Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa
File:                     41bef586-ce8e-33ad-8776-5277eecd884b.roa (raw, json)
Hash identifier:          5Cnejnmyz3UNW/RtPHWue0aUNyDpOXBpOQrGIIcfAy8=
Subject key identifier:   5F:80:7D:8F:22:BC:B6:15:F0:75:2A:F1:8D:B2:EA:76:97:DC:20:F3
Certificate issuer:       /CN=f81745fb-4da3-44f0-9b04-cbf9016913a0
Certificate serial:       010D0C9F43285847362B504DA26D2ECC79B59080
Authority key identifier: EE:48:D7:CE:40:6A:2A:BF:DC:16:F5:0E:FE:01:C9:ED:EA:D1:A1:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     54238
IP address blocks:        2605:10c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:50:4d:a2:6d:2e:cc:79:b5:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81745fb-4da3-44f0-9b04-cbf9016913a0
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=5b2ca1bd-ebb5-4807-b2ca-f3fe3fbcee3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:66:f3:e8:08:eb:a4:21:bc:ee:5b:e3:41:
                    27:77:c4:fb:f1:3a:a8:4d:b1:92:19:23:fa:53:a6:
                    bb:d3:87:e7:48:65:57:84:95:bb:2f:5d:a0:8c:2d:
                    25:50:bd:35:63:96:58:88:a6:bc:72:25:81:3f:e2:
                    5b:c4:46:43:e8:1d:d2:b1:c9:b6:bf:d9:a2:63:2e:
                    e6:a1:7e:fd:f8:cf:fa:4f:b1:28:40:c4:5c:67:ec:
                    2c:93:78:cb:8b:da:ba:9b:67:32:07:76:b6:a9:73:
                    ee:d2:65:16:7c:d2:b2:2e:f3:c5:ff:6f:10:a5:4e:
                    3d:8e:84:b3:e1:8e:ca:18:f9:cc:15:36:81:05:31:
                    c8:ef:ba:34:5a:94:d9:02:4d:11:8c:3b:45:dc:1a:
                    47:ef:2f:67:64:be:ce:55:14:bf:52:c3:a8:2d:52:
                    76:65:08:f8:aa:8d:d8:ec:dd:09:3a:dd:94:79:9e:
                    05:e1:8d:21:6c:16:32:30:34:b0:80:26:cb:12:ec:
                    5f:00:85:95:5e:a0:d7:9e:47:74:53:ef:d0:81:00:
                    6f:24:e1:2d:c6:65:9a:75:fe:a0:bf:f1:ac:11:2c:
                    0c:77:0d:57:a3:de:a6:78:40:42:2b:ff:e2:ff:38:
                    61:64:d4:d9:94:42:81:b7:35:b4:e5:a3:c3:91:c5:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:80:7D:8F:22:BC:B6:15:F0:75:2A:F1:8D:B2:EA:76:97:DC:20:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/41bef586-ce8e-33ad-8776-5277eecd884b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0/f81745fb-4da3-44f0-9b04-cbf9016913a0.crl

            X509v3 Authority Key Identifier:
                keyid:EE:48:D7:CE:40:6A:2A:BF:DC:16:F5:0E:FE:01:C9:ED:EA:D1:A1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f81745fb-4da3-44f0-9b04-cbf9016913a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:10c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:42:a4:7a:38:20:90:8e:70:51:60:3a:c1:03:86:2b:60:
         3c:5d:b9:03:a5:14:6b:e5:97:b9:48:f1:11:37:73:aa:ac:c3:
         cb:95:ba:f3:cb:a9:e8:48:90:86:70:e4:0a:93:b0:8c:8c:8e:
         26:18:0f:d9:50:82:23:e0:11:e1:ee:b6:6c:34:74:e2:10:ee:
         31:d8:80:22:c5:26:b0:38:06:11:20:67:3a:6d:d9:ff:cf:6b:
         81:2d:81:26:f6:7e:5f:fc:31:ac:c5:72:75:a7:a5:17:07:9c:
         92:e1:12:1f:47:83:83:ee:9e:5e:84:5c:63:4e:04:79:e5:c1:
         cf:74:c5:47:cc:94:04:b6:12:e3:c5:a9:62:1e:25:b0:aa:03:
         cb:0d:bf:42:60:d9:ae:95:a7:e3:a0:86:f8:35:ac:34:49:40:
         c9:ae:e5:08:b2:52:c8:eb:94:ed:71:c9:87:22:e3:78:7c:ce:
         e1:7b:58:9d:05:22:6b:c3:00:bc:5c:c6:f9:1e:3f:ae:e3:0e:
         a7:2c:07:05:5d:36:38:3c:8c:84:10:66:fc:9b:36:f6:ee:b7:
         c7:7f:55:b7:01:4c:27:65:ef:14:82:bd:db:7a:13:c8:49:af:
         94:ce:83:b9:09:c8:a9:86:ce:32:55:c3:ca:bf:93:d6:43:9d:
         73:85:4a:af
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEc2K1BNom0uzHm1kIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgxNzQ1ZmItNGRhMy00NGYwLTliMDQtY2JmOTAxNjkx
M2EwMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
NWIyY2ExYmQtZWJiNS00ODA3LWIyY2EtZjNmZTNmYmNlZTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTVm8+gI66QhvO5b40End8T78TqoTbGSGSP6
U6a704fnSGVXhJW7L12gjC0lUL01Y5ZYiKa8ciWBP+JbxEZD6B3Sscm2v9miYy7m
oX79+M/6T7EoQMRcZ+wsk3jLi9q6m2cyB3a2qXPu0mUWfNKyLvPF/28QpU49joSz
4Y7KGPnMFTaBBTHI77o0WpTZAk0RjDtF3BpH7y9nZL7OVRS/UsOoLVJ2ZQj4qo3Y
7N0JOt2UeZ4F4Y0hbBYyMDSwgCbLEuxfAIWVXqDXnkd0U+/QgQBvJOEtxmWadf6g
v/GsESwMdw1Xo96meEBCK//i/zhhZNTZlEKBtzW05aPDkcUxmQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF+AfY8ivLYV8HUq8Y2y6naX3CDzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODE3
NDVmYi00ZGEzLTQ0ZjAtOWIwNC1jYmY5MDE2OTEzYTAvNDFiZWY1ODYtY2U4ZS0z
M2FkLTg3NzYtNTI3N2VlY2Q4ODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjgxNzQ1ZmItNGRhMy00NGYwLTli
MDQtY2JmOTAxNjkxM2EwL2Y4MTc0NWZiLTRkYTMtNDRmMC05YjA0LWNiZjkwMTY5
MTNhMC5jcmwwHwYDVR0jBBgwFoAU7kjXzkBqKr/cFvUO/gHJ7erRoWMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODE3NDVmYi00ZGEzLTQ0ZjAtOWIwNC1jYmY5
MDE2OTEzYTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUQwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA8BkKkejggkI5wUWA6wQOGK2A8XbkDpRRr5Ze5SPERN3OqrMPLlbrz
y6noSJCGcOQKk7CMjI4mGA/ZUIIj4BHh7rZsNHTiEO4x2IAixSawOAYRIGc6bdn/
z2uBLYEm9n5f/DGsxXJ1p6UXB5yS4RIfR4OD7p5ehFxjTgR55cHPdMVHzJQEthLj
xaliHiWwqgPLDb9CYNmulafjoIb4Naw0SUDJruUIslLI65TtccmHIuN4fM7he1id
BSJrwwC8XMb5Hj+u4w6nLAcFXTY4PIyEEGb8mzb27rfHf1W3AUwnZe8Ugr3behPI
Sa+UzoO5Cciphs4yVcPKv5PWQ51zhUqv
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:50 2024 by rpki-client on console-ams.rpki-client.org