Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/28138d5b-d4bd-3a5d-b1d4-489db95803ab.roa
File:                     28138d5b-d4bd-3a5d-b1d4-489db95803ab.roa (raw, json)
Hash identifier:          gU6v97fEb7fL3rRUX07oZw4x8ouRM1JFY198bkDNfdo=
Subject key identifier:   38:B5:3A:C5:01:59:CF:B9:79:27:23:9F:10:71:D8:92:89:D9:6D:75
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F432858473FF09B4C6FA0785BC7F18C00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/28138d5b-d4bd-3a5d-b1d4-489db95803ab.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     11260
IP address blocks:        2610:170::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:9b:4c:6f:a0:78:5b:c7:f1:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=c7bf578d-d4af-4475-b585-a5a14d21ad9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:8d:83:52:14:2c:f2:6c:90:1a:0e:9b:ba:
                    0c:7b:e2:dc:4a:9a:fd:db:6e:90:93:bc:f1:a6:90:
                    b9:0e:ea:9a:6b:3a:f7:ca:09:33:0e:7d:65:a4:af:
                    09:77:6b:ab:46:fd:78:87:41:6e:05:5f:01:a0:58:
                    59:c4:82:c4:7e:0a:13:db:63:93:49:57:50:ef:da:
                    98:bd:e1:d1:25:d9:01:9f:84:8b:2c:07:f6:66:f6:
                    36:25:1f:cb:19:e6:51:74:ba:79:6c:a1:e5:ca:8f:
                    84:90:9a:6e:f7:c1:f6:cc:0b:ff:19:12:f8:12:11:
                    20:33:93:b4:8e:55:c4:a4:2c:63:56:89:ff:0a:c9:
                    bd:35:fd:c7:33:82:4d:9a:60:89:e8:72:51:37:fc:
                    f3:77:91:17:be:8f:26:3f:47:28:37:a2:5e:92:ee:
                    4c:1f:e5:b5:fb:a8:26:b7:f3:f8:4a:30:7a:44:55:
                    46:43:08:f7:fb:f3:cf:de:dd:a3:78:52:b3:cc:b8:
                    69:46:41:1b:67:d9:6a:bc:b8:50:65:a4:39:ce:57:
                    7f:02:2a:5e:42:83:34:1b:63:8c:11:f0:7a:96:f1:
                    a4:3b:1e:a1:05:f3:97:e1:ca:d3:3e:80:84:de:47:
                    ac:cd:83:51:77:1c:8e:43:84:c3:37:06:56:26:e7:
                    5f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B5:3A:C5:01:59:CF:B9:79:27:23:9F:10:71:D8:92:89:D9:6D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/28138d5b-d4bd-3a5d-b1d4-489db95803ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:170::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:af:88:c6:ae:23:6f:07:e2:e1:80:d4:06:70:1f:1c:a2:13:
         76:b1:50:29:95:a2:7b:ae:1f:9c:06:b5:94:42:3a:b2:37:f3:
         54:30:64:34:fc:2c:7c:21:b7:a7:ba:11:c9:b8:30:3a:6c:47:
         96:32:c6:86:d0:09:84:e5:7b:ae:42:af:45:e1:b7:fe:f8:d5:
         0d:2a:52:4f:6f:7f:86:61:f5:71:00:ec:9d:a5:64:0f:2a:4a:
         ab:f1:aa:1a:62:c2:72:bb:41:bd:e6:cf:c2:b5:d0:74:59:7b:
         d3:5f:db:51:0d:46:0f:3b:e8:77:53:03:61:fc:f9:b1:48:26:
         25:69:92:53:a6:ce:4b:ac:84:14:35:80:ca:2b:ae:8e:51:b0:
         46:fb:9a:5c:48:ff:bc:bb:26:00:9e:52:dc:e8:9b:64:82:fd:
         cc:11:85:d4:48:bc:90:61:59:a7:74:96:eb:cc:1f:36:3c:19:
         bd:9e:c9:e1:2e:dd:01:47:d3:6f:1e:0d:af:69:4d:23:7a:b9:
         fa:4a:b1:2e:0b:d5:8d:16:79:72:62:6c:f9:d8:1a:ac:69:1e:
         01:e0:fd:18:93:0e:1b:d8:d6:8d:11:81:de:8d:ac:34:33:01:
         2d:88:6a:a3:4b:e8:74:58:84:85:c3:3d:eb:1e:6d:58:6e:ad:
         54:a1:2d:5a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEc/8JtMb6B4W8fxjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
YzdiZjU3OGQtZDRhZi00NDc1LWI1ODUtYTVhMTRkMjFhZDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4GNg1IULPJskBoOm7oMe+LcSpr9226Qk7zx
ppC5Duqaazr3ygkzDn1lpK8Jd2urRv14h0FuBV8BoFhZxILEfgoT22OTSVdQ79qY
veHRJdkBn4SLLAf2ZvY2JR/LGeZRdLp5bKHlyo+EkJpu98H2zAv/GRL4EhEgM5O0
jlXEpCxjVon/Csm9Nf3HM4JNmmCJ6HJRN/zzd5EXvo8mP0coN6Jeku5MH+W1+6gm
t/P4SjB6RFVGQwj3+/PP3t2jeFKzzLhpRkEbZ9lqvLhQZaQ5zld/AipeQoM0G2OM
EfB6lvGkOx6hBfOX4crTPoCE3keszYNRdxyOQ4TDNwZWJudf9wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDi1OsUBWc+5eScjnxBx2JKJ2W11MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMjgxMzhkNWItZDRiZC0z
YTVkLWIxZDQtNDg5ZGI5NTgwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABcDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBxr4jGriNvB+LhgNQGcB8cohN2sVAplaJ7rh+cBrWUQjqyN/NUMGQ0
/Cx8IbenuhHJuDA6bEeWMsaG0AmE5XuuQq9F4bf++NUNKlJPb3+GYfVxAOydpWQP
Kkqr8aoaYsJyu0G95s/CtdB0WXvTX9tRDUYPO+h3UwNh/PmxSCYlaZJTps5LrIQU
NYDKK66OUbBG+5pcSP+8uyYAnlLc6Jtkgv3MEYXUSLyQYVmndJbrzB82PBm9nsnh
Lt0BR9NvHg2vaU0jern6SrEuC9WNFnlyYmz52BqsaR4B4P0Ykw4b2NaNEYHejaw0
MwEtiGqjS+h0WISFwz3rHm1Ybq1UoS1a
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:34 2024 by rpki-client on console-ams.rpki-client.org