Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/7d9edfbb-78b2-3f4d-a5fe-3dc4c031d943.roa
File:                     7d9edfbb-78b2-3f4d-a5fe-3dc4c031d943.roa (raw, json)
Hash identifier:          P7qDI+Dxh2BIE17dUeI9lV6mLZceSHWlL+H7kPuFOYA=
Subject key identifier:   71:03:36:2C:66:D0:E7:2C:05:2A:03:34:AA:DE:E5:91:11:2E:9B:F0
Certificate issuer:       /CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Certificate serial:       010D0C9F43285845B4E8DAF113B25D7E6BDB5700
Authority key identifier: 7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/7d9edfbb-78b2-3f4d-a5fe-3dc4c031d943.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     396045
IP address blocks:        2604:c8c0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:da:f1:13:b2:5d:7e:6b:db:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c39fb8-4da4-452b-a86f-8d28342d9446
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=ec472045-fd62-4f32-8768-690d38dd3fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:52:26:13:da:e5:76:34:3c:e8:21:99:ba:
                    ff:ba:55:46:d0:f8:b0:7d:ae:66:83:04:5c:50:55:
                    85:88:60:38:00:b4:2e:b6:47:df:1b:3b:2f:8f:40:
                    cd:65:a6:17:21:62:c8:f0:76:47:8f:1d:e0:89:0c:
                    bb:ce:2c:2b:94:bd:2d:18:40:01:2d:ea:6f:8e:05:
                    85:34:3a:6d:15:2e:be:1d:5c:a2:ba:51:10:22:30:
                    fe:5c:f6:35:9e:df:e3:4d:d8:23:e7:65:5e:f1:03:
                    75:ab:cc:cb:d6:de:13:8b:bd:72:5e:54:ec:8c:bb:
                    a1:85:25:d4:f4:3a:88:2a:f5:7a:50:13:d3:d5:dc:
                    30:ef:dc:48:ea:20:3d:95:b9:87:4b:37:aa:eb:7e:
                    a8:95:c8:f8:35:9b:5d:18:46:92:f8:7e:35:8e:2b:
                    af:d5:59:89:e3:10:ec:f4:ff:98:e0:4c:3a:c0:c3:
                    b7:94:66:50:57:4b:ac:cb:db:3d:fd:b6:ea:ef:76:
                    26:29:1b:ba:f5:4c:b7:a5:4d:67:e4:83:4e:3d:fe:
                    ae:c0:1f:a5:27:2e:38:8b:f8:64:6b:2a:76:5d:a7:
                    b9:e4:99:de:d4:ae:0a:53:af:ce:7d:0b:b1:44:7a:
                    9a:54:51:0f:79:b0:eb:9c:3b:a3:24:5b:2d:71:f2:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:03:36:2C:66:D0:E7:2C:05:2A:03:34:AA:DE:E5:91:11:2E:9B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/7d9edfbb-78b2-3f4d-a5fe-3dc4c031d943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl

            X509v3 Authority Key Identifier:
                keyid:7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c8c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7c:15:b0:af:b5:0d:af:8a:fa:d4:53:d7:10:be:95:a2:52:
         a6:9c:ef:59:e0:48:8a:16:8e:2b:b3:8c:a4:64:85:fc:65:cd:
         a5:41:de:a9:3c:b6:3f:4a:46:3e:71:48:9a:0b:42:f2:5f:a3:
         69:79:a1:12:16:70:3a:c6:c1:72:d6:37:a2:95:fb:bc:8c:93:
         a3:c4:a7:ee:e7:cf:f0:37:8c:46:f7:cb:75:3d:ca:bc:9e:0b:
         40:a6:6c:e1:fc:82:05:14:d9:f4:01:1b:56:39:56:13:69:6c:
         d6:d1:fd:72:fd:db:09:be:74:ed:07:ed:2d:bc:e8:eb:1d:ec:
         b9:82:2e:4d:ad:eb:83:e9:60:e6:bf:94:dd:db:4b:b3:f4:a9:
         5d:e0:72:0e:27:ff:29:cc:a7:47:5c:14:b6:d8:e9:76:9b:c1:
         2c:64:ba:b5:7f:c3:6b:60:90:c4:0f:97:59:c3:c2:5c:0a:9b:
         80:94:81:a4:8f:02:08:7d:a9:96:99:9e:e5:3e:02:45:83:02:
         da:b4:5a:b7:25:c7:65:98:8b:56:ee:51:42:35:1d:dc:26:a8:
         35:79:aa:17:b4:55:dc:d6:74:b6:f3:49:e1:5e:ac:d2:47:95:
         a8:b7:95:75:c2:d1:e1:73:b8:52:8e:4a:ff:88:15:91:b3:a9:
         69:ea:7a:29
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEW06NrxE7JdfmvbVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZjMzlmYjgtNGRhNC00NTJiLWE4NmYtOGQyODM0MmQ5
NDQ2MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
ZWM0NzIwNDUtZmQ2Mi00ZjMyLTg3NjgtNjkwZDM4ZGQzZmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3lSJhPa5XY0POghmbr/ulVG0Piwfa5mgwRc
UFWFiGA4ALQutkffGzsvj0DNZaYXIWLI8HZHjx3giQy7ziwrlL0tGEABLepvjgWF
NDptFS6+HVyiulEQIjD+XPY1nt/jTdgj52Ve8QN1q8zL1t4Ti71yXlTsjLuhhSXU
9DqIKvV6UBPT1dww79xI6iA9lbmHSzeq636olcj4NZtdGEaS+H41jiuv1VmJ4xDs
9P+Y4Ew6wMO3lGZQV0usy9s9/bbq73YmKRu69Uy3pU1n5INOPf6uwB+lJy44i/hk
ayp2Xae55Jne1K4KU6/OfQuxRHqaVFEPebDrnDujJFstcfIgGQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHEDNixm0OcsBSoDNKre5ZERLpvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zNmMz
OWZiOC00ZGE0LTQ1MmItYTg2Zi04ZDI4MzQyZDk0NDYvN2Q5ZWRmYmItNzhiMi0z
ZjRkLWE1ZmUtM2RjNGMwMzFkOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzZjMzlmYjgtNGRhNC00NTJiLWE4
NmYtOGQyODM0MmQ5NDQ2LzM2YzM5ZmI4LTRkYTQtNDUyYi1hODZmLThkMjgzNDJk
OTQ0Ni5jcmwwHwYDVR0jBBgwFoAUelU5+jDYVk5Px6xyLLACp+RbrkAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zNmMzOWZiOC00ZGE0LTQ1MmItYTg2Zi04ZDI4
MzQyZDk0NDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgTIwAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUXwVsK+1Da+K+tRT1xC+laJSppzvWeBIihaOK7OMpGSF/GXNpUHe
qTy2P0pGPnFImgtC8l+jaXmhEhZwOsbBctY3opX7vIyTo8Sn7ufP8DeMRvfLdT3K
vJ4LQKZs4fyCBRTZ9AEbVjlWE2ls1tH9cv3bCb507QftLbzo6x3suYIuTa3rg+lg
5r+U3dtLs/SpXeByDif/KcynR1wUttjpdpvBLGS6tX/Da2CQxA+XWcPCXAqbgJSB
pI8CCH2plpme5T4CRYMC2rRatyXHZZiLVu5RQjUd3CaoNXmqF7RV3NZ0tvNJ4V6s
0keVqLeVdcLR4XO4Uo5K/4gVkbOpaep6KQ==
-----END CERTIFICATE-----
Generated at Tue May 21 16:53:11 2024 by rpki-client on console-fra.rpki-client.org