Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/324c35ac-9c36-30b4-9927-2551948cb080.roa
File:                     324c35ac-9c36-30b4-9927-2551948cb080.roa (raw, json)
Hash identifier:          aPYoRyO73HBd2T8ZMMRNaWXu7RIxzxWSLIeEP+Rtv54=
Subject key identifier:   31:6D:AA:87:BA:59:E6:E8:12:B5:1D:C8:0C:CC:41:68:8B:CE:16:79
Certificate issuer:       /CN=ad45a836-43f7-42f2-954b-fbbfc0b6e52b
Certificate serial:       010D0C9F432858455B92EE507B5CECD61CFB5480
Authority key identifier: D2:27:75:15:36:B4:F9:1A:08:BA:02:B8:02:E3:D1:5C:F5:03:B7:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/324c35ac-9c36-30b4-9927-2551948cb080.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     30617
IP address blocks:        2607:3740::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ee:50:7b:5c:ec:d6:1c:fb:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad45a836-43f7-42f2-954b-fbbfc0b6e52b
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=c2ddc204-bb39-4826-83bb-6940c1d7e976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:e7:d0:99:71:b6:97:de:3a:3b:44:79:14:
                    16:65:36:d9:22:c6:1a:07:02:31:01:27:47:60:2e:
                    40:33:4d:ac:d3:b9:82:25:d8:77:bd:93:58:dd:e1:
                    89:43:02:c0:b9:fc:13:1d:9c:d4:f2:50:7c:77:ef:
                    fc:b7:36:55:55:5c:88:17:a9:a4:54:ec:47:21:c9:
                    b9:32:81:87:4c:3e:fb:63:6b:f3:4a:ba:ce:76:d2:
                    24:0f:12:65:83:ba:3c:dc:52:a1:6d:ae:45:e8:10:
                    2f:08:e5:34:0e:04:69:5e:47:56:82:a1:ad:87:97:
                    86:4b:83:e8:b8:04:7c:4c:e8:d0:30:75:c3:0b:dc:
                    65:fe:26:e4:9c:8d:d1:e3:25:82:5f:a2:e9:d5:a1:
                    f5:f7:42:aa:2f:1a:7b:8c:5d:58:2f:2b:5e:a8:06:
                    65:1e:17:92:85:18:74:8d:8c:e5:33:9f:95:e1:83:
                    37:c6:4e:9c:9a:66:cb:cb:62:76:71:00:ae:9e:2f:
                    2d:9c:11:7f:83:d3:9b:5b:e7:dc:d2:05:23:c4:89:
                    d2:8d:e2:87:f2:ff:68:7a:56:44:6d:98:bb:6b:d1:
                    15:20:f4:79:ab:29:e9:cd:f1:dc:06:16:ee:a0:9c:
                    b7:bf:44:3c:86:df:6a:50:cb:13:72:27:12:5b:3d:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6D:AA:87:BA:59:E6:E8:12:B5:1D:C8:0C:CC:41:68:8B:CE:16:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/324c35ac-9c36-30b4-9927-2551948cb080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:75:15:36:B4:F9:1A:08:BA:02:B8:02:E3:D1:5C:F5:03:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ad45a836-43f7-42f2-954b-fbbfc0b6e52b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:79:09:80:0e:de:cd:e5:16:50:fd:e7:fe:b3:56:ba:3f:
         be:be:c0:ff:c2:b3:7d:7f:bb:c7:9d:95:ac:04:78:04:7b:91:
         f1:37:ce:e6:ba:99:48:0c:79:00:e7:c9:c2:25:a6:4d:fa:8f:
         2f:79:a6:fb:83:16:81:6e:1a:bb:b7:c3:cb:db:3a:ef:d5:a8:
         8e:d5:ee:21:24:37:3f:7e:64:df:62:79:56:b1:d0:16:0f:2d:
         05:d4:ef:f0:a3:16:2e:e7:98:df:3f:d9:12:de:d8:46:a5:b4:
         20:b1:8e:11:42:ef:1c:ef:89:b4:11:9f:d3:87:23:1c:92:77:
         5c:a2:df:bc:ad:1f:c1:2c:65:5f:41:44:ef:f0:29:b9:e8:22:
         ef:96:e4:0e:90:02:ce:ed:f4:c1:01:49:3b:37:a3:4a:6e:2c:
         e7:1d:62:09:de:85:97:3e:2b:1f:74:4a:bd:51:79:dc:60:80:
         b0:f8:58:70:61:fa:e7:b0:b0:45:08:19:25:e2:44:20:b7:03:
         45:10:ff:fb:8e:c5:55:1c:0a:24:73:18:fe:50:78:1b:48:ce:
         1a:f6:19:20:63:c2:0f:72:ea:85:14:e3:2c:84:c3:c8:5d:68:
         d2:29:0f:7f:be:bc:e1:53:e4:8a:a0:db:7f:d3:77:d6:67:d5:
         e7:91:65:4f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVbku5Qe1zs1hz7VIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ0NWE4MzYtNDNmNy00MmYyLTk1NGItZmJiZmMwYjZl
NTJiMB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk
YzJkZGMyMDQtYmIzOS00ODI2LTgzYmItNjk0MGMxZDdlOTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCfn0JlxtpfeOjtEeRQWZTbZIsYaBwIxASdH
YC5AM02s07mCJdh3vZNY3eGJQwLAufwTHZzU8lB8d+/8tzZVVVyIF6mkVOxHIcm5
MoGHTD77Y2vzSrrOdtIkDxJlg7o83FKhba5F6BAvCOU0DgRpXkdWgqGth5eGS4Po
uAR8TOjQMHXDC9xl/ibknI3R4yWCX6Lp1aH190KqLxp7jF1YLyteqAZlHheShRh0
jYzlM5+V4YM3xk6cmmbLy2J2cQCuni8tnBF/g9ObW+fc0gUjxInSjeKH8v9oelZE
bZi7a9EVIPR5qynpzfHcBhbuoJy3v0Q8ht9qUMsTcicSWz260QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDFtqoe6WeboErUdyAzMQWiLzhZ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZDQ1
YTgzNi00M2Y3LTQyZjItOTU0Yi1mYmJmYzBiNmU1MmIvMzI0YzM1YWMtOWMzNi0z
MGI0LTk5MjctMjU1MTk0OGNiMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWQ0NWE4MzYtNDNmNy00MmYyLTk1
NGItZmJiZmMwYjZlNTJiL2FkNDVhODM2LTQzZjctNDJmMi05NTRiLWZiYmZjMGI2
ZTUyYi5jcmwwHwYDVR0jBBgwFoAU0id1FTa0+RoIugK4AuPRXPUDt2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hZDQ1YTgzNi00M2Y3LTQyZjItOTU0Yi1mYmJm
YzBiNmU1MmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc3QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBJH3kJgA7ezeUWUP3n/rNWuj++vsD/wrN9f7vHnZWsBHgEe5HxN87m
uplIDHkA58nCJaZN+o8veab7gxaBbhq7t8PL2zrv1aiO1e4hJDc/fmTfYnlWsdAW
Dy0F1O/woxYu55jfP9kS3thGpbQgsY4RQu8c74m0EZ/ThyMckndcot+8rR/BLGVf
QUTv8Cm56CLvluQOkALO7fTBAUk7N6NKbiznHWIJ3oWXPisfdEq9UXncYICw+Fhw
YfrnsLBFCBkl4kQgtwNFEP/7jsVVHAokcxj+UHgbSM4a9hkgY8IPcuqFFOMshMPI
XWjSKQ9/vrzhU+SKoNt/03fWZ9XnkWVP
-----END CERTIFICATE-----
Generated at Thu May 2 04:28:01 2024 by rpki-client on console-fra.rpki-client.org