Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8187d33e-0a28-390c-9e06-225bdcaad3a4.roa
File:                     8187d33e-0a28-390c-9e06-225bdcaad3a4.roa (raw, json)
Hash identifier:          lb4pccCSJVMiO6+8nETX5rG24OXwp4KS6BxOmidj7ek=
Subject key identifier:   BB:C7:D0:D7:A2:A1:AB:D9:5B:D5:A2:9D:AB:C9:77:9D:28:CE:4E:87
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D286DD8A8DFE23AD08100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8187d33e-0a28-390c-9e06-225bdcaad3a4.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:811a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:28:6d:d8:a8:df:e2:3a:d0:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=4b32bbc2-6cd1-40be-a3a5-b21ed14d266c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:1e:6d:35:0b:4b:d6:e6:02:93:22:18:f3:
                    ad:13:e0:e9:e6:16:e7:d7:75:7b:a3:28:1f:5f:9a:
                    a0:dc:82:43:25:bd:dd:86:b1:d6:03:9a:40:11:d4:
                    c7:ec:40:2d:83:4d:ef:32:60:b3:d0:3b:98:21:95:
                    2c:11:ef:5a:ef:58:2f:ab:24:0e:5c:c6:79:a4:b3:
                    52:70:49:7e:e2:d4:5a:a6:b2:d4:76:27:bc:72:0b:
                    6e:71:1b:61:4d:4c:26:3a:9b:b4:91:a4:95:be:e2:
                    5d:49:74:52:41:ed:7c:87:3e:cf:77:42:5d:7c:77:
                    5a:d2:94:11:48:e7:60:3b:92:03:2b:96:92:83:b3:
                    50:b4:dc:cb:f6:44:ab:21:62:0c:bf:ed:41:42:fd:
                    f9:13:ce:92:db:58:ec:20:94:4d:81:c7:6c:47:3d:
                    03:6a:81:f5:01:a9:6c:71:bc:d9:0e:24:eb:5c:4f:
                    d7:11:be:e9:98:b2:a6:92:f8:29:d6:0d:8b:f7:a9:
                    84:72:c0:fc:8e:08:53:db:04:c9:00:e0:12:ee:81:
                    26:6c:c9:22:cb:6e:40:9f:3f:7f:ad:29:7f:9d:c4:
                    0c:ea:b3:8c:d4:1c:32:6f:46:a8:89:48:5a:61:57:
                    a1:66:c2:15:ef:8d:af:6d:2f:30:2d:05:79:e4:d9:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C7:D0:D7:A2:A1:AB:D9:5B:D5:A2:9D:AB:C9:77:9D:28:CE:4E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8187d33e-0a28-390c-9e06-225bdcaad3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:811a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:66:2e:a8:54:9e:ee:bc:8a:ba:2e:38:06:5b:72:0b:0d:
         f6:c6:69:0f:52:e4:f7:ef:3e:46:20:b4:20:a1:9c:da:39:54:
         bb:27:a8:51:5d:21:8e:9f:53:db:64:b4:c7:8e:41:bf:0e:36:
         fe:33:7e:60:5e:1f:e8:ef:b5:dc:cc:2e:f2:f0:2a:74:9c:1a:
         fe:b3:42:cc:52:18:db:09:22:4b:4e:f7:82:5a:64:8c:5d:ac:
         f4:e8:e3:06:f2:0f:bb:2f:bb:f4:cc:52:f6:98:c1:0e:ed:1a:
         97:0a:a8:72:0c:58:fc:62:58:3c:3b:1f:50:11:a0:75:8b:39:
         04:83:8e:ba:d1:4b:2b:1d:43:18:45:99:d9:49:3a:33:a7:d4:
         9f:0d:d7:f0:97:4d:ed:e6:02:be:a0:06:fe:16:09:30:d3:5f:
         7c:fb:e5:d6:9f:74:0b:1a:bc:4b:c0:56:4d:74:19:cf:cd:40:
         17:a6:b8:47:c4:d1:e0:4b:4a:77:90:ef:09:b5:1b:52:fd:9d:
         df:d6:b5:ca:18:f9:a1:a4:5c:4e:e3:20:8e:c7:ef:a3:22:55:
         43:d0:c4:41:87:93:e7:ec:f0:a8:64:98:77:31:5f:88:b0:cd:
         f5:d3:f4:73:0a:4b:c5:bc:d5:be:f7:04:76:45:4b:03:0a:0c:
         59:a4:22:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDmWfSht2Kjf4jrQgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDQxNDA0MDAwMFoXDTI3MDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk
NGIzMmJiYzItNmNkMS00MGJlLWEzYTUtYjIxZWQxNGQyNjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR4ebTULS9bmApMiGPOtE+Dp5hbn13V7oygf
X5qg3IJDJb3dhrHWA5pAEdTH7EAtg03vMmCz0DuYIZUsEe9a71gvqyQOXMZ5pLNS
cEl+4tRaprLUdie8cgtucRthTUwmOpu0kaSVvuJdSXRSQe18hz7Pd0JdfHda0pQR
SOdgO5IDK5aSg7NQtNzL9kSrIWIMv+1BQv35E86S21jsIJRNgcdsRz0DaoH1Aals
cbzZDiTrXE/XEb7pmLKmkvgp1g2L96mEcsD8jghT2wTJAOAS7oEmbMkiy25Anz9/
rSl/ncQM6rOM1Bwyb0aoiUhaYVehZsIV742vbS8wLQV55NktkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLvH0NeioavZW9WinavJd50ozk6HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODE4N2QzM2UtMGEyOC0z
OTBjLTllMDYtMjI1YmRjYWFkM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEarZi6oVJ7uvIq6LjgGW3ILDfbGaQ9S5PfvPkYgtCChnNo5VLsn
qFFdIY6fU9tktMeOQb8ONv4zfmBeH+jvtdzMLvLwKnScGv6zQsxSGNsJIktO94Ja
ZIxdrPTo4wbyD7svu/TMUvaYwQ7tGpcKqHIMWPxiWDw7H1ARoHWLOQSDjrrRSysd
QxhFmdlJOjOn1J8N1/CXTe3mAr6gBv4WCTDTX3z75dafdAsavEvAVk10Gc/NQBem
uEfE0eBLSneQ7wm1G1L9nd/WtcoY+aGkXE7jII7H76MiVUPQxEGHk+fs8KhkmHcx
X4iwzfXT9HMKS8W81b73BHZFSwMKDFmkIio=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org