Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/db49ca76-2138-3339-b404-80f4e06256ea.roa
File:                     db49ca76-2138-3339-b404-80f4e06256ea.roa (raw, json)
Hash identifier:          ak17vK5iOe60yA00FnCbyOP2GX19xgHWlty2d9HxJtE=
Subject key identifier:   BF:D9:84:95:9B:F5:F4:EA:A4:08:03:D6:2E:A7:FC:3B:F8:43:3E:CB
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F432858474420ABBA247DFB4607879500
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/db49ca76-2138-3339-b404-80f4e06256ea.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     16509
IP address blocks:        2606:2c0::/48 maxlen: 48
                          2606:2c0:1::/48 maxlen: 48
                          2606:2c0:2::/48 maxlen: 48
                          2606:2c0:3::/48 maxlen: 48
                          2606:2c0:4::/48 maxlen: 48
                          2606:2c0:5::/48 maxlen: 48
                          2606:2c0:6::/48 maxlen: 48
                          2606:2c0:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:ab:ba:24:7d:fb:46:07:87:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=8852550d-c3ce-4b23-aced-018bd099131c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:90:c2:27:48:e0:67:c0:b2:55:60:a2:6d:
                    62:de:a3:1b:28:5e:39:46:a8:80:c0:d0:ab:b9:05:
                    2a:5a:ad:be:66:6e:75:09:d9:a9:a3:26:47:2c:dd:
                    54:a1:bb:3a:f3:b8:f4:8e:45:c7:24:ff:c7:2e:eb:
                    a5:6c:d3:a0:1e:42:5c:81:00:c9:8e:11:68:17:8a:
                    7d:f8:9f:c0:ad:50:3e:86:48:3e:91:7a:ac:b0:69:
                    33:ae:65:bb:33:18:40:3d:f1:a2:c1:3a:72:e1:1c:
                    fc:73:cf:76:9c:b1:8d:a1:cf:4b:a8:cb:94:9f:33:
                    8b:5c:a4:7c:33:9b:28:55:54:a1:d5:5b:db:16:b1:
                    d4:1e:3c:a2:e0:ec:29:94:17:ac:f4:43:f9:af:e3:
                    d9:03:11:02:34:24:3f:80:1b:79:99:77:dd:6c:83:
                    75:14:f9:4e:4b:62:1c:9f:bf:de:cf:aa:61:51:e5:
                    3f:05:d0:aa:87:cf:cf:75:1b:41:fd:44:ee:f8:18:
                    a1:37:ad:05:6d:6c:5e:57:7a:9a:82:c0:ec:8d:e8:
                    fb:cb:6b:cf:f9:01:76:b6:58:06:a7:31:d0:e4:27:
                    3a:0f:ed:76:9c:02:56:8e:f8:cd:af:3b:6a:14:4f:
                    ee:d7:f0:99:df:92:2c:55:bd:f8:f6:5e:76:f1:ca:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D9:84:95:9B:F5:F4:EA:A4:08:03:D6:2E:A7:FC:3B:F8:43:3E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/db49ca76-2138-3339-b404-80f4e06256ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:32:a5:49:72:40:d3:d7:8a:93:18:25:aa:e9:9d:6d:47:e6:
         b0:5c:68:ec:ab:5b:14:18:49:8b:cc:96:99:72:89:11:3e:c6:
         b5:4d:4c:3d:45:42:9d:2f:d9:a4:08:9d:5d:83:b0:b1:b8:90:
         f7:b3:96:fa:a0:d1:a0:1d:f6:71:eb:ef:28:61:2c:b5:03:bb:
         5d:f0:31:f4:a0:d7:55:b6:e2:00:22:1c:87:5b:fb:a8:1d:0b:
         ce:37:cd:b1:d7:23:21:b3:00:84:40:66:ec:07:85:c9:f7:bc:
         36:66:55:d0:8e:38:3b:d6:e8:42:b8:c9:bb:05:1e:18:19:e6:
         2f:1e:47:65:e9:fd:28:49:f3:18:38:da:c4:c8:9f:61:71:22:
         65:88:e0:b1:e7:4d:c9:f8:be:1b:4a:68:26:e7:67:7e:6e:49:
         35:08:9e:67:39:51:68:6c:c9:bb:d5:55:38:76:c4:28:67:70:
         8d:90:1e:42:4e:08:d5:64:ac:11:76:28:b0:b8:fa:d0:84:6d:
         71:32:41:52:b6:61:b9:c8:6d:b3:9e:f4:04:e1:77:8a:1c:59:
         eb:ca:3c:a3:74:84:25:34:3f:bb:cc:44:59:42:b0:40:96:ee:
         61:b6:c7:f8:74:af:8a:40:6e:2a:db:c5:7e:56:29:fc:34:72:
         09:8c:76:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdEIKu6JH37RgeHlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1
NTYwMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
ODg1MjU1MGQtYzNjZS00YjIzLWFjZWQtMDE4YmQwOTkxMzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rKQwidI4GfAslVgom1i3qMbKF45RqiAwNCr
uQUqWq2+Zm51CdmpoyZHLN1Uobs687j0jkXHJP/HLuulbNOgHkJcgQDJjhFoF4p9
+J/ArVA+hkg+kXqssGkzrmW7MxhAPfGiwTpy4Rz8c892nLGNoc9LqMuUnzOLXKR8
M5soVVSh1VvbFrHUHjyi4OwplBes9EP5r+PZAxECNCQ/gBt5mXfdbIN1FPlOS2Ic
n7/ez6phUeU/BdCqh8/PdRtB/UTu+BihN60FbWxeV3qagsDsjej7y2vP+QF2tlgG
pzHQ5Cc6D+12nAJWjvjNrztqFE/u1/CZ35IsVb349l528cqRlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL/ZhJWb9fTqpAgD1i6n/Dv4Qz7LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk
MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvZGI0OWNhNzYtMjEzOC0z
MzM5LWI0MDQtODBmNGUwNjI1NmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh
YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk
NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk
NTA5ZDU1NjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgYCwAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGYypUlyQNPXipMYJarpnW1H5rBcaOyrWxQYSYvMlplyiRE+xrVN
TD1FQp0v2aQInV2DsLG4kPezlvqg0aAd9nHr7yhhLLUDu13wMfSg11W24gAiHIdb
+6gdC843zbHXIyGzAIRAZuwHhcn3vDZmVdCOODvW6EK4ybsFHhgZ5i8eR2Xp/ShJ
8xg42sTIn2FxImWI4LHnTcn4vhtKaCbnZ35uSTUInmc5UWhsybvVVTh2xChncI2Q
HkJOCNVkrBF2KLC4+tCEbXEyQVK2YbnIbbOe9AThd4ocWevKPKN0hCU0P7vMRFlC
sECW7mG2x/h0r4pAbirbxX5WKfw0cgmMdlg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:48 2024 by rpki-client on console-ams.rpki-client.org