Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/220355b0-82ee-38de-b2f7-63ec46b588e9.roa
File:                     220355b0-82ee-38de-b2f7-63ec46b588e9.roa (raw, json)
Hash identifier:          XOxPws2+bMLt57pHWbzDxHPapKO5JRumTnogbVHuRUM=
Subject key identifier:   FB:C8:6A:09:2F:F6:4E:57:C7:9E:7A:83:F9:55:70:4D:01:E1:09:40
Certificate issuer:       /CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
Certificate serial:       010D0C9F43285847362B519144BF3F2FBDEB9D80
Authority key identifier: D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/220355b0-82ee-38de-b2f7-63ec46b588e9.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        2607:6100:a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:51:91:44:bf:3f:2f:bd:eb:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=bf676414-bc1b-4c7d-a852-5fea448bb560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:8a:68:ac:5f:45:40:c8:d0:92:d9:08:48:
                    60:46:6e:78:6c:72:fc:90:9f:05:80:ac:7d:f8:b9:
                    7e:13:5b:50:81:c3:92:0a:33:fe:2a:23:b3:44:a1:
                    0b:05:f2:ea:3b:a1:fe:be:66:be:b1:0c:b9:89:ba:
                    0b:9c:8f:ad:88:70:0f:81:2f:02:98:79:7e:0b:74:
                    19:54:f4:f0:50:b0:1f:9d:aa:7b:18:86:bd:f8:cf:
                    b0:f2:51:35:d3:4c:3b:b5:53:ed:db:a2:68:fc:f7:
                    9e:dc:7b:01:c0:4c:5c:8b:cc:a4:06:86:f9:3f:96:
                    36:e4:40:bc:bc:e8:96:0e:85:d1:09:3d:8e:b9:57:
                    cb:68:0d:a8:5d:e9:77:11:2e:ee:de:25:36:51:17:
                    28:9e:cc:ee:55:ea:23:cb:e1:8d:43:ad:eb:9d:84:
                    38:da:0c:4a:38:83:b7:cf:3f:93:44:e1:18:a3:80:
                    22:d7:7b:02:9a:62:88:c7:e6:83:95:31:22:5c:98:
                    ae:b8:74:27:f6:2f:31:fe:eb:50:c2:2d:0a:02:c7:
                    63:ba:13:9b:12:02:6f:62:bc:90:df:03:b1:ad:97:
                    9b:67:9e:19:68:ab:1c:52:d8:eb:05:f0:ee:17:24:
                    c1:af:19:4d:c5:97:21:4d:81:84:3a:26:4e:4b:ce:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C8:6A:09:2F:F6:4E:57:C7:9E:7A:83:F9:55:70:4D:01:E1:09:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/220355b0-82ee-38de-b2f7-63ec46b588e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6100:a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:17:ed:50:98:1a:18:61:ae:d8:42:2b:68:78:88:76:51:
         42:0c:70:72:74:f1:59:02:2b:df:1c:d5:4f:18:0d:bd:7e:61:
         67:d8:ec:c1:e6:1d:2c:e0:f6:9b:e3:19:58:73:25:8e:b4:f5:
         6e:e1:87:0a:ad:f2:0a:1c:bd:29:dd:af:d3:fb:9e:b7:20:88:
         7f:83:15:c8:c3:1b:74:27:15:e1:02:e5:83:1b:30:97:13:94:
         0a:df:b8:e2:4d:e3:4b:80:46:d6:45:63:e3:23:a9:8c:b2:37:
         be:1e:46:93:d8:ce:3d:58:67:a8:ed:08:ba:74:04:ed:8e:6b:
         74:78:04:69:c1:3a:df:b8:f4:53:e8:f5:31:82:59:cd:94:85:
         79:59:fa:e9:88:79:46:e1:c4:7f:52:69:8b:e9:07:c1:14:d6:
         b9:0e:f1:e1:4b:74:41:56:68:e2:ff:ae:e7:55:e4:69:cf:e6:
         31:4e:4d:90:7c:4b:f5:e8:43:eb:5e:f8:fc:bc:ea:20:2f:eb:
         91:d8:ba:fc:19:e3:6c:61:bc:ef:44:b6:e5:86:f8:60:ba:84:
         fc:38:8e:00:59:d8:2e:fb:91:9f:bd:df:40:34:03:ab:91:64:
         08:7a:b0:8f:f2:b1:cb:eb:be:6c:2f:01:46:04:ee:59:e6:de:
         f4:a1:98:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc2K1GRRL8/L73rnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhiMjJiNDYtZDU2ZS00ZWFkLWE1ZmMtNThlYjA3MTIz
Y2YzMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
YmY2NzY0MTQtYmMxYi00YzdkLWE4NTItNWZlYTQ0OGJiNTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQWKaKxfRUDI0JLZCEhgRm54bHL8kJ8FgKx9
+Ll+E1tQgcOSCjP+KiOzRKELBfLqO6H+vma+sQy5iboLnI+tiHAPgS8CmHl+C3QZ
VPTwULAfnap7GIa9+M+w8lE100w7tVPt26Jo/Pee3HsBwExci8ykBob5P5Y25EC8
vOiWDoXRCT2OuVfLaA2oXel3ES7u3iU2URconszuVeojy+GNQ63rnYQ42gxKOIO3
zz+TROEYo4Ai13sCmmKIx+aDlTEiXJiuuHQn9i8x/utQwi0KAsdjuhObEgJvYryQ
3wOxrZebZ54ZaKscUtjrBfDuFyTBrxlNxZchTYGEOiZOS85SsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPvIagkv9k5Xx556g/lVcE0B4QlAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wOGIy
MmI0Ni1kNTZlLTRlYWQtYTVmYy01OGViMDcxMjNjZjMvMjIwMzU1YjAtODJlZS0z
OGRlLWIyZjctNjNlYzQ2YjU4OGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDhiMjJiNDYtZDU2ZS00ZWFkLWE1
ZmMtNThlYjA3MTIzY2YzLzA4YjIyYjQ2LWQ1NmUtNGVhZC1hNWZjLTU4ZWIwNzEy
M2NmMy5jcmwwHwYDVR0jBBgwFoAU0eIfAxg8RAnf7OXGcB4AHpr382QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wOGIyMmI0Ni1kNTZlLTRlYWQtYTVmYy01OGVi
MDcxMjNjZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdhAACg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHTPF+1QmBoYYa7YQitoeIh2UUIMcHJ08VkCK98c1U8YDb1+YWfY
7MHmHSzg9pvjGVhzJY609W7hhwqt8gocvSndr9P7nrcgiH+DFcjDG3QnFeEC5YMb
MJcTlArfuOJN40uARtZFY+MjqYyyN74eRpPYzj1YZ6jtCLp0BO2Oa3R4BGnBOt+4
9FPo9TGCWc2UhXlZ+umIeUbhxH9SaYvpB8EU1rkO8eFLdEFWaOL/rudV5GnP5jFO
TZB8S/XoQ+te+Py86iAv65HYuvwZ42xhvO9EtuWG+GC6hPw4jgBZ2C77kZ+930A0
A6uRZAh6sI/yscvrvmwvAUYE7lnm3vShmFg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:34 2024 by rpki-client on console-fra.rpki-client.org