Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dcd956c6-554a-3cbe-be6a-bd180207dbed.roa
File:                     dcd956c6-554a-3cbe-be6a-bd180207dbed.roa (raw, json)
Hash identifier:          cVCLTSSguIwBGtMzEq7ZZLdVAY6lrB4he7dHemf9unw=
Subject key identifier:   38:2E:0C:6E:14:19:E6:40:69:46:31:11:95:D1:47:94:9D:A0:82:14
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858472DCB33A87F175520DDF98400
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dcd956c6-554a-3cbe-be6a-bd180207dbed.roa
Signing time:             Wed 11 Sep 2024 13:00:42 +0000
ROA not before:           Wed 11 Sep 2024 13:00:42 +0000
ROA not after:            Tue 10 Dec 2024 14:00:42 +0000
asID:                     15169
IP address blocks:        2605:ef80:c050::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2d:cb:33:a8:7f:17:55:20:dd:f9:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 11 13:00:42 2024 GMT
            Not After : Dec 10 14:00:42 2024 GMT
        Subject: CN=037f97bc-cca7-4c9c-b773-cce8aa30729e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:93:1f:90:23:3e:ee:b6:78:12:42:4a:e4:
                    b2:ce:e1:45:ea:c9:e6:8a:90:5c:c8:77:8f:cc:85:
                    62:db:1f:0c:31:6e:57:4b:b9:86:30:d8:8d:ff:a1:
                    8c:a9:37:2f:7c:1c:ed:d1:a0:6f:ba:18:d3:c5:12:
                    57:b3:fd:81:a8:75:a0:ee:c7:e8:0e:12:ca:05:4d:
                    bb:4c:d5:a3:3d:c9:5a:20:2e:68:2d:d6:9a:1c:36:
                    55:cb:f2:f1:34:92:d7:b0:71:55:e3:9f:63:d0:7d:
                    f6:db:2a:b9:a0:df:9b:a9:38:84:fb:68:6e:73:18:
                    2f:24:a4:5f:e8:15:d1:ac:5e:23:2f:96:4f:c1:6a:
                    54:8f:1c:b5:b0:67:59:50:32:89:51:f4:5e:c3:a9:
                    17:ee:3e:9a:5e:38:b7:64:81:99:d5:9d:70:16:d7:
                    a8:a8:2d:0f:78:41:12:b3:cd:cb:ef:c9:71:b1:c8:
                    91:0f:ef:01:d3:a1:c6:ef:15:1a:83:07:e7:31:e8:
                    4c:f3:50:92:11:d5:93:2b:3d:73:31:23:ca:58:7d:
                    c3:0d:4e:88:f9:12:e7:cc:4b:ee:cb:fb:98:d0:dc:
                    b6:1d:cf:fb:51:9a:e6:df:70:da:ac:1d:b6:56:dd:
                    60:04:7d:4b:2b:11:f0:fb:16:a8:40:a8:ae:d6:d8:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:0C:6E:14:19:E6:40:69:46:31:11:95:D1:47:94:9D:A0:82:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dcd956c6-554a-3cbe-be6a-bd180207dbed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ef80:c050::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:13:c8:bb:20:8a:4e:a1:bd:52:c6:67:29:6a:64:b2:cd:65:
         73:b4:ea:ca:3c:19:5b:70:66:38:8d:aa:64:94:7f:2a:6e:4a:
         54:df:c3:b1:ab:f0:51:31:35:5f:4a:26:51:8d:71:ee:9e:cc:
         de:f4:8d:60:80:c3:5b:b4:88:c2:cb:fd:ff:5a:74:23:72:d1:
         1e:b8:e0:14:93:ed:40:6c:99:29:3d:af:a5:61:0c:02:48:1a:
         5a:58:87:c3:63:81:51:aa:9a:b2:cf:4f:ae:8c:8a:70:29:9c:
         42:cf:d3:4d:a1:a6:36:66:90:36:9d:47:2a:94:62:7d:6e:a9:
         88:9a:59:b7:03:8c:29:b3:ca:b1:2e:43:37:b6:7e:50:7a:bc:
         82:92:32:7d:fa:af:3f:37:9f:c1:fe:c5:c5:4e:60:58:06:81:
         5f:bc:d6:4e:04:22:5e:57:7e:24:f8:87:9c:02:e6:e1:fe:d7:
         50:ba:b8:36:59:86:96:12:29:a6:63:de:68:14:81:75:42:91:
         65:94:cd:ff:17:d8:d1:00:89:cf:ac:56:27:79:3a:42:45:50:
         f5:59:5b:73:f8:e7:2d:9c:a8:df:35:74:5e:88:f2:24:6a:eb:
         6b:b4:fb:22:f1:49:ce:67:74:0d:22:b5:ee:65:46:ac:c6:55:
         c9:de:cf:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEctyzOofxdVIN35hAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI0MDkxMTEzMDA0MloXDTI0MTIxMDE0MDA0MlowLzEtMCsGA1UEAxMk
MDM3Zjk3YmMtY2NhNy00YzljLWI3NzMtY2NlOGFhMzA3MjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW2TH5AjPu62eBJCSuSyzuFF6snmipBcyHeP
zIVi2x8MMW5XS7mGMNiN/6GMqTcvfBzt0aBvuhjTxRJXs/2BqHWg7sfoDhLKBU27
TNWjPclaIC5oLdaaHDZVy/LxNJLXsHFV459j0H322yq5oN+bqTiE+2hucxgvJKRf
6BXRrF4jL5ZPwWpUjxy1sGdZUDKJUfRew6kX7j6aXji3ZIGZ1Z1wFteoqC0PeEES
s83L78lxsciRD+8B06HG7xUagwfnMehM81CSEdWTKz1zMSPKWH3DDU6I+RLnzEvu
y/uY0Ny2Hc/7UZrm33DarB22Vt1gBH1LKxHw+xaoQKiu1tibjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDguDG4UGeZAaUYxEZXRR5SdoIIUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZGNkOTU2YzYtNTU0YS0z
Y2JlLWJlNmEtYmQxODAyMDdkYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgXvgMBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJoTyLsgik6hvVLGZylqZLLNZXO06so8GVtwZjiNqmSUfypuSlTf
w7Gr8FExNV9KJlGNce6ezN70jWCAw1u0iMLL/f9adCNy0R644BST7UBsmSk9r6Vh
DAJIGlpYh8NjgVGqmrLPT66MinApnELP002hpjZmkDadRyqUYn1uqYiaWbcDjCmz
yrEuQze2flB6vIKSMn36rz83n8H+xcVOYFgGgV+81k4EIl5XfiT4h5wC5uH+11C6
uDZZhpYSKaZj3mgUgXVCkWWUzf8X2NEAic+sVid5OkJFUPVZW3P45y2cqN81dF6I
8iRq62u0+yLxSc5ndA0ite5lRqzGVcnez7M=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:32 2024 by rpki-client on console-fra.rpki-client.org