Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa
File:                     ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa (raw, json)
Hash identifier:          et5i8h838onOxwHQvmysIXnPXriY29TwAgiCYQlpZf0=
Subject key identifier:   FA:F5:43:E4:9D:66:32:2E:52:7B:3A:50:DC:E1:F3:8F:53:58:4B:3F
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285845777DE5894A77D499BDE14C00
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     399045
IP address blocks:        2606:d640:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e5:89:4a:77:d4:99:bd:e1:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=9c5b59d8-fa0c-4ae1-9b3e-bf932a420487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:8a:56:fc:61:25:62:5e:79:6b:96:a8:ef:
                    3d:b4:81:d5:0a:4a:eb:ba:0a:36:6c:87:7e:2b:81:
                    64:ef:6e:a7:e4:1a:c4:ee:c6:93:ce:4c:6e:72:13:
                    32:24:b1:bf:c7:78:6a:91:cd:6b:35:b8:09:d5:d5:
                    5e:5d:e5:60:b9:5d:6d:93:c1:9e:77:13:cd:29:66:
                    a9:93:c9:a6:bb:8f:ce:a6:96:b6:ed:30:96:51:4d:
                    58:7c:eb:53:c3:8d:e4:6f:25:56:ba:ea:32:8b:29:
                    ef:0a:e9:4f:94:d9:61:5d:4b:43:85:62:f2:2a:81:
                    ac:1d:c2:89:13:e9:42:0c:97:38:1f:44:ed:2d:5d:
                    7f:7d:11:8c:b5:2d:a5:6e:5e:cc:19:56:c1:4d:c8:
                    87:be:12:a3:aa:0d:b1:52:f8:06:f5:ec:82:b7:bf:
                    1f:04:a2:6d:ec:4f:69:d6:93:08:2e:a6:6e:fd:88:
                    6a:b1:c0:41:5c:ca:dc:2f:1e:92:58:5d:7e:1a:94:
                    22:8b:29:0d:60:c7:6a:09:1c:2a:86:8f:e3:a4:a0:
                    a6:d5:f6:f5:1a:a2:75:80:12:cf:7f:00:37:d6:49:
                    1b:1b:cd:43:0a:c4:12:06:d6:05:03:77:3b:8d:8e:
                    93:4a:f6:09:04:50:9a:a7:b2:83:8a:39:fe:79:7b:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F5:43:E4:9D:66:32:2E:52:7B:3A:50:DC:E1:F3:8F:53:58:4B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b4:f0:3e:98:a0:2d:f8:e0:9c:32:f8:b8:f7:80:de:fb:33:
         ad:bd:c3:c3:f4:f0:ef:e2:9f:69:fd:25:86:1e:48:2b:d3:ec:
         1c:48:49:46:7e:60:b4:7f:61:44:5a:bb:70:d4:ae:a4:71:91:
         70:23:21:e8:a1:41:6b:3f:88:8c:3b:fb:b0:72:44:67:20:9f:
         8e:7c:e0:87:28:9b:77:e2:d8:e7:7c:3e:c4:77:97:6c:da:10:
         bd:c5:18:bd:ef:f0:24:41:68:e7:ae:19:07:8e:35:cc:3e:de:
         be:f5:b9:9a:04:78:7f:e1:09:64:9b:b2:a1:30:a1:3b:76:78:
         a3:dc:d0:66:25:a2:26:43:26:95:af:26:a3:3e:60:e8:de:61:
         84:56:a3:7e:a4:77:e8:66:45:4d:52:60:95:63:b5:a6:73:21:
         ef:7c:27:67:3d:6a:db:d8:3d:19:e8:0e:14:7b:6e:b6:84:cb:
         f2:24:ab:06:5b:d4:fb:55:9b:81:ea:0a:33:75:3d:a1:e9:89:
         6e:f7:49:93:f0:f0:31:62:bd:31:42:19:ea:8b:81:d4:c5:d7:
         53:f1:0c:85:2a:a1:4c:4f:7a:7b:33:90:52:ff:4d:3a:00:e7:
         ac:67:9a:e6:84:d5:48:ff:f7:9e:1d:4c:4e:3f:d1:6a:60:1d:
         16:e0:c1:1d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEV3feWJSnfUmb3hTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
OWM1YjU5ZDgtZmEwYy00YWUxLTliM2UtYmY5MzJhNDIwNDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yyKVvxhJWJeeWuWqO89tIHVCkrrugo2bId+
K4Fk726n5BrE7saTzkxuchMyJLG/x3hqkc1rNbgJ1dVeXeVguV1tk8GedxPNKWap
k8mmu4/Oppa27TCWUU1YfOtTw43kbyVWuuoyiynvCulPlNlhXUtDhWLyKoGsHcKJ
E+lCDJc4H0TtLV1/fRGMtS2lbl7MGVbBTciHvhKjqg2xUvgG9eyCt78fBKJt7E9p
1pMILqZu/YhqscBBXMrcLx6SWF1+GpQiiykNYMdqCRwqho/jpKCm1fb1GqJ1gBLP
fwA31kkbG81DCsQSBtYFA3c7jY6TSvYJBFCap7KDijn+eXvt/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPr1Q+SdZjIuUns6UNzh849TWEs/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvZWY0MDMzZDItZmRjZS0z
NjQ5LWIxZDQtY2Q1ZWNjNzFmNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbWQAIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlrTwPpigLfjgnDL4uPeA3vszrb3Dw/Tw7+Kfaf0lhh5IK9PsHEhJ
Rn5gtH9hRFq7cNSupHGRcCMh6KFBaz+IjDv7sHJEZyCfjnzghyibd+LY53w+xHeX
bNoQvcUYve/wJEFo564ZB441zD7evvW5mgR4f+EJZJuyoTChO3Z4o9zQZiWiJkMm
la8moz5g6N5hhFajfqR36GZFTVJglWO1pnMh73wnZz1q29g9GegOFHtutoTL8iSr
BlvU+1WbgeoKM3U9oemJbvdJk/DwMWK9MUIZ6ouB1MXXU/EMhSqhTE96ezOQUv9N
OgDnrGea5oTVSP/3nh1MTj/RamAdFuDBHQ==
-----END CERTIFICATE-----
Generated at Mon May 6 22:49:09 2024 by rpki-client on console-ams.rpki-client.org