Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa
File:                     f7f4c100-078c-3097-ac67-9c6eaa96367e.roa (raw, json)
Hash identifier:          N+ZRkT+noB59gdFB8nQQpME4ER31X7DJi6wmT6ElLT8=
Subject key identifier:   E3:66:0A:69:39:A2:44:85:C0:50:1D:9E:2F:DC:37:61:A1:A6:30:7B
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584716104E19F2A18C0A500FE000
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa
Signing time:             Tue 03 Sep 2024 01:00:31 +0000
ROA not before:           Tue 03 Sep 2024 01:00:31 +0000
ROA not after:            Mon 02 Dec 2024 02:00:31 +0000
asID:                     399045
IP address blocks:        2606:d640::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:10:4e:19:f2:a1:8c:0a:50:0f:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Sep  3 01:00:31 2024 GMT
            Not After : Dec  2 02:00:31 2024 GMT
        Subject: CN=46c4f53f-d942-41bd-aded-74d4d72fcf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:45:ae:4b:47:04:06:cf:a3:f1:b3:e7:30:
                    ec:17:c0:1b:1d:45:24:26:2b:5e:0f:51:04:a1:33:
                    1b:42:69:35:58:b9:40:46:84:89:f3:78:62:e0:7f:
                    df:10:c8:a9:fd:92:57:bb:7d:1e:ef:88:ca:42:42:
                    b6:06:26:89:14:ec:55:f6:81:4f:6c:4e:30:21:99:
                    a2:22:56:23:c4:8a:f2:5d:35:f8:44:9c:1d:dc:cf:
                    9d:2d:e3:55:ee:03:54:73:30:4f:1f:0a:76:d6:21:
                    c5:48:2a:00:66:09:8a:b2:fe:23:61:13:1c:33:32:
                    4a:f4:fa:74:f4:42:45:75:12:67:95:b9:bb:68:a4:
                    f9:73:7f:fb:53:77:49:8e:2a:40:29:c9:c8:49:1b:
                    3e:60:85:7c:15:ba:a7:53:3f:2c:e2:30:ce:1c:5a:
                    90:83:29:0d:1a:41:35:d1:ac:38:a5:d5:b3:da:68:
                    21:a3:a5:e2:d8:51:46:87:69:78:b8:d0:37:4a:3a:
                    ae:5c:4f:93:f5:01:39:fc:fd:c8:a1:4b:c3:aa:56:
                    b6:ef:f2:2b:3e:c2:4d:7d:ad:d0:5d:cf:df:45:45:
                    7d:ce:74:39:db:27:4d:c9:4e:40:16:6f:e7:46:41:
                    aa:71:9b:88:50:64:99:ff:52:4a:b0:44:84:0f:85:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:66:0A:69:39:A2:44:85:C0:50:1D:9E:2F:DC:37:61:A1:A6:30:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:04:a6:b8:b1:67:c7:3e:6c:0a:fd:b0:fd:be:11:cc:4b:3c:
         f2:ef:91:f5:36:d8:04:56:bb:7c:e6:8c:95:fd:c9:1b:b4:2f:
         53:bc:d3:c7:2e:25:4a:18:0e:ae:e2:9e:4f:2f:d1:2a:41:d8:
         29:e8:ce:0e:b6:b4:55:af:10:62:3d:76:36:99:1d:3e:de:90:
         d0:87:ed:94:42:17:d5:6c:24:fd:8c:41:47:85:22:56:37:49:
         34:08:ec:28:30:09:f3:18:ce:70:87:d0:94:1b:af:23:7a:1b:
         a3:1b:19:20:bb:28:1d:98:ff:49:7a:f3:ee:fc:f8:2e:17:da:
         c1:41:85:17:f7:fc:18:be:83:f1:e9:f3:e2:82:13:5c:3b:ec:
         f1:44:85:ad:7d:f3:48:53:4c:69:0d:fe:d4:99:4d:30:bd:20:
         f2:16:10:aa:8a:8e:a2:1f:d6:34:d2:8a:db:46:ed:90:b0:be:
         63:67:47:2c:06:c3:a9:c0:2c:26:3c:55:42:82:2d:fd:f4:50:
         7f:eb:77:7c:ce:f3:b0:96:8f:32:91:ff:b7:ec:a2:c4:ee:b9:
         7c:9d:18:12:b2:73:aa:6f:0d:a7:c7:bd:8b:27:d8:fe:bf:76:
         24:b9:17:8b:cb:00:e7:d6:15:9c:93:d7:e3:e0:a5:01:2b:42:
         73:aa:2a:58
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEcWEE4Z8qGMClAP4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI0MDkwMzAxMDAzMVoXDTI0MTIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NDZjNGY1M2YtZDk0Mi00MWJkLWFkZWQtNzRkNGQ3MmZjZjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUlFrktHBAbPo/Gz5zDsF8AbHUUkJiteD1EE
oTMbQmk1WLlARoSJ83hi4H/fEMip/ZJXu30e74jKQkK2BiaJFOxV9oFPbE4wIZmi
IlYjxIryXTX4RJwd3M+dLeNV7gNUczBPHwp21iHFSCoAZgmKsv4jYRMcMzJK9Pp0
9EJFdRJnlbm7aKT5c3/7U3dJjipAKcnISRs+YIV8FbqnUz8s4jDOHFqQgykNGkE1
0aw4pdWz2mgho6Xi2FFGh2l4uNA3SjquXE+T9QE5/P3IoUvDqla27/IrPsJNfa3Q
Xc/fRUV9znQ52ydNyU5AFm/nRkGqcZuIUGSZ/1JKsESED4XtxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFONmCmk5okSFwFAdni/cN2GhpjB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvZjdmNGMxMDAtMDc4Yy0z
MDk3LWFjNjctOWM2ZWFhOTYzNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbWQAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIwSmuLFnxz5sCv2w/b4RzEs88u+R9TbYBFa7fOaMlf3JG7QvU7zT
xy4lShgOruKeTy/RKkHYKejODra0Va8QYj12NpkdPt6Q0IftlEIX1Wwk/YxBR4Ui
VjdJNAjsKDAJ8xjOcIfQlBuvI3oboxsZILsoHZj/SXrz7vz4LhfawUGFF/f8GL6D
8enz4oITXDvs8USFrX3zSFNMaQ3+1JlNML0g8hYQqoqOoh/WNNKK20btkLC+Y2dH
LAbDqcAsJjxVQoIt/fRQf+t3fM7zsJaPMpH/t+yixO65fJ0YErJzqm8Np8e9iyfY
/r92JLkXi8sA59YVnJPX4+ClAStCc6oqWA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:51 2024 by rpki-client on console-ams.rpki-client.org