Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
File:                     94cc771e-e665-32c4-8307-085edb945c30.roa (raw, json)
Hash identifier:          y8PJlRmUnnfH7+FAUBgjCFaxLB0VppcyTq80elIb12o=
Subject key identifier:   1F:21:FC:11:12:42:DE:60:16:1A:0D:0A:37:C9:8B:87:C2:63:47:9E
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584582A89C1699355E1320B73800
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        2607:f368:804::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9c:16:99:35:5e:13:20:b7:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=902f3f7e-f9f9-4e4d-9ed1-eb14f76c0e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:93:33:1e:1d:71:e9:30:48:eb:bf:f8:34:2e:
                    51:5a:e6:ea:8a:c2:c9:5a:c4:e7:12:6c:a1:7a:dc:
                    84:a7:b8:f0:0c:d1:c5:52:01:ed:71:dc:63:a8:a2:
                    e4:66:62:c1:01:2d:9e:d5:b8:88:6a:49:ef:2d:f0:
                    d3:83:44:9d:01:2c:2a:9b:15:23:45:d3:02:7d:f5:
                    ce:a7:d5:59:bc:a5:05:2f:41:0a:e9:72:24:64:e9:
                    ba:84:24:80:cd:a0:a6:c3:d0:b4:e0:13:c7:60:9d:
                    5e:4e:6a:b3:26:3c:90:31:b7:ce:fc:8a:fd:6d:86:
                    0b:6a:b8:f1:7e:ee:18:3f:8e:45:69:f9:ce:7b:76:
                    1d:b4:bf:55:69:c6:70:86:73:0c:39:52:43:1f:97:
                    30:70:ca:f3:38:c9:6d:a3:47:f7:61:6a:2b:56:20:
                    ef:d5:22:9c:43:16:64:15:c1:d9:dc:34:bd:9f:d4:
                    42:3b:a8:71:db:71:f6:41:d8:82:7c:95:60:ba:be:
                    e7:b5:f4:16:1d:3b:b1:72:cc:d4:37:9d:9d:e8:90:
                    7f:16:8e:66:45:86:04:ff:65:8b:a0:74:0c:cc:27:
                    91:8a:0e:f0:fb:94:f2:a3:a9:13:3d:e6:e2:f8:19:
                    83:13:13:28:38:c7:92:53:c7:41:8b:25:f5:16:b6:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:FC:11:12:42:DE:60:16:1A:0D:0A:37:C9:8B:87:C2:63:47:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:03:9e:3b:54:0b:00:d0:15:6f:a7:ec:97:e2:4d:75:4a:
         9e:88:69:df:a1:2e:bd:d6:9f:a0:ff:44:46:2d:93:f9:70:01:
         bc:73:a7:0f:5f:c9:c3:ed:1b:4c:a8:7a:7b:a0:9a:3b:2c:49:
         e3:6e:0c:23:f6:1e:a4:6d:a4:b8:e3:55:a4:ff:ef:e9:f3:3f:
         62:40:59:d1:05:fa:b5:a5:08:2e:6b:2e:27:5a:b7:69:68:4d:
         cf:79:1f:8c:79:9c:ea:68:88:09:4c:7f:57:31:1e:66:d8:c9:
         77:db:4f:91:f4:60:e3:0d:d9:1f:2e:85:09:68:0d:84:58:94:
         80:25:f9:43:c4:dd:f0:04:10:a8:6f:e7:b3:ad:3a:ff:2f:41:
         44:7f:3b:50:39:68:85:be:8d:81:fd:ef:f7:f7:6e:cf:40:78:
         8e:54:7c:f8:c2:4c:dc:0d:99:19:32:4d:9b:48:6f:eb:4c:3d:
         d3:62:73:9c:db:9e:0f:18:35:68:fa:2c:07:c3:c5:ba:2e:06:
         13:9d:60:f3:fd:b4:d1:ce:72:0f:73:f0:83:f9:d5:be:23:64:
         eb:60:13:38:0c:53:c0:1e:5e:df:79:0c:7d:3d:99:50:22:f1:
         fd:1b:4f:44:0f:38:56:cd:de:87:41:7c:3f:36:08:ac:f8:68:
         67:49:40:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWCqJwWmTVeEyC3OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
OTAyZjNmN2UtZjlmOS00ZTRkLTllZDEtZWIxNGY3NmMwZTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZMzHh1x6TBI67/4NC5RWubqisLJWsTnEmyh
etyEp7jwDNHFUgHtcdxjqKLkZmLBAS2e1biIaknvLfDTg0SdASwqmxUjRdMCffXO
p9VZvKUFL0EK6XIkZOm6hCSAzaCmw9C04BPHYJ1eTmqzJjyQMbfO/Ir9bYYLarjx
fu4YP45FafnOe3YdtL9VacZwhnMMOVJDH5cwcMrzOMlto0f3YWorViDv1SKcQxZk
FcHZ3DS9n9RCO6hx23H2QdiCfJVgur7ntfQWHTuxcszUN52d6JB/Fo5mRYYE/2WL
oHQMzCeRig7w+5Tyo6kTPebi+BmDExMoOMeSU8dBiyX1FrYiPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB8h/BESQt5gFhoNCjfJi4fCY0eeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvOTRjYzc3MWUtZTY2NS0z
MmM0LTgzMDctMDg1ZWRiOTQ1YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgfzaAgE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABxlA547VAsA0BVvp+yX4k11Sp6Iad+hLr3Wn6D/REYtk/lwAbxz
pw9fycPtG0yoenugmjssSeNuDCP2HqRtpLjjVaT/7+nzP2JAWdEF+rWlCC5rLida
t2loTc95H4x5nOpoiAlMf1cxHmbYyXfbT5H0YOMN2R8uhQloDYRYlIAl+UPE3fAE
EKhv57OtOv8vQUR/O1A5aIW+jYH97/f3bs9AeI5UfPjCTNwNmRkyTZtIb+tMPdNi
c5zbng8YNWj6LAfDxbouBhOdYPP9tNHOcg9z8IP51b4jZOtgEzgMU8AeXt95DH09
mVAi8f0bT0QPOFbN3odBfD82CKz4aGdJQGI=
-----END CERTIFICATE-----
Generated at Thu May 2 21:11:13 2024 by rpki-client on console-fra.rpki-client.org