Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad7bed1-72a8-309b-b17d-8debdac0b70a.roa
File:                     dad7bed1-72a8-309b-b17d-8debdac0b70a.roa (raw, json)
Hash identifier:          kPbesSWYD1ugVN/toFAXY8JSoKr4l5nrIpohPANK/14=
Subject key identifier:   EA:4E:6A:EE:DC:35:00:4E:B0:9C:86:DB:65:71:89:D5:75:38:84:6C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F0844A378676FD1E8200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad7bed1-72a8-309b-b17d-8debdac0b70a.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:8118::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f0:84:4a:37:86:76:fd:1e:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=2225bdc5-7d0c-4b51-a743-782006304d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:7d:cc:74:d6:0e:a3:24:ed:f2:f9:53:32:
                    c1:c3:5f:4d:43:10:42:b0:7c:cd:4d:01:4c:a5:6f:
                    c7:0a:57:ca:5d:be:47:3c:56:5a:4d:4e:a4:a8:b9:
                    2a:b1:bd:d0:6b:9c:cc:8e:35:ac:69:76:ca:fc:8a:
                    bf:6e:0e:90:03:35:49:cd:1c:f2:13:7f:37:4f:26:
                    8e:78:c9:08:7e:72:63:e0:bd:a5:8f:60:c9:55:b9:
                    b9:77:a2:1c:51:03:f3:b2:73:48:0e:e6:d3:59:3f:
                    54:b3:5b:04:a1:20:32:11:0d:fa:bf:1b:ce:47:8d:
                    1e:55:df:ed:72:2e:09:22:29:8c:64:9a:b7:7f:e5:
                    17:f9:82:5f:c1:0f:28:fe:8b:56:95:da:e5:b0:7e:
                    0e:f1:a0:b1:0d:9f:b0:22:dd:e1:04:ca:e7:d5:a0:
                    a8:8b:69:ca:43:a6:c0:3b:f2:aa:b8:65:11:29:11:
                    d4:48:35:42:74:5b:7d:97:75:9b:17:07:87:a4:fc:
                    32:b5:83:7a:fa:eb:04:54:ae:23:75:ba:a0:e4:b0:
                    a8:8d:d4:a4:57:80:1c:d6:84:cd:34:a5:8d:df:80:
                    20:87:36:a8:18:de:fd:39:36:62:02:28:15:5f:cf:
                    28:e0:a1:e1:23:5e:7a:b7:27:f7:29:9b:8b:b8:8b:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:6A:EE:DC:35:00:4E:B0:9C:86:DB:65:71:89:D5:75:38:84:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad7bed1-72a8-309b-b17d-8debdac0b70a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8118::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:4f:54:95:9e:17:72:79:b1:11:5e:73:3a:0c:a5:04:45:
         ab:32:15:e3:db:3c:75:29:03:d5:f7:cb:82:22:d9:d3:b1:04:
         07:ec:1f:2f:09:e3:ab:fb:c9:c6:a3:f6:ea:b5:9a:ce:8b:9e:
         f5:41:05:e8:92:3f:e0:c7:95:a8:5f:e8:0e:55:c7:1b:fc:d0:
         89:58:7b:d4:1b:bc:fb:b6:0a:37:95:dd:9e:f2:f9:3f:a3:fd:
         99:fb:39:f4:99:a9:41:5a:1a:4a:9d:37:1b:8a:b5:cb:1f:7d:
         ef:85:8f:6b:50:1b:f7:1b:d5:65:f9:33:63:47:be:76:d0:2b:
         2b:88:82:9f:ee:90:06:b7:17:3b:1c:64:e3:c3:16:b7:64:00:
         9a:61:a5:3f:bd:6f:fa:54:4b:a1:e8:ad:f6:20:9e:32:80:82:
         af:2e:08:86:eb:25:96:dd:c0:e5:20:e9:a3:a1:00:e1:7d:f0:
         3c:c2:05:37:1c:77:45:1b:94:ee:a3:b4:79:f9:3e:fe:16:bb:
         50:9e:7d:d2:57:dc:1d:d6:3f:f8:25:a0:f4:68:87:76:fe:39:
         6b:ab:f3:2c:41:6b:04:4e:a6:3f:7f:c1:25:1f:f9:50:4c:83:
         d7:04:94:d6:e2:02:91:f0:c7:dd:48:05:a8:36:ae:bc:1f:2f:
         21:b6:b4:7a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1fCESjeGdv0eggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MjIyNWJkYzUtN2QwYy00YjUxLWE3NDMtNzgyMDA2MzA0ZDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGx9zHTWDqMk7fL5UzLBw19NQxBCsHzNTQFM
pW/HClfKXb5HPFZaTU6kqLkqsb3Qa5zMjjWsaXbK/Iq/bg6QAzVJzRzyE383TyaO
eMkIfnJj4L2lj2DJVbm5d6IcUQPzsnNIDubTWT9Us1sEoSAyEQ36vxvOR40eVd/t
ci4JIimMZJq3f+UX+YJfwQ8o/otWldrlsH4O8aCxDZ+wIt3hBMrn1aCoi2nKQ6bA
O/KquGURKRHUSDVCdFt9l3WbFweHpPwytYN6+usEVK4jdbqg5LCojdSkV4Ac1oTN
NKWN34AghzaoGN79OTZiAigVX88o4KHhI156tyf3KZuLuIttPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOpOau7cNQBOsJyG22VxidV1OIRsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGFkN2JlZDEtNzJhOC0z
MDliLWIxN2QtOGRlYmRhYzBiNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGg9T1SVnhdyebERXnM6DKUERasyFePbPHUpA9X3y4Ii2dOxBAfs
Hy8J46v7ycaj9uq1ms6LnvVBBeiSP+DHlahf6A5Vxxv80IlYe9QbvPu2CjeV3Z7y
+T+j/Zn7OfSZqUFaGkqdNxuKtcsffe+Fj2tQG/cb1WX5M2NHvnbQKyuIgp/ukAa3
FzscZOPDFrdkAJphpT+9b/pUS6HorfYgnjKAgq8uCIbrJZbdwOUg6aOhAOF98DzC
BTccd0UblO6jtHn5Pv4Wu1CefdJX3B3WP/gloPRoh3b+OWur8yxBawROpj9/wSUf
+VBMg9cElNbiApHwx91IBag2rrwfLyG2tHo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org