Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
File:                     9897673b-da30-342e-a2ae-a0611cdcd3b3.roa (raw, json)
Hash identifier:          6JnQJ/2X70CE+X97OOX5X/4vVK3SqVt3/l21jim5b8Q=
Subject key identifier:   15:8E:16:F2:BF:37:08:21:B2:E6:FA:FD:94:85:8E:FC:5B:3B:75:21
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F432858473A5B950091DA86236F7A8900
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     27419
IP address blocks:        2606:2f00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:95:00:91:da:86:23:6f:7a:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=b96465ac-b1d6-4f60-a7ae-88be4859acbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:62:89:d8:4d:38:a5:9f:44:f1:a3:d5:17:
                    d4:ed:40:1e:33:cf:bb:4a:d4:c5:d7:65:c7:23:b1:
                    17:0e:c9:e6:b1:f9:16:a8:ba:c7:f3:3a:ea:a3:f9:
                    0f:df:89:a7:cf:b1:a4:15:a1:aa:94:93:b4:65:5e:
                    3a:2f:aa:91:d0:60:da:57:b3:5a:49:05:b4:10:61:
                    ea:36:64:2a:e3:54:fd:79:94:4a:85:e9:e3:53:52:
                    6e:59:08:fc:e7:89:01:03:32:89:70:cb:98:15:7b:
                    7d:ef:44:fa:7e:40:51:6d:44:94:f5:1b:82:10:69:
                    f3:cc:16:cb:06:28:08:59:30:79:df:e5:74:23:fe:
                    0a:6c:fe:56:59:4f:18:86:29:eb:44:08:28:6e:af:
                    58:ff:8f:ee:08:98:ce:d4:cf:75:21:4a:3a:4b:3d:
                    aa:06:20:0a:3a:61:8f:bc:5c:c2:18:1d:4d:62:5c:
                    58:cf:3c:f2:31:c7:02:d8:78:b3:7b:1a:6a:9b:75:
                    54:c5:d9:f0:1d:e8:bb:24:e3:cf:da:cd:6b:b4:5e:
                    9e:04:03:b0:c4:f2:48:56:52:ce:e8:ed:cf:92:7b:
                    ae:bd:12:70:b8:c7:e7:bd:d2:77:75:8a:fe:6c:6e:
                    64:73:e7:68:a6:ea:53:4a:ef:4f:00:08:f9:95:65:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8E:16:F2:BF:37:08:21:B2:E6:FA:FD:94:85:8E:FC:5B:3B:75:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:62:73:5c:f6:d0:5c:12:bb:f3:71:12:82:5b:ad:58:d1:
         de:3a:c1:2e:a3:e1:cd:fd:25:70:8f:9c:7e:c7:e9:38:02:a5:
         43:da:8a:11:3c:3d:7b:86:3c:4c:4e:d4:c9:79:df:b5:58:23:
         46:38:44:72:9e:f9:25:5d:f9:bc:61:7e:84:33:60:aa:e3:36:
         9e:d0:b1:cb:06:00:a0:41:d8:d3:f2:b5:59:fa:85:66:ce:5b:
         87:be:27:8a:3b:48:0c:4b:bc:ac:58:e2:18:b8:0d:62:ba:81:
         c8:01:22:fd:64:20:c3:28:d6:e1:49:1e:78:b3:26:cc:1a:68:
         dd:06:02:2b:1b:fc:36:52:66:e6:51:b9:ee:1e:62:38:29:5d:
         9d:75:97:7a:b7:2d:2d:25:8f:68:72:cc:02:23:83:a1:6c:5a:
         6f:97:19:d5:6a:ae:67:1f:ba:83:50:b8:03:41:49:48:fd:dc:
         a9:bc:c7:25:ac:ab:9a:57:b6:3a:86:02:cb:e9:b1:38:7c:bc:
         f4:3c:6c:da:b9:0e:5f:d0:d7:03:ce:46:95:7e:0d:36:da:42:
         d2:21:e7:c8:f6:d8:84:05:18:48:1f:60:2f:73:7c:9d:e7:4f:
         67:91:ce:37:87:c3:91:e9:53:c9:18:5d:ca:45:14:ed:53:91:
         b7:2e:67:9d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEc6W5UAkdqGI296iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ExMmZjYmUtYjY5MS00YWMzLWIwZGItOGRiMGMyN2Yz
NTU0MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
Yjk2NDY1YWMtYjFkNi00ZjYwLWE3YWUtODhiZTQ4NTlhY2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuViidhNOKWfRPGj1RfU7UAeM8+7StTF12XH
I7EXDsnmsfkWqLrH8zrqo/kP34mnz7GkFaGqlJO0ZV46L6qR0GDaV7NaSQW0EGHq
NmQq41T9eZRKhenjU1JuWQj854kBAzKJcMuYFXt970T6fkBRbUSU9RuCEGnzzBbL
BigIWTB53+V0I/4KbP5WWU8YhinrRAgobq9Y/4/uCJjO1M91IUo6Sz2qBiAKOmGP
vFzCGB1NYlxYzzzyMccC2Hizexpqm3VUxdnwHei7JOPP2s1rtF6eBAOwxPJIVlLO
6O3PknuuvRJwuMfnvdJ3dYr+bG5kc+dopupTSu9PAAj5lWVtlQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBWOFvK/Nwghsub6/ZSFjvxbO3UhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YTEy
ZmNiZS1iNjkxLTRhYzMtYjBkYi04ZGIwYzI3ZjM1NTQvOTg5NzY3M2ItZGEzMC0z
NDJlLWEyYWUtYTA2MTFjZGNkM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2ExMmZjYmUtYjY5MS00YWMzLWIw
ZGItOGRiMGMyN2YzNTU0LzdhMTJmY2JlLWI2OTEtNGFjMy1iMGRiLThkYjBjMjdm
MzU1NC5jcmwwHwYDVR0jBBgwFoAU5khlibUjHC90BBrO+czt6CORtRAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YTEyZmNiZS1iNjkxLTRhYzMtYjBkYi04ZGIw
YzI3ZjM1NTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYvADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5T2JzXPbQXBK783ESglutWNHeOsEuo+HN/SVwj5x+x+k4AqVD2ooR
PD17hjxMTtTJed+1WCNGOERynvklXfm8YX6EM2Cq4zae0LHLBgCgQdjT8rVZ+oVm
zluHvieKO0gMS7ysWOIYuA1iuoHIASL9ZCDDKNbhSR54sybMGmjdBgIrG/w2Umbm
UbnuHmI4KV2ddZd6ty0tJY9ocswCI4OhbFpvlxnVaq5nH7qDULgDQUlI/dypvMcl
rKuaV7Y6hgLL6bE4fLz0PGzauQ5f0NcDzkaVfg022kLSIefI9tiEBRhIH2Avc3yd
509nkc43h8OR6VPJGF3KRRTtU5G3Lmed
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org