Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/7b749537-263e-3e72-83b6-9515f91fc7ae.roa
File:                     7b749537-263e-3e72-83b6-9515f91fc7ae.roa (raw, json)
Hash identifier:          4N45kVsPSTgRpiPZ39WBc9m0Fz8GRLpVwnZTb0wAXfQ=
Subject key identifier:   6D:29:3B:F3:08:B1:86:64:E3:F8:D1:F1:0E:8C:07:4A:6B:D7:B4:87
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F432858473A5B7C278CD7C9268EAB7C40
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/7b749537-263e-3e72-83b6-9515f91fc7ae.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     9009
IP address blocks:        2605:3b80:cad::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7c:27:8c:d7:c9:26:8e:ab:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4ab8f689-a9bd-4af6-97ed-77bef9ff0080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:f1:3b:f6:e7:c8:58:32:bb:f3:73:91:7c:
                    9c:85:a5:08:96:0d:b5:21:4e:4a:14:8c:5e:75:d4:
                    86:ca:d9:42:09:bc:27:1e:cf:8a:14:fe:d1:39:3d:
                    47:f9:e6:16:d3:36:e1:1d:54:70:10:94:3e:89:85:
                    65:9a:c9:46:c8:dc:fb:33:93:7e:91:a3:0f:d6:76:
                    cd:d9:f9:ce:cc:c8:20:27:34:d3:df:f2:ea:4f:33:
                    82:0f:fd:ef:52:68:74:42:2a:64:e2:e4:b7:9a:f3:
                    3e:5d:24:a6:01:8e:1f:85:bb:3f:d5:da:e7:64:1e:
                    00:1b:cf:dd:9b:5e:85:b8:56:22:ed:b3:23:74:8f:
                    b4:74:08:94:52:d4:8c:0e:cd:39:03:59:be:19:6e:
                    c5:f5:1a:65:58:d9:87:21:b3:3a:74:03:35:b6:d5:
                    c7:53:c6:c0:68:41:0b:44:11:f8:97:5f:2c:6a:d4:
                    1c:9e:30:41:c7:0a:a1:79:ea:be:c4:ae:a4:68:80:
                    a8:87:fc:98:c7:eb:3b:b9:cb:36:fa:a2:77:6c:9e:
                    93:9d:b5:bd:55:7e:1b:60:fe:83:5c:90:93:f7:ae:
                    29:ec:61:d3:a4:a2:05:e7:e6:fb:89:6a:46:61:46:
                    e1:04:d6:7d:30:2e:70:4a:13:5d:f2:36:10:89:ba:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:29:3B:F3:08:B1:86:64:E3:F8:D1:F1:0E:8C:07:4A:6B:D7:B4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/7b749537-263e-3e72-83b6-9515f91fc7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3b80:cad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:7a:99:16:87:15:00:4d:30:c2:99:7c:95:62:9a:6f:e7:
         04:9e:84:d5:87:b3:1c:4e:fb:1f:ff:a6:ac:d1:70:ec:05:08:
         06:18:4f:f9:15:1c:80:2a:6c:42:1e:a9:8d:89:c9:60:bc:fe:
         21:e9:39:6b:9e:f7:7c:79:25:f8:93:f3:50:bc:5e:bc:f0:b1:
         36:f0:ee:2a:e1:3a:4b:2d:c5:92:32:36:fa:56:88:44:f8:71:
         4f:83:da:07:94:27:aa:dd:46:87:76:4f:82:03:a7:50:42:3b:
         f3:24:80:9f:ef:c8:09:7c:ca:e3:9b:3b:13:bb:53:75:17:b1:
         6e:0f:df:cb:19:2b:f2:cd:77:b1:7d:e9:f3:ab:ee:23:64:7a:
         08:d3:19:65:77:4a:b8:e4:30:00:03:82:fd:81:82:40:09:7e:
         45:94:16:18:21:73:43:fa:0e:3f:d2:50:29:1c:7a:01:02:e8:
         a3:b1:4b:df:cd:0d:12:1e:e5:16:b6:47:a4:c2:c7:03:5b:78:
         69:03:0d:d2:32:19:72:7f:81:98:0b:1e:c8:7d:b2:49:e0:d7:
         78:dc:25:23:e0:65:27:e6:be:b3:7b:d1:45:27:17:77:eb:0e:
         13:59:b1:00:d1:38:d6:cd:4d:07:2c:a4:c4:92:28:d8:0b:27:
         4e:62:b3:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W3wnjNfJJo6rfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI3MzQwZmMtNjk4YS00NDg4LWIyMTEtMzI1ZjRkZWQ0
MTUyMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NGFiOGY2ODktYTliZC00YWY2LTk3ZWQtNzdiZWY5ZmYwMDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qbxO/bnyFgyu/NzkXychaUIlg21IU5KFIxe
ddSGytlCCbwnHs+KFP7ROT1H+eYW0zbhHVRwEJQ+iYVlmslGyNz7M5N+kaMP1nbN
2fnOzMggJzTT3/LqTzOCD/3vUmh0Qipk4uS3mvM+XSSmAY4fhbs/1drnZB4AG8/d
m16FuFYi7bMjdI+0dAiUUtSMDs05A1m+GW7F9RplWNmHIbM6dAM1ttXHU8bAaEEL
RBH4l18satQcnjBBxwqheeq+xK6kaICoh/yYx+s7ucs2+qJ3bJ6TnbW9VX4bYP6D
XJCT964p7GHTpKIF5+b7iWpGYUbhBNZ9MC5wShNd8jYQibrNYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG0pO/MIsYZk4/jR8Q6MB0pr17SHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yjcz
NDBmYy02OThhLTQ0ODgtYjIxMS0zMjVmNGRlZDQxNTIvN2I3NDk1MzctMjYzZS0z
ZTcyLTgzYjYtOTUxNWY5MWZjN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGI3MzQwZmMtNjk4YS00NDg4LWIy
MTEtMzI1ZjRkZWQ0MTUyLzRiNzM0MGZjLTY5OGEtNDQ4OC1iMjExLTMyNWY0ZGVk
NDE1Mi5jcmwwHwYDVR0jBBgwFoAUIz1eV1UEFzo7KfsSr/WYDO3Wd6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YjczNDBmYy02OThhLTQ0ODgtYjIxMS0zMjVm
NGRlZDQxNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgU7gAyt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJi9epkWhxUATTDCmXyVYppv5wSehNWHsxxO+x//pqzRcOwFCAYY
T/kVHIAqbEIeqY2JyWC8/iHpOWue93x5JfiT81C8XrzwsTbw7irhOkstxZIyNvpW
iET4cU+D2geUJ6rdRod2T4IDp1BCO/MkgJ/vyAl8yuObOxO7U3UXsW4P38sZK/LN
d7F96fOr7iNkegjTGWV3SrjkMAADgv2BgkAJfkWUFhghc0P6Dj/SUCkcegEC6KOx
S9/NDRIe5Ra2R6TCxwNbeGkDDdIyGXJ/gZgLHsh9skng13jcJSPgZSfmvrN70UUn
F3frDhNZsQDRONbNTQcspMSSKNgLJ05is0Q=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org