Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa
File:                     fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa (raw, json)
Hash identifier:          PHm9siOH5Jf6+JerbihcNwf+rXlcrCD3ZzB5AN66bcI=
Subject key identifier:   46:DF:91:00:23:67:CE:81:8A:0A:F5:F1:51:CB:D0:B0:DE:72:85:BD
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DB933DDE9530BCAE11E40
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        2606:9300::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:b9:33:dd:e9:53:0b:ca:e1:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=43216aa9-88ba-4183-b124-e5971a2ac15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:b2:c8:af:18:e9:a7:37:3c:b0:32:b3:58:
                    ac:ef:aa:d4:38:30:90:83:04:3a:2e:25:de:19:2f:
                    6a:09:7f:22:3b:92:17:f1:fa:a2:e4:95:20:04:66:
                    0f:99:ac:ec:31:49:0f:8f:a8:4a:f5:43:e3:14:54:
                    b0:be:be:90:ee:a9:3c:02:31:a4:e9:6c:16:15:9c:
                    9e:c0:7e:fe:66:59:3e:3e:14:2a:f9:12:db:60:1d:
                    73:fe:e6:45:2f:11:ec:43:ff:85:ff:3a:fa:33:b8:
                    31:01:10:23:67:49:bd:14:90:32:0a:e2:ca:28:0f:
                    25:35:ac:2b:85:34:13:db:5d:a1:40:2e:f5:98:3e:
                    f4:3b:ef:45:e8:e8:b4:5e:44:be:f5:4b:99:72:8d:
                    62:37:be:2b:76:6a:f4:f5:26:33:8d:6b:20:ca:34:
                    e4:46:05:2d:f3:bb:ef:ab:2b:bb:b1:04:35:17:d8:
                    ac:32:19:38:25:c8:c5:fb:ee:ae:0c:ff:13:30:0b:
                    78:7f:f3:13:75:79:4c:d2:e2:6b:a0:77:05:01:32:
                    41:2e:01:c0:0a:bf:f5:e9:4a:69:59:7d:2f:5e:a2:
                    f5:a8:99:5e:4a:8d:e3:72:59:fa:19:4b:cc:a9:60:
                    ef:d2:8d:ee:77:32:e8:16:f8:03:b5:b6:8c:0e:c5:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DF:91:00:23:67:CE:81:8A:0A:F5:F1:51:CB:D0:B0:DE:72:85:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:50:b0:d6:24:74:a1:b1:07:f8:68:55:6d:45:1f:f6:95:
         29:9a:f3:30:76:68:71:c7:5a:dc:f4:5d:03:fc:f0:3e:2b:08:
         2b:eb:fb:15:f4:17:03:05:05:fb:af:c9:e8:1f:c1:97:cd:3a:
         3c:2a:6e:a3:75:5f:1f:71:1d:d9:db:a0:52:a7:59:9f:63:7f:
         0f:2d:91:59:7f:1a:2a:cc:46:37:09:2e:77:42:21:1f:02:d8:
         f1:ab:5c:fe:7b:c0:06:16:6e:30:c3:99:87:83:01:ec:a6:53:
         3c:94:58:b9:eb:0c:78:62:2e:37:0b:00:fc:82:b2:c4:27:48:
         c4:26:81:fd:12:1f:96:be:41:c4:9a:59:d9:a9:15:7e:57:70:
         0a:8e:4f:06:d4:78:3f:ad:05:c4:77:60:43:ad:e2:eb:5d:56:
         9f:22:72:79:0f:c8:2f:ee:8b:b5:31:46:70:6b:e0:fb:83:c6:
         8b:bf:05:32:7d:10:46:e5:e6:7f:80:31:96:c4:9e:68:29:ab:
         b4:d7:47:fa:63:52:e8:31:2c:3e:db:c9:ab:93:a5:dd:82:d4:
         3f:e5:e5:0f:b6:f4:06:15:bf:aa:b6:90:9d:92:84:11:61:42:
         ad:0e:51:93:28:e1:61:17:62:7a:48:e1:9c:a9:7c:b5:04:59:
         fc:fe:87:a6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEV3fbkz3elTC8rhHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
NDMyMTZhYTktODhiYS00MTgzLWIxMjQtZTU5NzFhMmFjMTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi62yyK8Y6ac3PLAys1is76rUODCQgwQ6LiXe
GS9qCX8iO5IX8fqi5JUgBGYPmazsMUkPj6hK9UPjFFSwvr6Q7qk8AjGk6WwWFZye
wH7+Zlk+PhQq+RLbYB1z/uZFLxHsQ/+F/zr6M7gxARAjZ0m9FJAyCuLKKA8lNawr
hTQT212hQC71mD70O+9F6Oi0XkS+9UuZco1iN74rdmr09SYzjWsgyjTkRgUt87vv
qyu7sQQ1F9isMhk4JcjF++6uDP8TMAt4f/MTdXlM0uJroHcFATJBLgHACr/16Upp
WX0vXqL1qJleSo3jcln6GUvMqWDv0o3udzLoFvgDtbaMDsXxdwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEbfkQAjZ86Bigr18VHL0LDecoW9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvZmU2NWU0YWQtOWQxZC0z
ZTIzLWEyNDMtMDVjY2NjYmNkMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaTADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB2GlCw1iR0obEH+GhVbUUf9pUpmvMwdmhxx1rc9F0D/PA+Kwgr6/sV
9BcDBQX7r8noH8GXzTo8Km6jdV8fcR3Z26BSp1mfY38PLZFZfxoqzEY3CS53QiEf
Atjxq1z+e8AGFm4ww5mHgwHsplM8lFi56wx4Yi43CwD8grLEJ0jEJoH9Eh+WvkHE
mlnZqRV+V3AKjk8G1Hg/rQXEd2BDreLrXVafInJ5D8gv7ou1MUZwa+D7g8aLvwUy
fRBG5eZ/gDGWxJ5oKau010f6Y1LoMSw+28mrk6XdgtQ/5eUPtvQGFb+qtpCdkoQR
YUKtDlGTKOFhF2J6SOGcqXy1BFn8/oem
-----END CERTIFICATE-----
Generated at Sat May 25 14:50:08 2024 by rpki-client on console-fra.rpki-client.org