Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa
File:                     d521baba-5d18-3439-8cfc-c5189dded826.roa (raw, json)
Hash identifier:          L15HIeK3VPCUCwbLCRAj9UXf/E6Brdaav0y52ID9i5U=
Subject key identifier:   4C:9F:88:27:AB:C0:DF:FD:1C:80:4A:89:BE:CA:44:94:E9:E8:70:4F
Certificate issuer:       /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Certificate serial:       010D0C9F4328584749B604A8EF8109BB8CB61298
Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa
Signing time:             Sat 21 Sep 2024 13:00:41 +0000
ROA not before:           Sat 21 Sep 2024 13:00:41 +0000
ROA not after:            Fri 20 Dec 2024 14:00:41 +0000
asID:                     11472
IP address blocks:        2605:8480::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:49:b6:04:a8:ef:81:09:bb:8c:b6:12:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
        Validity
            Not Before: Sep 21 13:00:41 2024 GMT
            Not After : Dec 20 14:00:41 2024 GMT
        Subject: CN=5f336ded-d40c-471e-8614-44f86bdb8adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:34:ef:1b:2a:23:87:45:d4:92:c2:da:fd:
                    b7:75:07:a4:7b:a7:00:ac:f2:28:da:78:32:10:9b:
                    dd:a8:92:9a:3e:f4:15:06:f9:ee:e2:1b:c7:1b:0f:
                    7f:3c:3a:c1:a3:c7:63:a8:ba:9f:6c:13:b5:5c:70:
                    f9:c3:d6:a6:0b:28:92:f5:5c:80:c9:c4:80:e5:5b:
                    2d:ed:16:f9:3e:e2:c5:f9:14:a5:64:21:05:51:5c:
                    a6:c0:80:66:f1:91:20:31:82:f0:06:ff:e4:12:a7:
                    02:32:0e:71:3e:67:d1:2e:a0:82:f0:c7:ec:40:8c:
                    cd:ac:07:4f:40:ef:f6:00:5c:70:f2:5c:b0:b6:89:
                    b5:60:2d:b6:57:89:26:51:1e:e9:3e:b0:31:ec:20:
                    04:98:3e:ee:69:44:8f:ac:fc:d1:93:1e:2e:7c:09:
                    6b:62:8d:4a:3d:6c:0d:56:a9:2d:05:c6:07:f6:5a:
                    b1:16:9d:26:9f:41:03:10:a7:a8:c8:45:c1:24:a5:
                    97:90:43:5c:ee:7c:c4:5f:ba:24:c7:b0:c6:d7:a6:
                    b8:a8:ec:df:39:4c:91:f0:a9:7d:9c:9e:ec:89:8d:
                    5a:1c:49:ad:56:5f:eb:37:b9:b9:c0:13:18:0a:6c:
                    40:9c:44:e8:5d:65:01:8e:65:67:1a:ba:3d:f3:d8:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:88:27:AB:C0:DF:FD:1C:80:4A:89:BE:CA:44:94:E9:E8:70:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl

            X509v3 Authority Key Identifier:
                keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d1:da:9a:23:16:68:0d:58:32:c9:80:6c:7e:93:21:75:f1:
         2e:c5:99:cb:11:84:b0:2e:67:95:c1:d4:f3:41:c2:7d:d1:fc:
         11:33:b3:6d:ee:b6:26:66:cb:1c:17:54:6a:1b:b3:9c:5a:45:
         f8:69:9f:d2:b9:02:76:96:f2:c5:51:5c:df:bc:f6:13:33:b2:
         32:58:e6:a8:59:40:a7:79:ca:6c:d6:0a:ca:15:e3:78:c5:1e:
         b1:ac:29:8c:de:f4:55:ca:c4:e0:52:06:38:e9:b3:45:94:02:
         57:f5:fe:f9:48:01:d9:5e:a6:5e:62:86:de:b9:c2:bf:99:aa:
         e9:55:1f:dd:7b:be:bd:bb:32:b2:04:47:0d:5e:72:63:dc:50:
         62:9e:da:69:67:71:3c:9e:3c:43:55:92:33:ad:15:72:ad:ce:
         6c:50:21:9d:46:b0:d1:02:80:3a:ea:b8:bd:81:a3:8d:23:f1:
         89:8a:0f:e2:b7:2b:c4:17:c6:a4:df:1b:0b:c8:b6:87:14:02:
         10:92:b0:61:15:58:76:68:77:81:2e:13:b5:69:24:09:12:70:
         13:ba:a4:f2:97:fd:f5:89:c3:c2:4c:4f:fa:4f:d7:16:e0:07:
         ad:07:4d:f6:e6:19:bd:f7:f6:15:36:22:a5:c8:3c:70:39:20:
         a2:bb:1f:72
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdJtgSo74EJu4y2EpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy
NTNiMB4XDTI0MDkyMTEzMDA0MVoXDTI0MTIyMDE0MDA0MVowLzEtMCsGA1UEAxMk
NWYzMzZkZWQtZDQwYy00NzFlLTg2MTQtNDRmODZiZGI4YWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Q07xsqI4dF1JLC2v23dQeke6cArPIo2ngy
EJvdqJKaPvQVBvnu4hvHGw9/PDrBo8djqLqfbBO1XHD5w9amCyiS9VyAycSA5Vst
7Rb5PuLF+RSlZCEFUVymwIBm8ZEgMYLwBv/kEqcCMg5xPmfRLqCC8MfsQIzNrAdP
QO/2AFxw8lywtom1YC22V4kmUR7pPrAx7CAEmD7uaUSPrPzRkx4ufAlrYo1KPWwN
VqktBcYH9lqxFp0mn0EDEKeoyEXBJKWXkENc7nzEX7okx7DG16a4qOzfOUyR8Kl9
nJ7siY1aHEmtVl/rN7m5wBMYCmxAnEToXWUBjmVnGro989gImwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEyfiCerwN/9HIBKib7KRJTp6HBPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0
YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvZDUyMWJhYmEtNWQxOC0z
NDM5LThjZmMtYzUxODlkZGVkODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1
YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx
MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1
YzU3MTI1M2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWEgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCc0dqaIxZoDVgyyYBsfpMhdfEuxZnLEYSwLmeVwdTzQcJ90fwRM7Nt
7rYmZsscF1RqG7OcWkX4aZ/SuQJ2lvLFUVzfvPYTM7IyWOaoWUCnecps1grKFeN4
xR6xrCmM3vRVysTgUgY46bNFlAJX9f75SAHZXqZeYobeucK/marpVR/de769uzKy
BEcNXnJj3FBintppZ3E8njxDVZIzrRVyrc5sUCGdRrDRAoA66ri9gaONI/GJig/i
tyvEF8ak3xsLyLaHFAIQkrBhFVh2aHeBLhO1aSQJEnATuqTyl/31icPCTE/6T9cW
4AetB0325hm99/YVNiKlyDxwOSCiux9y
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:33 2024 by rpki-client on console-fra.rpki-client.org