Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
File:                     f795707f-42b9-3e1c-9651-5bb7df87b841.roa (raw, json)
Hash identifier:          gOeoHFMy3SJo3IEcVfKCJ434+J4bY0uX1hVYzQISrR8=
Subject key identifier:   81:31:63:2B:01:88:76:F4:6A:42:58:33:C1:1D:74:B3:5C:C7:97:7D
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F43285847362B5BD81605346120EBFB20
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     32982
IP address blocks:        2607:f368:804::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5b:d8:16:05:34:61:20:eb:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=fdee9346-34ec-42da-8fd1-1397d203b965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:89:23:7e:c2:61:94:35:af:dd:80:19:04:08:
                    08:f4:9f:01:92:63:9b:0d:f7:3e:d1:83:78:42:b0:
                    62:a5:67:d5:a7:38:50:6b:1e:fb:51:64:64:2b:e0:
                    e1:78:3e:d1:71:c6:4e:cc:07:2c:19:a7:b3:58:02:
                    3e:d4:11:4b:95:69:ba:81:1b:69:b7:79:12:c3:18:
                    c7:f3:b8:92:de:a1:b2:37:a1:39:b4:49:57:ff:66:
                    db:8d:ea:d8:99:7f:2d:a7:df:76:f0:3b:74:32:93:
                    58:93:a1:6f:77:1f:d4:31:61:b9:5f:52:04:62:1e:
                    57:a5:ea:a1:c1:b0:7f:20:05:de:d5:76:38:04:f1:
                    61:40:45:d3:1a:19:87:c2:46:eb:aa:a4:f9:ab:47:
                    50:73:b5:ce:d1:8e:80:4d:3a:41:29:c9:67:da:e9:
                    3a:4c:3c:d0:33:b0:35:6d:eb:c2:18:cb:da:78:d5:
                    ae:cd:ed:c1:46:5d:c8:f8:7b:89:a8:49:e5:fb:73:
                    32:6a:91:fc:d1:1c:2d:ef:5d:6f:10:8f:ae:a0:50:
                    b7:ff:ae:cb:ea:b2:32:eb:dd:3c:60:2b:2c:c3:9b:
                    b9:06:41:67:00:d9:7b:1c:dd:dd:b3:cd:60:28:cc:
                    37:da:4c:f4:d4:91:65:4a:26:62:50:c7:c3:8b:77:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:31:63:2B:01:88:76:F4:6A:42:58:33:C1:1D:74:B3:5C:C7:97:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:2f:50:f2:7b:1b:44:d0:1a:e4:2e:5b:3d:82:40:f6:1f:
         f9:33:40:9f:29:ab:f9:e2:0a:84:f7:eb:a0:60:3a:00:68:6d:
         65:3d:df:f8:fd:85:7d:4a:e4:0c:5b:a7:f5:aa:1b:1b:d3:e9:
         d8:d2:f5:4c:91:f7:d7:5a:76:ed:99:b4:10:51:7d:43:04:14:
         09:26:86:e1:15:de:98:54:29:b1:3d:9a:77:25:68:ee:f5:75:
         8f:88:ac:a2:aa:dc:2a:00:38:1b:a7:5f:11:41:5e:42:df:f5:
         88:b2:c1:c6:34:e3:93:33:e7:19:71:11:fc:14:56:c3:e3:6a:
         fc:aa:98:55:ac:91:b6:7d:a3:51:ac:0b:76:6c:e7:56:fe:35:
         93:b6:62:03:52:d0:cd:ab:5e:09:be:a2:1b:8b:f8:da:ae:26:
         37:59:5c:68:8f:e8:f4:5b:90:52:aa:a3:27:cf:00:18:5e:e6:
         a8:67:51:7f:8f:63:76:61:aa:f3:49:a1:9b:a2:73:bd:52:b8:
         a1:0d:cb:7d:ff:5f:6f:6c:4a:7c:c8:a4:7c:b9:55:62:2e:0a:
         f9:bd:05:6c:a2:d1:fc:b3:9b:fc:8b:41:8c:56:dd:3f:51:89:
         33:f3:f5:8c:9d:60:5a:f5:ed:c1:b4:31:ac:4d:10:41:11:67:
         c4:50:9f:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc2K1vYFgU0YSDr+yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZmRlZTkzNDYtMzRlYy00MmRhLThmZDEtMTM5N2QyMDNiOTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhokjfsJhlDWv3YAZBAgI9J8BkmObDfc+0YN4
QrBipWfVpzhQax77UWRkK+DheD7RccZOzAcsGaezWAI+1BFLlWm6gRtpt3kSwxjH
87iS3qGyN6E5tElX/2bbjerYmX8tp9928Dt0MpNYk6Fvdx/UMWG5X1IEYh5Xpeqh
wbB/IAXe1XY4BPFhQEXTGhmHwkbrqqT5q0dQc7XO0Y6ATTpBKcln2uk6TDzQM7A1
bevCGMvaeNWuze3BRl3I+HuJqEnl+3MyapH80Rwt711vEI+uoFC3/67L6rIy6908
YCssw5u5BkFnANl7HN3ds81gKMw32kz01JFlSiZiUMfDi3dKAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIExYysBiHb0akJYM8EddLNcx5d9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvZjc5NTcwN2YtNDJiOS0z
ZTFjLTk2NTEtNWJiN2RmODdiODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgfzaAgE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB92L1DyextE0BrkLls9gkD2H/kzQJ8pq/niCoT366BgOgBobWU9
3/j9hX1K5Axbp/WqGxvT6djS9UyR99dadu2ZtBBRfUMEFAkmhuEV3phUKbE9mncl
aO71dY+IrKKq3CoAOBunXxFBXkLf9YiywcY045Mz5xlxEfwUVsPjavyqmFWskbZ9
o1GsC3Zs51b+NZO2YgNS0M2rXgm+ohuL+NquJjdZXGiP6PRbkFKqoyfPABhe5qhn
UX+PY3ZhqvNJoZuic71SuKENy33/X29sSnzIpHy5VWIuCvm9BWyi0fyzm/yLQYxW
3T9RiTPz9YydYFr17cG0MaxNEEERZ8RQn0E=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:07 2024 by rpki-client on console-ams.rpki-client.org