:e6:
         6f:90:d6:2e:9a:c4:2d:46:fb:dc:cc:b4:ce:69:9c:5a:64:33:
         8f:ab:eb:61:be:6b:69:88:a9:16:8a:dd:4f:4c:00:13:42:5f:
         ed:b3:60:78:47:5f:e7:ea:a3:bb:30:39:66:47:03:e6:53:26:
         19:e2:bd:7b:30:6a:0e:ee:bc:21:2b:a0:9e:c6:5b:87:46:db:
         77:81:47:5d:72:99:2f:6b:5a:57:2a:4f:b6:35:a9:8c:dc:95:
         02:8e:dd:8e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdvZi/187gESmmyPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE2Zjg3YjYtM2Q5MC00NDlmLTljYTMtZDA1N2ZjN2Iy
YTVmMB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk
MTNjMWE4ZWQtYmYwNC00NjczLTg5ZTUtZDk0YzEyOTI0NzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1NsEZAWcaFMGWBRh4BT36nDhtlKbCgpti5Y
0W41lYcIYEZljFdbaARqDYZGrz4k5tFt0VF5L0TPHzuC9c8mxq+cdcsKmFusBVfo
xEqQ1bY5ujrHwclOVwpIGJaXeidnJ62EOmmOZosw3qFd0XxUV/I3cXQMpbfqdfTZ
G4VO+/ZXRR4NQLKVb+dzBbgLBtyujtjclZU1YFT+ynCxh3PcGHvKc50D5ifFaRw7
TLvSFg25P22EBzxyAw/6aXNwF9R1Mb9ZLQ8bvzDhTTRQziojjtfHdvfG6kBkOBQr
vKhzSFCkpPL+Pxi6fQRksTfKcshTc6n9mDc+Y+YvPL+cX8B/gwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIp2bUnJjlrn4kO5cScVQRpNM04bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMTZm
ODdiNi0zZDkwLTQ0OWYtOWNhMy1kMDU3ZmM3YjJhNWYvMTE5YTViMmQtZDM2ZC0z
MWQxLWFhMmItMjVjMzU0YzI5NzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDE2Zjg3YjYtM2Q5MC00NDlmLTlj
YTMtZDA1N2ZjN2IyYTVmLzAxNmY4N2I2LTNkOTAtNDQ5Zi05Y2EzLWQwNTdmYzdi
MmE1Zi5jcmwwHwYDVR0jBBgwFoAUVOQzuD29p21RAa5CE3ZPPewc/HYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMTZmODdiNi0zZDkwLTQ0OWYtOWNhMy1kMDU3
ZmM3YjJhNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7YDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBl/Zl3N+J4N9/GTa8NagBsS7Gu+Q2lTuaTdQO0TkEF9DN7spFVCXSz
PL2A7YQf37xlzNz3/Wes7ehhdhUqE+OsGLoFBJ81Od/8R9XIl4VRN1JivQsdqb4D
28V7KhnstbnguwoIWIhM62dC2TRzHUEnxdnOtCaBsN/XQWQgqqbuglvY7sJnYdHG
3xWUF3d3X+WIRegPFbE0hF7DdkiMhaLX7eZvkNYumsQtRvvczLTOaZxaZDOPq+th
vmtpiKkWit1PTAATQl/ts2B4R1/n6qO7MDlmRwPmUyYZ4r17MGoO7rwhK6CexluH
Rtt3gUddcpkva1pXKk+2NamM3JUCjt2O
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org