Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/947ec108-e649-31a9-899e-e100cba3d44b.roa
File:                     947ec108-e649-31a9-899e-e100cba3d44b.roa (raw, json)
Hash identifier:          MZ4dfO3+LcJX2O+OCGnPOn/8LfQKz2tUsN671Tll9EM=
Subject key identifier:   1F:DB:1A:24:97:51:48:63:8E:98:FD:F0:FA:53:75:4D:68:95:53:2F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E883B6BB22D03D0F4000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/947ec108-e649-31a9-899e-e100cba3d44b.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:802d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e8:83:b6:bb:22:d0:3d:0f:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=d216c965-fd54-496e-8479-ced0ce2c8a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:84:2f:8b:0e:90:5d:fa:f3:ff:12:7a:36:
                    a0:25:ef:ca:dc:64:70:2f:4d:53:24:9d:00:2a:1c:
                    bf:60:10:77:7b:a6:c1:eb:b5:a7:48:71:60:7b:41:
                    16:4b:8a:1e:cf:a2:26:52:1a:55:be:90:ed:6f:a0:
                    dd:02:0a:a6:81:9e:26:1c:6a:f2:24:c0:71:7b:c5:
                    18:dd:a2:b2:2e:e4:76:47:17:5c:30:4a:fe:48:b4:
                    95:02:20:63:a2:8c:85:7e:d2:73:bb:96:c4:6b:c7:
                    58:46:40:0e:ce:46:f2:05:00:e5:d7:cf:30:c4:1a:
                    22:37:06:44:23:ce:9b:0b:bf:b9:c7:de:e5:43:dc:
                    2a:cc:95:41:96:35:84:6f:11:fa:1b:15:80:30:5a:
                    df:c3:95:78:c1:ab:f3:e0:e8:5d:c4:98:d2:4a:4f:
                    5a:a3:8f:ec:74:2d:82:c4:95:91:0d:6c:f8:f6:66:
                    b8:d5:01:fc:ab:cc:0e:38:f7:cf:cf:65:f6:78:2d:
                    90:5c:10:fd:86:93:db:52:03:1b:4f:c4:59:2a:e0:
                    21:e6:7b:ff:b5:8c:b0:08:f6:1c:d5:b4:e0:5e:eb:
                    ae:7f:27:e8:0b:8b:a2:49:4d:57:21:d8:46:02:f9:
                    6c:a5:05:e8:12:ff:02:d5:cb:55:08:3d:b2:36:6a:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DB:1A:24:97:51:48:63:8E:98:FD:F0:FA:53:75:4D:68:95:53:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/947ec108-e649-31a9-899e-e100cba3d44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:802d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:77:7a:49:6d:63:40:89:16:f0:15:77:29:91:88:b7:09:97:
         d9:9d:14:b8:fc:0e:7b:57:89:f3:07:07:8c:9a:b5:aa:ab:eb:
         27:69:df:23:05:6c:cf:a5:d3:72:9a:11:0f:1c:d3:2c:d8:47:
         33:7b:59:f7:99:fc:9c:5f:99:38:2f:fd:78:af:22:19:37:1e:
         76:5b:09:d5:0e:41:d7:3e:e8:53:1b:e0:16:63:09:5c:7d:93:
         e1:f1:3c:05:41:73:be:b2:d1:16:df:c2:0b:60:22:1a:18:6a:
         a4:50:7d:7e:79:7c:26:57:1d:bc:94:b9:2e:df:ab:f4:1a:7c:
         6a:ed:a4:61:d3:ca:ec:98:48:f9:fd:41:5b:84:3b:7d:36:f0:
         51:c4:3b:1c:b2:95:e8:1c:b0:59:71:e6:c3:3f:25:c3:a9:4d:
         e1:2f:be:81:b3:79:04:2f:e5:22:06:91:6d:9f:c8:99:be:3c:
         cc:90:3d:02:78:b3:13:ef:45:7c:9b:05:13:39:95:d8:e4:ca:
         d8:c3:c4:20:da:0f:0a:39:07:9f:66:ff:de:f8:f2:59:5f:6b:
         49:82:67:5e:2a:b7:66:c4:14:0c:71:4e:5d:b4:62:28:9d:05:
         7d:ec:80:42:b2:08:ce:86:31:09:c9:ed:5e:b9:02:8d:60:64:
         dd:27:a3:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1eiDtrsi0D0PQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZDIxNmM5NjUtZmQ1NC00OTZlLTg0NzktY2VkMGNlMmM4YTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh6EL4sOkF368/8SejagJe/K3GRwL01TJJ0A
Khy/YBB3e6bB67WnSHFge0EWS4oez6ImUhpVvpDtb6DdAgqmgZ4mHGryJMBxe8UY
3aKyLuR2RxdcMEr+SLSVAiBjooyFftJzu5bEa8dYRkAOzkbyBQDl188wxBoiNwZE
I86bC7+5x97lQ9wqzJVBljWEbxH6GxWAMFrfw5V4wavz4OhdxJjSSk9ao4/sdC2C
xJWRDWz49ma41QH8q8wOOPfPz2X2eC2QXBD9hpPbUgMbT8RZKuAh5nv/tYywCPYc
1bTgXuuufyfoC4uiSU1XIdhGAvlspQXoEv8C1ctVCD2yNmqaQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB/bGiSXUUhjjpj98PpTdU1olVMvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTQ3ZWMxMDgtZTY0OS0z
MWE5LTg5OWUtZTEwMGNiYTNkNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGJ3ekltY0CJFvAVdymRiLcJl9mdFLj8DntXifMHB4yataqr6ydp
3yMFbM+l03KaEQ8c0yzYRzN7WfeZ/JxfmTgv/XivIhk3HnZbCdUOQdc+6FMb4BZj
CVx9k+HxPAVBc76y0RbfwgtgIhoYaqRQfX55fCZXHbyUuS7fq/QafGrtpGHTyuyY
SPn9QVuEO3028FHEOxyylegcsFlx5sM/JcOpTeEvvoGzeQQv5SIGkW2fyJm+PMyQ
PQJ4sxPvRXybBRM5ldjkytjDxCDaDwo5B59m/9748llfa0mCZ14qt2bEFAxxTl20
YiidBX3sgEKyCM6GMQnJ7V65Ao1gZN0no4I=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org