Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa
File:                     42260333-fa7a-3e67-8741-ccb79a740c7a.roa (raw, json)
Hash identifier:          62mm8C8DwtGwLqOcIeXQxvraoKnD0ddKe2LvdAUj4GI=
Subject key identifier:   00:7D:56:F1:9E:3E:50:CA:F1:CF:E6:DA:9C:AE:A4:C5:4A:B6:FF:CE
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474F4B71A09F27ACC9E5375600
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     19437
IP address blocks:        2607:ff00:300::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:71:a0:9f:27:ac:c9:e5:37:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=dbbcfa52-1236-4ec4-83a8-25850ef77d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:be:5f:38:14:69:8a:9f:ee:55:e4:3c:bc:
                    a1:14:e2:09:7e:86:34:58:9f:b9:62:f3:9f:a8:3c:
                    52:ab:65:37:7b:59:a5:bf:09:dd:92:7c:55:3b:d8:
                    43:58:fe:75:98:33:0e:e2:08:1d:b3:fe:6e:df:38:
                    76:42:de:41:2b:0b:3c:4e:aa:70:e3:04:0e:6c:ef:
                    32:3e:42:13:80:1d:dc:76:d6:75:68:09:6c:ad:c2:
                    15:00:92:88:e3:79:82:7c:1b:9f:89:c5:45:b8:4f:
                    44:07:cb:80:4b:4b:bd:31:c8:d0:b9:a1:fb:05:f4:
                    0d:36:3c:97:c0:91:c8:bd:1b:6c:65:bd:86:d2:9c:
                    81:20:37:49:dd:b8:30:a0:47:78:df:98:54:e0:7a:
                    65:af:05:4c:21:1e:1d:73:0c:31:07:66:81:db:57:
                    0c:82:da:7f:58:c7:fe:ec:be:5a:61:12:1f:ad:13:
                    87:96:d4:ed:7d:9a:66:81:18:21:e4:de:cc:68:80:
                    a3:66:6f:3a:17:f0:bc:5a:1b:7d:c4:15:90:8a:ac:
                    8c:bd:c6:14:4f:bf:1f:c0:27:05:c1:3e:bf:9e:72:
                    c3:e2:df:cb:6c:8f:80:c5:48:8d:9e:ca:3b:92:fe:
                    e1:04:f4:86:07:05:5e:d0:2c:29:b9:58:52:e7:41:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:56:F1:9E:3E:50:CA:F1:CF:E6:DA:9C:AE:A4:C5:4A:B6:FF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f1:08:20:40:e8:a6:a4:4e:6f:a8:a5:b5:16:b1:7c:a5:39:
         23:ad:6a:e0:c0:90:ad:df:90:c8:f2:bd:be:46:95:81:5d:a1:
         76:d8:9d:ff:23:9e:3e:2f:92:2a:f7:c1:6c:1a:88:47:f2:05:
         05:79:86:f7:46:bb:c9:09:f7:38:97:ce:95:ac:b5:1d:0e:d3:
         bf:b3:f2:d4:61:aa:fe:a9:0c:8b:5b:2c:06:31:d6:d3:c8:1a:
         d5:14:ff:98:6d:bd:b4:e0:0f:fd:f5:c1:64:e6:22:32:49:37:
         48:f5:1e:70:1d:16:46:60:f9:7d:0f:f3:ca:d3:db:3d:3b:f8:
         0b:6c:c8:a4:04:12:60:45:48:ec:91:05:87:c6:67:3d:a4:b8:
         b9:e2:2f:65:1f:29:fa:37:8d:c5:cd:a7:73:04:bb:f5:a7:b2:
         00:49:92:6c:b2:9f:53:78:d6:f7:9f:d9:8e:cd:84:90:9d:a6:
         b8:f1:b7:75:87:e3:b7:67:ab:0f:28:ee:64:f6:aa:0f:74:95:
         37:57:e5:24:00:64:8e:39:f5:c4:92:e2:f9:4d:5f:28:6c:83:
         0f:83:0b:e2:45:fc:11:21:0c:80:8b:f6:74:94:93:37:13:12:
         d5:3f:d2:37:00:21:ef:aa:e1:54:1e:04:ad:cf:33:e6:1f:d4:
         ed:f0:4c:af
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdPS3GgnyesyeU3VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
ZGJiY2ZhNTItMTIzNi00ZWM0LTgzYTgtMjU4NTBlZjc3ZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaq+XzgUaYqf7lXkPLyhFOIJfoY0WJ+5YvOf
qDxSq2U3e1mlvwndknxVO9hDWP51mDMO4ggds/5u3zh2Qt5BKws8Tqpw4wQObO8y
PkITgB3cdtZ1aAlsrcIVAJKI43mCfBuficVFuE9EB8uAS0u9McjQuaH7BfQNNjyX
wJHIvRtsZb2G0pyBIDdJ3bgwoEd435hU4HplrwVMIR4dcwwxB2aB21cMgtp/WMf+
7L5aYRIfrROHltTtfZpmgRgh5N7MaICjZm86F/C8Wht9xBWQiqyMvcYUT78fwCcF
wT6/nnLD4t/LbI+AxUiNnso7kv7hBPSGBwVe0CwpuVhS50F6qQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAB9VvGePlDK8c/m2pyupMVKtv/OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNDIyNjAzMzMtZmE3YS0z
ZTY3LTg3NDEtY2NiNzlhNzQwYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf/AAMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAi/EIIEDopqROb6iltRaxfKU5I61q4MCQrd+QyPK9vkaVgV2hdtid
/yOePi+SKvfBbBqIR/IFBXmG90a7yQn3OJfOlay1HQ7Tv7Py1GGq/qkMi1ssBjHW
08ga1RT/mG29tOAP/fXBZOYiMkk3SPUecB0WRmD5fQ/zytPbPTv4C2zIpAQSYEVI
7JEFh8ZnPaS4ueIvZR8p+jeNxc2ncwS79aeyAEmSbLKfU3jW95/Zjs2EkJ2muPG3
dYfjt2erDyjuZPaqD3SVN1flJABkjjn1xJLi+U1fKGyDD4ML4kX8ESEMgIv2dJST
NxMS1T/SNwAh76rhVB4Erc8z5h/U7fBMrw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org