Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
File:                     e843172a-871a-3a64-bad5-2099da6dcdfb.roa (raw, json)
Hash identifier:          Dpn2MNotbnt9WryGronSjMZry5uteLTZycICiaISIvM=
Subject key identifier:   14:0E:16:71:48:DC:83:FB:89:60:5B:4A:F3:28:C4:47:C8:4C:EA:CF
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858459A63432B9370CF2E8D868F80
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     400544
IP address blocks:        2607:76c0:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:43:2b:93:70:cf:2e:8d:86:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=64f4a44a-1ee1-4e35-abf2-060be30d665b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:75:b8:46:7d:e8:c5:07:b6:9a:2a:f9:6e:
                    7b:bd:41:73:16:6b:16:1a:1a:9f:fa:d8:4a:f0:fc:
                    5c:41:80:81:54:8e:b9:0b:bc:5d:d3:57:d8:6e:ca:
                    a9:2f:4f:c7:a7:22:04:e3:dc:45:a2:da:88:ce:a4:
                    42:bd:4f:83:7b:15:9f:aa:30:0e:4a:b0:1d:9e:d4:
                    3b:64:d3:8f:2e:01:80:a9:5a:bb:a5:ee:12:37:78:
                    87:1e:15:bc:ad:9b:da:8e:ed:66:a2:35:4e:1e:9e:
                    37:69:1a:40:ec:64:c1:58:8e:ae:72:99:c6:ba:54:
                    60:6e:21:76:96:d9:77:78:dd:e6:09:97:16:2a:cc:
                    73:59:cb:2e:95:12:93:07:74:be:d7:d6:95:2f:08:
                    94:8d:1f:73:93:f2:25:1f:ad:59:a8:c1:01:1b:0b:
                    64:fa:f3:9a:7c:cd:2d:e4:da:5c:4c:e7:e3:2a:76:
                    92:68:6d:30:46:01:8e:09:ed:64:7b:9b:4f:9c:6f:
                    f1:2a:4d:0c:a2:8c:6b:b2:84:88:58:dd:7e:18:54:
                    f7:07:d6:f3:2d:73:f5:7c:12:f6:ab:d6:20:a6:30:
                    17:1e:54:8a:c6:8c:7a:22:b1:8c:07:9e:fc:65:eb:
                    d4:dc:de:e2:38:ef:06:3b:f6:3a:4e:3d:34:36:d9:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0E:16:71:48:DC:83:FB:89:60:5B:4A:F3:28:C4:47:C8:4C:EA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:11:06:51:28:4d:14:5a:c8:4a:87:0a:d5:d6:d3:42:d0:
         c3:28:04:bb:3b:80:91:8f:50:b1:a4:11:37:05:11:36:d9:d1:
         23:f8:cd:7d:da:65:ed:de:58:a2:e2:0e:f2:62:6c:a1:5e:00:
         90:67:11:eb:d0:b9:b4:cb:7e:d9:6c:33:61:b2:13:f7:31:be:
         71:a2:6a:83:fd:26:8f:d1:1e:10:91:9d:8a:b1:db:9c:87:d1:
         44:4c:c4:6b:5c:d8:e1:ed:32:7b:1a:30:14:a8:a3:e1:65:5b:
         c8:7f:15:53:1b:95:c3:3a:4d:b9:bf:20:0c:8b:2d:80:e0:56:
         da:12:29:4d:13:a3:85:7f:b2:42:e9:28:56:70:63:81:a3:f1:
         cc:36:b5:22:85:36:c5:f0:54:25:0d:75:0e:2e:a8:e4:97:fb:
         26:cc:2b:ed:46:e6:e9:5f:c1:f2:24:0b:b1:a1:57:b0:79:38:
         6e:6c:0b:64:69:90:55:05:d0:05:74:86:61:20:ac:ac:35:71:
         6d:c0:eb:76:81:ea:42:62:67:d9:18:b5:10:60:b7:cd:0f:0f:
         b1:87:c3:42:09:70:dd:03:bd:1b:39:06:76:8d:ea:23:c7:0c:
         cd:73:e3:5e:0e:8d:ec:c2:78:45:2b:f5:82:21:62:b4:7e:a7:
         de:65:48:d6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWaY0Mrk3DPLo2Gj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5
YzgyMB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk
NjRmNGE0NGEtMWVlMS00ZTM1LWFiZjItMDYwYmUzMGQ2NjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxh1uEZ96MUHtpoq+W57vUFzFmsWGhqf+thK
8PxcQYCBVI65C7xd01fYbsqpL0/HpyIE49xFotqIzqRCvU+DexWfqjAOSrAdntQ7
ZNOPLgGAqVq7pe4SN3iHHhW8rZvaju1mojVOHp43aRpA7GTBWI6ucpnGulRgbiF2
ltl3eN3mCZcWKsxzWcsulRKTB3S+19aVLwiUjR9zk/IlH61ZqMEBGwtk+vOafM0t
5NpcTOfjKnaSaG0wRgGOCe1ke5tPnG/xKk0MooxrsoSIWN1+GFT3B9bzLXP1fBL2
q9YgpjAXHlSKxox6IrGMB578ZevU3N7iOO8GO/Y6Tj00NtlO1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBQOFnFI3IP7iWBbSvMoxEfITOrPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFi
YWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvZTg0MzE3MmEtODcxYS0z
YTY0LWJhZDUtMjA5OWRhNmRjZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgxYmFjZDgtZjdkOS00N2Q3LWFh
MjQtNTM5MTA0OWY5YzgyL2Y4MWJhY2Q4LWY3ZDktNDdkNy1hYTI0LTUzOTEwNDlm
OWM4Mi5jcmwwHwYDVR0jBBgwFoAU7P3I67I287uW2sRk65LZqan3Ez0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01Mzkx
MDQ5ZjljODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgd2wAAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACvsEQZRKE0UWshKhwrV1tNC0MMoBLs7gJGPULGkETcFETbZ0SP4
zX3aZe3eWKLiDvJibKFeAJBnEevQubTLftlsM2GyE/cxvnGiaoP9Jo/RHhCRnYqx
25yH0URMxGtc2OHtMnsaMBSoo+FlW8h/FVMblcM6Tbm/IAyLLYDgVtoSKU0To4V/
skLpKFZwY4Gj8cw2tSKFNsXwVCUNdQ4uqOSX+ybMK+1G5ulfwfIkC7GhV7B5OG5s
C2RpkFUF0AV0hmEgrKw1cW3A63aB6kJiZ9kYtRBgt80PD7GHw0IJcN0DvRs5BnaN
6iPHDM1z414OjezCeEUr9YIhYrR+p95lSNY=
-----END CERTIFICATE-----
Generated at Wed May 22 23:22:48 2024 by rpki-client on console-ams.rpki-client.org