Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
File:                     f3eb19d5-af1e-3d62-921a-950796610e1c.roa (raw, json)
Hash identifier:          nkhijiO3gDFiBocHolE/9IZNrv2wr/yAFeHjY7PcCF0=
Subject key identifier:   31:4A:71:2B:21:9A:C5:F0:FB:E3:CA:2F:74:01:8B:51:FA:30:21:B0
Certificate issuer:       /CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
Certificate serial:       010D0C9F43285847CA3F87A091F87691CF1D6E80
Authority key identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     393581
IP address blocks:        2620:1fe::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:87:a0:91:f8:76:91:cf:1d:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=a990b21f-c557-4d32-b69e-3a3c9e13353f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:ac:4f:ad:eb:7f:d5:49:8f:be:5d:3c:be:
                    ac:4a:42:0e:9c:56:34:40:f3:7f:0b:a5:8b:df:6b:
                    2b:35:f7:d0:d8:e1:12:7b:19:a4:23:35:f4:6f:be:
                    e1:ad:ad:3f:78:0f:51:0b:a7:9a:e0:fa:31:eb:f3:
                    f3:3a:b7:08:a0:8c:19:30:fe:1b:3c:bc:ad:3e:4f:
                    45:24:ee:93:91:38:0c:18:d0:c2:db:b7:3d:38:fa:
                    10:5a:c6:98:13:f4:05:d5:e4:13:c3:15:73:dc:5f:
                    df:04:d1:1b:de:92:82:d8:6f:84:c9:d4:6a:bf:17:
                    87:2c:2e:66:6f:92:33:16:4b:0b:f1:da:d7:9f:4f:
                    19:12:c9:2a:29:aa:fe:8f:f0:e6:76:1c:ee:10:47:
                    5d:78:60:58:96:81:3e:e9:76:6f:1b:b7:84:93:9f:
                    be:df:8d:46:56:34:c9:1a:bb:26:22:82:b1:7d:3c:
                    c8:9f:1b:15:cb:ff:8a:06:39:2a:ac:6f:1f:c9:22:
                    4d:0a:ba:98:c6:83:de:aa:b6:e6:37:3c:da:65:2f:
                    a3:45:88:a3:02:69:de:b7:72:9c:68:df:10:8e:46:
                    d1:1b:35:f4:28:46:4b:d5:58:bd:0f:0e:ac:86:d8:
                    30:bb:56:10:15:0d:35:78:07:70:73:51:06:23:b0:
                    88:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4A:71:2B:21:9A:C5:F0:FB:E3:CA:2F:74:01:8B:51:FA:30:21:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl

            X509v3 Authority Key Identifier:
                keyid:CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1fe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:28:2a:50:c1:5e:7c:d1:36:16:52:6a:25:57:3f:68:df:92:
         c3:9a:9c:11:62:99:b1:3b:d8:5f:55:5b:88:be:33:72:28:29:
         f6:6c:05:02:22:49:34:e1:d9:2a:9a:9c:cf:48:99:e0:55:03:
         de:02:98:4c:79:5a:3e:4b:bd:1a:af:cc:cd:64:d8:dd:da:5b:
         ed:ec:04:d1:a4:42:fc:6f:74:1b:96:aa:0f:65:a1:71:ae:f2:
         be:82:1e:50:fe:04:d8:03:da:27:9d:f8:63:28:36:6e:af:11:
         28:e2:ec:96:c9:56:06:fa:b9:02:36:a2:71:bc:40:22:b0:e1:
         97:65:dd:f8:b8:59:ea:11:5e:9a:df:c4:fb:0a:26:16:fc:60:
         01:d7:47:3e:61:c2:d0:15:36:d5:6c:a1:10:b2:00:ce:83:3c:
         c4:72:33:a7:2e:67:3c:d6:50:75:35:33:ed:9a:e3:4e:6e:4c:
         1f:98:59:5b:d2:26:9a:cb:35:dd:44:dd:f8:d3:34:12:69:8e:
         e0:4b:c4:c0:6a:ea:84:e1:c8:ae:45:03:e3:41:5c:92:23:bd:
         31:e6:e9:16:75:cc:25:79:28:80:a5:5c:fe:95:ec:b4:b6:f4:
         68:96:58:ec:b0:89:09:14:7b:3d:d8:ec:d0:20:e4:4f:58:dc:
         9f:11:a1:c3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfKP4egkfh2kc8dboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI2NmZjNWUtOGEwNS00ODg1LThlMTgtMjMzMGE4M2Zj
NWY2MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
YTk5MGIyMWYtYzU1Ny00ZDMyLWI2OWUtM2EzYzllMTMzNTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl2sT63rf9VJj75dPL6sSkIOnFY0QPN/C6WL
32srNffQ2OESexmkIzX0b77hra0/eA9RC6ea4Pox6/PzOrcIoIwZMP4bPLytPk9F
JO6TkTgMGNDC27c9OPoQWsaYE/QF1eQTwxVz3F/fBNEb3pKC2G+EydRqvxeHLC5m
b5IzFksL8drXn08ZEskqKar+j/DmdhzuEEddeGBYloE+6XZvG7eEk5++341GVjTJ
GrsmIoKxfTzInxsVy/+KBjkqrG8fySJNCrqYxoPeqrbmNzzaZS+jRYijAmnet3Kc
aN8QjkbRGzX0KEZL1Vi9Dw6shtgwu1YQFQ01eAdwc1EGI7CIXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDFKcSshmsXw++PKL3QBi1H6MCGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjY2
ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMwYTgzZmM1ZjYvZjNlYjE5ZDUtYWYxZS0z
ZDYyLTkyMWEtOTUwNzk2NjEwZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI2NmZjNWUtOGEwNS00ODg1LThl
MTgtMjMzMGE4M2ZjNWY2L2MyNjZmYzVlLThhMDUtNDg4NS04ZTE4LTIzMzBhODNm
YzVmNi5jcmwwHwYDVR0jBBgwFoAUzRYZ3WaZijnk/E6xJCuix2NyByowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jMjY2ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMw
YTgzZmM1ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiAB/gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATygqUMFefNE2FlJqJVc/aN+Sw5qcEWKZsTvYX1VbiL4zcigp9mwF
AiJJNOHZKpqcz0iZ4FUD3gKYTHlaPku9Gq/MzWTY3dpb7ewE0aRC/G90G5aqD2Wh
ca7yvoIeUP4E2APaJ534Yyg2bq8RKOLslslWBvq5AjaicbxAIrDhl2Xd+LhZ6hFe
mt/E+womFvxgAddHPmHC0BU21WyhELIAzoM8xHIzpy5nPNZQdTUz7ZrjTm5MH5hZ
W9Immss13UTd+NM0EmmO4EvEwGrqhOHIrkUD40FckiO9MebpFnXMJXkogKVc/pXs
tLb0aJZY7LCJCRR7Pdjs0CDkT1jcnxGhww==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:13 2024 by rpki-client on console-fra.rpki-client.org