Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa
File:                     8e278363-35a1-3105-b8ef-b4d02bb5512b.roa (raw, json)
Hash identifier:          8anSVjZ5aeuXQnfaLGCH2PI6tC3qXv0lrPd1EXWxnLM=
Subject key identifier:   0F:AE:42:C9:47:AE:C8:88:BE:F5:52:36:CB:69:1B:71:E4:0E:EB:17
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F432858471FD5DBDC12A342BF4F35B2D0
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     32982
IP address blocks:        2607:f368:b004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:db:dc:12:a3:42:bf:4f:35:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=ec3548e1-dda4-426d-b7df-e34bc321f325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:52:52:c8:84:0d:10:8f:21:3f:4e:4c:e2:
                    db:17:1d:b0:f4:09:c3:c6:51:53:b2:6c:24:91:65:
                    7b:e3:1a:0f:b2:ea:3c:dd:74:c2:14:eb:cc:c2:81:
                    8c:dc:02:b0:4e:bc:3b:ea:e0:79:4a:a2:d4:ae:59:
                    ce:c7:47:b4:0a:c0:b1:3b:1b:e9:64:29:8c:05:b3:
                    53:a1:87:30:a3:5e:f5:5c:20:a7:15:71:2c:11:f0:
                    61:9d:ba:73:c8:94:b4:85:33:4c:66:a8:42:3a:17:
                    ae:0a:97:81:8a:ed:f2:59:86:1e:0a:09:41:e4:76:
                    95:9b:18:84:ea:de:d4:80:2d:1c:87:24:f1:7b:f4:
                    69:bf:c5:a4:55:73:45:c8:f6:78:f5:27:8c:ed:e2:
                    f8:77:27:af:21:74:b4:c3:ea:66:e3:c1:f6:7b:52:
                    63:80:8f:0f:14:af:f5:99:53:ad:45:f6:4b:74:c9:
                    c1:2f:04:17:da:1c:a8:3f:55:d0:f9:57:81:3b:2c:
                    41:52:db:37:c9:7e:38:04:91:4a:05:24:22:a1:b3:
                    e0:eb:25:32:dc:76:e6:d1:a8:aa:95:7c:51:0a:f6:
                    f2:8e:e2:65:81:da:2c:67:98:67:2a:eb:cb:78:58:
                    a1:ce:e1:dc:3e:96:8b:b4:d3:05:e8:e1:c9:4a:1f:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AE:42:C9:47:AE:C8:88:BE:F5:52:36:CB:69:1B:71:E4:0E:EB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/8e278363-35a1-3105-b8ef-b4d02bb5512b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:b004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b6:a1:ba:d8:4b:da:76:dd:e8:8d:68:e1:e4:33:a4:fb:fa:
         85:20:4b:f5:71:b5:4c:d6:2a:10:fc:27:c4:5c:36:fa:ea:ff:
         4d:4c:5e:c6:15:2b:fc:57:d9:da:5d:f4:0d:d0:14:4a:73:f5:
         ad:74:90:ac:54:fd:e4:36:cd:81:b4:a0:f5:69:ba:3c:8e:ef:
         a8:ca:51:25:44:fe:e1:be:ec:cb:6a:f1:c2:32:36:be:25:8a:
         e0:97:4d:fb:31:fd:0d:66:d3:6f:52:8e:89:59:7b:fb:51:f8:
         8b:eb:07:2c:2e:2c:22:46:ad:20:8f:28:5e:7e:79:7c:3f:4b:
         2f:8e:2a:f5:e7:78:e7:4f:29:3d:3f:ff:8b:6d:ed:29:13:33:
         ec:93:0d:d3:66:89:95:89:2a:20:4c:0f:bf:91:d7:a5:14:7a:
         a6:29:34:3d:5b:d4:86:6b:86:3a:96:b6:be:20:6f:f5:78:fa:
         b8:f3:97:27:bd:de:dd:b2:03:fe:07:78:4e:be:f9:50:33:e5:
         c6:eb:8b:1c:7c:92:49:3e:f2:4f:e0:c1:69:d5:c6:a6:40:8b:
         84:5d:d3:bd:65:c0:a1:04:c7:10:3e:9e:e0:c8:63:a3:be:d7:
         bd:6e:08:5a:0f:ab:c3:82:7f:fd:23:92:2d:6d:de:7e:98:90:
         f1:8f:69:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcf1dvcEqNCv081stAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZWMzNTQ4ZTEtZGRhNC00MjZkLWI3ZGYtZTM0YmMzMjFmMzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42NSUsiEDRCPIT9OTOLbFx2w9AnDxlFTsmwk
kWV74xoPsuo83XTCFOvMwoGM3AKwTrw76uB5SqLUrlnOx0e0CsCxOxvpZCmMBbNT
oYcwo171XCCnFXEsEfBhnbpzyJS0hTNMZqhCOheuCpeBiu3yWYYeCglB5HaVmxiE
6t7UgC0chyTxe/Rpv8WkVXNFyPZ49SeM7eL4dyevIXS0w+pm48H2e1JjgI8PFK/1
mVOtRfZLdMnBLwQX2hyoP1XQ+VeBOyxBUts3yX44BJFKBSQiobPg6yUy3Hbm0aiq
lXxRCvbyjuJlgdosZ5hnKuvLeFihzuHcPpaLtNMF6OHJSh+i0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA+uQslHrsiIvvVSNstpG3HkDusXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvOGUyNzgzNjMtMzVhMS0z
MTA1LWI4ZWYtYjRkMDJiYjU1MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzaLAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI22obrYS9p23eiNaOHkM6T7+oUgS/VxtUzWKhD8J8RcNvrq/01M
XsYVK/xX2dpd9A3QFEpz9a10kKxU/eQ2zYG0oPVpujyO76jKUSVE/uG+7Mtq8cIy
Nr4liuCXTfsx/Q1m029SjolZe/tR+IvrBywuLCJGrSCPKF5+eXw/Sy+OKvXneOdP
KT0//4tt7SkTM+yTDdNmiZWJKiBMD7+R16UUeqYpND1b1IZrhjqWtr4gb/V4+rjz
lye93t2yA/4HeE6++VAz5cbrixx8kkk+8k/gwWnVxqZAi4Rd071lwKEExxA+nuDI
Y6O+171uCFoPq8OCf/0jki1t3n6YkPGPaYc=
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:42:34 2024 by rpki-client on console-ams.rpki-client.org