Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a70a2d81-fff6-3085-83fa-6ba2db479e2c.roa
File:                     a70a2d81-fff6-3085-83fa-6ba2db479e2c.roa (raw, json)
Hash identifier:          rrLqtDsIYCVORgGC9hkfgXFxqwDHT4f33Xo4wk5/L1Q=
Subject key identifier:   08:01:D6:4E:A9:62:15:5A:A2:66:21:68:4E:F4:A6:84:7A:A3:F3:55
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285847537B7E61BD0819F962C8E0E0
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a70a2d81-fff6-3085-83fa-6ba2db479e2c.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     4476
IP address blocks:        2607:f8f0:630::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:7e:61:bd:08:19:f9:62:c8:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=94e063db-9a36-4fc2-9c08-8ca7d8e51343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:39:1e:26:f7:7c:d6:e0:73:16:d3:f1:12:
                    3a:ac:04:91:01:eb:65:d0:26:9a:8c:db:46:27:d2:
                    52:a3:6a:6d:9c:25:3b:47:c0:94:6f:18:5f:3c:1a:
                    e6:c4:d5:df:09:cd:29:28:9f:76:e2:57:e6:2a:a7:
                    e5:4f:ac:ae:c9:6f:98:8d:14:54:e9:62:7c:3d:d2:
                    21:3e:44:e9:9e:81:3b:5e:33:e3:5d:2b:c2:7c:5c:
                    fb:1f:a9:4f:0e:68:c7:ac:4f:8f:cd:52:c3:f8:e8:
                    7d:0f:aa:e7:97:f6:f1:ad:df:c8:20:b2:ca:ca:8b:
                    40:7b:8e:b6:81:30:2b:69:23:ef:ab:f5:68:e0:5f:
                    a7:76:b9:3a:52:39:22:53:19:76:d6:84:30:7c:9b:
                    83:8c:c6:c7:d2:84:e7:58:76:a5:dc:e9:d0:73:94:
                    c1:6d:af:45:19:b3:ff:e7:0f:a7:47:66:30:70:d7:
                    1a:72:57:8e:62:da:53:99:e2:ab:11:c4:1a:ad:0c:
                    59:7f:f4:fb:f2:13:9e:85:15:0b:2d:d2:95:66:4e:
                    72:2f:05:e0:35:fb:a5:3a:c3:c3:ab:03:9a:b7:fd:
                    a8:f7:0b:a6:e7:4c:3c:31:7f:b7:a2:a9:e2:18:c0:
                    df:65:c6:88:a1:66:ba:e3:7c:55:3a:09:11:bf:ee:
                    9b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:01:D6:4E:A9:62:15:5A:A2:66:21:68:4E:F4:A6:84:7A:A3:F3:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a70a2d81-fff6-3085-83fa-6ba2db479e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:630::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8f:06:ef:9a:19:98:64:5c:49:ee:c7:59:8a:18:d2:62:d5:
         79:aa:ee:7b:1d:06:1c:2e:26:fc:62:92:53:77:44:0d:d3:f5:
         80:1d:6d:0d:6d:d8:8d:60:3b:62:5b:ca:a9:c3:6e:66:ed:ad:
         7f:59:06:5a:b9:bc:85:5e:80:f8:00:7c:d5:29:f2:f7:69:fb:
         2d:1b:68:b1:2b:d3:43:c5:47:bc:69:16:2f:ec:ab:75:43:7e:
         3e:ab:6d:27:bb:91:ae:65:29:b9:0c:bb:9e:88:5e:1e:29:f0:
         4b:94:55:42:ec:09:f7:00:ca:4b:9b:9e:28:07:24:1e:2d:6a:
         13:c8:f6:5e:b0:7e:56:58:94:68:49:ad:b7:35:6b:e4:d1:6f:
         f7:fc:4c:b0:c8:ff:85:d6:36:4f:68:30:f5:c9:cb:ec:12:da:
         67:c7:16:e8:55:f3:e6:41:67:95:5c:d4:56:62:89:02:7e:52:
         f7:4c:29:b8:e3:ea:15:9b:57:6b:9d:e7:29:b5:6c:f6:9d:fe:
         fe:b4:c8:b4:8c:a2:8d:56:ab:84:28:9e:00:dc:35:74:ef:78:
         34:ed:22:75:b3:63:42:a8:aa:09:97:11:8a:e1:19:24:ee:73:
         41:0b:1b:24:ad:a0:ba:be:d3:78:b8:cb:17:f1:3a:35:17:6d:
         df:86:a1:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdTe35hvQgZ+WLI4OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
OTRlMDYzZGItOWEzNi00ZmMyLTljMDgtOGNhN2Q4ZTUxMzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlA5Hib3fNbgcxbT8RI6rASRAetl0CaajNtG
J9JSo2ptnCU7R8CUbxhfPBrmxNXfCc0pKJ924lfmKqflT6yuyW+YjRRU6WJ8PdIh
PkTpnoE7XjPjXSvCfFz7H6lPDmjHrE+PzVLD+Oh9D6rnl/bxrd/IILLKyotAe462
gTAraSPvq/Vo4F+ndrk6UjkiUxl21oQwfJuDjMbH0oTnWHal3OnQc5TBba9FGbP/
5w+nR2YwcNcacleOYtpTmeKrEcQarQxZf/T78hOehRULLdKVZk5yLwXgNfulOsPD
qwOat/2o9wum50w8MX+3oqniGMDfZcaIoWa643xVOgkRv+6bYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAgB1k6pYhVaomYhaE70poR6o/NVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvYTcwYTJkODEtZmZmNi0z
MDg1LTgzZmEtNmJhMmRiNDc5ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AYw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFaPBu+aGZhkXEnux1mKGNJi1Xmq7nsdBhwuJvxiklN3RA3T9YAd
bQ1t2I1gO2JbyqnDbmbtrX9ZBlq5vIVegPgAfNUp8vdp+y0baLEr00PFR7xpFi/s
q3VDfj6rbSe7ka5lKbkMu56IXh4p8EuUVULsCfcAykubnigHJB4tahPI9l6wflZY
lGhJrbc1a+TRb/f8TLDI/4XWNk9oMPXJy+wS2mfHFuhV8+ZBZ5Vc1FZiiQJ+UvdM
Kbjj6hWbV2ud5ym1bPad/v60yLSMoo1Wq4QongDcNXTveDTtInWzY0KoqgmXEYrh
GSTuc0ELGyStoLq+03i4yxfxOjUXbd+GoWU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org