Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa
File:                     bae8e28d-e4a2-3286-91f3-d55570d1925e.roa (raw, json)
Hash identifier:          rxR8o6gWBAeI3QbHlHA8/r9m0I/kTIFko/aCFLDYoXM=
Subject key identifier:   A4:29:6B:9B:AC:9F:54:83:51:57:3D:50:8F:88:32:9E:DB:ED:BC:6F
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F432858459404D86D22B70BB024FDCA00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa
Signing time:             Wed 17 Apr 2024 18:15:28 +0000
ROA not before:           Wed 17 Apr 2024 18:15:28 +0000
ROA not after:            Tue 16 Jul 2024 18:15:28 +0000
asID:                     16904
IP address blocks:        2600:a00::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:94:04:d8:6d:22:b7:0b:b0:24:fd:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr 17 18:15:28 2024 GMT
            Not After : Jul 16 18:15:28 2024 GMT
        Subject: CN=bd5e2b49-364d-4992-88c8-eeafc62c498c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:2b:8b:e4:4a:67:04:61:8e:40:0a:9d:4e:
                    3e:f1:40:fb:b2:49:3c:6d:43:0e:18:98:ae:cc:95:
                    dd:9c:02:3b:4b:00:55:b6:22:b4:1d:da:d7:45:2c:
                    61:57:20:c2:47:97:11:48:58:98:8d:2b:88:e1:f2:
                    d5:d0:14:33:0b:1c:ff:14:64:0c:0b:90:60:7b:92:
                    62:02:3f:ec:f1:e1:2b:55:3f:97:ad:48:9a:74:29:
                    90:0a:a2:06:c5:1c:50:01:5c:b6:42:4b:b5:41:14:
                    21:4e:02:17:d1:bb:ef:45:51:92:bb:43:3b:07:83:
                    3f:f5:8c:82:d5:55:bc:e3:52:8f:e0:33:3e:41:db:
                    76:43:b8:33:5c:3c:55:de:37:0c:f7:40:d2:d1:11:
                    65:74:b5:34:17:8e:fd:0f:be:47:c2:81:f6:60:60:
                    af:05:e1:7a:d7:70:06:b9:91:8c:7b:b8:1a:41:dd:
                    c0:08:91:6c:e5:f6:90:58:c9:fc:5e:03:12:a6:69:
                    39:f7:5f:7c:7c:c9:70:14:3d:f5:28:d5:4f:99:cc:
                    b7:18:93:91:d6:be:03:5f:20:57:5e:bd:4e:fc:a7:
                    3b:8e:7a:20:d4:34:cb:26:98:5f:a4:d4:80:a6:ba:
                    74:a2:57:14:5b:9e:80:ad:e4:39:dc:e9:ea:b4:e4:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:29:6B:9B:AC:9F:54:83:51:57:3D:50:8F:88:32:9E:DB:ED:BC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9e:3f:da:ea:6c:51:a9:11:a9:13:cb:fe:9e:f8:e0:b5:89:
         97:4f:15:9c:ea:8d:9b:e4:29:69:ed:63:c5:ce:d9:78:11:d2:
         4f:70:f4:db:74:5e:9f:ca:66:56:86:f7:40:cc:91:78:34:66:
         e9:c9:3f:70:9c:8f:aa:f3:17:fc:a4:79:3c:ed:09:20:7e:f1:
         eb:8a:ec:5b:68:e7:cb:04:37:0b:5e:87:77:78:f0:9a:96:d9:
         0c:50:c1:3f:8e:b2:b4:60:47:0b:cb:d0:52:d6:33:ff:56:d7:
         bd:9a:a5:0f:93:0a:dc:96:dc:ca:5b:ba:11:50:22:18:1a:c7:
         0d:10:ac:a6:eb:cd:8e:a9:9b:4e:27:58:dc:04:66:b7:db:93:
         70:6b:66:8d:ac:6a:24:ad:e3:5f:64:8a:14:0c:4f:84:61:ff:
         b1:3a:21:a4:a9:0d:61:9d:04:9b:dc:78:e9:80:d6:7f:ee:3b:
         fe:a0:aa:5c:0e:24:74:c1:d8:7a:f1:a6:f9:30:c9:db:50:c7:
         88:13:46:27:c0:61:c1:70:23:ff:3f:22:af:55:5a:21:8b:e1:
         01:a1:f6:83:c6:89:66:80:6d:c9:83:24:aa:59:de:a2:a9:9a:
         c3:99:94:31:04:b8:68:e1:31:e6:e1:d8:b1:55:c9:5e:06:c6:
         a7:34:c1:e6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWUBNhtIrcLsCT9ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI0MDQxNzE4MTUyOFoXDTI0MDcxNjE4MTUyOFowLzEtMCsGA1UEAxMk
YmQ1ZTJiNDktMzY0ZC00OTkyLTg4YzgtZWVhZmM2MmM0OThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl4ri+RKZwRhjkAKnU4+8UD7skk8bUMOGJiu
zJXdnAI7SwBVtiK0HdrXRSxhVyDCR5cRSFiYjSuI4fLV0BQzCxz/FGQMC5Bge5Ji
Aj/s8eErVT+XrUiadCmQCqIGxRxQAVy2Qku1QRQhTgIX0bvvRVGSu0M7B4M/9YyC
1VW841KP4DM+Qdt2Q7gzXDxV3jcM90DS0RFldLU0F479D75HwoH2YGCvBeF613AG
uZGMe7gaQd3ACJFs5faQWMn8XgMSpmk59198fMlwFD31KNVPmcy3GJOR1r4DXyBX
Xr1O/Kc7jnog1DTLJphfpNSAprp0olcUW56AreQ53OnqtOQFEQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKQpa5usn1SDUVc9UI+IMp7b7bxvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYmFlOGUyOGQtZTRhMi0z
Mjg2LTkxZjMtZDU1NTcwZDE5MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAKADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAsnj/a6mxRqRGpE8v+nvjgtYmXTxWc6o2b5Clp7WPFztl4EdJPcPTb
dF6fymZWhvdAzJF4NGbpyT9wnI+q8xf8pHk87QkgfvHriuxbaOfLBDcLXod3ePCa
ltkMUME/jrK0YEcLy9BS1jP/Vte9mqUPkwrcltzKW7oRUCIYGscNEKym682OqZtO
J1jcBGa325Nwa2aNrGokreNfZIoUDE+EYf+xOiGkqQ1hnQSb3HjpgNZ/7jv+oKpc
DiR0wdh68ab5MMnbUMeIE0YnwGHBcCP/PyKvVVohi+EBofaDxolmgG3JgySqWd6i
qZrDmZQxBLho4THm4dixVcleBsanNMHm
-----END CERTIFICATE-----
Generated at Sat May 18 15:36:02 2024 by rpki-client on console-fra.rpki-client.org