Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b07ff8a-2072-385b-9589-8354f9fc60a3.roa
File:                     0b07ff8a-2072-385b-9589-8354f9fc60a3.roa (raw, json)
Hash identifier:          obFNrYdyAuVaklWmHDBm/jJFBDhNQg+MSAN0Vq3IoqM=
Subject key identifier:   50:FA:5B:48:42:07:B7:6D:66:43:29:29:A1:0F:14:57:7E:58:D1:31
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285845AC88C52D318500F48858B6E0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b07ff8a-2072-385b-9589-8354f9fc60a3.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     210980
IP address blocks:        2605:f440:9520::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c5:2d:31:85:00:f4:88:58:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=deea1dec-d8e5-45b3-b536-760ee3147589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:0c:e0:29:b0:b3:ab:ef:9f:70:f0:45:3b:
                    64:6b:75:12:f7:d8:34:39:5a:92:19:2f:63:0a:5e:
                    af:79:60:30:d2:df:b1:49:a2:9f:1a:05:31:19:da:
                    75:e3:18:fc:2b:25:48:c8:22:a0:1e:9c:a5:2e:1d:
                    15:31:58:a7:84:d1:34:e7:35:b4:66:c1:e4:5c:0c:
                    9d:20:29:7b:d2:fe:a0:e9:2a:17:0b:6a:a2:6a:4c:
                    a1:f1:25:92:08:7e:b1:89:96:db:6e:bc:ff:59:27:
                    56:4b:f0:b4:33:d7:b1:23:22:9b:83:e2:10:ca:5a:
                    07:6d:1d:76:a9:8d:b9:85:13:3c:c1:e2:5f:2e:37:
                    9f:7e:05:e5:c1:0b:b9:e2:b8:d3:cd:6c:59:46:13:
                    9a:02:77:b4:5a:ec:fc:cf:69:3d:8c:63:26:68:e8:
                    c4:16:46:c4:f6:1e:af:2f:28:3c:9b:ed:2c:ae:35:
                    a2:19:a7:8b:9f:38:57:cc:78:e4:3a:3f:02:1c:5b:
                    23:76:d5:e1:d0:ae:47:69:58:b0:f8:98:15:dd:e1:
                    a2:42:3e:d3:aa:7e:0f:da:5d:f9:d5:89:cc:09:bb:
                    e6:ad:f6:21:cd:d5:60:ed:1c:84:c5:c1:ac:d7:1e:
                    d5:85:f5:8a:ea:04:d6:89:d4:4a:af:f6:26:40:d3:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:5B:48:42:07:B7:6D:66:43:29:29:A1:0F:14:57:7E:58:D1:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/0b07ff8a-2072-385b-9589-8354f9fc60a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:9520::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:9d:07:e8:d1:81:ec:c0:d4:2f:0b:a8:54:28:90:e3:bc:18:
         be:5f:7e:76:a9:07:6d:29:e6:14:c7:85:f0:3c:43:5c:9f:59:
         77:b0:5c:d7:b6:68:6b:57:96:70:df:85:68:4c:53:f7:0d:1d:
         53:af:d2:23:fa:29:df:41:b6:d7:c0:31:db:29:d2:ec:80:7b:
         36:bc:11:b7:07:2d:fa:c6:51:c8:f1:39:0b:ed:37:d5:a0:9e:
         28:16:09:a9:f3:67:9b:40:ba:ef:14:d4:eb:13:6c:55:a6:83:
         5b:f7:9f:a3:9a:05:e6:07:46:24:42:1d:f9:e8:81:42:0f:d7:
         0c:04:5b:50:71:67:e7:88:de:8a:62:dc:f9:24:4a:33:70:a7:
         bd:e3:30:1e:aa:23:1d:ff:1c:e7:53:13:cb:8e:46:eb:71:c6:
         0e:c5:0a:25:c7:32:36:75:a6:b5:c1:64:c8:d6:93:4e:f0:49:
         84:7a:ca:b7:5a:41:7e:f1:27:72:33:19:b2:ba:93:5e:c7:51:
         06:39:d4:99:94:8c:8c:b2:42:4f:39:23:54:d2:03:e9:66:78:
         e5:7e:0b:6f:c1:c9:8e:7c:c1:72:8a:3c:97:91:5d:26:73:ea:
         b4:0c:a7:40:76:5c:42:80:f9:a2:db:5c:ba:9d:aa:e1:23:67:
         20:8a:ab:ba
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWsiMUtMYUA9IhYtuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZGVlYTFkZWMtZDhlNS00NWIzLWI1MzYtNzYwZWUzMTQ3NTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHQM4Cmws6vvn3DwRTtka3US99g0OVqSGS9j
Cl6veWAw0t+xSaKfGgUxGdp14xj8KyVIyCKgHpylLh0VMVinhNE05zW0ZsHkXAyd
ICl70v6g6SoXC2qiakyh8SWSCH6xiZbbbrz/WSdWS/C0M9exIyKbg+IQyloHbR12
qY25hRM8weJfLjeffgXlwQu54rjTzWxZRhOaAne0Wuz8z2k9jGMmaOjEFkbE9h6v
Lyg8m+0srjWiGaeLnzhXzHjkOj8CHFsjdtXh0K5HaViw+JgV3eGiQj7Tqn4P2l35
1YnMCbvmrfYhzdVg7RyExcGs1x7VhfWK6gTWidRKr/YmQNN+twIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFD6W0hCB7dtZkMpKaEPFFd+WNExMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMGIwN2ZmOGEtMjA3Mi0z
ODViLTk1ODktODM1NGY5ZmM2MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgX0QJUg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKCdB+jRgezA1C8LqFQokOO8GL5ffnapB20p5hTHhfA8Q1yfWXew
XNe2aGtXlnDfhWhMU/cNHVOv0iP6Kd9BttfAMdsp0uyAeza8EbcHLfrGUcjxOQvt
N9WgnigWCanzZ5tAuu8U1OsTbFWmg1v3n6OaBeYHRiRCHfnogUIP1wwEW1BxZ+eI
3opi3PkkSjNwp73jMB6qIx3/HOdTE8uORutxxg7FCiXHMjZ1prXBZMjWk07wSYR6
yrdaQX7xJ3IzGbK6k17HUQY51JmUjIyyQk85I1TSA+lmeOV+C2/ByY58wXKKPJeR
XSZz6rQMp0B2XEKA+aLbXLqdquEjZyCKq7o=
-----END CERTIFICATE-----
Generated at Sun May 5 08:22:46 2024 by rpki-client on console-ams.rpki-client.org