Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa
File:                     40979e81-e4d5-3b9e-aa17-d47ae9979638.roa (raw, json)
Hash identifier:          I7n0hZIWz8+x56x6a4A7o0Shla0AwX8o1+rt0g5/i20=
Subject key identifier:   38:FA:F9:91:16:53:DF:8B:E6:11:D1:CC:03:13:CD:9F:D6:F4:38:ED
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584555FD87532AA83EADE0A61300
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa
Signing time:             Tue 26 Mar 2024 13:00:35 +0000
ROA not before:           Tue 26 Mar 2024 13:00:35 +0000
ROA not after:            Mon 24 Jun 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        2606:9680:20c0::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:55:fd:87:53:2a:a8:3e:ad:e0:a6:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Mar 26 13:00:35 2024 GMT
            Not After : Jun 24 13:00:35 2024 GMT
        Subject: CN=0a97ca61-ccf9-49a8-a264-8818716a8c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:58:86:3c:c3:f4:53:f6:c2:68:01:ab:ca:
                    d2:5c:23:6f:74:fa:58:30:f5:92:1c:b2:5f:eb:84:
                    44:1f:3a:a4:c8:50:56:81:75:55:3a:94:08:a9:d8:
                    84:0b:ff:c0:ca:87:97:8c:73:79:5e:eb:67:1f:fa:
                    e0:c2:99:6a:b1:16:f6:ae:41:d8:58:b6:7b:03:cf:
                    46:75:b8:5d:87:b4:a2:d4:fb:18:25:d4:70:de:1a:
                    73:47:7d:9b:65:7d:1f:a7:8a:d7:b3:7f:78:77:ea:
                    8f:2e:d5:08:ad:5d:ad:d6:66:f8:cc:ba:5f:b4:6d:
                    a4:14:5d:91:28:4a:4b:bb:74:92:48:03:e5:36:ee:
                    41:d2:05:02:f0:76:16:a7:72:3d:eb:0d:43:c3:90:
                    9b:d7:7f:22:86:36:42:e0:c3:03:94:4c:78:ec:3b:
                    f1:43:96:92:13:bf:84:f0:35:37:94:44:63:ee:c1:
                    0b:c2:65:3c:61:96:28:65:47:ee:65:93:06:0e:78:
                    e8:33:d2:d7:8c:91:f7:cc:8e:2c:9b:7e:78:a3:99:
                    ec:8a:5b:a6:ad:67:82:ce:21:61:d7:91:8a:53:63:
                    19:9c:fe:0b:a5:a5:c0:47:77:c5:ab:c1:eb:bc:f2:
                    80:43:48:67:19:1d:af:bb:8a:85:fd:fd:19:d2:b1:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FA:F9:91:16:53:DF:8B:E6:11:D1:CC:03:13:CD:9F:D6:F4:38:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9680:20c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c0:fd:bf:dc:2f:32:cc:86:e7:b1:a1:f9:c6:53:ea:a2:c4:
         14:52:8b:9c:89:30:66:59:7b:08:bd:b8:8b:f2:39:f7:cd:7c:
         0f:32:95:41:0a:65:e8:e1:9e:03:70:55:42:1f:29:21:56:72:
         af:d0:71:7a:3f:45:24:c9:52:2f:27:72:3a:6d:4b:73:1f:fc:
         bd:d1:ad:be:46:72:bd:49:2c:a3:ef:73:93:21:3e:9e:a7:c3:
         a3:b4:44:46:6b:f8:2c:3a:e8:31:2d:11:e1:41:73:bb:ba:a1:
         a8:e0:a3:1c:d4:1f:cf:ce:96:58:cc:53:07:7d:23:d4:47:03:
         26:17:2b:e3:af:ec:86:47:50:2f:40:09:b7:b2:03:f3:a4:c3:
         dd:8e:e4:74:e9:78:41:f0:5d:6e:de:5f:6a:3c:5d:f2:43:6f:
         c5:55:9a:02:e5:bf:47:65:f9:c4:a2:b0:2a:f6:e9:3e:63:ef:
         39:3c:f2:fb:9f:73:e5:ea:8c:44:12:41:6b:2b:f0:0e:02:5f:
         56:1b:fd:3e:15:29:37:cc:b6:cb:ab:63:83:3e:4e:00:c4:82:
         b8:2f:73:1b:b7:7f:c5:c1:4d:9e:8e:f3:0a:ae:4a:48:ee:4d:
         f4:03:58:12:87:0d:d8:c8:f1:6c:95:67:43:14:94:66:c6:b3:
         66:f1:b8:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVV/YdTKqg+reCmEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli
Njc2MB4XDTI0MDMyNjEzMDAzNVoXDTI0MDYyNDEzMDAzNVowLzEtMCsGA1UEAxMk
MGE5N2NhNjEtY2NmOS00OWE4LWEyNjQtODgxODcxNmE4YzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VRYhjzD9FP2wmgBq8rSXCNvdPpYMPWSHLJf
64REHzqkyFBWgXVVOpQIqdiEC//AyoeXjHN5XutnH/rgwplqsRb2rkHYWLZ7A89G
dbhdh7Si1PsYJdRw3hpzR32bZX0fp4rXs394d+qPLtUIrV2t1mb4zLpftG2kFF2R
KEpLu3SSSAPlNu5B0gUC8HYWp3I96w1Dw5Cb138ihjZC4MMDlEx47DvxQ5aSE7+E
8DU3lERj7sELwmU8YZYoZUfuZZMGDnjoM9LXjJH3zI4sm354o5nsilumrWeCziFh
15GKU2MZnP4LpaXAR3fFq8HrvPKAQ0hnGR2vu4qF/f0Z0rEcdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDj6+ZEWU9+L5hHRzAMTzZ/W9DjtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5
MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvNDA5NzllODEtZTRkNS0z
YjllLWFhMTctZDQ3YWU5OTc5NjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3
ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5
YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy
Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgaWgCDA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEXA/b/cLzLMhuexofnGU+qixBRSi5yJMGZZewi9uIvyOffNfA8y
lUEKZejhngNwVUIfKSFWcq/QcXo/RSTJUi8ncjptS3Mf/L3Rrb5Gcr1JLKPvc5Mh
Pp6nw6O0REZr+Cw66DEtEeFBc7u6oajgoxzUH8/OlljMUwd9I9RHAyYXK+Ov7IZH
UC9ACbeyA/Okw92O5HTpeEHwXW7eX2o8XfJDb8VVmgLlv0dl+cSisCr26T5j7zk8
8vufc+XqjEQSQWsr8A4CX1Yb/T4VKTfMtsurY4M+TgDEgrgvcxu3f8XBTZ6O8wqu
SkjuTfQDWBKHDdjI8WyVZ0MUlGbGs2bxuCc=
-----END CERTIFICATE-----
Generated at Wed May 1 22:27:12 2024 by rpki-client on console-fra.rpki-client.org