Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa
File:                     65d136f5-59f2-3612-beda-18d07da1101d.roa (raw, json)
Hash identifier:          KFkrgCOMkJ0UudD9QsfcCn2/JOLvgTkNIIACX82qPSk=
Subject key identifier:   1B:48:A2:EA:95:83:53:C9:DA:BA:73:CA:CD:D3:6A:0C:85:33:2E:50
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD600C82B99FA1D8AB2AB00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2607:f098:40ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:00:c8:2b:99:fa:1d:8a:b2:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=901975a2-01ce-432e-9086-41fc0222b264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:0d:1a:f1:c1:eb:a2:91:e2:7b:e8:da:02:
                    64:5b:17:19:58:d5:ef:6f:a3:05:31:43:bc:6b:92:
                    27:fa:9b:1d:44:b9:5b:8e:91:ad:47:3c:68:7f:8c:
                    73:53:f0:6b:c0:98:67:5c:78:24:08:02:b0:b7:f6:
                    8a:e0:c2:44:09:3a:a4:90:30:d6:45:9e:b4:cc:33:
                    37:0f:90:dd:88:ca:7e:d6:4b:da:16:ba:78:43:cb:
                    a5:fd:0d:04:23:a6:b8:6a:05:70:81:a4:40:ee:b5:
                    7b:52:56:2f:0c:a2:69:29:e9:80:88:1a:c3:b2:80:
                    f1:28:77:25:32:73:6f:55:70:d7:fa:56:aa:49:10:
                    d9:1b:2f:6f:e5:ee:ee:e2:52:83:90:d5:75:55:27:
                    8d:a2:74:d0:ad:ed:4d:62:1c:47:45:40:fc:09:8e:
                    04:fc:34:d3:11:a2:9e:ed:39:10:f9:f4:a0:ef:d7:
                    84:8e:47:95:09:9e:6d:77:b6:b9:0d:f5:b8:08:0a:
                    89:b5:6c:3a:41:67:47:4f:22:18:38:03:82:12:74:
                    cf:91:0a:28:eb:52:bc:6c:46:a4:c8:1a:91:8b:1b:
                    15:cf:c0:b4:cf:21:1e:9a:1b:bd:07:55:1e:27:19:
                    a8:c5:22:b5:ee:f0:07:89:66:51:7b:9d:c0:3b:b3:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:48:A2:EA:95:83:53:C9:DA:BA:73:CA:CD:D3:6A:0C:85:33:2E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65d136f5-59f2-3612-beda-18d07da1101d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:40ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:23:c2:ba:a2:0e:d7:e6:81:22:57:ab:e2:99:3f:47:97:2e:
         c5:42:cf:81:a5:05:62:99:bf:06:55:31:e0:23:ae:5a:fe:17:
         47:90:8f:d5:34:cc:37:c2:27:2d:7d:bf:c2:ff:51:1c:14:cb:
         a6:b5:13:ed:81:da:5a:71:da:c7:08:1e:c8:f0:9c:83:39:fd:
         a1:59:9a:76:e7:87:62:1a:a5:6a:19:7e:2e:5c:5c:92:7c:1a:
         ac:d1:02:b7:8e:a6:67:b6:1f:c7:a3:4b:8d:82:28:60:65:09:
         a5:60:84:ea:63:b3:da:d7:cd:42:80:ef:b6:c2:a4:98:9d:17:
         2d:42:95:6e:03:bc:50:f7:e8:6e:c2:4d:36:3e:21:93:a1:c2:
         56:0d:31:fb:bd:61:9f:28:ab:c7:d6:80:c0:02:a1:9e:df:ce:
         eb:4f:d5:22:c2:cf:c7:29:6c:26:d4:b1:7b:dd:a4:ea:12:a1:
         38:63:d4:31:a6:fb:c9:9f:be:50:c0:6e:c9:c9:3f:18:1d:8e:
         32:21:f9:63:92:be:10:b7:0d:14:42:f5:4c:84:62:9f:0c:9e:
         af:f5:f2:0d:7d:3b:b7:32:03:4e:69:0e:1f:59:30:e3:fc:49:
         fa:c5:7c:30:1c:bf:cc:6f:00:42:79:e8:59:99:89:19:6c:14:
         b8:21:f5:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1gDIK5n6HYqyqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
OTAxOTc1YTItMDFjZS00MzJlLTkwODYtNDFmYzAyMjJiMjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTMNGvHB66KR4nvo2gJkWxcZWNXvb6MFMUO8
a5In+psdRLlbjpGtRzxof4xzU/BrwJhnXHgkCAKwt/aK4MJECTqkkDDWRZ60zDM3
D5DdiMp+1kvaFrp4Q8ul/Q0EI6a4agVwgaRA7rV7UlYvDKJpKemAiBrDsoDxKHcl
MnNvVXDX+laqSRDZGy9v5e7u4lKDkNV1VSeNonTQre1NYhxHRUD8CY4E/DTTEaKe
7TkQ+fSg79eEjkeVCZ5td7a5DfW4CAqJtWw6QWdHTyIYOAOCEnTPkQoo61K8bEak
yBqRixsVz8C0zyEemhu9B1UeJxmoxSK17vAHiWZRe53AO7MBYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBtIouqVg1PJ2rpzys3TagyFMy5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjVkMTM2ZjUtNTlmMi0z
NjEyLWJlZGEtMThkMDdkYTExMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwmED/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADsjwrqiDtfmgSJXq+KZP0eXLsVCz4GlBWKZvwZVMeAjrlr+F0eQ
j9U0zDfCJy19v8L/URwUy6a1E+2B2lpx2scIHsjwnIM5/aFZmnbnh2IapWoZfi5c
XJJ8GqzRAreOpme2H8ejS42CKGBlCaVghOpjs9rXzUKA77bCpJidFy1ClW4DvFD3
6G7CTTY+IZOhwlYNMfu9YZ8oq8fWgMACoZ7fzutP1SLCz8cpbCbUsXvdpOoSoThj
1DGm+8mfvlDAbsnJPxgdjjIh+WOSvhC3DRRC9UyEYp8Mnq/18g19O7cyA05pDh9Z
MOP8SfrFfDAcv8xvAEJ56FmZiRlsFLgh9cc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org