Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/b8a3380b-0f23-37e7-b36c-aff5adf2c4aa.roa
File:                     b8a3380b-0f23-37e7-b36c-aff5adf2c4aa.roa (raw, json)
Hash identifier:          0O3aI9s7Z9XcRJvkX8ZgwOxGevXBhZD6stAhs1kNnCw=
Subject key identifier:   1C:F5:04:2C:1A:6D:7E:18:D8:BB:9C:BF:E4:56:B4:56:29:7A:14:A9
Certificate issuer:       /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial:       010D0C9F432858474F4B776A276768E410EE5500
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/b8a3380b-0f23-37e7-b36c-aff5adf2c4aa.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     31919
IP address blocks:        2604:b080:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:77:6a:27:67:68:e4:10:ee:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=cd211730-8db0-4b44-b4c2-c41819bf93d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:98:98:5d:d5:ef:b7:90:f7:96:bc:01:7e:22:
                    29:d2:a9:96:8d:e2:f9:0e:73:82:44:37:fe:91:83:
                    15:96:4e:bb:2d:c9:6e:c5:9e:a3:0d:82:23:b6:3e:
                    bc:50:fd:6b:77:cb:c8:4a:2f:17:bc:c7:39:f0:cf:
                    4e:cc:7f:17:57:be:9e:55:50:9e:79:6b:d6:e9:ef:
                    c3:08:5e:23:4c:00:e9:f9:fa:dd:f0:5b:dd:f0:ac:
                    b7:75:75:c0:b6:86:73:78:89:a8:c6:ff:50:0c:04:
                    6d:ca:f3:c6:7d:5e:57:89:0c:d7:e7:a6:2c:7d:43:
                    37:07:b4:69:8d:19:5b:e6:bc:48:38:95:58:53:a6:
                    e5:2b:22:2a:58:c0:09:bb:11:eb:a0:6d:2c:25:60:
                    27:c5:01:a5:39:2d:38:49:e1:30:b0:80:23:a1:93:
                    a2:d2:11:ce:2f:ae:40:de:8c:ee:81:a7:24:13:c6:
                    6e:14:00:a5:5d:ca:bd:db:d1:50:f0:04:88:3f:4c:
                    50:e6:01:2c:73:5c:6c:db:04:65:2c:2b:ea:42:da:
                    c7:0e:47:98:7d:6d:33:07:e9:fd:86:73:4a:77:54:
                    b6:16:dc:1e:c4:58:7f:16:34:62:fb:16:3f:57:1f:
                    8b:62:c4:35:0b:34:b0:ad:c9:d0:ed:07:c3:b3:51:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F5:04:2C:1A:6D:7E:18:D8:BB:9C:BF:E4:56:B4:56:29:7A:14:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/b8a3380b-0f23-37e7-b36c-aff5adf2c4aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b080:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:86:27:f4:6f:c1:f1:a4:f4:e3:6e:6b:8b:2d:81:ce:64:
         21:92:10:15:b6:10:a4:fe:4c:11:1e:79:6a:e3:2b:d7:9e:bb:
         7d:33:ab:dd:14:21:6f:84:9b:f9:0b:39:3d:df:73:a2:8e:b7:
         a5:87:78:82:3d:e4:ba:0b:35:75:35:9a:cd:6f:f7:bd:e8:5d:
         79:6a:a9:1f:da:a6:4d:02:dd:c7:87:a4:40:a8:61:1e:c1:35:
         63:d9:ec:87:8f:b8:de:52:d5:6e:1a:2c:d0:cb:2e:16:59:a4:
         e0:66:33:17:a7:d7:ff:10:3d:a1:56:95:e9:e3:34:f5:71:86:
         d2:88:35:f2:e0:68:d8:de:7a:8f:9a:f0:d1:40:aa:58:55:23:
         94:83:87:83:0f:86:1c:4a:b7:a2:4c:61:b5:df:72:e4:36:30:
         f1:bc:31:b6:a1:e4:c3:b9:a0:81:76:53:b2:77:04:8b:c8:0f:
         ee:60:a6:6f:c5:b4:07:09:ba:51:8d:de:e6:dd:c9:53:d3:fc:
         b3:65:25:65:c7:10:10:26:38:db:a2:6f:06:ac:b3:24:d2:8d:
         e1:a2:c1:35:18:44:69:fd:f9:ff:e8:48:3b:dc:e8:24:21:2d:
         bd:80:ca:ab:f1:48:25:e6:ab:eb:fc:a6:56:85:b2:66:bb:c1:
         44:d2:33:df
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdPS3dqJ2do5BDuVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU5ZDZlNjEtODYxMy00Mjg5LWJlMzQtY2IwZmUwYWVl
YTZlMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
Y2QyMTE3MzAtOGRiMC00YjQ0LWI0YzItYzQxODE5YmY5M2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5iYXdXvt5D3lrwBfiIp0qmWjeL5DnOCRDf+
kYMVlk67LcluxZ6jDYIjtj68UP1rd8vISi8XvMc58M9OzH8XV76eVVCeeWvW6e/D
CF4jTADp+frd8Fvd8Ky3dXXAtoZzeImoxv9QDARtyvPGfV5XiQzX56YsfUM3B7Rp
jRlb5rxIOJVYU6blKyIqWMAJuxHroG0sJWAnxQGlOS04SeEwsIAjoZOi0hHOL65A
3ozugackE8ZuFAClXcq929FQ8ASIP0xQ5gEsc1xs2wRlLCvqQtrHDkeYfW0zB+n9
hnNKd1S2FtwexFh/FjRi+xY/Vx+LYsQ1CzSwrcnQ7QfDs1Hr8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBz1BCwabX4Y2Lucv+RWtFYpehSpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlk
NmU2MS04NjEzLTQyODktYmUzNC1jYjBmZTBhZWVhNmUvYjhhMzM4MGItMGYyMy0z
N2U3LWIzNmMtYWZmNWFkZjJjNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDU5ZDZlNjEtODYxMy00Mjg5LWJl
MzQtY2IwZmUwYWVlYTZlLzQ1OWQ2ZTYxLTg2MTMtNDI4OS1iZTM0LWNiMGZlMGFl
ZWE2ZS5jcmwwHwYDVR0jBBgwFoAU4cDQPgBLYWNKRx1bI0QthHr5a8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80NTlkNmU2MS04NjEzLTQyODktYmUzNC1jYjBm
ZTBhZWVhNmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgSwgIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMY2GJ/RvwfGk9ONua4stgc5kIZIQFbYQpP5MER55auMr1567fTOr
3RQhb4Sb+Qs5Pd9zoo63pYd4gj3kugs1dTWazW/3vehdeWqpH9qmTQLdx4ekQKhh
HsE1Y9nsh4+43lLVbhos0MsuFlmk4GYzF6fX/xA9oVaV6eM09XGG0og18uBo2N56
j5rw0UCqWFUjlIOHgw+GHEq3okxhtd9y5DYw8bwxtqHkw7mggXZTsncEi8gP7mCm
b8W0Bwm6UY3e5t3JU9P8s2UlZccQECY426JvBqyzJNKN4aLBNRhEaf35/+hIO9zo
JCEtvYDKq/FIJear6/ymVoWyZrvBRNIz3w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org