Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa
File:                     aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa (raw, json)
Hash identifier:          Vd63v+vZW/SojG2ptnmG2CjpMXHdyjdkeru1VvpITcM=
Subject key identifier:   64:83:E2:3A:6E:FE:74:4C:9E:45:03:94:87:66:D7:58:B5:BB:7C:13
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584507F02865F790C0ECB9A9F000
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     25664
IP address blocks:        2607:cc80:7000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:28:65:f7:90:c0:ec:b9:a9:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=dc17a156-d883-4386-b4e3-4946bf137f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:e0:fa:0f:97:02:76:43:2c:97:87:1f:cd:
                    36:15:2b:59:aa:03:b5:fd:11:0e:e5:6c:05:5e:2e:
                    1e:7a:bc:8c:4a:9e:ae:fd:d7:df:30:9d:76:df:e0:
                    96:dc:17:a1:68:05:c0:d0:c6:43:fc:da:48:53:43:
                    69:1e:5b:d6:d9:42:13:d0:05:89:e9:cc:59:37:63:
                    c5:ac:64:fc:21:4f:f2:15:06:08:32:a2:ec:d5:38:
                    b0:99:d0:65:3b:0d:89:6c:60:ec:36:e9:aa:74:05:
                    e2:1a:f5:da:21:2a:10:3a:f3:63:9d:79:1f:79:b8:
                    ca:94:b5:20:fc:df:a6:41:09:5d:dc:f2:82:89:96:
                    32:c9:c2:2d:43:0e:ff:bd:3f:e8:f5:8c:28:3b:dc:
                    95:8d:1b:f2:03:c5:68:a6:23:23:e8:16:0b:ab:5e:
                    ae:79:99:85:dd:a8:d0:23:a9:0e:ab:eb:4a:56:fa:
                    51:1e:27:e3:9f:8c:e1:97:e1:f6:ef:b8:23:9e:94:
                    9d:2e:fb:36:ae:95:9a:5a:9c:5e:9c:4d:76:72:5c:
                    a7:d6:90:93:99:3f:49:9d:74:b3:7b:6a:9c:67:87:
                    c7:63:78:38:28:4b:12:5c:76:30:2b:40:08:d9:ba:
                    bc:9a:8a:cd:f7:0f:c1:8e:c5:50:31:9f:7e:c9:ee:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:83:E2:3A:6E:FE:74:4C:9E:45:03:94:87:66:D7:58:B5:BB:7C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:7000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:69:2b:86:d4:07:8e:a7:8a:c4:28:7b:08:5a:2b:0a:9e:33:
         c8:78:83:13:18:ec:de:e9:fc:7c:70:a4:f8:b3:71:a5:de:05:
         45:2f:33:47:7a:a8:3e:47:2e:08:8a:a6:e1:93:70:6a:89:3f:
         01:23:ab:cb:1c:91:57:71:56:f9:70:3e:1a:39:63:34:34:d2:
         1c:30:6f:54:81:1c:c9:12:fc:e6:c1:7e:41:3f:20:f5:9f:bc:
         2f:2d:fc:bd:f3:18:fa:5c:9e:7b:b0:66:f6:20:1b:6f:eb:47:
         68:4c:6b:6b:4d:61:7c:89:2d:88:0d:f9:6a:a5:1b:2a:8b:57:
         7c:26:3e:5f:a3:48:e8:bf:fd:72:5a:c7:bd:87:5f:09:b7:fa:
         5b:56:9c:63:64:d8:cb:60:75:2e:09:b2:43:64:e5:da:83:4e:
         4a:5c:fa:b8:10:69:23:01:ed:47:a9:db:8e:04:d8:38:68:84:
         2d:16:53:3b:18:19:0d:98:11:f2:b0:1e:d2:fb:36:1f:8a:04:
         64:ad:c9:f9:8c:f2:dd:88:ae:61:ab:88:34:1e:5e:24:c5:1d:
         4a:f3:d3:46:2f:76:d7:ce:1a:59:71:0e:7e:2e:ac:de:df:44:
         d0:b2:4b:41:76:22:3f:32:5e:25:98:14:e9:4b:5f:ad:61:a6:
         4d:f1:8d:c5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUH8Chl95DA7Lmp8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0
MDc4MB4XDTI0MDIyNzE0MDAzMVoXDTI0MDUyNzEzMDAzMVowLzEtMCsGA1UEAxMk
ZGMxN2ExNTYtZDg4My00Mzg2LWI0ZTMtNDk0NmJmMTM3ZjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa7g+g+XAnZDLJeHH802FStZqgO1/REO5WwF
Xi4eeryMSp6u/dffMJ123+CW3BehaAXA0MZD/NpIU0NpHlvW2UIT0AWJ6cxZN2PF
rGT8IU/yFQYIMqLs1TiwmdBlOw2JbGDsNumqdAXiGvXaISoQOvNjnXkfebjKlLUg
/N+mQQld3PKCiZYyycItQw7/vT/o9YwoO9yVjRvyA8VopiMj6BYLq16ueZmF3ajQ
I6kOq+tKVvpRHifjn4zhl+H277gjnpSdLvs2rpWaWpxenE12clyn1pCTmT9JnXSz
e2qcZ4fHY3g4KEsSXHYwK0AI2bq8morN9w/BjsVQMZ9+ye7powIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGSD4jpu/nRMnkUDlIdm11i1u3wTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk
M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvYWVmYTA1YWItZDU2Mi0z
ZmIwLWFhYjQtYTM2OWQxYThmYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3
MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm
NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2
ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgHAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG5pK4bUB46nisQoewhaKwqeM8h4gxMY7N7p/HxwpPizcaXeBUUv
M0d6qD5HLgiKpuGTcGqJPwEjq8sckVdxVvlwPho5YzQ00hwwb1SBHMkS/ObBfkE/
IPWfvC8t/L3zGPpcnnuwZvYgG2/rR2hMa2tNYXyJLYgN+WqlGyqLV3wmPl+jSOi/
/XJax72HXwm3+ltWnGNk2MtgdS4JskNk5dqDTkpc+rgQaSMB7Uep244E2DhohC0W
UzsYGQ2YEfKwHtL7Nh+KBGStyfmM8t2IrmGriDQeXiTFHUrz00YvdtfOGllxDn4u
rN7fRNCyS0F2Ij8yXiWYFOlLX61hpk3xjcU=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:10 2024 by rpki-client on console-fra.rpki-client.org