Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa
File:                     8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa (raw, json)
Hash identifier:          WAXNJgr0017jut/O3Df7myzh7frkDS4N1UqiYhj9B2I=
Subject key identifier:   E2:BF:0D:06:EA:FF:05:CD:47:94:38:F4:9F:83:30:39:37:4C:BE:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473D25F49CB414F204CAE32E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     12222
IP address blocks:        2001:4878:4204::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f4:9c:b4:14:f2:04:ca:e3:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=7fb4b1e6-a396-4094-bff1-827bba4ffc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:25:c5:37:1c:7a:48:6e:fb:0a:86:d9:06:
                    e6:f1:4e:3a:b5:05:2d:44:60:3e:4b:56:b5:9f:c5:
                    8f:67:f7:69:f0:06:7c:6e:7d:6d:6b:b6:d4:c4:e9:
                    6d:ef:8f:46:7a:1c:6e:d3:52:ac:cc:af:38:2d:a5:
                    f9:e2:17:ca:9f:6f:d2:1d:48:85:e5:8b:c3:bb:06:
                    a0:f6:b1:3b:a5:f9:ff:20:51:57:a9:9b:0b:f8:ff:
                    fb:bb:42:d1:55:e4:a5:de:46:ba:b4:2f:1e:66:9e:
                    29:25:4f:c8:98:95:31:30:58:cd:07:00:ff:dd:74:
                    ac:1d:17:9d:a1:e7:8d:82:8c:16:b1:8a:0e:9b:a4:
                    8c:b1:71:ae:52:0a:dd:4f:98:f5:70:96:27:7e:b5:
                    34:6a:0b:69:46:d3:d7:17:a8:7e:1a:56:6c:b4:97:
                    21:41:5e:04:6d:12:76:12:85:01:e8:2b:ef:f3:aa:
                    4a:91:c5:9d:7d:44:77:e3:42:90:5f:ec:eb:1e:69:
                    0b:32:99:39:2b:80:ec:64:b8:59:7b:89:f9:74:f5:
                    20:c7:4a:19:04:95:e0:2f:80:8c:b5:53:cd:a6:54:
                    4d:cd:e4:9c:fd:18:b5:eb:94:0f:fa:3d:a8:17:00:
                    25:a7:87:be:12:88:4a:4f:7d:70:e4:29:82:37:41:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BF:0D:06:EA:FF:05:CD:47:94:38:F4:9F:83:30:39:37:4C:BE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9a:2f:d8:49:44:13:cf:68:3c:d7:87:de:18:c2:22:b8:83:
         5f:f3:f8:53:64:5f:6f:88:42:af:58:40:3d:36:6d:46:ce:f0:
         c7:12:06:9c:35:4c:19:71:c4:a2:05:62:53:fd:79:86:19:2c:
         e3:2f:eb:ac:bc:6a:1d:ca:b7:0b:c0:62:9c:df:bb:b5:9a:a8:
         ca:d1:e9:84:39:d9:fa:38:ab:69:00:15:3e:60:22:c0:33:ed:
         b2:68:68:2d:13:dc:bc:86:5b:80:7a:ee:8a:a7:7e:cb:5a:3a:
         d3:9e:f7:24:45:51:8d:e3:18:56:37:92:6e:c6:b8:7b:eb:72:
         3a:0f:0b:6a:33:f8:83:11:4f:8b:ca:ad:ae:24:f1:96:15:7f:
         17:8d:5b:89:e9:d0:97:b9:44:7d:c5:4c:94:3d:b1:ba:2d:03:
         40:4e:83:45:47:f4:31:bb:e5:32:36:6f:bf:f9:d3:0a:e9:df:
         33:15:63:d9:ef:68:67:2d:99:f1:0f:c8:4c:b7:a3:5d:27:47:
         d5:18:34:b1:ad:d5:e9:f9:4f:61:59:da:28:9d:8a:6c:8d:ba:
         15:31:39:f8:b1:a7:3b:3c:78:13:89:54:c1:81:68:02:0f:bb:
         13:e7:67:06:b0:71:28:01:43:40:18:38:a5:ce:8e:92:4b:f4:
         2c:ea:55:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc9JfSctBTyBMrjLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk
N2ZiNGIxZTYtYTM5Ni00MDk0LWJmZjEtODI3YmJhNGZmYzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r0lxTccekhu+wqG2Qbm8U46tQUtRGA+S1a1
n8WPZ/dp8AZ8bn1ta7bUxOlt749Gehxu01KszK84LaX54hfKn2/SHUiF5YvDuwag
9rE7pfn/IFFXqZsL+P/7u0LRVeSl3ka6tC8eZp4pJU/ImJUxMFjNBwD/3XSsHRed
oeeNgowWsYoOm6SMsXGuUgrdT5j1cJYnfrU0agtpRtPXF6h+GlZstJchQV4EbRJ2
EoUB6Cvv86pKkcWdfUR340KQX+zrHmkLMpk5K4DsZLhZe4n5dPUgx0oZBJXgL4CM
tVPNplRNzeSc/Ri165QP+j2oFwAlp4e+EohKT31w5CmCN0EheQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOK/DQbq/wXNR5Q49J+DMDk3TL5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU5ZjY3ZjQtZmI4Ni0z
ZDc0LTgzMzQtZDEyMTQ2YjNiMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEIE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFaaL9hJRBPPaDzXh94YwiK4g1/z+FNkX2+IQq9YQD02bUbO8McS
Bpw1TBlxxKIFYlP9eYYZLOMv66y8ah3KtwvAYpzfu7WaqMrR6YQ52fo4q2kAFT5g
IsAz7bJoaC0T3LyGW4B67oqnfstaOtOe9yRFUY3jGFY3km7GuHvrcjoPC2oz+IMR
T4vKra4k8ZYVfxeNW4np0Je5RH3FTJQ9sbotA0BOg0VH9DG75TI2b7/50wrp3zMV
Y9nvaGctmfEPyEy3o10nR9UYNLGt1en5T2FZ2iidimyNuhUxOfixpzs8eBOJVMGB
aAIPuxPnZwawcSgBQ0AYOKXOjpJL9CzqVXM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:44:09 2024 by rpki-client on console-ams.rpki-client.org