Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa
File:                     b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa (raw, json)
Hash identifier:          gRk3bY+hD+dZeODLDskQ3TonkCXOShIC2qnxsMgcNAU=
Subject key identifier:   0F:3B:8C:62:06:29:30:83:B5:18:25:FF:36:C0:6F:0F:57:B5:7A:05
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC315B6D9B898E458C20780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8083::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:15:b6:d9:b8:98:e4:58:c2:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=4bad6ce1-8998-43d0-812e-ffe0192414d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:5f:b0:83:9a:e3:4e:f2:50:5e:66:ba:e7:
                    88:6f:1a:7c:8c:e0:5d:4c:72:fe:ba:e9:c5:39:6e:
                    3f:82:2d:22:65:2e:b6:b4:ac:35:6c:89:66:7d:70:
                    a9:34:09:0a:37:c7:4e:e0:1d:fa:67:06:8b:fe:8c:
                    78:39:3b:9c:d1:fa:60:b2:4f:0c:84:ba:77:9a:e4:
                    11:a3:6d:84:b2:cd:68:fc:bc:f8:90:ff:7a:11:9b:
                    6d:0d:b3:d1:c6:83:1c:22:84:e5:0f:d8:bc:39:38:
                    e7:5a:63:ed:51:52:c3:d6:f8:d2:f1:bf:39:71:ae:
                    2f:91:22:c9:7c:39:59:a4:8b:dd:d6:24:d5:fc:f5:
                    68:70:01:33:28:af:14:a4:58:54:06:02:91:9a:15:
                    1b:72:55:ae:73:6a:8d:92:da:05:8a:84:ff:18:5e:
                    5d:86:7a:6e:93:d0:fe:ba:47:45:27:fb:05:45:83:
                    8f:25:a8:ac:98:83:24:a9:4d:dc:c8:06:f4:aa:ac:
                    63:a8:61:cd:e8:17:27:d0:84:a5:c9:a3:ea:20:24:
                    45:72:90:87:fd:61:56:7a:16:1d:f5:df:67:96:73:
                    91:3d:9f:90:92:73:33:18:d9:95:db:45:b8:42:f8:
                    97:d1:2b:83:f6:84:93:58:aa:55:a5:81:a4:a1:c2:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:8C:62:06:29:30:83:B5:18:25:FF:36:C0:6F:0F:57:B5:7A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8083::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:6d:72:e0:55:f1:c7:30:32:52:32:b7:ba:eb:56:6d:cd:dd:
         8f:45:72:f8:78:0f:17:7f:8c:9c:48:28:f8:ec:c3:5b:fb:75:
         5a:75:65:76:7d:f9:0d:42:40:59:e1:b1:01:57:26:45:40:b4:
         28:1d:69:e7:3b:3d:c8:c6:c4:2c:fd:78:38:41:5e:b4:8c:98:
         50:93:89:96:f2:33:42:26:36:f2:c2:5f:0c:69:8a:c1:da:29:
         05:eb:80:3c:a1:11:73:e6:1e:70:cb:68:26:4d:b1:68:5a:5b:
         48:06:8a:40:ca:b5:0f:8e:b6:09:24:c9:56:85:f9:f4:f2:5a:
         a5:8d:3a:1b:f8:10:c3:7f:03:20:49:5c:8d:37:1c:e5:6c:8d:
         66:fe:86:b7:7f:f3:45:74:3e:c4:2c:a2:6e:e1:66:f3:17:20:
         65:92:4b:1d:ff:0e:f4:2d:7c:63:44:68:55:4f:d1:78:c3:a5:
         f9:61:15:5d:14:f9:8f:65:f3:c4:b6:d1:20:a9:39:dc:d6:3a:
         f4:88:a9:6b:8f:33:99:a9:07:27:ce:69:4f:5c:b2:83:21:75:
         88:4c:ef:76:1e:19:0d:9e:b5:bd:8b:c6:b6:53:49:ca:ad:85:
         3c:fe:76:d2:b9:37:64:62:c2:56:6d:93:d8:a5:99:c4:f7:9a:
         07:1f:d1:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVfwxW22biY5FjCB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
NGJhZDZjZTEtODk5OC00M2QwLTgxMmUtZmZlMDE5MjQxNGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwhfsIOa407yUF5muueIbxp8jOBdTHL+uunF
OW4/gi0iZS62tKw1bIlmfXCpNAkKN8dO4B36ZwaL/ox4OTuc0fpgsk8MhLp3muQR
o22Ess1o/Lz4kP96EZttDbPRxoMcIoTlD9i8OTjnWmPtUVLD1vjS8b85ca4vkSLJ
fDlZpIvd1iTV/PVocAEzKK8UpFhUBgKRmhUbclWuc2qNktoFioT/GF5dhnpuk9D+
ukdFJ/sFRYOPJaismIMkqU3cyAb0qqxjqGHN6Bcn0ISlyaPqICRFcpCH/WFWehYd
9d9nlnORPZ+QknMzGNmV20W4QviX0SuD9oSTWKpVpYGkocL8TwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA87jGIGKTCDtRgl/zbAbw9XtXoFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjdlOGJkMjctZjFiNi0z
OThkLWJiMzMtOWIzMDg1MmU1YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYCD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA5tcuBV8ccwMlIyt7rrVm3N3Y9Fcvh4Dxd/jJxIKPjsw1v7dVp1
ZXZ9+Q1CQFnhsQFXJkVAtCgdaec7PcjGxCz9eDhBXrSMmFCTiZbyM0ImNvLCXwxp
isHaKQXrgDyhEXPmHnDLaCZNsWhaW0gGikDKtQ+OtgkkyVaF+fTyWqWNOhv4EMN/
AyBJXI03HOVsjWb+hrd/80V0PsQsom7hZvMXIGWSSx3/DvQtfGNEaFVP0XjDpflh
FV0U+Y9l88S20SCpOdzWOvSIqWuPM5mpByfOaU9csoMhdYhM73YeGQ2etb2LxrZT
ScqthTz+dtK5N2RiwlZtk9ilmcT3mgcf0cY=
-----END CERTIFICATE-----
Generated at Fri May 10 08:52:07 2024 by rpki-client on console-fra.rpki-client.org