Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4725f763-e423-3a5d-8271-a5a10cd694b3.roa
File:                     4725f763-e423-3a5d-8271-a5a10cd694b3.roa (raw, json)
Hash identifier:          aBc10jp9Lg770tQlpLKdndF6wG47IoCXvXwbmkPNLa8=
Subject key identifier:   97:F9:03:85:C8:D7:9C:4C:88:43:91:47:FB:88:82:94:DF:78:4B:CC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E91012C490A9A981EFF0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4725f763-e423-3a5d-8271-a5a10cd694b3.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8059::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e9:10:12:c4:90:a9:a9:81:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=109f6a2f-b880-400e-9404-00a4f6a95767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:b3:b5:19:b3:a2:7e:df:b9:4f:20:40:86:
                    0f:a2:df:68:db:80:c2:5e:71:25:a1:b7:6f:88:4a:
                    15:b1:eb:6a:08:46:e7:95:21:ee:56:57:92:6b:82:
                    99:2c:20:5f:de:15:59:c9:75:f3:27:35:7e:a7:58:
                    85:15:38:9a:6a:e1:01:00:73:a0:9f:f0:57:66:41:
                    24:7f:fd:d7:b4:53:ca:7e:13:92:df:5a:7a:4a:04:
                    2e:3e:8e:9d:29:60:fe:c1:75:bc:e5:59:c7:44:ad:
                    12:b3:a8:64:d7:e2:fe:ac:ee:2d:71:a5:c9:1a:7e:
                    bc:a9:c0:12:9d:6e:9e:42:d7:58:28:4a:b2:2e:54:
                    19:1c:ba:92:ba:2e:33:aa:e2:07:a9:8e:06:c0:b0:
                    c8:97:21:11:3e:02:fe:03:e1:11:16:12:19:39:69:
                    3c:c6:f1:d4:2f:4e:0c:8b:09:5f:20:2f:1f:04:10:
                    ad:c3:d6:98:04:de:48:bf:ec:e7:de:c7:d8:15:07:
                    7f:77:9c:8c:09:00:d4:6e:04:f0:ae:e4:f8:4a:52:
                    68:a1:67:13:a2:59:5c:64:a3:6b:3f:26:31:bf:aa:
                    a8:cb:de:c8:07:69:c8:5d:21:e7:e3:73:24:bf:03:
                    98:51:e1:73:20:fb:15:c4:31:64:c9:45:43:de:a6:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F9:03:85:C8:D7:9C:4C:88:43:91:47:FB:88:82:94:DF:78:4B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4725f763-e423-3a5d-8271-a5a10cd694b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8059::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:93:b6:0c:86:ac:6e:06:3f:bc:65:8e:86:23:97:e1:83:5d:
         65:d8:b9:ca:84:d7:f0:15:db:01:12:a9:2e:2b:8a:76:a6:e4:
         12:4d:ae:51:31:fc:fa:98:1f:ee:a9:19:9c:f6:65:f2:00:1b:
         5e:a0:3d:0e:61:39:ff:7b:c6:1d:60:ec:3b:c0:09:ab:2f:b3:
         5e:d9:f2:4e:a7:52:e7:a7:68:54:41:15:c3:a2:27:a2:c7:ad:
         ec:cc:71:ef:ab:09:6b:39:a1:e3:c7:2a:3e:af:f9:ab:cd:28:
         64:77:86:67:f3:81:1e:49:b6:0f:2d:d9:57:7d:bc:4f:f2:aa:
         9f:86:29:40:21:c6:04:80:a6:f7:0d:ef:64:d7:e4:43:88:ab:
         3f:e9:aa:2b:fd:80:f3:68:30:0e:16:62:e8:59:13:a8:a9:f8:
         db:f9:a3:ce:f8:bc:a7:3d:ae:af:7c:d1:98:d5:a6:6f:93:82:
         b9:a1:67:ec:79:4b:81:01:45:f3:bc:d9:41:a9:8a:a3:6d:8d:
         c3:21:bf:7c:03:3b:4d:a7:f1:c3:17:6c:27:f5:e0:d9:3d:4f:
         3a:90:29:8a:1a:1c:0c:16:fc:a3:d6:f6:54:e7:85:e0:c1:4c:
         c0:4e:71:4a:05:36:65:5a:8f:b9:c7:6b:c2:85:c2:88:ad:ee:
         6e:77:e6:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1ekQEsSQqamB7/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MTA5ZjZhMmYtYjg4MC00MDBlLTk0MDQtMDBhNGY2YTk1NzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSOztRmzon7fuU8gQIYPot9o24DCXnElobdv
iEoVsetqCEbnlSHuVleSa4KZLCBf3hVZyXXzJzV+p1iFFTiaauEBAHOgn/BXZkEk
f/3XtFPKfhOS31p6SgQuPo6dKWD+wXW85VnHRK0Ss6hk1+L+rO4tcaXJGn68qcAS
nW6eQtdYKEqyLlQZHLqSui4zquIHqY4GwLDIlyERPgL+A+ERFhIZOWk8xvHUL04M
iwlfIC8fBBCtw9aYBN5Iv+zn3sfYFQd/d5yMCQDUbgTwruT4SlJooWcTollcZKNr
PyYxv6qoy97IB2nIXSHn43MkvwOYUeFzIPsVxDFkyUVD3qa5uQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJf5A4XI15xMiEORR/uIgpTfeEvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDcyNWY3NjMtZTQyMy0z
YTVkLTgyNzEtYTVhMTBjZDY5NGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYBZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEaTtgyGrG4GP7xljoYjl+GDXWXYucqE1/AV2wESqS4rinam5BJN
rlEx/PqYH+6pGZz2ZfIAG16gPQ5hOf97xh1g7DvACasvs17Z8k6nUuenaFRBFcOi
J6LHrezMce+rCWs5oePHKj6v+avNKGR3hmfzgR5Jtg8t2Vd9vE/yqp+GKUAhxgSA
pvcN72TX5EOIqz/pqiv9gPNoMA4WYuhZE6ip+Nv5o874vKc9rq980ZjVpm+Tgrmh
Z+x5S4EBRfO82UGpiqNtjcMhv3wDO02n8cMXbCf14Nk9TzqQKYoaHAwW/KPW9lTn
heDBTMBOcUoFNmVaj7nHa8KFwoit7m535hk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:24 2024 by rpki-client on console-fra.rpki-client.org