Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
File:                     94cc771e-e665-32c4-8307-085edb945c30.roa (raw, json)
Hash identifier:          9iJXS3cqmj9+IrjpHH4WtjzFCFy5Izp5VjdDrxYVO/M=
Subject key identifier:   E0:EF:CF:72:4B:DD:60:0B:46:15:3E:0D:6A:75:A9:B5:0D:FF:75:D0
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584742BB50A862CC014A3D90C980
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        2607:f368:804::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:50:a8:62:cc:01:4a:3d:90:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=e57277ec-540b-4503-96ff-80c8d20601d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:fc:41:11:2c:d1:48:7e:52:e4:6e:27:35:
                    b1:d4:43:50:b0:cd:a0:30:2c:d8:c4:58:59:61:54:
                    0d:49:d0:fa:d0:bc:d3:9d:a2:ed:78:07:9d:bd:f4:
                    20:9e:4c:3c:32:94:3c:4a:24:53:4b:18:21:71:06:
                    9f:f1:fe:b0:77:94:63:81:26:ec:87:0b:5c:42:0e:
                    34:f2:e3:87:93:c8:4b:23:c6:c3:54:fe:9d:c4:df:
                    98:d7:bf:0d:fd:1a:e5:ab:f8:79:36:2e:f0:aa:d3:
                    d6:cd:9c:9b:17:e3:8a:3e:a7:ce:7d:56:5a:31:ba:
                    ed:6d:4e:9f:4b:61:9a:dd:1f:af:1e:fd:75:6f:d8:
                    43:b1:6e:ac:14:f3:da:c6:dc:e1:1d:4a:52:0e:8e:
                    69:40:9d:31:0e:0c:60:e4:a0:b7:68:77:1c:43:af:
                    b0:0e:05:e4:de:b7:1a:ce:3b:8c:d9:a7:96:1a:29:
                    0b:be:b2:73:fe:fe:d5:a6:4d:a0:4b:fa:4c:44:73:
                    b6:43:a4:8f:ee:91:5d:06:5b:ef:2b:db:31:35:e8:
                    e2:aa:ed:90:4c:a4:3a:59:9d:8b:bf:c0:34:1d:8c:
                    51:e4:5f:15:44:5b:ef:d4:3f:98:e5:12:5b:b1:dc:
                    a8:6d:aa:e8:4f:62:3c:5e:98:aa:77:56:9f:d7:d5:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EF:CF:72:4B:DD:60:0B:46:15:3E:0D:6A:75:A9:B5:0D:FF:75:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:bb:29:72:1a:f5:47:6d:cd:1c:42:8e:06:4f:ce:ab:4a:
         46:8b:6d:24:77:36:42:45:ae:77:aa:8f:e8:31:c1:f2:bd:66:
         b9:78:5b:c3:ab:1f:3f:20:aa:81:a5:57:af:d7:be:07:e2:a5:
         a4:82:1e:0a:a9:95:c1:8c:2b:1c:08:79:12:d3:8e:af:97:ab:
         1a:28:fb:b4:cf:82:5c:bf:09:d0:30:35:24:cb:8e:67:28:61:
         6a:fc:da:0d:d0:77:7f:1e:ff:a0:51:a9:05:7f:a8:ec:d4:78:
         b1:21:17:66:93:e5:5b:c4:d1:dd:ae:5f:2a:c6:a3:ed:9c:37:
         d3:49:aa:a8:bf:88:6a:b3:69:4a:c2:f5:eb:88:ae:db:47:ba:
         28:d4:19:84:f8:45:59:8d:fb:b7:29:3d:fe:df:23:1f:8e:a6:
         84:21:57:e9:8d:af:c4:66:f0:b9:26:f1:e7:5f:0c:34:3c:15:
         85:e0:f9:6c:5c:e3:37:1a:76:48:6a:82:b2:e2:9f:9e:27:44:
         25:02:67:9f:72:d7:a3:24:ce:05:09:eb:c0:89:93:3f:89:7d:
         16:16:86:11:8f:a1:5c:cb:f2:d5:7e:cb:3b:8d:f9:bd:3b:c5:
         94:ca:a6:68:6f:01:62:1c:59:43:fe:77:c8:36:07:a5:4d:93:
         48:7b:db:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdCu1CoYswBSj2QyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
ZTU3Mjc3ZWMtNTQwYi00NTAzLTk2ZmYtODBjOGQyMDYwMWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox/8QREs0Uh+UuRuJzWx1ENQsM2gMCzYxFhZ
YVQNSdD60LzTnaLteAedvfQgnkw8MpQ8SiRTSxghcQaf8f6wd5RjgSbshwtcQg40
8uOHk8hLI8bDVP6dxN+Y178N/Rrlq/h5Ni7wqtPWzZybF+OKPqfOfVZaMbrtbU6f
S2Ga3R+vHv11b9hDsW6sFPPaxtzhHUpSDo5pQJ0xDgxg5KC3aHccQ6+wDgXk3rca
zjuM2aeWGikLvrJz/v7Vpk2gS/pMRHO2Q6SP7pFdBlvvK9sxNejiqu2QTKQ6WZ2L
v8A0HYxR5F8VRFvv1D+Y5RJbsdyobaroT2I8Xpiqd1af19U7hwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFODvz3JL3WALRhU+DWp1qbUN/3XQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvOTRjYzc3MWUtZTY2NS0z
MmM0LTgzMDctMDg1ZWRiOTQ1YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgfzaAgE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABU+uylyGvVHbc0cQo4GT86rSkaLbSR3NkJFrneqj+gxwfK9Zrl4
W8OrHz8gqoGlV6/XvgfipaSCHgqplcGMKxwIeRLTjq+Xqxoo+7TPgly/CdAwNSTL
jmcoYWr82g3Qd38e/6BRqQV/qOzUeLEhF2aT5VvE0d2uXyrGo+2cN9NJqqi/iGqz
aUrC9euIrttHuijUGYT4RVmN+7cpPf7fIx+OpoQhV+mNr8Rm8Lkm8edfDDQ8FYXg
+Wxc4zcadkhqgrLin54nRCUCZ59y16MkzgUJ68CJkz+JfRYWhhGPoVzL8tV+yzuN
+b07xZTKpmhvAWIcWUP+d8g2B6VNk0h729w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:42 2024 by rpki-client on console-ams.rpki-client.org