Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/f42e97cc-5855-330d-8725-b86f611b7c4c.roa
File:                     f42e97cc-5855-330d-8725-b86f611b7c4c.roa (raw, json)
Hash identifier:          PW7A01sV288dQsOuQB0fBiWKQndnpFdkzSf8GmIMTTc=
Subject key identifier:   F5:51:48:3C:E9:15:7F:84:05:54:D3:6F:B1:45:C5:2B:E6:BE:62:04
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F43285847BAC6AA200C0C0E75B9019580
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/f42e97cc-5855-330d-8725-b86f611b7c4c.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     27364
IP address blocks:        2604:9f00::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:aa:20:0c:0c:0e:75:b9:01:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=ed1c977f-397f-4a35-8e86-f04ee79b4bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:83:79:ca:69:cc:fa:4e:56:4f:1d:8c:9a:
                    ad:a2:33:e5:16:a8:35:0e:70:1f:3c:4e:75:2e:50:
                    c6:6e:4c:3b:f8:34:cf:c9:0a:41:59:ca:7f:f6:48:
                    6d:dc:b3:c8:f7:f5:a2:32:75:89:92:68:77:b4:09:
                    6e:5b:49:b1:d8:ed:50:3b:68:06:59:cf:cb:ac:3e:
                    14:d3:c3:e6:5b:b1:0b:e0:1c:17:77:bf:29:20:21:
                    d9:7a:01:55:90:52:fa:7e:c4:c5:90:69:ed:22:8a:
                    82:db:18:20:56:ff:8f:53:b6:60:dd:88:c1:7c:da:
                    be:2d:fa:dc:86:72:e1:59:2f:3b:5c:43:6a:cc:d5:
                    a9:b4:5a:7c:25:33:7d:68:de:d2:fa:10:76:a7:dc:
                    77:52:c9:f2:06:ab:18:f4:b4:bd:70:05:45:74:df:
                    7f:58:7c:1d:ee:ae:3e:01:aa:89:0d:e1:43:80:73:
                    7f:40:31:55:54:5d:46:b0:56:b7:4f:ad:1d:11:a4:
                    0d:66:9a:43:df:7c:3c:70:eb:ce:dc:03:d3:32:f6:
                    18:d3:8f:95:0a:35:35:7d:b0:d8:7c:00:56:94:f4:
                    fe:71:f0:2e:ee:8e:82:00:3a:c8:d1:6c:34:84:88:
                    e1:4d:30:e8:3d:0a:de:5e:04:3a:8c:4d:ea:9d:1d:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:51:48:3C:E9:15:7F:84:05:54:D3:6F:B1:45:C5:2B:E6:BE:62:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/f42e97cc-5855-330d-8725-b86f611b7c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9f00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:88:92:16:76:d6:57:e7:b7:1c:63:44:14:84:bd:08:f2:40:
         79:cc:76:8e:d6:bf:ab:6f:5e:4e:36:ae:1a:75:37:3c:12:d3:
         05:f5:56:87:47:3c:53:86:cd:42:54:40:de:06:95:19:af:47:
         48:ff:eb:a5:58:1f:a7:91:9f:cf:89:e2:7e:06:e7:0a:54:ac:
         77:f0:92:ee:5a:37:f7:ca:ba:f8:e6:83:0e:18:34:42:f6:37:
         00:ea:a5:58:79:3c:9a:e6:45:70:0a:e1:4c:bd:81:dc:df:da:
         24:4c:27:2d:58:02:f1:12:f0:ad:73:f3:49:44:71:85:cb:fa:
         fd:2d:1d:f6:5f:c6:05:66:ff:87:78:28:ea:49:f8:19:a4:c2:
         0c:98:80:5d:30:33:c8:38:5d:3f:9d:44:12:f0:cf:5f:b6:42:
         ed:bd:d2:6e:46:90:80:f8:36:e4:ea:f7:05:69:26:39:a8:23:
         b5:a8:db:bc:b6:ce:19:a6:5e:b8:5f:70:12:7a:05:69:02:ac:
         41:3d:91:cf:6a:b1:e1:6b:86:4c:37:06:e4:64:40:a2:36:2e:
         33:87:18:25:42:98:85:5b:07:a8:00:33:44:33:9c:1a:c3:26:
         c0:5e:a6:0b:63:fc:57:ee:9a:0d:40:2c:9a:9d:8a:39:5e:ef:
         02:f2:41:99
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe6xqogDAwOdbkBlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ0Zjc2NTktMTEzZS00YjNjLWJlOWQtMjAwODIxYmM5
YTViMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
ZWQxYzk3N2YtMzk3Zi00YTM1LThlODYtZjA0ZWU3OWI0YmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4yDecppzPpOVk8djJqtojPlFqg1DnAfPE51
LlDGbkw7+DTPyQpBWcp/9kht3LPI9/WiMnWJkmh3tAluW0mx2O1QO2gGWc/LrD4U
08PmW7EL4BwXd78pICHZegFVkFL6fsTFkGntIoqC2xggVv+PU7Zg3YjBfNq+Lfrc
hnLhWS87XENqzNWptFp8JTN9aN7S+hB2p9x3UsnyBqsY9LS9cAVFdN9/WHwd7q4+
AaqJDeFDgHN/QDFVVF1GsFa3T60dEaQNZppD33w8cOvO3APTMvYY04+VCjU1fbDY
fABWlPT+cfAu7o6CADrI0Ww0hIjhTTDoPQreXgQ6jE3qnR1t8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPVRSDzpFX+EBVTTb7FFxSvmvmIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNDRm
NzY1OS0xMTNlLTRiM2MtYmU5ZC0yMDA4MjFiYzlhNWIvZjQyZTk3Y2MtNTg1NS0z
MzBkLTg3MjUtYjg2ZjYxMWI3YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQ0Zjc2NTktMTEzZS00YjNjLWJl
OWQtMjAwODIxYmM5YTViLzA0NGY3NjU5LTExM2UtNGIzYy1iZTlkLTIwMDgyMWJj
OWE1Yi5jcmwwHwYDVR0jBBgwFoAUw7o5dR9Nje8RX/3hFz1+7KaBgM4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNDRmNzY1OS0xMTNlLTRiM2MtYmU5ZC0yMDA4
MjFiYzlhNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgSfADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBjiJIWdtZX57ccY0QUhL0I8kB5zHaO1r+rb15ONq4adTc8EtMF9VaH
RzxThs1CVEDeBpUZr0dI/+ulWB+nkZ/PieJ+BucKVKx38JLuWjf3yrr45oMOGDRC
9jcA6qVYeTya5kVwCuFMvYHc39okTCctWALxEvCtc/NJRHGFy/r9LR32X8YFZv+H
eCjqSfgZpMIMmIBdMDPIOF0/nUQS8M9ftkLtvdJuRpCA+Dbk6vcFaSY5qCO1qNu8
ts4Zpl64X3ASegVpAqxBPZHParHha4ZMNwbkZECiNi4zhxglQpiFWweoADNEM5wa
wybAXqYLY/xX7poNQCyanYo5Xu8C8kGZ
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:26 2024 by rpki-client on console-ams.rpki-client.org