Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0ea5ffa4-32c6-3e7f-a483-49de9fc59b27.roa
File:                     0ea5ffa4-32c6-3e7f-a483-49de9fc59b27.roa (raw, json)
Hash identifier:          e2rpuIkSdXU6wbLUlpzGg1HJu22JDpp0hEfYeRj9l+Y=
Subject key identifier:   88:FB:BE:70:F1:71:E6:9E:85:AF:44:1D:94:4E:E0:EE:EE:28:CF:53
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285847ED24C97F5BC57727E1397740
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0ea5ffa4-32c6-3e7f-a483-49de9fc59b27.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     36391
IP address blocks:        2607:f8f0:660::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c9:7f:5b:c5:77:27:e1:39:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=9453dd0f-a97e-4776-8e89-b19a18af46bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:6d:6a:d1:73:06:0b:51:05:3e:39:3a:3a:
                    04:c1:3e:01:2d:b7:9d:ed:ec:70:db:70:6b:58:ca:
                    86:47:2d:c9:35:f9:5b:4c:17:0a:7b:82:b1:05:23:
                    e2:ff:0c:df:91:6f:a3:a2:85:21:c5:bd:72:92:d8:
                    5e:0d:15:df:c1:a1:c5:2c:9a:b1:00:d2:53:c5:b1:
                    62:d5:00:7c:dd:32:16:01:15:24:77:9a:b3:17:40:
                    ed:cc:d2:b4:b0:57:2f:13:e0:72:bd:97:32:03:5a:
                    7b:4c:0f:b5:0d:72:d5:c1:12:7b:6a:d6:cc:89:27:
                    03:a7:26:69:26:b6:f3:af:bc:7b:2f:70:fa:0e:14:
                    c5:c1:bc:f3:e2:d0:4a:a6:b6:10:6f:b3:ff:df:af:
                    46:b4:0a:c3:4b:d5:ad:19:24:38:79:f9:b6:a6:c9:
                    bb:e1:86:f1:6e:05:e7:54:14:ec:75:0b:0e:e5:20:
                    28:a7:4f:e3:41:c1:de:73:9f:79:6a:c5:c0:0e:40:
                    b6:0c:66:67:be:29:89:16:b8:47:99:1e:95:e8:5b:
                    ec:dd:76:b4:c7:c3:08:7e:5f:7a:87:37:ac:43:c4:
                    09:8d:e1:92:ea:59:45:3c:e0:77:06:66:06:ec:66:
                    5e:3e:0c:2f:d7:22:b8:1c:a6:b3:b4:b0:2d:a0:4b:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:BE:70:F1:71:E6:9E:85:AF:44:1D:94:4E:E0:EE:EE:28:CF:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0ea5ffa4-32c6-3e7f-a483-49de9fc59b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:660::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cd:a9:52:0c:2f:f4:5d:6f:63:8e:5d:97:1f:dd:c8:d8:6d:
         5d:09:12:41:12:9c:98:b6:11:7d:96:82:26:f4:91:7e:a9:37:
         84:d6:ad:18:02:5d:1a:4e:6f:7c:cf:77:b5:8c:76:a2:14:8f:
         e9:36:2b:e8:39:47:fb:d2:23:0e:99:1c:52:f8:17:d6:59:3a:
         e6:d5:d1:31:a5:61:f7:cd:02:f5:fa:61:fe:ba:70:2a:96:06:
         35:87:5f:79:3c:41:22:0b:b7:89:10:ed:5d:03:f3:42:77:ab:
         1f:96:bc:04:b9:2b:a0:f7:f5:5b:73:c7:a8:2b:26:6b:f1:d6:
         5b:8b:ca:14:d2:44:ce:ca:0c:dd:41:93:61:a8:24:45:d7:6a:
         13:d7:71:4d:bb:14:f8:60:31:2e:9a:fc:21:cc:cc:4a:75:4f:
         83:19:e0:a5:e6:3b:97:94:f6:64:37:1b:55:d5:92:ff:d9:1a:
         9e:53:d8:ee:6e:b7:59:33:b2:7e:23:c9:b2:2c:87:83:2b:db:
         5a:ec:fb:d3:88:33:ec:a4:96:c3:03:2f:2d:77:35:bc:1e:ab:
         f4:cd:86:fd:91:10:19:b6:d6:dd:b4:7c:b2:5d:44:1b:c1:f0:
         74:c9:8c:bd:82:8a:0c:38:53:58:ac:c2:3c:d9:a4:bd:1b:ea:
         fa:57:cc:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEftJMl/W8V3J+E5d0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
OTQ1M2RkMGYtYTk3ZS00Nzc2LThlODktYjE5YTE4YWY0NmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY9tatFzBgtRBT45OjoEwT4BLbed7exw23Br
WMqGRy3JNflbTBcKe4KxBSPi/wzfkW+jooUhxb1yktheDRXfwaHFLJqxANJTxbFi
1QB83TIWARUkd5qzF0DtzNK0sFcvE+ByvZcyA1p7TA+1DXLVwRJ7atbMiScDpyZp
Jrbzr7x7L3D6DhTFwbzz4tBKprYQb7P/369GtArDS9WtGSQ4efm2psm74YbxbgXn
VBTsdQsO5SAop0/jQcHec595asXADkC2DGZnvimJFrhHmR6V6Fvs3Xa0x8MIfl96
hzesQ8QJjeGS6llFPOB3BmYG7GZePgwv1yK4HKaztLAtoEuIRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIj7vnDxceaeha9EHZRO4O7uKM9TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvMGVhNWZmYTQtMzJjNi0z
ZTdmLWE0ODMtNDlkZTlmYzU5YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AZg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFPNqVIML/Rdb2OOXZcf3cjYbV0JEkESnJi2EX2Wgib0kX6pN4TW
rRgCXRpOb3zPd7WMdqIUj+k2K+g5R/vSIw6ZHFL4F9ZZOubV0TGlYffNAvX6Yf66
cCqWBjWHX3k8QSILt4kQ7V0D80J3qx+WvAS5K6D39Vtzx6grJmvx1luLyhTSRM7K
DN1Bk2GoJEXXahPXcU27FPhgMS6a/CHMzEp1T4MZ4KXmO5eU9mQ3G1XVkv/ZGp5T
2O5ut1kzsn4jybIsh4Mr21rs+9OIM+yklsMDLy13Nbweq/TNhv2REBm21t20fLJd
RBvB8HTJjL2Cigw4U1iswjzZpL0b6vpXzH8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org