Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa
File:                     a9ccb72e-2783-3fd9-8638-95d8d918072b.roa (raw, json)
Hash identifier:          oJABRWSiG+5oLIqxQrc+fMJ7awugmv2vQYzwnJJtrwU=
Subject key identifier:   0F:60:92:6E:38:D3:99:5F:7B:81:9F:1F:28:F4:5B:FD:ED:FA:14:97
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858459A63436FDDF2DB80E3A84C00
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     400544
IP address blocks:        2607:76c0:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:43:6f:dd:f2:db:80:e3:a8:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=8f779e74-5621-4d28-bee9-b273a180eefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2b:d9:b1:c9:e2:5c:f5:80:ba:10:31:9f:37:
                    8d:af:cd:29:9b:9e:66:3c:12:2e:43:6c:76:87:87:
                    83:43:e1:d5:5e:dc:79:fd:ca:b8:eb:5f:01:a4:72:
                    ad:07:95:16:c0:f3:f3:c9:58:e8:24:68:11:f0:93:
                    8a:6a:e5:1a:86:b0:68:0f:69:05:24:e1:a4:98:3c:
                    88:87:71:02:73:80:12:14:1c:6c:98:02:24:ee:8a:
                    a7:5f:40:f2:90:40:10:9a:1f:48:34:33:32:69:8a:
                    12:21:c0:a4:6a:6a:c4:4c:8e:5a:ec:30:5b:6a:9d:
                    eb:d6:60:dc:a5:89:ea:a7:b9:03:18:87:33:de:97:
                    21:28:00:0e:48:c5:97:16:a8:7a:87:39:ea:33:d0:
                    39:e9:a7:8b:84:50:7f:81:10:7d:b3:47:86:15:f6:
                    fc:83:89:aa:94:f1:45:c5:a7:00:73:48:e2:ec:68:
                    7e:70:23:3d:8e:12:1f:29:e3:1a:87:42:0e:4b:57:
                    c5:c0:01:c0:ef:b8:40:0c:96:3e:18:ab:56:45:e4:
                    43:3b:93:27:66:8d:88:f5:b2:a4:96:36:c2:51:f4:
                    30:d6:6e:8a:83:8f:be:1b:87:a3:be:ad:d3:a5:95:
                    92:1b:86:21:45:0d:32:04:8a:78:f1:42:84:52:6d:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:92:6E:38:D3:99:5F:7B:81:9F:1F:28:F4:5B:FD:ED:FA:14:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fd:7e:49:2e:73:39:49:d6:37:41:29:9e:25:f5:b7:b8:69:
         c0:d0:e2:ca:2f:b7:fe:bb:6f:25:d6:f6:38:b3:ab:7a:98:5d:
         38:d0:60:aa:d2:b5:c9:6b:70:ea:1c:0d:98:b4:fe:e6:72:85:
         3e:04:6c:e9:5c:c1:df:0d:82:93:16:63:70:cf:6a:0a:fc:6f:
         8f:3f:f9:9c:6a:85:48:c3:50:0e:62:e0:77:17:e8:00:f0:76:
         e8:a2:c8:bb:8c:56:83:67:8a:c5:32:31:e9:34:1f:df:91:7d:
         70:38:e0:8f:e6:04:ed:c0:ab:5a:7c:d3:c0:3a:bd:b1:c5:a5:
         ee:ba:c2:80:49:ea:f9:b3:19:30:ac:1a:a1:7e:17:f4:11:30:
         aa:39:aa:65:01:25:da:46:f0:d0:a1:d5:8e:73:07:68:4f:6c:
         e6:c5:cb:95:97:ea:ae:3f:72:66:9e:9e:1e:bb:7e:35:43:5c:
         35:13:c6:99:bf:86:41:fb:2f:bc:1f:dc:3d:22:58:0e:27:06:
         38:1c:ff:13:c3:61:ad:fc:b1:36:cd:70:72:c1:0e:a7:60:70:
         e2:b7:ae:3a:cb:e2:d6:5c:3f:89:88:0e:42:7f:60:fe:f2:35:
         2b:3e:75:4f:ea:cb:04:54:46:5a:b7:c3:b9:e6:a2:de:e5:01:
         12:fc:10:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWaY0Nv3fLbgOOoTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5
YzgyMB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk
OGY3NzllNzQtNTYyMS00ZDI4LWJlZTktYjI3M2ExODBlZWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiivZscniXPWAuhAxnzeNr80pm55mPBIuQ2x2
h4eDQ+HVXtx5/cq4618BpHKtB5UWwPPzyVjoJGgR8JOKauUahrBoD2kFJOGkmDyI
h3ECc4ASFBxsmAIk7oqnX0DykEAQmh9INDMyaYoSIcCkamrETI5a7DBbap3r1mDc
pYnqp7kDGIcz3pchKAAOSMWXFqh6hznqM9A56aeLhFB/gRB9s0eGFfb8g4mqlPFF
xacAc0ji7Gh+cCM9jhIfKeMah0IOS1fFwAHA77hADJY+GKtWReRDO5MnZo2I9bKk
ljbCUfQw1m6Kg4++G4ejvq3TpZWSG4YhRQ0yBIp48UKEUm2kFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA9gkm4405lfe4GfHyj0W/3t+hSXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFi
YWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvYTljY2I3MmUtMjc4My0z
ZmQ5LTg2MzgtOTVkOGQ5MTgwNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgxYmFjZDgtZjdkOS00N2Q3LWFh
MjQtNTM5MTA0OWY5YzgyL2Y4MWJhY2Q4LWY3ZDktNDdkNy1hYTI0LTUzOTEwNDlm
OWM4Mi5jcmwwHwYDVR0jBBgwFoAU7P3I67I287uW2sRk65LZqan3Ez0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01Mzkx
MDQ5ZjljODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgd2wAAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJv9fkkuczlJ1jdBKZ4l9be4acDQ4sovt/67byXW9jizq3qYXTjQ
YKrStclrcOocDZi0/uZyhT4EbOlcwd8NgpMWY3DPagr8b48/+ZxqhUjDUA5i4HcX
6ADwduiiyLuMVoNnisUyMek0H9+RfXA44I/mBO3Aq1p808A6vbHFpe66woBJ6vmz
GTCsGqF+F/QRMKo5qmUBJdpG8NCh1Y5zB2hPbObFy5WX6q4/cmaenh67fjVDXDUT
xpm/hkH7L7wf3D0iWA4nBjgc/xPDYa38sTbNcHLBDqdgcOK3rjrL4tZcP4mIDkJ/
YP7yNSs+dU/qywRURlq3w7nmot7lARL8ECg=
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:14:42 2024 by rpki-client on console-ams.rpki-client.org