Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/b4c9a728-90b0-3673-8d59-1fc525f905b4.roa
File:                     b4c9a728-90b0-3673-8d59-1fc525f905b4.roa (raw, json)
Hash identifier:          7QZHXF0YlFiBk63rRbVTGmZYUFNaxgoDvQ2YjJyzBUY=
Subject key identifier:   F5:00:86:68:00:78:A3:1E:46:85:6A:05:D2:01:09:2C:6C:3A:CB:8F
Certificate issuer:       /CN=ef238680-20ad-47df-89b5-7a55fae68594
Certificate serial:       010D0C9F4328584535E299F646E0A149D06E1400
Authority key identifier: 7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/b4c9a728-90b0-3673-8d59-1fc525f905b4.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     8075
IP address blocks:        2607:33c0:a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:99:f6:46:e0:a1:49:d0:6e:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef238680-20ad-47df-89b5-7a55fae68594
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=4b837425-079e-4c2f-ab14-9cf18d005647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6f:33:d5:da:1d:a6:9a:02:39:70:b4:f6:63:
                    69:d4:2b:d1:d4:f0:48:b7:25:bc:b5:cc:3b:97:13:
                    2d:92:0f:6f:7a:ca:bf:c6:d4:80:1e:be:a4:28:37:
                    84:28:54:51:fe:f8:b7:57:cd:cc:3d:31:58:ce:96:
                    82:97:9c:42:ae:db:b5:e4:32:37:aa:b7:3e:c5:a6:
                    03:c2:7f:b6:13:01:ca:63:61:b8:55:ea:2a:93:b5:
                    31:b1:ca:27:42:9d:8b:75:0d:f1:50:ae:59:49:7d:
                    95:6e:7d:19:06:bd:c9:9f:26:9d:d6:a3:d2:d3:03:
                    87:e9:f4:78:48:d4:d4:9c:17:8c:d4:d6:6f:8b:e7:
                    a3:b3:00:6e:65:d4:2d:86:08:81:30:25:1f:46:55:
                    3e:e8:ad:f4:21:41:6c:b6:c1:f7:ce:fa:90:7d:9a:
                    21:d8:58:16:df:a3:d1:9d:f1:b2:4c:d4:5d:86:3e:
                    70:30:2d:f3:98:a1:2f:05:97:07:3e:b0:f8:84:a2:
                    90:6e:ec:d6:a1:13:f4:8d:3d:25:aa:b7:2d:09:cd:
                    f4:19:47:b2:ee:10:3f:6e:95:fc:59:f0:3d:e8:0b:
                    0a:a9:77:f9:43:32:75:c1:47:31:ae:4d:f8:78:55:
                    d7:b0:f2:55:00:63:df:8c:38:f0:e4:98:db:33:8a:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:86:68:00:78:A3:1E:46:85:6A:05:D2:01:09:2C:6C:3A:CB:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/b4c9a728-90b0-3673-8d59-1fc525f905b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.crl

            X509v3 Authority Key Identifier:
                keyid:7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:33c0:a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:44:a2:42:23:f9:21:ef:7c:de:ff:15:ab:e8:5f:f8:b8:7d:
         34:b6:d8:9a:64:2f:32:c0:1d:3d:86:0e:ae:46:81:a6:38:34:
         42:b3:c1:5a:c5:e2:4c:ef:6b:33:25:3a:5d:16:40:d3:bb:83:
         ad:df:98:ce:91:04:76:6b:fa:67:a0:96:cb:03:ba:fd:e2:32:
         95:16:31:ef:3c:3f:0b:40:81:b8:fe:a6:46:2c:60:a3:22:83:
         54:15:7d:c2:33:87:34:ac:b2:02:a8:38:f1:ef:f1:a2:fd:4f:
         4e:25:38:80:08:a7:c1:95:ff:25:16:03:da:5c:ca:6b:81:0f:
         f1:2b:3c:ae:99:ba:68:ea:10:22:4c:91:dc:09:09:36:0b:d4:
         4e:78:eb:db:dd:da:5e:ee:f5:10:8c:77:cb:c1:cd:72:a3:e5:
         c9:b4:fb:88:7a:20:1b:f6:5a:53:be:75:0d:7a:27:27:90:7a:
         c7:0e:d9:fd:65:e4:23:ad:5d:bb:f0:3f:48:99:3f:f8:45:c7:
         ab:67:a6:15:e9:d8:39:23:33:65:09:5c:2e:8c:35:63:72:1f:
         5e:d1:3e:27:7e:3d:c1:d1:5a:64:87:9b:4a:74:38:bf:fe:80:
         7d:c7:38:41:24:4c:a2:fe:bc:66:a1:b6:7c:9a:33:5f:10:2f:
         85:2d:c6:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU14pn2RuChSdBuFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWYyMzg2ODAtMjBhZC00N2RmLTg5YjUtN2E1NWZhZTY4
NTk0MB4XDTI0MDMxNTAxMDAyNloXDTI0MDYxMzAxMDAyNlowLzEtMCsGA1UEAxMk
NGI4Mzc0MjUtMDc5ZS00YzJmLWFiMTQtOWNmMThkMDA1NjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA628z1dodppoCOXC09mNp1CvR1PBItyW8tcw7
lxMtkg9vesq/xtSAHr6kKDeEKFRR/vi3V83MPTFYzpaCl5xCrtu15DI3qrc+xaYD
wn+2EwHKY2G4Veoqk7UxsconQp2LdQ3xUK5ZSX2Vbn0ZBr3Jnyad1qPS0wOH6fR4
SNTUnBeM1NZvi+ejswBuZdQthgiBMCUfRlU+6K30IUFstsH3zvqQfZoh2FgW36PR
nfGyTNRdhj5wMC3zmKEvBZcHPrD4hKKQbuzWoRP0jT0lqrctCc30GUey7hA/bpX8
WfA96AsKqXf5QzJ1wUcxrk34eFXXsPJVAGPfjDjw5JjbM4oUeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPUAhmgAeKMeRoVqBdIBCSxsOsuPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZjIz
ODY4MC0yMGFkLTQ3ZGYtODliNS03YTU1ZmFlNjg1OTQvYjRjOWE3MjgtOTBiMC0z
NjczLThkNTktMWZjNTI1ZjkwNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWYyMzg2ODAtMjBhZC00N2RmLTg5
YjUtN2E1NWZhZTY4NTk0L2VmMjM4NjgwLTIwYWQtNDdkZi04OWI1LTdhNTVmYWU2
ODU5NC5jcmwwHwYDVR0jBBgwFoAUfP9zrJ1uvB0lfs2PzulRsrdq9JMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lZjIzODY4MC0yMGFkLTQ3ZGYtODliNS03YTU1
ZmFlNjg1OTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgczwACg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGNEokIj+SHvfN7/FavoX/i4fTS22JpkLzLAHT2GDq5GgaY4NEKz
wVrF4kzvazMlOl0WQNO7g63fmM6RBHZr+meglssDuv3iMpUWMe88PwtAgbj+pkYs
YKMig1QVfcIzhzSssgKoOPHv8aL9T04lOIAIp8GV/yUWA9pcymuBD/ErPK6Zumjq
ECJMkdwJCTYL1E5469vd2l7u9RCMd8vBzXKj5cm0+4h6IBv2WlO+dQ16JyeQescO
2f1l5COtXbvwP0iZP/hFx6tnphXp2DkjM2UJXC6MNWNyH17RPid+PcHRWmSHm0p0
OL/+gH3HOEEkTKL+vGahtnyaM18QL4UtxhA=
-----END CERTIFICATE-----
Generated at Wed May 22 01:48:45 2024 by rpki-client on console-ams.rpki-client.org