Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81974e21-b2bb-3080-8cfb-1a5554ea57a8.roa
File:                     81974e21-b2bb-3080-8cfb-1a5554ea57a8.roa (raw, json)
Hash identifier:          zLHgVhhYVqpTf4xVWsvk4+0cD4/x96zAPgWuhLPyPWM=
Subject key identifier:   AC:54:18:F2:4A:9B:CC:1A:D7:05:85:41:EB:EB:E9:4E:67:1D:47:8B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457D13229C40241C6E3343E800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81974e21-b2bb-3080-8cfb-1a5554ea57a8.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     12222
IP address blocks:        2001:4878:321::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:22:9c:40:24:1c:6e:33:43:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=bc5f5ff3-b790-4940-99b7-1dcc7808fe1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:b8:f5:02:08:08:a7:89:fb:5d:2b:96:50:
                    95:24:66:73:36:60:36:12:f4:59:b2:c7:48:c0:4b:
                    16:57:d6:b4:56:44:ad:08:3b:d1:42:f5:52:0f:ca:
                    d2:e1:a1:f1:0e:87:28:28:94:4c:a5:c5:a7:b5:0d:
                    3c:4a:35:22:74:28:ae:8c:16:18:6d:02:ca:fa:98:
                    24:ed:43:7f:1f:6c:8b:4c:fd:3e:b0:49:e1:1b:c6:
                    3a:7c:74:5c:35:e6:2e:04:31:27:06:7e:27:6e:ab:
                    c3:7f:91:47:81:89:75:5f:60:10:48:65:51:c4:f9:
                    33:e9:f6:50:67:0d:b9:0f:96:cf:4d:26:66:1f:a0:
                    3f:ac:0d:86:50:3c:ab:1c:75:48:38:84:50:c3:bc:
                    5c:d5:14:c4:ce:8c:20:a3:51:e2:02:73:82:0e:c0:
                    e3:66:a9:81:f1:de:ef:56:cf:69:1a:64:1f:85:3a:
                    97:85:da:4d:a6:c2:71:69:75:27:99:ef:9f:c8:0d:
                    6a:36:1a:0f:a1:31:3c:09:63:f9:ac:44:42:7e:c4:
                    a7:a3:5d:00:52:d1:0d:ee:0e:06:0d:9e:59:b8:ce:
                    35:c8:7e:ee:40:1d:68:6b:c3:16:6f:9d:55:b0:43:
                    71:96:bc:aa:40:45:4b:61:e8:64:a9:12:77:76:ba:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:54:18:F2:4A:9B:CC:1A:D7:05:85:41:EB:EB:E9:4E:67:1D:47:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81974e21-b2bb-3080-8cfb-1a5554ea57a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:321::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:ae:37:23:f7:65:40:54:33:bf:b4:ca:f2:61:2b:a1:77:
         af:5c:af:fc:d0:42:f6:46:24:a0:13:3f:77:92:70:c3:1c:3d:
         e4:06:b6:9f:b8:c3:5f:b9:81:17:e3:d1:80:a9:12:f7:38:3c:
         24:3f:94:d3:e8:57:8d:82:63:4a:ea:27:26:05:f5:00:90:a3:
         7c:e0:57:06:79:3d:33:0b:6e:4e:a8:73:bc:c7:64:5f:46:9e:
         e7:d7:ce:19:30:5a:00:5e:f0:df:6e:08:dd:1e:c5:79:b5:51:
         4a:a9:15:bb:fa:ed:f1:23:d0:0e:70:01:cb:7a:1f:2a:0d:98:
         25:fd:e6:5b:27:23:43:44:55:c8:3b:60:c8:26:7b:53:82:ce:
         e2:5d:1c:0f:2c:64:9c:34:20:96:58:1e:0a:87:29:13:12:40:
         7d:4c:09:9c:e6:85:50:25:18:17:40:80:15:7a:70:e5:3d:68:
         27:f2:c2:92:87:11:3e:4e:ea:bb:f7:a3:42:8c:40:d4:b8:8f:
         a4:62:4d:83:3c:75:98:f2:94:37:02:b6:4d:56:c9:c3:19:00:
         b3:1f:4f:fa:2e:2a:6b:e9:5a:89:29:ab:a4:4f:39:ea:7c:11:
         e6:69:a8:f1:3e:4e:bc:3f:6a:59:eb:7f:41:45:5d:07:da:d5:
         6d:9b:5f:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV9EyKcQCQcbjND6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
YmM1ZjVmZjMtYjc5MC00OTQwLTk5YjctMWRjYzc4MDhmZTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohW49QIICKeJ+10rllCVJGZzNmA2EvRZssdI
wEsWV9a0VkStCDvRQvVSD8rS4aHxDocoKJRMpcWntQ08SjUidCiujBYYbQLK+pgk
7UN/H2yLTP0+sEnhG8Y6fHRcNeYuBDEnBn4nbqvDf5FHgYl1X2AQSGVRxPkz6fZQ
Zw25D5bPTSZmH6A/rA2GUDyrHHVIOIRQw7xc1RTEzowgo1HiAnOCDsDjZqmB8d7v
Vs9pGmQfhTqXhdpNpsJxaXUnme+fyA1qNhoPoTE8CWP5rERCfsSno10AUtEN7g4G
DZ5ZuM41yH7uQB1oa8MWb51VsENxlryqQEVLYehkqRJ3drpIwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKxUGPJKm8wa1wWFQevr6U5nHUeLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODE5NzRlMjEtYjJiYi0z
MDgwLThjZmItMWE1NTU0ZWE1N2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAMh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGryrjcj92VAVDO/tMryYSuhd69cr/zQQvZGJKATP3eScMMcPeQG
tp+4w1+5gRfj0YCpEvc4PCQ/lNPoV42CY0rqJyYF9QCQo3zgVwZ5PTMLbk6oc7zH
ZF9GnufXzhkwWgBe8N9uCN0exXm1UUqpFbv67fEj0A5wAct6HyoNmCX95lsnI0NE
Vcg7YMgme1OCzuJdHA8sZJw0IJZYHgqHKRMSQH1MCZzmhVAlGBdAgBV6cOU9aCfy
wpKHET5O6rv3o0KMQNS4j6RiTYM8dZjylDcCtk1WycMZALMfT/ouKmvpWokpq6RP
Oep8EeZpqPE+Trw/alnrf0FFXQfa1W2bX2k=
-----END CERTIFICATE-----
Generated at Fri May 17 16:16:49 2024 by rpki-client on console-fra.rpki-client.org