Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f27d9696-df5b-3f84-b3aa-cefe4fedb388.roa
File:                     f27d9696-df5b-3f84-b3aa-cefe4fedb388.roa (raw, json)
Hash identifier:          A/H2f4o9faxcIPbCMlmrTBAVsEnNPvBkbOGzZ3K3W+Y=
Subject key identifier:   3E:60:50:05:A9:BE:C8:14:B5:71:69:EF:AB:9E:86:A1:CC:67:17:A3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E8A91640C2A1415FF500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f27d9696-df5b-3f84-b3aa-cefe4fedb388.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:803d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e8:a9:16:40:c2:a1:41:5f:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=a7a05918-c5f4-4628-ac53-711cb9e703f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:73:0d:3f:93:d3:62:63:08:4b:e2:32:a3:
                    df:7a:e5:d6:40:7b:e2:ce:04:b3:07:42:f9:2c:92:
                    b9:ff:93:73:1c:bc:cb:79:1d:b7:49:ce:98:97:8f:
                    ec:42:17:18:73:3e:6a:c7:52:89:98:dd:1a:30:83:
                    25:3a:05:e9:1c:2b:b3:02:b5:36:5e:d8:72:39:23:
                    9b:2a:8a:4f:ab:2d:64:9e:7a:fb:29:9e:19:58:1c:
                    a3:c4:35:75:aa:9d:4d:d9:37:60:6d:6a:83:91:ad:
                    b0:01:64:00:d8:2e:cc:41:31:c8:5b:39:ac:b0:3f:
                    e0:6f:0d:61:0f:ce:5a:de:a0:f7:6d:2f:38:65:9b:
                    8a:a1:6b:53:d6:48:07:91:a5:42:89:8d:11:3f:3e:
                    5b:9f:2d:e0:81:23:c7:47:da:fe:19:f1:81:9f:72:
                    26:2a:25:f8:2d:24:f8:83:25:37:0b:e6:ef:d3:8d:
                    e4:6a:60:f9:ca:da:91:11:0a:c0:aa:27:d4:47:57:
                    5f:ab:0e:77:e2:d0:3d:cc:54:78:c2:64:51:bf:ab:
                    df:63:37:2f:81:e3:f6:bd:43:1b:2a:4e:50:8d:6c:
                    ea:f5:12:5a:3e:ea:a0:2c:ac:6e:c0:e1:36:6d:30:
                    e5:c8:37:79:ce:bf:39:95:df:e7:d4:ea:e5:77:0a:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:60:50:05:A9:BE:C8:14:B5:71:69:EF:AB:9E:86:A1:CC:67:17:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f27d9696-df5b-3f84-b3aa-cefe4fedb388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:803d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:fa:e2:b2:3b:ba:1f:c6:8f:0f:2e:1a:ef:5e:1d:49:e4:
         6b:b0:70:e3:a2:82:27:3c:eb:db:5c:ab:aa:dc:66:f2:8c:2e:
         c7:98:0d:86:88:b8:01:9c:0a:70:69:a9:c4:42:5e:b0:2c:4b:
         27:8d:80:9a:99:51:d0:d8:7d:57:e5:fc:72:6b:b9:e8:fe:55:
         0c:33:63:73:12:18:22:40:d1:66:2e:e6:ad:6c:5b:a7:e3:63:
         69:11:fd:6e:83:ba:d2:2c:1b:47:be:5e:87:6b:14:b6:ad:d9:
         09:86:f2:ec:ba:4e:d1:18:e1:48:8a:44:38:81:57:38:25:8f:
         a9:17:ce:b9:4a:9d:82:4e:0d:b1:4b:1e:aa:62:64:bd:0d:17:
         a6:78:13:a1:02:24:fd:81:17:55:50:2a:cb:13:54:59:0c:ab:
         65:e3:96:46:ff:13:cd:d3:59:33:6e:64:a7:e2:6f:47:70:b0:
         b5:b9:8c:b3:a5:77:42:42:d0:e4:e1:24:04:44:92:91:7c:36:
         c6:07:ed:e9:46:ea:b4:86:c6:b8:04:07:0e:3b:27:be:2f:ee:
         a5:d3:16:75:47:9b:5c:28:a1:d3:21:df:d4:fa:87:92:cd:9e:
         4a:22:96:7d:eb:fa:c5:5a:d1:56:09:61:55:e1:b3:5c:e9:dd:
         c3:ad:9d:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1eipFkDCoUFf9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
YTdhMDU5MTgtYzVmNC00NjI4LWFjNTMtNzExY2I5ZTcwM2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu5zDT+T02JjCEviMqPfeuXWQHvizgSzB0L5
LJK5/5NzHLzLeR23Sc6Yl4/sQhcYcz5qx1KJmN0aMIMlOgXpHCuzArU2XthyOSOb
KopPqy1knnr7KZ4ZWByjxDV1qp1N2TdgbWqDka2wAWQA2C7MQTHIWzmssD/gbw1h
D85a3qD3bS84ZZuKoWtT1kgHkaVCiY0RPz5bny3ggSPHR9r+GfGBn3ImKiX4LST4
gyU3C+bv043kamD5ytqREQrAqifUR1dfqw534tA9zFR4wmRRv6vfYzcvgeP2vUMb
Kk5QjWzq9RJaPuqgLKxuwOE2bTDlyDd5zr85ld/n1Orldwqr7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD5gUAWpvsgUtXFp76uehqHMZxejMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjI3ZDk2OTYtZGY1Yi0z
Zjg0LWIzYWEtY2VmZTRmZWRiMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYA9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+1+uKyO7ofxo8PLhrvXh1J5GuwcOOigic869tcq6rcZvKMLseY
DYaIuAGcCnBpqcRCXrAsSyeNgJqZUdDYfVfl/HJruej+VQwzY3MSGCJA0WYu5q1s
W6fjY2kR/W6DutIsG0e+XodrFLat2QmG8uy6TtEY4UiKRDiBVzglj6kXzrlKnYJO
DbFLHqpiZL0NF6Z4E6ECJP2BF1VQKssTVFkMq2Xjlkb/E83TWTNuZKfib0dwsLW5
jLOld0JC0OThJAREkpF8NsYH7elG6rSGxrgEBw47J74v7qXTFnVHm1woodMh39T6
h5LNnkoiln3r+sVa0VYJYVXhs1zp3cOtnX8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org