Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa
File:                     f075ba46-636e-3a48-a603-d735fcd312c4.roa (raw, json)
Hash identifier:          ru/9MLYFlTDkKBrXKQ5sIljyTt32tOAGUqLAmJr4XMI=
Subject key identifier:   C4:07:45:58:89:F2:95:D4:ED:7B:33:A0:7C:52:9E:18:32:06:C0:EC
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F43285847E8F4CB7C54CCE6B287AA8E00
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     398143
IP address blocks:        2604:cbc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cb:7c:54:cc:e6:b2:87:aa:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=d3b75948-4015-45f3-941a-da983d054ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ee:3b:a9:33:ec:79:29:65:39:04:9a:27:f8:
                    39:08:f4:cd:8d:c7:b7:01:0f:8f:72:01:7e:7f:f4:
                    99:a2:48:da:ca:06:7b:be:04:27:81:a1:17:b9:ce:
                    09:47:7b:de:95:a2:13:81:bf:20:cd:42:35:2b:cd:
                    68:cf:3e:fd:c9:f8:a5:2a:90:c0:84:72:eb:88:ba:
                    bc:a2:7f:b3:a1:81:75:f1:50:a5:69:f4:54:06:dd:
                    21:40:01:f8:c4:9a:1f:fc:ba:1e:de:be:37:c8:9c:
                    8c:f9:f8:ca:65:92:a0:3b:2b:55:0a:fd:c4:26:f1:
                    88:84:2c:48:3f:d8:3e:81:dd:1f:f9:99:25:9f:76:
                    52:c8:d7:28:ba:c6:01:e7:79:05:53:c0:7c:e5:32:
                    c1:c1:3e:ef:46:e6:a4:dd:ab:e6:e6:ab:3f:db:2e:
                    8b:8b:97:f9:4c:72:f1:4f:af:f4:53:00:b3:97:a2:
                    50:d8:58:ef:5a:5f:c9:12:94:70:f1:67:9b:59:0d:
                    12:3c:5c:ff:36:da:36:c3:37:2a:53:4c:31:d8:c8:
                    19:0b:ec:b6:63:48:89:dd:10:d6:d4:cc:e2:17:cb:
                    62:d3:e9:71:1c:aa:34:5f:76:1c:cb:15:1b:74:74:
                    03:83:4c:dc:7c:0a:ac:53:57:72:ae:37:03:bb:76:
                    2f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:07:45:58:89:F2:95:D4:ED:7B:33:A0:7C:52:9E:18:32:06:C0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:72:c5:82:85:d3:8e:50:1c:c9:5d:d6:7f:1b:88:2f:08:03:
         41:40:36:45:a8:4c:51:67:62:82:09:ff:ff:12:e4:96:aa:6b:
         50:81:46:77:79:a9:62:fc:b4:d2:06:c1:73:58:76:a5:07:91:
         15:dc:bc:c6:b5:58:a6:a8:cd:d5:84:fa:0e:3d:19:ab:f9:aa:
         e1:15:98:a6:aa:56:00:41:4f:6d:05:41:5f:7a:fa:68:1a:a5:
         7e:17:24:25:83:0e:1d:04:db:f9:c9:ae:e0:86:dd:ba:d8:f6:
         f0:65:d7:f7:23:3f:d1:bb:1e:13:2f:41:0e:67:34:15:ef:b6:
         84:48:01:e1:45:c4:e1:07:94:1f:ff:2c:b0:ee:b8:8c:1a:ec:
         96:8c:65:24:43:dc:39:b6:c7:83:f6:0f:61:27:6f:eb:7d:11:
         72:42:73:7e:59:03:e5:a5:d7:36:b0:82:cd:65:fc:ce:f2:1c:
         b8:be:60:11:ac:43:e5:3e:2c:c3:f6:ed:54:dc:1f:36:6d:e6:
         25:11:bd:c2:b2:32:4e:ed:39:f1:4f:88:f0:94:93:43:21:25:
         63:2d:4f:f4:22:65:2c:4e:56:33:48:5b:a0:65:4d:c9:3b:8d:
         01:ca:a1:66:3e:39:cb:ce:ca:75:c1:6b:47:0e:aa:e9:c7:a8:
         45:d2:d2:d3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfo9Mt8VMzmsoeqjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh
YWQ5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZDNiNzU5NDgtNDAxNS00NWYzLTk0MWEtZGE5ODNkMDU0YmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO47qTPseSllOQSaJ/g5CPTNjce3AQ+PcgF+
f/SZokjaygZ7vgQngaEXuc4JR3velaITgb8gzUI1K81ozz79yfilKpDAhHLriLq8
on+zoYF18VClafRUBt0hQAH4xJof/Loe3r43yJyM+fjKZZKgOytVCv3EJvGIhCxI
P9g+gd0f+Zkln3ZSyNcousYB53kFU8B85TLBwT7vRuak3avm5qs/2y6Li5f5THLx
T6/0UwCzl6JQ2FjvWl/JEpRw8WebWQ0SPFz/Nto2wzcqU0wx2MgZC+y2Y0iJ3RDW
1MziF8ti0+lxHKo0X3YcyxUbdHQDg0zcfAqsU1dyrjcDu3YvsQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMQHRViJ8pXU7XszoHxSnhgyBsDsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy
MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvZjA3NWJhNDYtNjM2ZS0z
YTQ4LWE2MDMtZDczNWZjZDMxMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy
NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl
YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0
OGE0ZWFhZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTLwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBIcsWChdOOUBzJXdZ/G4gvCANBQDZFqExRZ2KCCf//EuSWqmtQgUZ3
eali/LTSBsFzWHalB5EV3LzGtVimqM3VhPoOPRmr+arhFZimqlYAQU9tBUFfevpo
GqV+FyQlgw4dBNv5ya7ght262PbwZdf3Iz/Rux4TL0EOZzQV77aESAHhRcThB5Qf
/yyw7riMGuyWjGUkQ9w5tseD9g9hJ2/rfRFyQnN+WQPlpdc2sILNZfzO8hy4vmAR
rEPlPizD9u1U3B82beYlEb3CsjJO7TnxT4jwlJNDISVjLU/0ImUsTlYzSFugZU3J
O40ByqFmPjnLzsp1wWtHDqrpx6hF0tLT
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:17 2024 by rpki-client on console-ams.rpki-client.org