Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aae20cc4-3ea3-3394-98f2-ce910522a7e2.roa
File:                     aae20cc4-3ea3-3394-98f2-ce910522a7e2.roa (raw, json)
Hash identifier:          vkf8NSFpPGsUw96rK2R7GKriz6iCpdJooOvJsC5uUNY=
Subject key identifier:   92:7D:CF:42:AC:0E:C6:AC:3B:FC:FA:35:8D:AD:B2:A1:AD:41:D3:4B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC317FC8F85777C95064500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aae20cc4-3ea3-3394-98f2-ce910522a7e2.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8a3d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:17:fc:8f:85:77:7c:95:06:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=53d5c9c7-b6bd-4c8e-bb01-7b574ab2ca22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:2f:a6:69:15:5f:8c:72:47:ba:3d:04:89:
                    8f:01:fc:b7:9c:87:a8:94:40:d3:d6:fa:56:fa:ff:
                    aa:03:97:87:6d:d4:f0:c7:3c:0b:93:7c:29:05:cb:
                    a8:78:15:e6:46:8d:94:23:5d:03:cd:f5:0c:08:cc:
                    ec:4d:cc:7b:2d:56:41:12:1d:4c:af:98:44:67:ea:
                    fe:84:61:3c:cc:be:0a:59:b6:56:82:66:e4:b6:f2:
                    93:cc:ef:b4:dc:0b:b7:00:10:bf:ed:d3:16:87:2e:
                    2a:23:b6:34:50:90:89:1e:89:54:8b:11:81:71:43:
                    2f:03:2c:dd:e2:cf:1a:b8:8a:25:bf:39:e8:6b:75:
                    08:d8:56:06:b6:cb:68:9f:be:85:03:8d:6f:32:ef:
                    46:c5:bc:0c:2e:40:5e:89:66:59:54:2c:aa:9b:24:
                    2d:d7:9f:f1:f0:65:2c:89:27:10:9a:11:a5:20:1d:
                    dd:b0:c0:ab:38:6a:b9:31:6e:60:ce:c1:e4:65:22:
                    ff:aa:63:79:19:72:3f:67:8e:50:94:35:b4:f0:e5:
                    ef:98:db:69:a5:ad:94:e3:b0:8c:d4:87:7f:14:51:
                    5c:a6:98:89:a9:58:3a:f8:7e:06:83:dd:ea:89:3b:
                    5f:48:b7:cd:0c:20:ed:c1:42:c1:79:ac:4d:90:f1:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7D:CF:42:AC:0E:C6:AC:3B:FC:FA:35:8D:AD:B2:A1:AD:41:D3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aae20cc4-3ea3-3394-98f2-ce910522a7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8a3d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:55:86:53:57:0f:3a:f2:9a:d1:01:2d:7c:24:b6:6b:66:fd:
         79:6b:57:39:89:5a:20:67:e9:51:a1:5b:ab:19:90:e0:89:9b:
         d6:a7:dc:0c:49:4e:c0:4e:1f:ab:92:98:97:d3:3e:69:28:62:
         7e:05:58:e4:76:24:d7:53:d0:5e:05:8f:2b:77:13:a8:bc:77:
         36:89:f6:82:54:6e:83:c7:88:96:37:7f:ab:5e:c2:30:e0:e1:
         06:bb:33:eb:02:0b:eb:9d:ce:18:2f:24:c6:ff:c8:52:c2:16:
         84:36:1b:53:28:27:52:05:e5:e9:7b:ff:34:61:7b:92:4d:f4:
         bb:d0:a6:a9:84:c5:42:18:a8:69:cc:8f:2f:c1:f8:70:2e:ad:
         49:57:4d:6d:7b:d0:50:a4:98:b8:57:87:ec:fb:0e:97:0b:f7:
         f1:36:1f:e6:db:04:47:54:f8:18:4e:3c:46:df:ef:19:51:57:
         e4:82:2d:14:39:b8:08:5e:24:0a:cb:f2:a7:d2:08:77:62:9d:
         cf:f5:a0:37:a3:56:17:67:d8:8c:5b:4a:16:11:e9:93:c0:36:
         7d:82:a7:28:db:1a:99:d8:a7:bb:49:54:ae:17:f5:dd:49:c3:
         5e:83:01:de:49:63:0c:ca:d6:8f:26:4b:4a:38:c5:61:9b:83:
         74:0a:95:fa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwxf8j4V3fJUGRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
NTNkNWM5YzctYjZiZC00YzhlLWJiMDEtN2I1NzRhYjJjYTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9MvpmkVX4xyR7o9BImPAfy3nIeolEDT1vpW
+v+qA5eHbdTwxzwLk3wpBcuoeBXmRo2UI10DzfUMCMzsTcx7LVZBEh1Mr5hEZ+r+
hGE8zL4KWbZWgmbktvKTzO+03Au3ABC/7dMWhy4qI7Y0UJCJHolUixGBcUMvAyzd
4s8auIolvznoa3UI2FYGtston76FA41vMu9GxbwMLkBeiWZZVCyqmyQt15/x8GUs
iScQmhGlIB3dsMCrOGq5MW5gzsHkZSL/qmN5GXI/Z45QlDW08OXvmNtppa2U47CM
1Id/FFFcppiJqVg6+H4Gg93qiTtfSLfNDCDtwULBeaxNkPHnLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJJ9z0KsDsasO/z6NY2tsqGtQdNLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWFlMjBjYzQtM2VhMy0z
Mzk0LTk4ZjItY2U5MTA1MjJhN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYo9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADlVhlNXDzrymtEBLXwktmtm/XlrVzmJWiBn6VGhW6sZkOCJm9an
3AxJTsBOH6uSmJfTPmkoYn4FWOR2JNdT0F4Fjyt3E6i8dzaJ9oJUboPHiJY3f6te
wjDg4Qa7M+sCC+udzhgvJMb/yFLCFoQ2G1MoJ1IF5el7/zRhe5JN9LvQpqmExUIY
qGnMjy/B+HAurUlXTW170FCkmLhXh+z7DpcL9/E2H+bbBEdU+BhOPEbf7xlRV+SC
LRQ5uAheJArL8qfSCHdinc/1oDejVhdn2IxbShYR6ZPANn2CpyjbGpnYp7tJVK4X
9d1Jw16DAd5JYwzK1o8mS0o4xWGbg3QKlfo=
-----END CERTIFICATE-----
Generated at Thu May 9 15:23:34 2024 by rpki-client on console-ams.rpki-client.org