Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa
File:                     00afe954-cb24-34e5-9db9-d86711c1a5cf.roa (raw, json)
Hash identifier:          0M44fDaRMlzbHKsJ5PIP0w1qSFX0LHmG3tv1fTordKo=
Subject key identifier:   B4:F8:38:64:D5:BE:37:C2:E1:76:D5:4D:CD:26:D4:E3:D5:21:39:FD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A127FDA8DC1DA62187D840
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10838
IP address blocks:        2600:5c00::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:27:fd:a8:dc:1d:a6:21:87:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=0cc3ccfb-a50e-4ea1-9e00-b10f95abc5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:79:bf:b9:18:f2:ef:00:e2:b1:6c:2a:44:
                    87:6e:07:7e:91:ac:27:51:6b:58:dc:55:c2:db:0d:
                    4e:b0:83:30:b0:fa:e3:f1:40:29:c5:8b:f9:af:52:
                    fd:8f:33:27:65:c2:f4:37:a1:7e:16:b5:c8:a6:05:
                    47:bb:3f:33:e0:94:90:22:8b:dc:3b:66:a6:ca:93:
                    02:2d:8f:6b:78:c0:f3:95:06:4e:20:23:05:8b:28:
                    2b:ed:6a:eb:64:b9:d7:cb:72:af:42:26:45:92:8d:
                    e5:de:57:3a:56:ee:4f:b0:fe:8f:30:d3:a4:49:3c:
                    51:8d:d9:a9:9b:31:22:d3:93:d5:15:f9:5c:9e:c2:
                    c3:c2:6d:63:a4:d2:44:a2:6c:02:bd:f8:60:ca:b9:
                    4c:73:8e:65:cf:28:cc:2c:0f:58:ef:ee:0e:15:72:
                    68:d9:9b:20:cf:dd:4f:dd:cc:5d:f5:bd:3b:67:d0:
                    74:e1:52:f8:1b:bd:c4:15:1b:22:93:24:c9:7a:6c:
                    4a:4e:fc:58:be:6a:c9:1a:3c:e1:f8:49:8d:03:c1:
                    45:9b:e8:98:8a:d8:1b:67:78:80:52:f7:53:8e:f0:
                    31:a1:3f:e6:17:77:f4:7a:0e:23:5e:a5:ad:d1:c9:
                    da:5a:2f:83:d2:bc:5a:62:24:8e:23:8a:15:33:b9:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F8:38:64:D5:BE:37:C2:E1:76:D5:4D:CD:26:D4:E3:D5:21:39:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/00afe954-cb24-34e5-9db9-d86711c1a5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c00::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b2:16:85:70:de:e2:81:8a:62:d0:84:b9:cc:51:17:89:7a:
         fc:6b:41:86:0c:b2:76:ea:8b:b0:d8:e2:38:9e:5e:83:9d:89:
         b8:0a:14:d6:8b:a7:48:8d:99:9a:ae:66:b7:aa:a1:23:31:54:
         60:6c:5c:e1:c0:22:0d:b6:36:5e:41:8e:ad:b7:ad:34:84:a0:
         07:fe:8e:66:c5:24:b8:60:6b:72:75:34:33:a5:da:74:4b:09:
         c8:50:ad:b2:20:bb:44:2c:55:70:07:78:5f:1a:92:8a:fb:c9:
         37:a7:b5:4c:0f:57:18:ba:27:17:87:9d:8d:72:4a:f0:b7:21:
         37:5c:dd:78:47:57:22:b1:71:95:cc:f4:9c:89:b0:83:a8:a9:
         68:7b:9b:0a:da:0f:1c:87:77:96:db:b4:8a:a2:68:0d:4d:14:
         58:12:76:99:8f:db:f4:69:2d:83:46:af:ac:bb:29:71:83:8b:
         1f:a3:9c:8a:0b:fc:6d:62:da:44:bf:36:c3:7b:4c:f2:f0:a1:
         04:23:bf:5e:11:03:4c:a4:1c:a6:99:9e:c4:8f:7b:d8:3d:69:
         b2:97:f2:5d:1d:64:cb:6d:fb:80:9c:d7:02:98:39:c2:94:d6:
         9e:2e:87:0b:28:85:59:68:d7:d5:9a:d7:78:0c:1a:60:e7:2e:
         25:e7:c0:3e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEcioSf9qNwdpiGH2EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
MGNjM2NjZmItYTUwZS00ZWExLTllMDAtYjEwZjk1YWJjNWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHF5v7kY8u8A4rFsKkSHbgd+kawnUWtY3FXC
2w1OsIMwsPrj8UApxYv5r1L9jzMnZcL0N6F+FrXIpgVHuz8z4JSQIovcO2amypMC
LY9reMDzlQZOICMFiygr7WrrZLnXy3KvQiZFko3l3lc6Vu5PsP6PMNOkSTxRjdmp
mzEi05PVFflcnsLDwm1jpNJEomwCvfhgyrlMc45lzyjMLA9Y7+4OFXJo2Zsgz91P
3cxd9b07Z9B04VL4G73EFRsikyTJemxKTvxYvmrJGjzh+EmNA8FFm+iYitgbZ3iA
UvdTjvAxoT/mF3f0eg4jXqWt0cnaWi+D0rxaYiSOI4oVM7npOwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLT4OGTVvjfC4XbVTc0m1OPVITn9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMDBhZmU5NTQtY2IyNC0z
NGU1LTlkYjktZDg2NzExYzFhNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgBcAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAT7IWhXDe4oGKYtCEucxRF4l6/GtBhgyyduqLsNjiOJ5eg52JuAoU
1ounSI2Zmq5mt6qhIzFUYGxc4cAiDbY2XkGOrbetNISgB/6OZsUkuGBrcnU0M6Xa
dEsJyFCtsiC7RCxVcAd4XxqSivvJN6e1TA9XGLonF4edjXJK8LchN1zdeEdXIrFx
lcz0nImwg6ipaHubCtoPHId3ltu0iqJoDU0UWBJ2mY/b9Gktg0avrLspcYOLH6Oc
igv8bWLaRL82w3tM8vChBCO/XhEDTKQcppmexI972D1pspfyXR1ky237gJzXApg5
wpTWni6HCyiFWWjX1ZrXeAwaYOcuJefAPg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:20 2024 by rpki-client on console-fra.rpki-client.org