Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8abb51f0-5438-3afa-b4fb-a1548b7b3a9c.roa
File:                     8abb51f0-5438-3afa-b4fb-a1548b7b3a9c.roa (raw, json)
Hash identifier:          g2vQBM63yQ16FTxEbIJLLzew6LaF042tXhHA9IKZ+Jw=
Subject key identifier:   3D:B9:2D:C6:89:84:5C:CC:78:90:13:70:C2:C0:30:93:6D:80:46:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628D97FCA1A486913F828AE0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8abb51f0-5438-3afa-b4fb-a1548b7b3a9c.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     7843
IP address blocks:        2001:1998:a01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:97:fc:a1:a4:86:91:3f:82:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=a8cb66f1-4f1a-4e36-8e4b-5bc6f6d061dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:71:86:5b:3f:d5:64:06:48:b3:1f:cb:60:
                    8e:39:51:bf:45:51:56:1d:a2:e3:8c:1a:19:66:2d:
                    4c:19:4e:25:f9:c6:62:78:ac:dc:83:81:09:02:68:
                    23:b0:eb:5b:3b:97:b9:2f:6e:41:2b:35:85:91:48:
                    bf:09:73:be:5a:77:15:5b:f5:a9:2c:17:20:32:4b:
                    bc:48:15:3e:60:96:23:6f:fa:32:95:dc:16:1f:cf:
                    25:16:87:fc:f2:73:ae:5c:4a:18:84:94:9c:c8:22:
                    23:47:4d:d9:44:5e:32:f4:58:14:ab:87:4a:ec:10:
                    f0:3a:de:c3:bc:ff:b1:31:35:2a:05:04:64:81:18:
                    3e:dd:19:6a:96:f7:42:57:5f:f3:bc:4e:44:62:7d:
                    c6:fd:51:23:24:5b:24:dd:28:28:0b:56:bb:1d:26:
                    27:2c:87:57:0e:6e:7e:27:b6:a0:60:26:36:8c:01:
                    ef:5c:5e:cc:b5:1f:46:e6:53:da:0f:34:9b:95:e0:
                    77:7c:95:74:3b:00:43:65:15:51:0c:24:c5:11:b5:
                    16:97:21:2f:d0:c3:c7:41:34:80:2d:99:f8:6b:a8:
                    a5:ee:ab:f5:62:37:ad:88:1d:4a:b2:be:fe:45:50:
                    06:77:99:70:e2:2a:3a:51:89:8f:30:8e:5c:a4:1f:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B9:2D:C6:89:84:5C:CC:78:90:13:70:C2:C0:30:93:6D:80:46:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8abb51f0-5438-3afa-b4fb-a1548b7b3a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1998:a01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:7d:84:3d:93:6e:e5:c7:04:29:47:16:83:b6:3f:79:8f:
         99:84:95:0b:e3:32:c7:87:9a:a0:a7:a3:75:b5:1c:13:cc:6a:
         6d:f0:af:f1:1a:69:a8:23:d2:b5:93:79:48:22:a5:d7:2e:2c:
         9f:a3:1c:f5:16:97:7f:37:8b:27:13:df:ad:b5:92:38:a9:2d:
         be:ed:3c:3c:c9:b9:45:a5:25:95:cc:90:89:2c:3f:84:51:5b:
         c7:de:69:3a:80:6a:4b:05:32:94:be:d6:28:a8:f9:51:53:36:
         45:66:03:4a:0c:63:2d:df:be:ae:54:13:46:b1:12:fe:9b:3a:
         7e:36:03:14:9b:99:a6:2b:65:8e:55:8d:06:e6:cb:bf:2f:d3:
         49:71:6c:08:b1:a7:b3:c7:67:a8:51:31:04:ce:5c:a9:9d:fb:
         52:97:6f:3f:ba:ac:8a:03:b9:2f:3b:b5:4b:93:00:7e:2c:66:
         c7:88:88:52:01:d1:3d:6b:a4:61:0a:38:df:50:b5:d9:b1:98:
         0f:6e:a6:d9:2a:2d:1e:b9:12:d4:aa:4b:f0:7c:d0:47:8a:f8:
         2c:53:d8:e9:fd:30:c4:2c:26:29:a6:f6:09:39:c1:f6:12:55:
         e5:6a:80:6d:a8:6c:7c:e2:91:64:61:0c:56:0d:cf:5e:3d:88:
         11:76:01:84
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVijZf8oaSGkT+CiuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
YThjYjY2ZjEtNGYxYS00ZTM2LThlNGItNWJjNmY2ZDA2MWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDZxhls/1WQGSLMfy2COOVG/RVFWHaLjjBoZ
Zi1MGU4l+cZieKzcg4EJAmgjsOtbO5e5L25BKzWFkUi/CXO+WncVW/WpLBcgMku8
SBU+YJYjb/oyldwWH88lFof88nOuXEoYhJScyCIjR03ZRF4y9FgUq4dK7BDwOt7D
vP+xMTUqBQRkgRg+3RlqlvdCV1/zvE5EYn3G/VEjJFsk3SgoC1a7HSYnLIdXDm5+
J7agYCY2jAHvXF7MtR9G5lPaDzSbleB3fJV0OwBDZRVRDCTFEbUWlyEv0MPHQTSA
LZn4a6il7qv1YjetiB1Ksr7+RVAGd5lw4io6UYmPMI5cpB8ncQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD25LcaJhFzMeJATcMLAMJNtgEZ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOGFiYjUxZjAtNTQzOC0z
YWZhLWI0ZmItYTE1NDhiN2IzYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZmAoB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE72fYQ9k27lxwQpRxaDtj95j5mElQvjMseHmqCno3W1HBPMam3w
r/Eaaagj0rWTeUgipdcuLJ+jHPUWl383iycT3621kjipLb7tPDzJuUWlJZXMkIks
P4RRW8feaTqAaksFMpS+1iio+VFTNkVmA0oMYy3fvq5UE0axEv6bOn42AxSbmaYr
ZY5VjQbmy78v00lxbAixp7PHZ6hRMQTOXKmd+1KXbz+6rIoDuS87tUuTAH4sZseI
iFIB0T1rpGEKON9QtdmxmA9uptkqLR65EtSqS/B80EeK+CxT2On9MMQsJimm9gk5
wfYSVeVqgG2obHzikWRhDFYNz149iBF2AYQ=
-----END CERTIFICATE-----
Generated at Thu May 2 03:26:40 2024 by rpki-client on console-ams.rpki-client.org