Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/0aefb46e-9d26-38f5-b6d1-39b4960a1cec.roa
File:                     0aefb46e-9d26-38f5-b6d1-39b4960a1cec.roa (raw, json)
Hash identifier:          dBYJw/iYGfi4BmQj7hYZw3MkAOeriXJrgLof5LPLepY=
Subject key identifier:   99:B0:24:C3:9F:BF:AE:64:65:4B:C3:42:CD:24:D0:65:4D:03:7B:60
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F4328584503C016D63F01A96FE7D5FA80
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/0aefb46e-9d26-38f5-b6d1-39b4960a1cec.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     398395
IP address blocks:        2606:fc40:40::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:16:d6:3f:01:a9:6f:e7:d5:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=985793e4-706c-48a1-8b5e-dc26e53a670b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:bb:bd:35:21:f2:e1:8c:3e:4e:37:8d:4a:
                    89:2d:0b:f6:91:ef:7c:55:bf:24:77:3e:1e:b4:7b:
                    72:17:4a:41:18:fd:08:f8:43:cd:2c:eb:52:50:f9:
                    40:1c:20:10:d6:5e:0e:5f:36:f9:1b:47:ad:69:6a:
                    de:13:d9:cb:21:59:7c:11:eb:03:f7:17:25:45:bb:
                    e0:d6:dc:7a:44:89:b6:c0:84:8a:ed:69:b1:bc:78:
                    73:3a:dc:ce:84:8d:05:c7:e8:6b:d0:26:81:e5:de:
                    bb:50:0e:4e:aa:64:2d:a8:a6:b7:38:fc:36:e6:1f:
                    6b:fd:f4:2d:0c:eb:d1:59:b5:55:9a:1c:2b:9f:95:
                    ad:d5:96:2c:aa:f0:9b:c4:72:ef:68:c1:44:a4:12:
                    a1:3e:e2:b7:0a:99:38:b0:5b:ad:bf:52:5b:1e:95:
                    fa:6c:b6:2a:4b:6a:23:63:69:65:71:cd:00:1a:ad:
                    42:28:ec:6e:13:8c:72:de:87:0a:2c:6e:a8:27:06:
                    1d:59:11:84:ff:62:d4:d1:6a:6e:2d:4a:1d:e3:3e:
                    c2:b1:dc:f3:b3:a1:2d:69:15:c1:9e:17:b9:34:00:
                    be:10:90:ff:a1:19:31:da:cb:55:d7:5d:24:78:ff:
                    6d:19:a5:6f:5b:c4:20:4b:79:75:cb:d7:3b:bd:95:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B0:24:C3:9F:BF:AE:64:65:4B:C3:42:CD:24:D0:65:4D:03:7B:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/0aefb46e-9d26-38f5-b6d1-39b4960a1cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:41:a0:1f:dd:c8:e7:a8:e7:9b:bf:b7:de:71:99:5f:87:0e:
         1a:df:5b:71:99:23:31:84:bf:e7:b6:84:14:8b:81:ae:66:08:
         71:a3:8a:6c:3f:18:94:0a:23:38:de:d5:97:07:25:e2:8f:ad:
         a7:bd:25:12:67:2c:8e:82:d2:d0:6e:05:e7:04:09:0c:16:25:
         79:e7:6e:1a:dc:b7:a5:d7:ff:b5:e2:65:9a:04:e9:a4:c4:6a:
         f7:59:46:be:9c:23:20:e6:ee:c8:d4:02:40:03:e6:ea:8a:cf:
         cd:b8:b3:43:36:ec:62:47:74:c7:f9:4d:01:c3:e5:2c:e5:39:
         4d:2c:94:14:73:4e:5c:01:58:2b:3f:17:59:da:0f:b7:71:1f:
         cb:6d:be:ab:43:d9:b4:86:05:8e:bd:fe:79:61:18:e2:a4:37:
         1b:4d:4b:a2:c7:9c:bc:fd:c8:c4:b7:b1:6a:dd:bf:d1:5e:58:
         81:14:e2:e9:23:61:4b:96:35:f3:fa:bf:40:42:04:98:69:a2:
         35:5e:3b:44:ee:04:f9:de:27:6b:12:b4:c4:98:3a:e4:af:4f:
         94:7a:00:22:21:39:20:c9:17:1d:32:7e:8d:fb:d8:a1:95:f7:
         52:70:82:e8:d8:39:53:05:61:0a:a7:84:64:73:c1:75:cd:1a:
         da:5d:68:2f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUDwBbWPwGpb+fV+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNjZWY3YTYtYjhkYi00NzUzLWI3MWYtZGQyZTQwZDU4
MDgxMB4XDTI0MDIyNjAyMDAyNloXDTI0MDUyNjAxMDAyNlowLzEtMCsGA1UEAxMk
OTg1NzkzZTQtNzA2Yy00OGExLThiNWUtZGMyNmU1M2E2NzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTW7vTUh8uGMPk43jUqJLQv2ke98Vb8kdz4e
tHtyF0pBGP0I+EPNLOtSUPlAHCAQ1l4OXzb5G0etaWreE9nLIVl8EesD9xclRbvg
1tx6RIm2wISK7WmxvHhzOtzOhI0Fx+hr0CaB5d67UA5OqmQtqKa3OPw25h9r/fQt
DOvRWbVVmhwrn5Wt1ZYsqvCbxHLvaMFEpBKhPuK3Cpk4sFutv1JbHpX6bLYqS2oj
Y2llcc0AGq1CKOxuE4xy3ocKLG6oJwYdWRGE/2LU0WpuLUod4z7Csdzzs6EtaRXB
nhe5NAC+EJD/oRkx2stV110keP9tGaVvW8QgS3l1y9c7vZXAOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJmwJMOfv65kZUvDQs0k0GVNA3tgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yY2Nl
ZjdhNi1iOGRiLTQ3NTMtYjcxZi1kZDJlNDBkNTgwODEvMGFlZmI0NmUtOWQyNi0z
OGY1LWI2ZDEtMzliNDk2MGExY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmNjZWY3YTYtYjhkYi00NzUzLWI3
MWYtZGQyZTQwZDU4MDgxLzJjY2VmN2E2LWI4ZGItNDc1My1iNzFmLWRkMmU0MGQ1
ODA4MS5jcmwwHwYDVR0jBBgwFoAU4sLPhJNqy7R9ZhIEXBOI5yPj8J0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yY2NlZjdhNi1iOGRiLTQ3NTMtYjcxZi1kZDJl
NDBkNTgwODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgb8QABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADlBoB/dyOeo55u/t95xmV+HDhrfW3GZIzGEv+e2hBSLga5mCHGj
imw/GJQKIzje1ZcHJeKPrae9JRJnLI6C0tBuBecECQwWJXnnbhrct6XX/7XiZZoE
6aTEavdZRr6cIyDm7sjUAkAD5uqKz824s0M27GJHdMf5TQHD5SzlOU0slBRzTlwB
WCs/F1naD7dxH8ttvqtD2bSGBY69/nlhGOKkNxtNS6LHnLz9yMS3sWrdv9FeWIEU
4ukjYUuWNfP6v0BCBJhpojVeO0TuBPneJ2sStMSYOuSvT5R6ACIhOSDJFx0yfo37
2KGV91JwgujYOVMFYQqnhGRzwXXNGtpdaC8=
-----END CERTIFICATE-----
Generated at Fri Apr 19 07:42:26 2024 by rpki-client on console-ams.rpki-client.org