Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa
File:                     84199ee8-6fc9-3f89-963a-d28f3a32d890.roa (raw, json)
Hash identifier:          E6MqWcLBBHittHYta61TBQ4hMUEX/sEZm/aNwYoYHoo=
Subject key identifier:   7A:3D:5A:EC:5D:60:C4:E9:73:D8:64:95:EE:4B:CD:E1:8E:28:EA:D6
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584754E0C36D9BB206B313DF7CB0
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     8038
IP address blocks:        2607:fae0::/36 maxlen: 36
                          2607:fae0:2000::/36 maxlen: 36
                          2607:fae0:3000::/36 maxlen: 36
                          2607:fae0:4000::/36 maxlen: 36
                          2607:fae0:5000::/36 maxlen: 36
                          2607:fae0:8000::/36 maxlen: 36
                          2607:fae0:a000::/36 maxlen: 36
                          2607:fae0:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:c3:6d:9b:b2:06:b3:13:df:7c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=78a75cb1-aa9b-4480-9a44-dc1a8f5776cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:e4:ad:40:ad:4c:13:bb:c9:90:4d:cf:4d:
                    a2:f4:a6:98:fb:71:6c:d4:3a:74:29:00:da:60:1f:
                    85:84:6c:6c:d5:ac:a0:2f:38:64:e5:54:19:9b:9b:
                    cb:35:50:03:1d:dd:2a:f7:dc:9d:03:7d:11:85:fc:
                    04:22:97:c7:73:26:b0:b8:e3:43:cc:8a:23:0f:fe:
                    b9:3b:fe:d5:ab:3e:4e:9f:a5:42:ac:7a:b0:cf:12:
                    e0:c7:85:ed:35:73:10:e0:1e:c6:fe:ab:36:16:2b:
                    b9:d6:4e:3e:9d:90:7a:b0:c9:2b:cb:2d:76:1c:a1:
                    6e:6f:c0:1f:48:2c:97:1c:13:1d:6d:ec:d6:79:cc:
                    f4:bf:38:ae:e8:e7:27:a7:13:26:b6:fd:9a:f6:d1:
                    24:a5:02:1c:3e:8f:fb:1b:f1:f8:9f:4d:68:3f:50:
                    b6:5c:a2:7b:79:c6:03:d4:af:2f:06:07:d1:5d:aa:
                    5a:49:3d:e2:7f:f8:c1:ac:fb:3a:ba:0d:d5:24:29:
                    8c:34:30:56:1a:b3:3e:62:33:71:38:0b:73:6e:c9:
                    d8:24:fa:77:99:8b:48:da:51:22:28:f8:d1:66:0a:
                    09:79:f9:64:08:bc:13:e8:29:a1:df:79:05:8e:e8:
                    ea:68:cc:51:f7:0c:0b:68:3c:89:91:c2:98:24:a5:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3D:5A:EC:5D:60:C4:E9:73:D8:64:95:EE:4B:CD:E1:8E:28:EA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0::/36
                  2607:fae0:2000::-2607:fae0:5fff:ffff:ffff:ffff:ffff:ffff
                  2607:fae0:8000::/36
                  2607:fae0:a000::/36
                  2607:fae0:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c1:c8:6d:79:2a:b7:84:f4:2e:d3:e6:18:a3:a4:4b:96:d0:
         6a:23:9a:a0:16:1b:3b:99:92:22:f3:a9:8c:c1:34:d4:b5:63:
         53:21:ef:bc:0b:6a:3e:ee:6c:5e:95:19:91:e2:ab:10:f1:0e:
         fa:62:bb:bd:3a:c8:b1:ae:70:df:de:6e:ab:8d:2b:f0:37:ee:
         88:6b:19:af:b3:fc:74:0f:e2:3b:3f:f5:6b:be:f9:82:fb:52:
         c1:d3:fc:40:38:b0:8b:93:27:ab:e6:5d:46:e4:00:d9:df:6d:
         de:5f:31:f6:66:2d:3d:1b:af:21:ab:d2:f6:86:a0:27:1e:ba:
         e6:7b:e4:5c:59:83:1c:ee:29:9a:8a:c8:26:95:19:e5:cc:ae:
         c3:37:6d:c8:79:68:5e:66:b9:66:40:68:19:83:52:52:3c:e5:
         80:5b:db:66:25:d1:70:8c:ca:7d:11:95:38:ac:80:fe:0a:50:
         fe:42:c7:eb:36:51:0d:25:85:d8:88:de:67:a1:e2:b3:f3:35:
         cc:2a:f3:8a:65:ad:a3:0e:d3:80:a4:bf:76:6b:1d:f0:27:b1:
         1e:60:f5:cd:e7:82:c1:d2:1c:b0:98:af:46:08:a4:ac:cb:44:
         b2:d4:6e:ac:e3:23:d9:35:40:76:43:e9:e2:35:08:a4:78:d4:
         59:f4:15:4d
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEdU4MNtm7IGsxPffLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQzMTNjYTctODFlNy00MmUyLWJmMzgtYzk2YmI4Mzll
Y2Y0MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzhhNzVjYjEtYWE5Yi00NDgwLTlhNDQtZGMxYThmNTc3NmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjnkrUCtTBO7yZBNz02i9KaY+3Fs1Dp0KQDa
YB+FhGxs1aygLzhk5VQZm5vLNVADHd0q99ydA30RhfwEIpfHcyawuONDzIojD/65
O/7Vqz5On6VCrHqwzxLgx4XtNXMQ4B7G/qs2Fiu51k4+nZB6sMkryy12HKFub8Af
SCyXHBMdbezWecz0vziu6OcnpxMmtv2a9tEkpQIcPo/7G/H4n01oP1C2XKJ7ecYD
1K8vBgfRXapaST3if/jBrPs6ug3VJCmMNDBWGrM+YjNxOAtzbsnYJPp3mYtI2lEi
KPjRZgoJeflkCLwT6Cmh33kFjujqaMxR9wwLaDyJkcKYJKU5YQIDAQABo4IDgTCC
A30wHQYDVR0OBBYEFHo9WuxdYMTpc9hkle5LzeGOKOrWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMx
M2NhNy04MWU3LTQyZTItYmYzOC1jOTZiYjgzOWVjZjQvODQxOTllZTgtNmZjOS0z
Zjg5LTk2M2EtZDI4ZjNhMzJkODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWQzMTNjYTctODFlNy00MmUyLWJm
MzgtYzk2YmI4MzllY2Y0L2VkMzEzY2E3LTgxZTctNDJlMi1iZjM4LWM5NmJiODM5
ZWNmNC5jcmwwHwYDVR0jBBgwFoAUXZd2euVa2pUu/hSsnovu5Oj9kt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMxM2NhNy04MWU3LTQyZTItYmYzOC1jOTZi
YjgzOWVjZjQuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAAjAyAwYEJgf64AAw
EAMGBSYH+uAgAwYFJgf64EADBgQmB/rggAMGBCYH+uCgAwYEJgf64PAwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAY8HIbXkqt4T0LtPmGKOkS5bQaiOaoBYbO5mSIvOpjME01LVjUyHvvAtqPu5s
XpUZkeKrEPEO+mK7vTrIsa5w395uq40r8DfuiGsZr7P8dA/iOz/1a775gvtSwdP8
QDiwi5Mnq+ZdRuQA2d9t3l8x9mYtPRuvIavS9oagJx665nvkXFmDHO4pmorIJpUZ
5cyuwzdtyHloXma5ZkBoGYNSUjzlgFvbZiXRcIzKfRGVOKyA/gpQ/kLH6zZRDSWF
2IjeZ6His/M1zCrzimWtow7TgKS/dmsd8CexHmD1zeeCwdIcsJivRgikrMtEstRu
rOMj2TVAdkPp4jUIpHjUWfQVTQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org