Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa
File:                     3896e846-51ab-39f6-b6da-f8235e4de3d0.roa (raw, json)
Hash identifier:          mCWZK3v7bB7x0PkeY2kuXjUdDUTOf1TUn4qqiaae5H0=
Subject key identifier:   09:0B:35:10:CD:83:D3:28:2C:24:2C:D1:8F:AB:9C:CC:BD:AD:40:AC
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F432858458F387FBE477D377F177E23C0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     30133
IP address blocks:        2001:500:6c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7f:be:47:7d:37:7f:17:7e:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=727fb38a-86e3-4e4b-a775-8c040cbcdc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:20:d5:96:2d:af:5d:59:82:92:68:78:a7:
                    05:9f:45:a4:5e:7d:9b:0d:32:e4:db:61:93:8f:e0:
                    5e:d1:86:e2:83:3c:59:9d:0e:d6:48:91:08:3b:55:
                    1b:3f:0f:69:8e:12:48:3b:c1:ed:e8:31:03:8e:8b:
                    fa:54:bf:b0:82:a7:9d:ec:42:cb:39:58:95:dc:3b:
                    11:4b:13:8b:d5:83:cb:96:0b:19:3f:09:b9:5a:26:
                    40:ba:cf:cf:83:25:1d:1a:91:e4:e1:3f:6d:b8:ea:
                    7d:d8:f7:b4:5c:7c:a6:2d:fa:fb:29:9e:52:dd:26:
                    ab:27:40:dd:81:51:c0:de:c4:fc:db:e0:a5:94:18:
                    eb:13:fc:ff:33:ae:2f:3d:c9:a7:c8:99:fe:68:4a:
                    70:60:63:66:e9:b2:d0:19:73:0a:d8:8b:60:67:d5:
                    fe:38:9a:ca:93:51:53:e7:16:60:11:82:62:f0:c7:
                    5c:c7:82:33:9d:10:0b:7f:3d:0c:24:90:14:cf:e3:
                    37:a0:ee:82:c6:6e:90:e7:41:5d:11:dc:aa:11:98:
                    25:88:f8:9d:d4:a3:5e:a3:ff:ee:52:08:92:54:ed:
                    92:06:0f:8d:b1:ca:45:b8:0e:de:74:b2:67:f0:02:
                    f6:1a:f8:97:25:dc:d1:31:30:f1:88:d2:5a:72:d2:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0B:35:10:CD:83:D3:28:2C:24:2C:D1:8F:AB:9C:CC:BD:AD:40:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:51:ac:96:4a:51:51:fb:da:8d:0c:e9:43:6f:ae:ad:8c:
         65:c8:57:90:49:84:b1:46:54:43:67:4c:60:51:a3:54:3b:e3:
         26:9e:17:a5:38:b7:f0:e8:77:34:d1:52:ec:72:a6:89:09:cf:
         f2:61:09:78:17:32:21:8a:10:04:eb:78:a7:33:c6:77:ad:52:
         60:8f:42:46:aa:24:ed:fa:93:ae:5d:14:c2:06:11:7a:2c:b7:
         62:0c:82:51:09:0e:eb:6b:fc:c0:b9:c9:f3:17:0d:b0:ac:5d:
         d6:d0:b3:f4:90:56:aa:d9:ba:a5:9c:e2:00:d2:ef:d9:cd:ca:
         27:fb:de:39:e4:97:ab:d0:ed:99:21:fe:04:1c:d3:6e:cb:21:
         65:ff:e8:23:89:6c:74:f0:0e:3d:87:3b:4b:72:ff:f1:ec:4b:
         98:b0:97:a3:b5:c1:2e:d0:e8:9d:bf:d5:06:6c:49:bf:ea:53:
         4e:ef:29:12:6c:1f:b9:04:18:9a:03:a4:89:3e:bb:9e:dd:ab:
         26:94:c3:56:24:5d:24:e7:a5:df:e9:ff:62:ab:9e:b0:ab:4b:
         9a:af:13:c6:b3:a0:0a:fa:2f:b1:bd:a9:29:ca:e3:c7:23:4a:
         09:5d:e1:78:b7:c5:b9:ce:c0:7c:3b:88:c4:c5:aa:25:fb:d9:
         4c:b1:e1:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWPOH++R303fxd+I8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI0MDQxNjAxMDAyNloXDTI0MDcxNTAxMDAyNlowLzEtMCsGA1UEAxMk
NzI3ZmIzOGEtODZlMy00ZTRiLWE3NzUtOGMwNDBjYmNkYzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0cg1ZYtr11ZgpJoeKcFn0WkXn2bDTLk22GT
j+Be0YbigzxZnQ7WSJEIO1UbPw9pjhJIO8Ht6DEDjov6VL+wgqed7ELLOViV3DsR
SxOL1YPLlgsZPwm5WiZAus/PgyUdGpHk4T9tuOp92Pe0XHymLfr7KZ5S3SarJ0Dd
gVHA3sT82+CllBjrE/z/M64vPcmnyJn+aEpwYGNm6bLQGXMK2ItgZ9X+OJrKk1FT
5xZgEYJi8Mdcx4IznRALfz0MJJAUz+M3oO6Cxm6Q50FdEdyqEZgliPid1KNeo//u
UgiSVO2SBg+NscpFuA7edLJn8AL2GviXJdzRMTDxiNJactJ0XQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAkLNRDNg9MoLCQs0Y+rnMy9rUCsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMzg5NmU4NDYtNTFhYi0z
OWY2LWI2ZGEtZjgyMzVlNGRlM2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACW9UayWSlFR+9qNDOlDb66tjGXIV5BJhLFGVENnTGBRo1Q74yae
F6U4t/DodzTRUuxypokJz/JhCXgXMiGKEATreKczxnetUmCPQkaqJO36k65dFMIG
EXost2IMglEJDutr/MC5yfMXDbCsXdbQs/SQVqrZuqWc4gDS79nNyif73jnkl6vQ
7Zkh/gQc027LIWX/6COJbHTwDj2HO0ty//HsS5iwl6O1wS7Q6J2/1QZsSb/qU07v
KRJsH7kEGJoDpIk+u57dqyaUw1YkXSTnpd/p/2KrnrCrS5qvE8azoAr6L7G9qSnK
48cjSgld4Xi3xbnOwHw7iMTFqiX72Uyx4ec=
-----END CERTIFICATE-----
Generated at Thu May 9 21:06:55 2024 by rpki-client on console-fra.rpki-client.org