Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/01bb21ca-d25d-347c-bb2a-6f82d02ab8fb.roa
File:                     01bb21ca-d25d-347c-bb2a-6f82d02ab8fb.roa (raw, json)
Hash identifier:          5EXmBFztV/CVwoS2JwiQEJ/wsgrCv293IRGxOD1Kxno=
Subject key identifier:   DB:01:72:FE:04:8B:3E:0C:5F:73:95:4E:34:8C:EA:2D:94:F9:10:5E
Certificate issuer:       /CN=ae746161-70fc-4a1b-8327-03cf4ca58ca9
Certificate serial:       010D0C9F43285847739655B361D82AA2F17CED00
Authority key identifier: EB:8F:89:E5:45:92:F6:EE:B0:91:05:C5:9A:DE:02:68:CF:A7:26:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/01bb21ca-d25d-347c-bb2a-6f82d02ab8fb.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     25728
IP address blocks:        2620:27:40c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/ae746161-70fc-4a1b-8327-03cf4ca58ca9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/ae746161-70fc-4a1b-8327-03cf4ca58ca9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:55:b3:61:d8:2a:a2:f1:7c:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae746161-70fc-4a1b-8327-03cf4ca58ca9
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=f7dff894-5bf0-4df9-943f-4a08b7df9096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:8f:38:e6:cc:6e:4f:80:d5:a6:a7:ef:3e:
                    6b:5f:96:c4:28:39:46:dd:ae:c5:b1:91:84:2a:64:
                    40:ea:aa:74:fe:e4:47:91:58:fd:41:08:16:54:9f:
                    2f:64:1b:35:02:cb:c7:70:a8:fe:d4:e3:b9:a5:84:
                    97:ad:5d:17:3c:c1:18:f2:e3:fe:21:34:19:53:ae:
                    67:56:4f:6a:63:64:f0:ed:4f:de:97:9a:43:ba:69:
                    41:da:a7:1e:5e:c6:50:de:9e:76:61:bc:6a:a5:e8:
                    3f:c0:06:b2:78:ea:c1:9a:68:5f:09:87:88:8c:1a:
                    dd:27:36:17:7e:fa:55:43:2c:14:9f:28:55:87:26:
                    43:4b:5f:6e:1b:ba:bf:a3:2c:ef:23:e9:d4:c1:d3:
                    29:ae:e4:e8:2f:8c:0d:38:70:10:6f:35:e2:9a:3c:
                    61:73:9c:94:85:fe:f9:34:12:66:67:e8:ea:d6:59:
                    27:f6:e7:20:4a:6e:58:3a:0e:5e:5c:b2:e6:6a:a9:
                    f8:8b:7f:85:5f:3c:17:3b:4d:17:e2:5b:97:e1:44:
                    60:47:a6:be:84:6d:4d:c1:6f:53:2a:68:fc:b4:1f:
                    00:97:03:be:4c:ec:0c:0b:76:5b:38:bb:5d:a7:eb:
                    1a:c8:32:68:ad:92:6a:ec:f8:06:f9:df:65:d0:32:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:72:FE:04:8B:3E:0C:5F:73:95:4E:34:8C:EA:2D:94:F9:10:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/01bb21ca-d25d-347c-bb2a-6f82d02ab8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/ae746161-70fc-4a1b-8327-03cf4ca58ca9.crl

            X509v3 Authority Key Identifier:
                keyid:EB:8F:89:E5:45:92:F6:EE:B0:91:05:C5:9A:DE:02:68:CF:A7:26:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:27:40c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:48:3c:86:83:67:c5:86:ea:51:00:24:54:ee:09:62:28:55:
         23:10:4b:91:32:68:c7:bb:e2:2d:d0:e3:f2:5b:15:18:c6:9d:
         72:24:a5:f4:69:d9:f8:6b:cc:26:7a:89:01:38:3c:41:12:a0:
         91:44:c9:ad:76:f0:56:54:60:45:34:f5:78:82:d1:62:42:73:
         be:14:12:08:62:46:0d:ec:40:2b:07:81:a4:7d:58:9d:d4:d0:
         7a:60:c2:82:fb:19:ad:95:3f:b6:4e:1e:01:1d:fe:5b:21:90:
         14:dd:e6:25:d0:03:b5:b3:ab:bd:3c:7d:59:5f:ff:d7:d0:85:
         09:03:f9:1a:f3:6d:4a:e1:c8:7a:1a:5a:4f:9f:91:4f:f9:60:
         86:ec:95:b9:1e:fc:de:1a:68:fd:71:9d:12:34:d4:f7:6c:ce:
         79:19:2a:85:f1:2a:24:91:72:d9:58:c8:6e:0f:64:cd:d5:37:
         17:42:1c:43:f2:c6:39:dc:f5:c7:94:f9:16:05:48:d2:1e:3d:
         92:cd:42:4b:76:50:71:5c:36:7b:dc:68:e8:e1:d5:6d:23:9a:
         18:ea:1f:e6:41:e9:83:da:81:e8:d8:96:08:07:dc:9a:9d:6b:
         50:03:f8:72:3e:f0:74:d7:0c:80:fd:2b:99:8f:97:d7:a1:53:
         9e:d3:d5:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdzllWzYdgqovF87QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU3NDYxNjEtNzBmYy00YTFiLTgzMjctMDNjZjRjYTU4
Y2E5MB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjdkZmY4OTQtNWJmMC00ZGY5LTk0M2YtNGEwOGI3ZGY5MDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQiPOObMbk+A1aan7z5rX5bEKDlG3a7FsZGE
KmRA6qp0/uRHkVj9QQgWVJ8vZBs1AsvHcKj+1OO5pYSXrV0XPMEY8uP+ITQZU65n
Vk9qY2Tw7U/el5pDumlB2qceXsZQ3p52Ybxqpeg/wAayeOrBmmhfCYeIjBrdJzYX
fvpVQywUnyhVhyZDS19uG7q/oyzvI+nUwdMpruToL4wNOHAQbzXimjxhc5yUhf75
NBJmZ+jq1lkn9ucgSm5YOg5eXLLmaqn4i3+FXzwXO00X4luX4URgR6a+hG1NwW9T
Kmj8tB8AlwO+TOwMC3ZbOLtdp+sayDJorZJq7PgG+d9l0DJVGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNsBcv4Eiz4MX3OVTjSM6i2U+RBeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZTc0
NjE2MS03MGZjLTRhMWItODMyNy0wM2NmNGNhNThjYTkvMDFiYjIxY2EtZDI1ZC0z
NDdjLWJiMmEtNmY4MmQwMmFiOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWU3NDYxNjEtNzBmYy00YTFiLTgz
MjctMDNjZjRjYTU4Y2E5L2FlNzQ2MTYxLTcwZmMtNGExYi04MzI3LTAzY2Y0Y2E1
OGNhOS5jcmwwHwYDVR0jBBgwFoAU64+J5UWS9u6wkQXFmt4CaM+nJoUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZTc0NjE2MS03MGZjLTRhMWItODMyNy0wM2Nm
NGNhNThjYTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAJ0DA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACdIPIaDZ8WG6lEAJFTuCWIoVSMQS5EyaMe74i3Q4/JbFRjGnXIk
pfRp2fhrzCZ6iQE4PEESoJFEya128FZUYEU09XiC0WJCc74UEghiRg3sQCsHgaR9
WJ3U0HpgwoL7Ga2VP7ZOHgEd/lshkBTd5iXQA7Wzq708fVlf/9fQhQkD+RrzbUrh
yHoaWk+fkU/5YIbslbke/N4aaP1xnRI01PdsznkZKoXxKiSRctlYyG4PZM3VNxdC
HEPyxjnc9ceU+RYFSNIePZLNQkt2UHFcNnvcaOjh1W0jmhjqH+ZB6YPagejYlggH
3Jqda1AD+HI+8HTXDID9K5mPl9ehU57T1UQ=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:27 2024 by rpki-client on console-ams.rpki-client.org