Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
File:                     c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa (raw, json)
Hash identifier:          Vr8CkaRzS7rqHHkvUmN93+j7H0QyYi0Im02ayM5OZbs=
Subject key identifier:   5E:40:08:82:CC:E3:83:35:76:20:FD:F1:FC:26:D1:91:D3:27:34:82
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F432858472F3071896401B173139C7080
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     7065
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:71:89:64:01:b1:73:13:9c:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=a9527002-84a3-42d4-8783-5536d1507c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:e5:f4:9e:71:4c:79:a2:5f:66:4c:fe:10:
                    ce:76:66:68:40:1b:8b:1d:75:90:f4:11:dc:52:19:
                    e5:1f:06:5d:8d:f3:0c:c6:91:26:e5:38:e0:c4:ad:
                    5a:e7:c1:66:40:e2:53:9c:2c:cd:e6:be:62:02:39:
                    cc:f3:fe:62:c3:a1:75:3a:cf:1c:27:cb:79:df:9f:
                    f3:4e:01:a5:fc:94:26:4b:b0:be:9e:27:84:eb:e6:
                    f2:54:b4:94:0d:e2:c6:46:0c:f1:68:b7:ad:bd:ed:
                    2f:00:d1:95:6d:dd:ac:8a:4d:0a:65:04:28:f8:f3:
                    b8:2a:ba:bf:d1:2c:ae:66:ab:91:d8:9b:84:88:5e:
                    a9:b7:fe:f6:59:26:88:e0:44:a7:75:27:72:fa:13:
                    2c:d2:3b:6c:da:d4:ea:35:fb:b8:43:04:7a:cc:18:
                    c9:14:f3:fd:e4:65:69:5c:b1:8f:4b:8e:a1:be:23:
                    2c:f9:83:20:d1:01:1b:7b:8c:ac:3f:b8:0f:40:80:
                    6a:a1:34:0f:14:92:97:21:b2:30:af:bd:4b:3c:89:
                    0c:7a:4c:8d:00:89:fd:09:f1:c0:4a:38:b2:08:ca:
                    f9:7c:ad:0e:7a:68:36:74:a4:ba:95:76:24:7c:bd:
                    8b:14:55:1f:81:46:20:0f:e9:d6:41:0b:dc:54:11:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:40:08:82:CC:E3:83:35:76:20:FD:F1:FC:26:D1:91:D3:27:34:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:07:b3:65:f8:c3:1a:37:d0:3d:28:99:37:9e:d0:75:75:66:
         37:47:56:5b:07:e8:85:2d:e3:44:06:93:b2:cb:fb:45:71:6a:
         5d:0e:dd:b8:f8:92:8b:d2:34:fa:05:ed:22:cf:ee:12:1d:d3:
         56:4b:49:fd:10:56:84:fb:5c:90:8e:15:93:5b:a9:bd:f6:fd:
         76:e2:2b:25:62:79:de:f4:d6:4b:48:41:b8:6b:9d:a8:a3:45:
         b4:36:77:7f:28:b3:55:bb:a3:3b:bf:83:eb:22:48:33:5f:03:
         32:76:7c:62:e9:b2:67:1a:e2:9c:52:9d:f5:2d:d1:ac:16:f2:
         73:98:56:7c:a1:5c:5d:7a:ab:d4:a1:64:97:fb:62:3a:10:48:
         0a:13:8c:f4:ea:3e:64:99:b3:b4:66:f2:3a:df:b9:95:90:22:
         40:96:89:11:ed:9f:fc:17:65:3c:b4:3f:4c:17:e3:55:98:dc:
         44:d8:9e:7b:13:61:a3:65:80:26:7e:d7:a9:b8:94:e4:03:d4:
         d1:e6:cc:7b:ee:17:f7:79:46:2b:5b:cb:cb:4f:c1:64:90:91:
         e1:2d:14:c8:fd:9b:69:f6:b3:1f:81:95:6f:33:f2:fa:5b:07:
         2f:5d:1a:88:cd:3f:e6:8e:53:f5:fe:bb:26:23:24:d4:fc:db:
         6b:f6:32:c0
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEcvMHGJZAGxcxOccIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
YTk1MjcwMDItODRhMy00MmQ0LTg3ODMtNTUzNmQxNTA3Yzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv3l9J5xTHmiX2ZM/hDOdmZoQBuLHXWQ9BHc
UhnlHwZdjfMMxpEm5TjgxK1a58FmQOJTnCzN5r5iAjnM8/5iw6F1Os8cJ8t535/z
TgGl/JQmS7C+nieE6+byVLSUDeLGRgzxaLetve0vANGVbd2sik0KZQQo+PO4Krq/
0SyuZquR2JuEiF6pt/72WSaI4ESndSdy+hMs0jts2tTqNfu4QwR6zBjJFPP95GVp
XLGPS46hviMs+YMg0QEbe4ysP7gPQIBqoTQPFJKXIbIwr71LPIkMekyNAIn9CfHA
SjiyCMr5fK0Oemg2dKS6lXYkfL2LFFUfgUYgD+nWQQvcVBFSCQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFF5ACILM44M1diD98fwm0ZHTJzSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYzFjZGVmNGUtYmFlMy0z
NTlkLWFlM2YtMGU5ZDYwZTNmZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAIAEFqAMF
BCYCAkAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEASwezZfjDGjfQPSiZN57QdXVmN0dWWwfohS3jRAaTssv7
RXFqXQ7duPiSi9I0+gXtIs/uEh3TVktJ/RBWhPtckI4Vk1upvfb9duIrJWJ53vTW
S0hBuGudqKNFtDZ3fyizVbujO7+D6yJIM18DMnZ8YumyZxrinFKd9S3RrBbyc5hW
fKFcXXqr1KFkl/tiOhBIChOM9Oo+ZJmztGbyOt+5lZAiQJaJEe2f/BdlPLQ/TBfj
VZjcRNieexNho2WAJn7XqbiU5APU0ebMe+4X93lGK1vLy0/BZJCR4S0UyP2bafaz
H4GVbzPy+lsHL10aiM0/5o5T9f67JiMk1Pzba/YywA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:12 2024 by rpki-client on console-ams.rpki-client.org