Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
File:                     4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa (raw, json)
Hash identifier:          J0f+P5onHV+VlzfyfV4XwL4RK8O7EBWegdTscafvT5s=
Subject key identifier:   04:C7:22:0C:E3:9B:37:B3:9E:45:3A:BA:3B:23:5B:23:20:D4:0B:E3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5EA7896BDA74B818D0640
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:80e7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ea:78:96:bd:a7:4b:81:8d:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=a321d6e0-4704-4b19-813e-6ae89adea85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:7f:3a:01:c7:5d:76:38:e9:af:eb:3c:8a:
                    8a:85:d9:a3:61:0b:80:6f:cb:57:7b:39:0d:b2:b9:
                    aa:59:30:a2:6c:59:da:05:a2:cd:c4:a1:05:36:08:
                    25:62:df:1e:8c:e6:f5:15:b7:29:a9:8a:98:72:2b:
                    94:04:71:96:8e:64:45:8e:5d:58:4d:9e:3a:7f:d5:
                    aa:f2:a4:5b:6e:15:86:4c:93:80:f1:84:fc:34:d0:
                    13:eb:bf:cd:98:63:c5:db:00:8a:a7:15:6b:12:39:
                    af:9c:fa:7c:c2:0e:de:b7:eb:9c:4f:78:09:49:83:
                    ba:5f:b3:0b:ac:31:6d:25:25:f0:19:fc:12:13:e2:
                    50:22:a6:23:f5:b5:08:59:83:ea:16:97:50:00:b9:
                    1e:77:0c:df:8b:1f:7a:97:1c:e0:6b:4e:76:f1:84:
                    9b:17:81:ef:d7:2e:02:d4:f9:3c:8f:00:32:fe:04:
                    7f:a7:c4:0f:96:a0:c4:1d:e2:01:88:f2:46:b0:39:
                    77:da:af:e8:e7:37:9f:eb:f5:02:b4:4d:e0:2a:50:
                    6c:57:be:d4:f9:32:ca:be:14:c7:ce:54:c0:e4:07:
                    24:b4:79:78:ac:cd:56:37:ce:ae:66:d7:50:4b:17:
                    90:ea:6a:ac:d5:8f:1d:ba:0c:51:ed:7f:7e:fe:90:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C7:22:0C:E3:9B:37:B3:9E:45:3A:BA:3B:23:5B:23:20:D4:0B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a4:a7:6a:08:fb:d5:bd:f9:cc:98:a7:37:6c:ee:72:72:d3:
         c3:f7:62:e0:9a:29:89:19:bf:35:66:08:29:a2:b7:c8:3b:1e:
         1d:73:2c:76:3c:11:56:1f:d3:23:06:b1:c1:75:89:c4:7b:b3:
         be:09:58:89:15:41:e3:ac:08:ea:13:5f:7a:89:ed:d7:5d:e8:
         2a:6b:f3:e8:72:b1:97:0b:e7:91:fd:29:d3:b7:ae:1b:7a:28:
         52:4a:c7:f3:ea:98:81:29:f9:c9:6e:41:9c:e6:53:8b:93:b4:
         3b:32:a8:f9:97:3d:0f:6e:3c:36:43:f7:08:be:b2:58:65:63:
         52:cb:a7:ee:c3:46:b4:6b:52:01:c0:70:77:c4:29:33:40:42:
         af:af:7b:08:9f:0d:53:e9:54:6f:e4:ed:66:fb:5f:65:d2:4a:
         7f:cf:1e:62:5b:b3:75:fc:77:0b:c5:11:1f:8e:a3:d5:72:e0:
         2e:ca:76:29:04:5a:d0:5c:ef:d9:0b:0a:d2:32:a0:5e:13:45:
         b0:99:e1:a9:7c:14:65:c7:43:ff:5d:77:4a:7f:57:98:17:a6:
         f7:fe:cb:af:cf:82:b7:7a:3a:25:14:27:3c:ea:ed:87:01:c3:
         3b:8c:9d:09:47:3a:8b:27:c8:55:a2:3a:c0:b8:6c:8b:28:81:
         ea:5f:ac:4f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1ep4lr2nS4GNBkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
YTMyMWQ2ZTAtNDcwNC00YjE5LTgxM2UtNmFlODlhZGVhODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dF/OgHHXXY46a/rPIqKhdmjYQuAb8tXezkN
srmqWTCibFnaBaLNxKEFNgglYt8ejOb1FbcpqYqYciuUBHGWjmRFjl1YTZ46f9Wq
8qRbbhWGTJOA8YT8NNAT67/NmGPF2wCKpxVrEjmvnPp8wg7et+ucT3gJSYO6X7ML
rDFtJSXwGfwSE+JQIqYj9bUIWYPqFpdQALkedwzfix96lxzga0528YSbF4Hv1y4C
1Pk8jwAy/gR/p8QPlqDEHeIBiPJGsDl32q/o5zef6/UCtE3gKlBsV77U+TLKvhTH
zlTA5AcktHl4rM1WN86uZtdQSxeQ6mqs1Y8dugxR7X9+/pAniQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFATHIgzjmzeznkU6ujsjWyMg1AvjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGEyYjViNjEtMmYyMC0z
OTk5LTgzZjUtMmVmY2M3ZjdiM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYDn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+kp2oI+9W9+cyYpzds7nJy08P3YuCaKYkZvzVmCCmit8g7Hh1z
LHY8EVYf0yMGscF1icR7s74JWIkVQeOsCOoTX3qJ7ddd6Cpr8+hysZcL55H9KdO3
rht6KFJKx/PqmIEp+cluQZzmU4uTtDsyqPmXPQ9uPDZD9wi+slhlY1LLp+7DRrRr
UgHAcHfEKTNAQq+vewifDVPpVG/k7Wb7X2XSSn/PHmJbs3X8dwvFER+Oo9Vy4C7K
dikEWtBc79kLCtIyoF4TRbCZ4al8FGXHQ/9dd0p/V5gXpvf+y6/Pgrd6OiUUJzzq
7YcBwzuMnQlHOosnyFWiOsC4bIsogepfrE8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:24 2024 by rpki-client on console-fra.rpki-client.org