Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa
File:                     9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa (raw, json)
Hash identifier:          iE1OJJw/yKM6TtbkfNlLJOYHrWZIOhrBCGKJG402Q6w=
Subject key identifier:   F5:43:24:3A:35:B0:3D:57:BB:B7:83:6C:ED:FA:D6:22:37:79:B3:1E
Certificate issuer:       /CN=78f2a37d-9624-4031-908c-08f70f9830f9
Certificate serial:       010D0C9F432858457D132A402880283BF2E42100
Authority key identifier: 77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     0
IP address blocks:        2001:504:134::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2a:40:28:80:28:3b:f2:e4:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f2a37d-9624-4031-908c-08f70f9830f9
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=86e292e0-56bc-47c0-804c-012f8fdf6572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:06:cf:9b:70:63:25:19:66:a2:5c:00:91:
                    db:b7:66:6e:54:f7:0e:38:a6:2f:02:8a:3c:e4:bd:
                    87:31:63:e1:23:72:b6:60:99:a7:b2:57:0a:49:03:
                    32:52:f7:1f:46:73:58:64:9c:cc:53:31:05:55:6d:
                    a3:fc:80:6e:4d:61:9b:0e:75:75:eb:35:23:de:b2:
                    69:5e:b3:6b:d8:10:9d:68:a3:4a:e6:fc:e2:61:3c:
                    3c:3b:1a:e3:d9:02:c4:8c:1b:7d:0c:92:b0:a5:5f:
                    26:93:45:fc:60:9e:4c:5c:29:7f:72:c2:0f:e7:2c:
                    f9:8e:c6:7b:ee:25:b7:28:df:53:33:67:79:f2:e1:
                    f7:7b:1e:cd:b7:a3:91:dc:54:b8:c9:81:ea:92:19:
                    59:76:e1:41:21:a1:eb:15:79:8d:e2:34:a3:dc:08:
                    df:19:d8:b3:76:2b:49:3a:62:85:a7:21:40:22:e1:
                    20:83:7f:d9:e7:5c:03:59:06:63:bd:bb:b0:0a:e3:
                    75:76:ff:6c:77:fe:81:e2:96:c6:ca:36:2a:69:18:
                    b1:d2:89:48:63:07:d0:2b:bd:4e:e9:68:d5:57:40:
                    2e:86:f3:ff:fa:53:d5:94:e2:e1:5e:f6:f9:04:05:
                    fb:b5:b9:a2:62:0e:e4:f9:5e:e9:bd:de:f9:8a:24:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:43:24:3A:35:B0:3D:57:BB:B7:83:6C:ED:FA:D6:22:37:79:B3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl

            X509v3 Authority Key Identifier:
                keyid:77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:23:75:33:9b:fb:4c:91:94:34:82:1e:f8:e3:53:6c:72:27:
         78:ca:11:5c:bd:e1:1a:9b:a9:03:53:28:e4:f4:cf:30:25:40:
         c2:0f:57:27:3a:80:7a:9b:92:c5:12:76:5f:98:61:6c:01:60:
         10:6e:0d:cb:37:74:24:9d:e7:13:ed:a2:76:ce:5f:eb:07:a0:
         a8:27:46:45:d0:50:1f:ec:bd:6e:b7:60:cb:ab:be:88:43:9e:
         b1:e4:b0:00:2d:b9:94:80:29:2c:c6:7c:52:36:2e:26:98:19:
         83:ab:49:6b:4f:74:ab:48:13:01:ae:a4:68:df:2a:d6:43:2e:
         46:99:cc:1c:aa:cd:bc:62:ba:0c:92:91:33:4d:8e:57:ab:e5:
         13:ff:30:a5:6b:84:e4:a7:72:af:21:1a:30:1f:28:2a:79:fc:
         a3:10:da:fb:04:79:3c:5a:49:33:3e:07:08:d0:27:23:8a:73:
         eb:00:a5:ad:69:a2:1a:fd:6e:63:4a:c3:08:45:f9:39:90:c6:
         4c:c3:d6:9f:93:92:c0:a1:3b:71:d5:ec:a9:1b:84:4b:e4:de:
         ca:82:55:4b:6f:ed:e8:c5:c6:8f:d1:de:47:81:18:d0:74:8a:
         93:23:cf:16:be:18:64:54:35:3d:41:34:1e:44:37:fc:f0:f4:
         f4:f5:0f:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV9EypAKIAoO/LkIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhmMmEzN2QtOTYyNC00MDMxLTkwOGMtMDhmNzBmOTgz
MGY5MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
ODZlMjkyZTAtNTZiYy00N2MwLTgwNGMtMDEyZjhmZGY2NTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0AGz5twYyUZZqJcAJHbt2ZuVPcOOKYvAoo8
5L2HMWPhI3K2YJmnslcKSQMyUvcfRnNYZJzMUzEFVW2j/IBuTWGbDnV16zUj3rJp
XrNr2BCdaKNK5vziYTw8Oxrj2QLEjBt9DJKwpV8mk0X8YJ5MXCl/csIP5yz5jsZ7
7iW3KN9TM2d58uH3ex7Nt6OR3FS4yYHqkhlZduFBIaHrFXmN4jSj3AjfGdizditJ
OmKFpyFAIuEgg3/Z51wDWQZjvbuwCuN1dv9sd/6B4pbGyjYqaRix0olIYwfQK71O
6WjVV0AuhvP/+lPVlOLhXvb5BAX7tbmiYg7k+V7pvd75iiSIBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPVDJDo1sD1Xu7eDbO361iI3ebMeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83OGYy
YTM3ZC05NjI0LTQwMzEtOTA4Yy0wOGY3MGY5ODMwZjkvOWVlMTJkYjktMWNmOS0z
NjU5LTg0M2UtMzdhY2RmMWE2ZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzhmMmEzN2QtOTYyNC00MDMxLTkw
OGMtMDhmNzBmOTgzMGY5Lzc4ZjJhMzdkLTk2MjQtNDAzMS05MDhjLTA4ZjcwZjk4
MzBmOS5jcmwwHwYDVR0jBBgwFoAUd1Ys1/OayxyW8EivUPLj/80M4JAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83OGYyYTM3ZC05NjI0LTQwMzEtOTA4Yy0wOGY3
MGY5ODMwZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAE0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIkjdTOb+0yRlDSCHvjjU2xyJ3jKEVy94RqbqQNTKOT0zzAlQMIP
Vyc6gHqbksUSdl+YYWwBYBBuDcs3dCSd5xPtonbOX+sHoKgnRkXQUB/svW63YMur
vohDnrHksAAtuZSAKSzGfFI2LiaYGYOrSWtPdKtIEwGupGjfKtZDLkaZzByqzbxi
ugySkTNNjler5RP/MKVrhOSncq8hGjAfKCp5/KMQ2vsEeTxaSTM+BwjQJyOKc+sA
pa1pohr9bmNKwwhF+TmQxkzD1p+TksChO3HV7KkbhEvk3sqCVUtv7ejFxo/R3keB
GNB0ipMjzxa+GGRUNT1BNB5EN/zw9PT1D7M=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:27 2024 by rpki-client on console-fra.rpki-client.org