Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa
File:                     373e5114-6177-369e-a731-f44084ebbd41.roa (raw, json)
Hash identifier:          ze3DaC/7w6mB0RR7zfSu7tvKln4Ghc7f2BisT/DppFg=
Subject key identifier:   F7:5A:15:60:9C:0E:AC:6F:54:E3:9B:36:C7:0C:C7:04:84:41:7B:F6
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F432858477660FE3D772F259E2EE88C80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     30133
IP address blocks:        2001:4f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:fe:3d:77:2f:25:9e:2e:e8:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=dc38000e-089c-45fd-bf4e-86b4b41d7763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:17:a3:4d:0c:80:3d:d8:1f:aa:65:c0:e6:47:
                    06:81:71:d5:8a:8a:91:17:55:00:27:10:12:a2:d1:
                    30:8f:24:6d:96:a6:0e:5b:ed:9a:21:7c:8e:3b:93:
                    75:09:05:8a:8f:7d:3d:83:e8:f2:06:74:cd:7f:fb:
                    f4:c4:9e:99:41:4b:74:6c:75:d0:e3:0d:82:49:60:
                    78:dc:f1:d6:6d:2f:a0:03:ad:5f:9d:79:9c:b3:7b:
                    27:59:ec:a0:f0:fe:52:31:d6:02:dd:88:6f:6b:43:
                    d1:f2:ec:ab:75:7b:7a:3d:5e:ab:c4:ff:7d:10:b1:
                    b1:2b:10:ea:19:a9:34:df:0c:fa:8c:b7:4f:a9:5f:
                    81:dc:6c:48:2b:42:fd:c6:76:36:98:ec:87:6f:13:
                    21:d4:17:57:9a:39:7b:37:ce:b4:23:62:12:39:35:
                    41:d4:59:4f:7d:3c:16:2b:8c:91:78:d3:0b:1d:5f:
                    f8:9a:44:0b:be:42:34:ac:98:c4:b0:35:d9:6f:1f:
                    b1:0e:56:e6:51:c2:ed:90:0c:dd:0f:00:0b:88:f2:
                    a3:f4:2c:3e:2e:8e:35:88:1a:26:f5:35:7d:2c:d2:
                    cc:47:4d:12:0c:0c:36:14:e8:20:8e:54:2c:b3:93:
                    b7:ab:41:00:0b:69:61:ed:cc:87:f7:c9:a8:d1:89:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:15:60:9C:0E:AC:6F:54:E3:9B:36:C7:0C:C7:04:84:41:7B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:dd:ab:ed:66:0c:9f:84:d5:b8:30:0c:33:c5:4e:6d:74:
         39:f7:2d:a4:6b:41:96:f4:97:c3:15:7a:4b:68:af:33:4d:d2:
         9c:ce:a3:f5:93:4e:25:c0:cb:af:9a:5f:69:f8:5b:34:c2:4e:
         ed:f5:11:d1:30:0a:b7:b0:f5:3e:e7:97:60:7f:14:12:43:d1:
         54:a5:ec:1b:03:44:6e:43:0e:75:0c:d2:ea:f2:19:6c:23:f6:
         8d:b9:b7:f4:b5:da:23:4a:dc:d4:ef:f9:59:ce:9a:1d:ab:2a:
         25:57:16:f0:97:4a:b2:11:26:5b:64:b0:d2:90:23:ed:b6:a7:
         98:30:e1:8e:6c:9b:6c:79:bf:68:c3:26:f4:f4:8a:e0:13:2f:
         b0:08:8e:af:a8:6e:a7:fd:21:e1:74:1c:82:ce:ae:3e:81:5f:
         6a:43:a6:14:ac:c7:cf:ba:3f:7f:e2:9a:a4:b7:39:a2:78:81:
         b3:03:dc:07:99:62:ef:0c:ff:eb:eb:21:0a:47:d0:ff:72:9b:
         96:f3:7f:c2:4c:f2:48:a1:9b:d4:cf:18:bd:7b:12:8f:23:5c:
         35:98:85:09:36:01:1d:2f:f0:2b:cd:91:aa:07:20:f6:3f:01:
         72:85:59:b5:68:02:5a:73:41:3f:49:44:9f:4f:52:3d:fc:66:
         e8:70:2e:b7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd2YP49dy8lni7ojIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
ZGMzODAwMGUtMDg5Yy00NWZkLWJmNGUtODZiNGI0MWQ3NzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBejTQyAPdgfqmXA5kcGgXHVioqRF1UAJxAS
otEwjyRtlqYOW+2aIXyOO5N1CQWKj309g+jyBnTNf/v0xJ6ZQUt0bHXQ4w2CSWB4
3PHWbS+gA61fnXmcs3snWeyg8P5SMdYC3Yhva0PR8uyrdXt6PV6rxP99ELGxKxDq
Gak03wz6jLdPqV+B3GxIK0L9xnY2mOyHbxMh1BdXmjl7N860I2ISOTVB1FlPfTwW
K4yReNMLHV/4mkQLvkI0rJjEsDXZbx+xDlbmUcLtkAzdDwALiPKj9Cw+Lo41iBom
9TV9LNLMR00SDAw2FOggjlQss5O3q0EAC2lh7cyH98mo0YlroQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPdaFWCcDqxvVOObNscMxwSEQXv2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMzczZTUxMTQtNjE3Ny0z
NjllLWE3MzEtZjQ0MDg0ZWJiZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEE+DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA0vd2r7WYMn4TVuDAMM8VObXQ59y2ka0GW9JfDFXpLaK8zTdKczqP1
k04lwMuvml9p+Fs0wk7t9RHRMAq3sPU+55dgfxQSQ9FUpewbA0RuQw51DNLq8hls
I/aNubf0tdojStzU7/lZzpodqyolVxbwl0qyESZbZLDSkCPttqeYMOGObJtseb9o
wyb09IrgEy+wCI6vqG6n/SHhdByCzq4+gV9qQ6YUrMfPuj9/4pqktzmieIGzA9wH
mWLvDP/r6yEKR9D/cpuW83/CTPJIoZvUzxi9exKPI1w1mIUJNgEdL/ArzZGqByD2
PwFyhVm1aAJac0E/SUSfT1I9/GbocC63
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:16 2024 by rpki-client on console-ams.rpki-client.org