Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/49985333-74ac-3de3-aa61-d47e08ca7874.roa
File:                     49985333-74ac-3de3-aa61-d47e08ca7874.roa (raw, json)
Hash identifier:          INZol/Sz3ACbexrSpvqQ+csiQvA/LXPL0ll67QeLzFk=
Subject key identifier:   81:67:FF:7F:90:EE:42:A4:E6:F9:5D:A4:2A:3D:09:54:8E:17:1A:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76A408FE5629AA842D5100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/49985333-74ac-3de3-aa61-d47e08ca7874.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1005:b1bf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:a4:08:fe:56:29:aa:84:2d:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=debe178c-c0b3-4226-8d1c-2a236e60d59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:eb:a7:1b:2c:cb:75:e9:d8:ac:76:7b:73:af:
                    32:9f:e3:c7:cf:01:67:da:de:a0:e7:58:fe:d5:a9:
                    3c:78:5e:1e:3c:47:09:79:bc:f3:50:d0:2e:b7:93:
                    f1:76:a1:56:02:5f:f4:85:c9:b1:b4:89:c2:b7:55:
                    95:73:b1:e3:12:d2:c8:2f:80:69:6a:46:ef:05:b7:
                    ef:1e:16:b1:9c:a1:0e:cb:eb:97:98:45:51:50:a6:
                    0b:86:c2:77:62:09:97:ba:c3:04:63:83:2a:20:a4:
                    53:85:21:82:4d:f3:e0:df:f7:36:c7:21:b4:c3:6b:
                    9d:ef:20:3c:97:aa:f7:3d:c5:57:71:70:0e:74:2a:
                    83:4c:3f:84:a1:2d:1b:3c:4b:06:39:ec:8e:ef:bb:
                    c7:e3:78:b5:d3:34:0e:21:52:97:8d:85:ac:fc:24:
                    31:7b:08:d4:95:4a:fc:07:20:af:eb:12:80:f5:c7:
                    9f:89:5f:f7:20:f0:46:77:15:b7:5f:04:63:b7:65:
                    3c:3d:96:51:df:46:b7:10:14:e6:73:c1:a1:62:c3:
                    be:bf:3c:05:ec:ea:4c:9e:80:b6:e1:49:bb:69:63:
                    41:5c:7c:51:bc:28:c9:e7:9b:4e:12:a6:52:34:6b:
                    dd:f4:fe:18:2f:e5:0c:dc:8c:77:f6:5d:70:94:61:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:67:FF:7F:90:EE:42:A4:E6:F9:5D:A4:2A:3D:09:54:8E:17:1A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/49985333-74ac-3de3-aa61-d47e08ca7874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b1bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:88:4d:5c:e5:16:d7:cb:51:a2:de:57:dd:76:f9:e1:b4:
         2c:0f:a8:5c:6b:40:51:0e:2c:8d:61:9c:d1:d7:a9:83:85:97:
         58:2f:57:31:e1:de:0e:6a:52:94:31:5f:da:f9:b8:64:13:14:
         37:5b:8e:96:8c:36:2d:19:7c:b8:7e:fc:ee:8f:3e:83:30:14:
         43:24:49:8f:eb:ca:a3:a2:1a:d9:6e:25:28:95:47:a6:50:2f:
         be:5e:6c:a9:b6:4e:6f:06:ff:69:64:a9:79:8c:a3:82:24:a9:
         50:48:81:36:3b:cc:0a:af:f9:ce:ef:24:d3:47:fe:a1:e3:88:
         3b:15:58:39:8f:04:52:1c:0c:aa:9e:5b:81:0f:42:a0:68:f8:
         1f:8d:91:fc:07:a8:63:60:bf:4b:62:e8:68:59:1b:b5:ea:44:
         56:7a:42:b0:c0:c5:05:c5:d5:f1:9b:62:49:08:52:24:c3:96:
         3d:d1:ac:e2:d4:83:9a:39:56:2f:4b:00:a5:bb:a5:56:ef:09:
         58:35:a2:1e:b0:44:f3:82:37:39:0b:86:7b:4b:50:37:2b:e0:
         f5:2f:a2:fd:e0:23:9d:3a:5e:25:f7:a4:70:9e:e7:24:d8:b8:
         5a:93:6e:3e:83:2e:32:35:da:89:ce:29:1a:44:f5:ec:99:a7:
         f5:59:11:7b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddqQI/lYpqoQtUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZGViZTE3OGMtYzBiMy00MjI2LThkMWMtMmEyMzZlNjBkNTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+unGyzLdenYrHZ7c68yn+PHzwFn2t6g51j+
1ak8eF4ePEcJebzzUNAut5PxdqFWAl/0hcmxtInCt1WVc7HjEtLIL4BpakbvBbfv
HhaxnKEOy+uXmEVRUKYLhsJ3YgmXusMEY4MqIKRThSGCTfPg3/c2xyG0w2ud7yA8
l6r3PcVXcXAOdCqDTD+EoS0bPEsGOeyO77vH43i10zQOIVKXjYWs/CQxewjUlUr8
ByCv6xKA9cefiV/3IPBGdxW3XwRjt2U8PZZR30a3EBTmc8GhYsO+vzwF7OpMnoC2
4Um7aWNBXHxRvCjJ55tOEqZSNGvd9P4YL+UM3Ix39l1wlGHhxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIFn/3+Q7kKk5vldpCo9CVSOFxopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDk5ODUzMzMtNzRhYy0z
ZGUzLWFhNjEtZDQ3ZTA4Y2E3ODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBbG/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFnPiE1c5RbXy1Gi3lfddvnhtCwPqFxrQFEOLI1hnNHXqYOFl1gv
VzHh3g5qUpQxX9r5uGQTFDdbjpaMNi0ZfLh+/O6PPoMwFEMkSY/ryqOiGtluJSiV
R6ZQL75ebKm2Tm8G/2lkqXmMo4IkqVBIgTY7zAqv+c7vJNNH/qHjiDsVWDmPBFIc
DKqeW4EPQqBo+B+NkfwHqGNgv0ti6GhZG7XqRFZ6QrDAxQXF1fGbYkkIUiTDlj3R
rOLUg5o5Vi9LAKW7pVbvCVg1oh6wRPOCNzkLhntLUDcr4PUvov3gI506XiX3pHCe
5yTYuFqTbj6DLjI12onOKRpE9eyZp/VZEXs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:28 2024 by rpki-client on console-fra.rpki-client.org