Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e46c6c76-58d3-3dfc-85b0-47308468a90d.roa
File:                     e46c6c76-58d3-3dfc-85b0-47308468a90d.roa (raw, json)
Hash identifier:          HhhaG0KtAw9nI+hXo3X+NDvE2CDregrbzFBuABgU3IQ=
Subject key identifier:   C4:14:59:3C:76:2E:C6:A5:0C:28:3C:0E:46:01:06:78:5E:75:7A:29
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C271665A3D2BC6F1DF800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e46c6c76-58d3-3dfc-85b0-47308468a90d.roa
Signing time:             Tue 24 Sep 2024 16:26:23 +0000
ROA not before:           Tue 24 Sep 2024 16:26:23 +0000
ROA not after:            Mon 23 Dec 2024 17:26:23 +0000
asID:                     397216
IP address blocks:        2001:503:e239::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:27:16:65:a3:d2:bc:6f:1d:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:23 2024 GMT
            Not After : Dec 23 17:26:23 2024 GMT
        Subject: CN=c3860183-e5e5-4371-afe2-09cb965cc3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:5b:72:3a:35:63:95:a9:e8:d6:16:0f:f9:
                    e9:27:7c:00:88:da:2b:96:0b:8c:e2:be:38:f2:12:
                    08:f2:ea:9b:b7:3e:f0:28:8a:fb:b4:22:64:62:41:
                    08:f1:6a:00:6b:68:96:d3:0a:60:af:80:7b:62:31:
                    3c:e1:b7:33:05:6d:49:e7:bb:86:39:ba:9d:72:0a:
                    39:af:49:6c:c7:7c:de:f5:e9:d2:f0:e8:09:09:9f:
                    cd:68:fa:4f:be:51:99:b2:a3:e3:df:56:5c:13:51:
                    7f:de:8f:6e:1e:75:f2:d1:a1:de:d8:d0:af:e6:c5:
                    c0:b7:a9:b1:3d:64:1c:08:74:7b:71:62:37:81:76:
                    aa:da:b1:0b:39:aa:8a:b6:25:01:29:c9:5f:c0:b3:
                    22:26:fc:5c:91:0c:1c:7d:f8:52:ba:d4:67:d9:d8:
                    07:c9:a9:2a:9b:01:04:65:e9:97:27:d2:8e:27:e5:
                    7e:9d:c9:29:1c:fe:bd:67:13:d1:61:f2:ff:fa:77:
                    d2:1e:95:62:92:01:ba:88:9c:b1:57:2c:0e:22:17:
                    0c:3f:c0:25:f0:d6:e7:b5:64:cb:f7:d2:41:15:b6:
                    89:5e:de:f8:0c:bc:24:56:a6:41:73:06:7f:04:c3:
                    7d:c7:3f:95:ed:0a:26:93:b4:fe:05:a4:e2:f9:50:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:59:3C:76:2E:C6:A5:0C:28:3C:0E:46:01:06:78:5E:75:7A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e46c6c76-58d3-3dfc-85b0-47308468a90d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a1:97:b9:40:73:d5:82:eb:a0:05:a9:ca:ab:e3:06:b4:0b:
         77:56:49:bc:1b:8b:30:6c:e2:1e:35:9b:23:39:ef:93:eb:59:
         08:f6:e7:da:4d:70:d1:18:aa:fa:7d:26:08:bf:b2:4c:de:79:
         2f:b2:4b:31:e4:22:ec:c2:fb:0a:ab:02:f9:ed:a4:8a:59:73:
         7d:49:ba:1f:6a:9e:9b:9a:b0:e5:03:e5:5e:4e:bc:c0:21:68:
         32:bc:7f:c1:bc:4d:53:9f:de:9a:2e:23:72:72:63:cd:4f:11:
         1c:36:72:8f:48:32:10:d7:4b:62:01:9f:e1:87:4b:a3:f9:54:
         41:46:7a:98:76:bd:57:9c:26:1b:95:3e:f4:a7:c0:fd:9d:3e:
         1f:03:a6:9b:36:af:d6:15:9a:05:e3:d9:d5:f6:8c:c8:40:fe:
         ce:24:a3:04:b9:20:4d:16:b4:72:f3:88:7a:5a:0c:2d:85:00:
         9c:63:3c:91:79:48:4a:78:4c:b6:9d:2d:ba:fe:d8:f0:b1:51:
         dd:35:67:5b:6d:65:b5:a3:8b:2a:37:ca:a9:06:de:14:d6:09:
         a1:02:c8:bc:7d:cc:ab:bb:d8:07:9b:ff:ba:ec:a7:c6:f2:28:
         03:ff:cc:cd:e8:64:61:35:39:71:98:76:fd:3c:f8:f4:09:9d:
         bf:a2:49:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdSfCcWZaPSvG8d+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkyNDE2MjYyM1oXDTI0MTIyMzE3MjYyM1owLzEtMCsGA1UEAxMk
YzM4NjAxODMtZTVlNS00MzcxLWFmZTItMDljYjk2NWNjM2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpRbcjo1Y5Wp6NYWD/npJ3wAiNorlguM4r44
8hII8uqbtz7wKIr7tCJkYkEI8WoAa2iW0wpgr4B7YjE84bczBW1J57uGObqdcgo5
r0lsx3ze9enS8OgJCZ/NaPpPvlGZsqPj31ZcE1F/3o9uHnXy0aHe2NCv5sXAt6mx
PWQcCHR7cWI3gXaq2rELOaqKtiUBKclfwLMiJvxckQwcffhSutRn2dgHyakqmwEE
ZemXJ9KOJ+V+nckpHP69ZxPRYfL/+nfSHpVikgG6iJyxVywOIhcMP8Al8NbntWTL
99JBFbaJXt74DLwkVqZBcwZ/BMN9xz+V7Qomk7T+BaTi+VDn/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMQUWTx2LsalDCg8DkYBBnhedXopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTQ2YzZjNzYtNThkMy0z
ZGZjLTg1YjAtNDczMDg0NjhhOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHOhl7lAc9WC66AFqcqr4wa0C3dWSbwbizBs4h41myM575PrWQj2
59pNcNEYqvp9Jgi/skzeeS+ySzHkIuzC+wqrAvntpIpZc31Juh9qnpuasOUD5V5O
vMAhaDK8f8G8TVOf3pouI3JyY81PERw2co9IMhDXS2IBn+GHS6P5VEFGeph2vVec
JhuVPvSnwP2dPh8Dpps2r9YVmgXj2dX2jMhA/s4kowS5IE0WtHLziHpaDC2FAJxj
PJF5SEp4TLadLbr+2PCxUd01Z1ttZbWjiyo3yqkG3hTWCaECyLx9zKu72Aeb/7rs
p8byKAP/zM3oZGE1OXGYdv08+PQJnb+iSTg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:57 2024 by rpki-client on console-ams.rpki-client.org