Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
File:                     e843172a-871a-3a64-bad5-2099da6dcdfb.roa (raw, json)
Hash identifier:          rPACqoQZHf+IP24C07lXg9sjvdEXw0MPjCLdV55Xrbo=
Subject key identifier:   91:28:7E:53:F0:F3:D2:AC:47:1F:B5:20:2C:F1:FE:16:6F:F4:B8:80
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858475A7638F1360E1F192EFFF380
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     400544
IP address blocks:        2607:76c0:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:38:f1:36:0e:1f:19:2e:ff:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=1587c83c-b753-4ddb-a4d8-40e7def94787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:55:d1:dc:42:6b:02:5d:1d:f0:c2:c0:62:5c:
                    75:71:3e:46:0c:29:f2:de:d5:e8:b3:05:54:bf:98:
                    84:46:f1:89:4b:8d:17:f2:7e:26:d5:c7:a5:d9:93:
                    74:08:c7:53:36:f5:fa:e2:d8:ab:e4:52:ce:cb:75:
                    07:0f:29:d6:0a:e7:e7:0c:7c:9a:48:e2:47:5e:c8:
                    2c:ad:2f:7d:6a:8c:d9:4d:1b:28:c8:25:7a:ea:35:
                    62:2e:8c:b6:a5:7c:41:c7:e8:df:9c:41:3f:5f:d4:
                    66:d1:5f:91:08:80:54:09:b7:93:2a:2e:5b:41:46:
                    73:21:bf:17:ee:a2:2a:67:6b:5a:16:d0:08:03:15:
                    7e:a1:11:b6:b5:2f:ab:1c:4d:d9:d8:ce:2f:aa:55:
                    37:78:f9:b2:94:7a:9e:e5:94:df:b9:45:e2:89:fd:
                    9c:a4:58:64:3c:52:7c:e7:14:1e:05:3a:c7:d8:24:
                    37:c7:e2:c3:ff:9c:92:66:23:cc:81:98:ec:e4:15:
                    87:06:78:15:dd:da:20:51:58:72:de:ef:d6:10:35:
                    55:47:ad:78:7a:7c:ea:82:05:3f:82:3d:73:21:2f:
                    d8:5c:2c:1c:b8:f5:2b:42:a7:4d:52:49:2f:c1:18:
                    e1:83:0c:01:e3:49:36:f5:5a:53:55:10:ec:20:f8:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:28:7E:53:F0:F3:D2:AC:47:1F:B5:20:2C:F1:FE:16:6F:F4:B8:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:c5:4a:7f:d2:3b:ca:8a:3c:1c:36:51:77:3d:66:6e:e2:
         3f:8b:e6:00:e2:dc:e7:fb:8c:51:c1:b7:fb:76:6e:98:d3:99:
         0b:57:bc:bc:dc:4f:20:49:b9:2d:30:a1:56:a0:34:91:9b:a9:
         a0:92:ed:04:20:50:ef:7b:27:7a:6a:9c:db:49:58:34:0d:48:
         17:96:6f:3d:2d:36:39:84:d0:d9:4a:5c:6c:c1:27:4b:48:37:
         0a:2d:c4:07:3c:5b:59:22:51:a3:70:7f:12:44:45:42:66:29:
         2a:9f:90:29:a2:79:63:82:77:1b:40:c9:35:a3:e4:17:ac:0c:
         78:04:d7:48:e8:80:23:e6:04:17:ae:03:55:ff:cc:8b:e6:dd:
         41:15:f5:da:c8:0d:36:8e:98:39:cf:3f:f7:25:16:40:c6:ef:
         db:ed:9c:6c:1f:af:44:98:64:3c:55:f5:ae:c6:1c:18:6d:99:
         ce:8f:04:0d:ab:71:33:8f:e5:82:ac:6f:16:fa:a4:18:12:50:
         cf:73:62:47:d0:c1:0f:37:e3:f3:64:a0:44:7f:56:4b:f1:ce:
         b8:b0:b2:7d:ae:d6:b4:1e:3f:d0:32:aa:38:40:57:d5:ff:9c:
         4b:b8:aa:d1:c3:11:d8:9d:e3:c1:04:cb:40:94:8d:9f:ac:ed:
         fc:2c:b7:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdadjjxNg4fGS7/84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5
YzgyMB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk
MTU4N2M4M2MtYjc1My00ZGRiLWE0ZDgtNDBlN2RlZjk0Nzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlXR3EJrAl0d8MLAYlx1cT5GDCny3tXoswVU
v5iERvGJS40X8n4m1cel2ZN0CMdTNvX64tir5FLOy3UHDynWCufnDHyaSOJHXsgs
rS99aozZTRsoyCV66jViLoy2pXxBx+jfnEE/X9Rm0V+RCIBUCbeTKi5bQUZzIb8X
7qIqZ2taFtAIAxV+oRG2tS+rHE3Z2M4vqlU3ePmylHqe5ZTfuUXiif2cpFhkPFJ8
5xQeBTrH2CQ3x+LD/5ySZiPMgZjs5BWHBngV3dogUVhy3u/WEDVVR614enzqggU/
gj1zIS/YXCwcuPUrQqdNUkkvwRjhgwwB40k29VpTVRDsIPj7nQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJEoflPw89KsRx+1ICzx/hZv9LiAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFi
YWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvZTg0MzE3MmEtODcxYS0z
YTY0LWJhZDUtMjA5OWRhNmRjZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgxYmFjZDgtZjdkOS00N2Q3LWFh
MjQtNTM5MTA0OWY5YzgyL2Y4MWJhY2Q4LWY3ZDktNDdkNy1hYTI0LTUzOTEwNDlm
OWM4Mi5jcmwwHwYDVR0jBBgwFoAU7P3I67I287uW2sRk65LZqan3Ez0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01Mzkx
MDQ5ZjljODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgd2wAAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKBMxUp/0jvKijwcNlF3PWZu4j+L5gDi3Of7jFHBt/t2bpjTmQtX
vLzcTyBJuS0woVagNJGbqaCS7QQgUO97J3pqnNtJWDQNSBeWbz0tNjmE0NlKXGzB
J0tINwotxAc8W1kiUaNwfxJERUJmKSqfkCmieWOCdxtAyTWj5BesDHgE10jogCPm
BBeuA1X/zIvm3UEV9drIDTaOmDnPP/clFkDG79vtnGwfr0SYZDxV9a7GHBhtmc6P
BA2rcTOP5YKsbxb6pBgSUM9zYkfQwQ834/NkoER/Vkvxzriwsn2u1rQeP9AyqjhA
V9X/nEu4qtHDEdid48EEy0CUjZ+s7fwst3E=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:23 2024 by rpki-client on console-fra.rpki-client.org