Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00868b89-d619-3939-b9b8-d34263a7280a.roa
File:                     00868b89-d619-3939-b9b8-d34263a7280a.roa (raw, json)
Hash identifier:          PAhzsa1rcIrWVuiJrACuYfaHY/nsKOnF/PaPA4jl0YQ=
Subject key identifier:   62:11:C8:34:21:0C:F9:C7:79:EF:AE:8C:00:05:E0:D1:76:1A:02:F2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584765FF4BDD21D2E42325FE4600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00868b89-d619-3939-b9b8-d34263a7280a.roa
Signing time:             Tue 01 Oct 2024 16:10:59 +0000
ROA not before:           Tue 01 Oct 2024 16:10:59 +0000
ROA not after:            Mon 30 Dec 2024 17:10:59 +0000
asID:                     399159
IP address blocks:        2610:a1:3200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:ff:4b:dd:21:d2:e4:23:25:fe:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  1 16:10:59 2024 GMT
            Not After : Dec 30 17:10:59 2024 GMT
        Subject: CN=367bff48-caff-4c66-a064-e7f6be73a6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:0d:ad:da:d6:e0:ad:25:76:d2:b5:26:b5:
                    9f:f0:43:2a:cc:01:de:f6:31:8b:99:fc:3d:ee:66:
                    3e:69:70:4e:98:92:2e:31:78:0f:49:63:6c:49:e5:
                    ce:dd:53:33:9e:c6:26:1a:2f:55:40:05:79:0a:e5:
                    c2:d5:82:90:8a:c6:28:18:64:47:c2:a7:92:b9:ec:
                    66:c7:17:f0:84:ab:1e:d2:4c:66:e7:e1:49:f6:e8:
                    44:88:18:e5:01:0b:9b:6b:d3:cb:4a:2f:3a:83:c0:
                    65:df:4c:fc:8e:91:ae:d6:e7:58:fa:f4:f8:2f:3a:
                    0d:4d:c8:09:81:56:d8:b2:c1:12:15:43:f8:ce:f9:
                    63:b1:0e:d5:ad:c3:47:7c:b6:08:46:2d:6c:3e:27:
                    d7:ae:78:25:57:0d:36:5f:aa:cf:86:fa:94:d4:4e:
                    5a:ab:8b:b5:49:79:24:a6:b2:6c:a7:4e:4b:3c:ab:
                    3f:43:e6:c5:54:6e:e9:0f:e5:cf:93:25:22:80:7d:
                    71:cd:d4:e1:83:d5:83:1c:ff:b6:45:5f:2e:b9:90:
                    89:78:ae:39:e4:ec:3f:b3:00:fb:2c:9f:14:a0:36:
                    19:b7:5d:56:15:62:e0:18:2d:38:ea:ae:55:4b:50:
                    5b:18:4b:78:f8:0c:d7:94:82:5f:6c:24:54:d9:39:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:11:C8:34:21:0C:F9:C7:79:EF:AE:8C:00:05:E0:D1:76:1A:02:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00868b89-d619-3939-b9b8-d34263a7280a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:35:c9:8d:92:ed:cd:5a:c9:c2:dc:72:1c:15:e8:35:d7:
         38:5b:91:f3:f3:55:82:26:c4:97:f6:9f:68:b2:0e:9d:ae:32:
         6c:61:c1:35:44:4a:21:c7:17:c7:d5:8d:f0:e8:ab:cd:c1:46:
         14:6f:ae:61:12:ec:54:14:56:5a:f3:91:01:d6:11:38:75:a9:
         94:a0:eb:c5:a3:f8:d3:f6:2b:d4:8b:cc:e6:38:41:65:87:1b:
         9a:fa:07:b9:99:ec:aa:65:ad:65:79:6a:1d:4a:f2:ba:3d:25:
         3e:5d:80:a9:cb:47:2a:25:29:42:03:84:e5:e9:7d:35:49:af:
         de:f4:b6:1f:44:31:b5:cb:85:5d:51:a4:78:2d:59:f5:09:c4:
         72:dc:83:4d:f3:dc:98:18:ec:a5:8b:64:ac:3c:ae:fa:31:6c:
         6c:df:10:04:8c:d4:90:ec:0f:8f:9e:03:7b:c8:1c:07:9b:3c:
         81:44:f6:4b:21:70:5b:75:29:18:93:d9:c3:4a:2b:56:69:64:
         40:8f:e0:ef:08:2b:ca:59:b5:24:e5:05:a2:5f:5a:e4:81:c8:
         e2:a1:e8:d0:ee:af:7d:94:35:c6:5d:a7:25:f5:fa:a1:c5:a9:
         f0:df:32:6a:cc:c1:36:bb:20:74:5c:6a:32:2e:c9:62:79:11:
         5c:16:0e:c6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdl/0vdIdLkIyX+RgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTAwMTE2MTA1OVoXDTI0MTIzMDE3MTA1OVowLzEtMCsGA1UEAxMk
MzY3YmZmNDgtY2FmZi00YzY2LWEwNjQtZTdmNmJlNzNhNmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg8NrdrW4K0ldtK1JrWf8EMqzAHe9jGLmfw9
7mY+aXBOmJIuMXgPSWNsSeXO3VMznsYmGi9VQAV5CuXC1YKQisYoGGRHwqeSuexm
xxfwhKse0kxm5+FJ9uhEiBjlAQuba9PLSi86g8Bl30z8jpGu1udY+vT4LzoNTcgJ
gVbYssESFUP4zvljsQ7VrcNHfLYIRi1sPifXrnglVw02X6rPhvqU1E5aq4u1SXkk
prJsp05LPKs/Q+bFVG7pD+XPkyUigH1xzdThg9WDHP+2RV8uuZCJeK455Ow/swD7
LJ8UoDYZt11WFWLgGC046q5VS1BbGEt4+AzXlIJfbCRU2Tkl4QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGIRyDQhDPnHee+ujAAF4NF2GgLyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDA4NjhiODktZDYxOS0z
OTM5LWI5YjgtZDM0MjYzYTcyODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASoY1yY2S7c1aycLcchwV6DXXOFuR8/NVgibEl/afaLIOna4ybGHB
NURKIccXx9WN8OirzcFGFG+uYRLsVBRWWvORAdYROHWplKDrxaP40/Yr1IvM5jhB
ZYcbmvoHuZnsqmWtZXlqHUryuj0lPl2AqctHKiUpQgOE5el9NUmv3vS2H0QxtcuF
XVGkeC1Z9QnEctyDTfPcmBjspYtkrDyu+jFsbN8QBIzUkOwPj54De8gcB5s8gUT2
SyFwW3UpGJPZw0orVmlkQI/g7wgrylm1JOUFol9a5IHI4qHo0O6vfZQ1xl2nJfX6
ocWp8N8yaszBNrsgdFxqMi7JYnkRXBYOxg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:55 2024 by rpki-client on console-fra.rpki-client.org