Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/008f97a1-f7fc-3956-a083-8fdc51872fcd.roa
File:                     008f97a1-f7fc-3956-a083-8fdc51872fcd.roa (raw, json)
Hash identifier:          EKVL/B8MTo0DmTjAbx6C7BdbF+mKgrrYMo2ZoGWX8AI=
Subject key identifier:   AE:ED:58:FE:FF:7B:D0:88:7B:EB:4B:7C:E6:B6:2F:DB:41:70:9E:29
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858478CB697F2E81E84623FB35AC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/008f97a1-f7fc-3956-a083-8fdc51872fcd.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     11404
IP address blocks:        2600:2100::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:97:f2:e8:1e:84:62:3f:b3:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=8f3ef660-9992-4409-9430-27e79a68cb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:d0:f0:94:ef:01:56:a5:b0:fc:b1:ec:03:
                    03:f5:5c:73:44:58:9f:91:af:d3:20:1f:de:50:24:
                    0f:2e:f7:3d:d4:5f:6e:34:47:b6:d6:c4:76:53:d3:
                    6d:ec:c6:58:4f:2c:b0:72:c6:65:80:5c:24:da:14:
                    7a:01:a1:4e:ae:74:e7:e8:8f:13:81:ad:62:7a:fa:
                    bd:0a:31:09:fd:9c:84:e3:8b:40:ef:05:14:37:44:
                    42:3d:61:53:61:b4:cc:71:da:db:89:02:ed:4e:b1:
                    0a:6a:8a:42:62:48:5b:fb:e0:ab:24:b8:80:a7:e5:
                    95:ae:84:09:56:f7:c1:bd:c4:98:7b:0b:ca:0b:ac:
                    e8:1c:d4:58:c9:74:e9:e2:e8:d6:c9:90:8f:c2:df:
                    f1:83:24:dd:8f:e0:16:70:4a:bd:82:0e:4e:d6:33:
                    52:d6:3f:ea:ec:6f:1f:f8:26:65:9e:2f:5c:c7:7e:
                    84:c7:2c:4b:f3:9a:a7:d3:67:6c:51:15:72:87:19:
                    49:29:c4:cd:b1:9f:c1:db:f5:c0:ad:e4:55:56:b3:
                    42:b6:32:4a:c8:43:37:47:98:d6:8d:c2:4a:ec:a3:
                    50:d1:4a:f7:e1:ec:b0:53:8e:5f:a8:e7:f5:08:bd:
                    98:fa:50:d0:34:c6:07:a4:c1:4f:a8:10:a8:7d:76:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:ED:58:FE:FF:7B:D0:88:7B:EB:4B:7C:E6:B6:2F:DB:41:70:9E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/008f97a1-f7fc-3956-a083-8fdc51872fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:58:28:46:89:f6:5e:5d:8f:d0:be:98:c2:30:38:61:17:00:
         e8:c0:5d:6b:4a:d2:76:e5:35:8e:38:68:93:77:ee:cc:b9:3a:
         f4:c1:a8:18:9c:83:ac:eb:26:eb:ba:7d:5a:3d:0f:a2:4f:fb:
         ed:ac:e2:3b:0d:d2:2d:ac:5d:75:db:3c:9c:0e:8b:1b:ce:b0:
         ae:60:0b:41:76:1d:59:bd:7e:1c:0d:0b:a9:14:f4:77:e1:f7:
         64:d3:8c:a7:6b:62:b6:13:94:be:ee:ca:e1:85:3f:e6:02:1c:
         22:94:97:82:52:93:a8:96:8d:eb:44:4a:10:ee:f1:de:79:1d:
         6e:8f:15:10:f8:ad:8e:23:69:bb:69:cd:ac:9c:4a:56:ac:ba:
         fe:b9:d5:cb:b3:c0:e8:f4:77:0d:36:13:67:3f:36:6a:8b:f6:
         86:66:bb:36:e1:94:35:96:15:e3:85:16:6f:96:f2:35:06:0e:
         40:a5:9f:f1:d7:43:cd:96:e9:9a:df:fe:0c:a5:35:fd:df:50:
         81:a9:15:13:09:f9:f3:62:58:64:60:4f:ba:16:42:9b:ad:1b:
         2c:d6:03:16:36:6a:e0:bb:b1:2e:ca:a9:f7:39:b6:e6:19:7b:
         70:47:9b:5e:8e:2b:92:9c:01:b7:3b:4c:cd:9a:7c:f2:a5:c0:
         bc:03:9b:45
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeMtpfy6B6EYj+zWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
OGYzZWY2NjAtOTk5Mi00NDA5LTk0MzAtMjdlNzlhNjhjYjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBbQ8JTvAValsPyx7AMD9VxzRFifka/TIB/e
UCQPLvc91F9uNEe21sR2U9Nt7MZYTyywcsZlgFwk2hR6AaFOrnTn6I8Tga1ievq9
CjEJ/ZyE44tA7wUUN0RCPWFTYbTMcdrbiQLtTrEKaopCYkhb++CrJLiAp+WVroQJ
VvfBvcSYewvKC6zoHNRYyXTp4ujWyZCPwt/xgyTdj+AWcEq9gg5O1jNS1j/q7G8f
+CZlni9cx36ExyxL85qn02dsURVyhxlJKcTNsZ/B2/XAreRVVrNCtjJKyEM3R5jW
jcJK7KNQ0Ur34eywU45fqOf1CL2Y+lDQNMYHpMFPqBCofXb3jQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK7tWP7/e9CIe+tLfOa2L9tBcJ4pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMDA4Zjk3YTEtZjdmYy0z
OTU2LWEwODMtOGZkYzUxODcyZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAhADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBDWChGifZeXY/QvpjCMDhhFwDowF1rStJ25TWOOGiTd+7MuTr0wagY
nIOs6ybrun1aPQ+iT/vtrOI7DdItrF112zycDosbzrCuYAtBdh1ZvX4cDQupFPR3
4fdk04yna2K2E5S+7srhhT/mAhwilJeCUpOolo3rREoQ7vHeeR1ujxUQ+K2OI2m7
ac2snEpWrLr+udXLs8Do9HcNNhNnPzZqi/aGZrs24ZQ1lhXjhRZvlvI1Bg5ApZ/x
10PNluma3/4MpTX931CBqRUTCfnzYlhkYE+6FkKbrRss1gMWNmrgu7Euyqn3Obbm
GXtwR5tejiuSnAG3O0zNmnzypcC8A5tF
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:48 2024 by rpki-client on console-ams.rpki-client.org