Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa
File:                     71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (raw, json)
Hash identifier:          EBd+y/D+1Z+lp5iPv3GGU23ZBCMytKeXn6XiD1CKG54=
Subject key identifier:   BD:D1:97:29:F7:C6:98:7F:C7:FA:EA:E0:43:46:F1:F6:08:C6:37:44
Certificate issuer:       /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996
Certificate serial:       010D0C9F43285845E45E732A6602E43E37DF18C0
Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     15147
IP address blocks:        2600:400::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:73:2a:66:02:e4:3e:37:df:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=a1b29ef2-8c78-46fb-8140-08f320a4d83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:a9:f1:ef:16:c2:c3:a7:5f:f9:5f:6f:b8:
                    9a:bb:b2:0c:1a:1e:3f:58:54:28:d5:27:21:6c:52:
                    5c:57:98:10:87:9d:b0:4d:78:91:6a:84:a7:43:3b:
                    2c:a5:fa:48:f5:0a:8f:31:d7:72:db:9c:0c:df:01:
                    53:1d:c2:22:bb:a0:b9:0c:89:9f:74:a9:af:ba:74:
                    6b:3d:b0:1b:7d:6b:fa:a6:de:cf:d1:f4:16:d9:d9:
                    26:0a:fa:07:59:f2:e6:30:2c:23:fe:2b:a1:f1:37:
                    03:8c:df:5c:c3:69:44:7d:ff:69:80:23:15:18:fc:
                    93:27:33:a2:e2:50:88:e8:ea:c5:2b:f0:87:d5:e2:
                    f1:46:37:0d:93:34:62:09:71:00:e9:2b:83:46:b8:
                    62:21:15:9d:7d:0a:60:ec:2a:f7:4c:2d:55:7f:da:
                    38:2d:d0:65:ae:7e:0e:12:cd:e3:ae:c0:d2:36:36:
                    f5:94:6e:b4:06:a8:a9:00:68:b1:3b:a4:bb:37:9f:
                    2f:d6:5c:c9:6a:af:e8:db:56:1e:94:31:b2:a5:f4:
                    66:fc:df:7a:9c:10:23:bc:51:db:5d:38:d1:e9:e6:
                    bc:79:1c:d8:8d:63:cd:dd:24:91:98:2e:2b:14:5c:
                    0d:fd:c9:b0:14:c0:eb:7e:b9:8d:4c:86:a5:de:15:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:97:29:F7:C6:98:7F:C7:FA:EA:E0:43:46:F1:F6:08:C6:37:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl

            X509v3 Authority Key Identifier:
                keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:59:0a:ee:12:df:9c:54:ed:61:85:ff:68:4a:12:c3:69:33:
         74:b1:f3:af:fb:db:5f:f2:f1:ba:57:b0:50:23:a6:fa:8b:71:
         79:54:0f:63:8c:23:c6:61:51:d4:8f:15:49:99:d6:05:f2:d8:
         07:2f:ac:21:23:18:24:24:bd:c9:9a:bb:06:a2:70:69:6f:ea:
         bd:45:b8:0a:43:cd:58:d5:bb:38:11:ef:a1:74:c8:2e:db:b5:
         95:91:a6:8b:bd:99:54:f8:94:46:8c:50:9d:19:b4:52:bb:78:
         4f:3c:16:c7:5c:0b:04:aa:2a:84:5d:f3:dd:20:d1:3f:06:bf:
         81:47:f0:5a:44:e5:2f:85:49:22:a4:2b:df:ea:92:45:20:b8:
         a4:d9:09:88:a9:c0:a7:a9:90:ec:e4:94:11:94:85:b3:b8:b8:
         81:9e:c5:e6:31:89:84:04:e1:c1:12:c1:4a:80:9c:5b:bf:5a:
         f1:d6:04:4c:c1:3f:37:7e:34:0b:d9:1b:16:d4:a9:6d:ef:f2:
         27:0e:61:6e:c4:1b:bc:fa:fb:1a:0f:7d:f1:dd:53:6f:16:35:
         7e:d2:3f:4d:e6:db:87:61:ef:a8:b1:46:2b:5b:79:de:66:b6:
         a1:04:cc:1e:b2:e5:b3:16:9b:03:8f:8e:3b:5a:12:20:2e:32:
         eb:eb:c4:83
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEXkXnMqZgLkPjffGMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4
OTk2MB4XDTI0MDUxNjEzMDAzNVoXDTI0MDgxNDEzMDAzNVowLzEtMCsGA1UEAxMk
YTFiMjllZjItOGM3OC00NmZiLTgxNDAtMDhmMzIwYTRkODNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqSp8e8WwsOnX/lfb7iau7IMGh4/WFQo1Sch
bFJcV5gQh52wTXiRaoSnQzsspfpI9QqPMddy25wM3wFTHcIiu6C5DImfdKmvunRr
PbAbfWv6pt7P0fQW2dkmCvoHWfLmMCwj/iuh8TcDjN9cw2lEff9pgCMVGPyTJzOi
4lCI6OrFK/CH1eLxRjcNkzRiCXEA6SuDRrhiIRWdfQpg7Cr3TC1Vf9o4LdBlrn4O
Es3jrsDSNjb1lG60BqipAGixO6S7N58v1lzJaq/o21YelDGypfRm/N96nBAjvFHb
XTjR6ea8eRzYjWPN3SSRmC4rFFwN/cmwFMDrfrmNTIal3hVb5QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL3Rlyn3xph/x/rq4ENG8fYIxjdEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw
ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNzExMDUzMjctODRkNS0z
ZjZhLWJjYzgtZmZmN2YzMmFiOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh
OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk
ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy
ZTA3ZDg5OTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAEADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCRWQruEt+cVO1hhf9oShLDaTN0sfOv+9tf8vG6V7BQI6b6i3F5VA9j
jCPGYVHUjxVJmdYF8tgHL6whIxgkJL3JmrsGonBpb+q9RbgKQ81Y1bs4Ee+hdMgu
27WVkaaLvZlU+JRGjFCdGbRSu3hPPBbHXAsEqiqEXfPdINE/Br+BR/BaROUvhUki
pCvf6pJFILik2QmIqcCnqZDs5JQRlIWzuLiBnsXmMYmEBOHBEsFKgJxbv1rx1gRM
wT83fjQL2RsW1Klt7/InDmFuxBu8+vsaD33x3VNvFjV+0j9N5tuHYe+osUYrW3ne
ZrahBMwesuWzFpsDj447WhIgLjLr68SD
-----END CERTIFICATE-----
Generated at Wed Jun 5 20:35:20 2024 by rpki-client on console-ams.rpki-client.org