Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eca0a13b-dead-3f98-b59e-8960984c1850.roa
File:                     eca0a13b-dead-3f98-b59e-8960984c1850.roa (raw, json)
Hash identifier:          t/gzf2IKR56YPoSCK67FmnF54NvzZW8GwUOycb4UDLY=
Subject key identifier:   5B:EC:F8:42:2F:DC:0E:6F:05:33:45:C8:69:C0:58:03:B1:03:7D:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D6450A578D5BC7971D6BB0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eca0a13b-dead-3f98-b59e-8960984c1850.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        2001:4888:8033::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:45:0a:57:8d:5b:c7:97:1d:6b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=99593cea-6562-42fd-bd78-22cadb6a9e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:8a:95:32:83:02:65:16:a4:73:b4:d8:73:
                    6b:7c:3f:e9:2d:b0:eb:d2:23:d1:08:6a:39:2f:7f:
                    1c:94:62:14:3f:42:7c:5d:47:3c:96:b4:82:90:1b:
                    5b:96:af:b3:da:8a:e4:ba:b7:ca:4c:11:c0:fd:ce:
                    ea:ec:35:c7:13:d6:f5:46:1a:bd:38:ac:e4:6e:4e:
                    a5:2e:60:d5:57:8d:31:5d:2a:e7:04:39:f3:de:79:
                    43:49:a2:a6:3c:06:1d:e4:be:49:00:00:81:47:8c:
                    ba:04:49:fa:b5:20:3a:46:20:de:a7:d8:8b:02:d1:
                    8f:73:a8:f6:75:85:53:e5:c8:9f:54:81:b0:fa:28:
                    cd:00:c5:8d:51:ec:1b:2d:da:ed:43:2e:46:da:7f:
                    f5:ef:eb:fc:76:2a:72:1b:c0:4e:ec:48:78:0b:a2:
                    0a:f9:33:b3:a8:02:90:60:06:a2:be:ec:25:76:14:
                    ef:21:1b:c1:75:d3:6b:84:67:36:d8:f3:e0:13:3f:
                    44:1b:3a:a1:a3:d9:98:7e:4b:8b:34:8d:59:79:0f:
                    5d:c7:3c:52:d2:9e:36:84:a6:b5:8c:bc:97:e5:c1:
                    17:ab:6b:86:b1:c8:37:11:c5:39:b2:51:ae:7a:51:
                    b0:b0:3b:54:44:8a:d1:48:b3:5a:47:ac:81:b1:3f:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:F8:42:2F:DC:0E:6F:05:33:45:C8:69:C0:58:03:B1:03:7D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eca0a13b-dead-3f98-b59e-8960984c1850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8033::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d7:e1:d5:d4:c8:f5:ee:1f:0f:d2:cf:5a:d8:3f:3f:25:76:
         ae:c9:ff:16:0d:9c:ae:26:ab:16:97:ad:3e:01:bd:c5:fd:6c:
         00:a2:61:ca:cf:62:d5:dd:c8:da:6c:03:4f:82:91:a0:0b:64:
         7a:5a:6b:71:db:2c:b1:2f:da:a0:b9:54:94:03:a0:b8:e3:cc:
         d6:4f:b9:0e:05:ae:d0:fb:b6:1b:7e:d2:cd:b1:6f:ee:90:01:
         fd:89:a2:7f:fb:5d:66:7c:ea:a9:a0:a6:41:d2:fa:7b:1c:6b:
         b7:5a:11:cd:54:97:47:9a:e0:f4:75:0f:9b:dd:88:75:f8:47:
         9c:ed:ca:07:96:9b:6c:6f:fc:6d:1b:5c:60:d6:99:07:b1:cb:
         7a:67:62:db:c8:f9:31:43:6c:2e:e7:4c:24:fa:cc:ea:7f:c6:
         18:e3:fa:54:e1:62:cf:24:ff:82:4b:6c:6b:9d:f5:6d:de:b5:
         db:f6:77:b0:b3:b1:5e:0a:31:08:25:70:27:c3:bf:03:46:50:
         ff:99:6f:53:fb:ea:86:b9:f8:6f:81:24:b6:50:43:02:5a:ac:
         21:69:eb:49:73:b8:6d:56:91:bc:95:e6:30:bf:ac:5e:e6:4a:
         72:c9:76:8e:53:72:42:55:95:7f:7f:ce:d7:6b:37:ad:76:88:
         2c:db:00:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdi1kUKV41bx5cda7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
OTk1OTNjZWEtNjU2Mi00MmZkLWJkNzgtMjJjYWRiNmE5ZTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWeKlTKDAmUWpHO02HNrfD/pLbDr0iPRCGo5
L38clGIUP0J8XUc8lrSCkBtblq+z2orkurfKTBHA/c7q7DXHE9b1Rhq9OKzkbk6l
LmDVV40xXSrnBDnz3nlDSaKmPAYd5L5JAACBR4y6BEn6tSA6RiDep9iLAtGPc6j2
dYVT5cifVIGw+ijNAMWNUewbLdrtQy5G2n/17+v8dipyG8BO7Eh4C6IK+TOzqAKQ
YAaivuwldhTvIRvBddNrhGc22PPgEz9EGzqho9mYfkuLNI1ZeQ9dxzxS0p42hKa1
jLyX5cEXq2uGscg3EcU5slGuelGwsDtURIrRSLNaR6yBsT+G+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFvs+EIv3A5vBTNFyGnAWAOxA33cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWNhMGExM2ItZGVhZC0z
Zjk4LWI1OWUtODk2MDk4NGMxODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD/X4dXUyPXuHw/Sz1rYPz8ldq7J/xYNnK4mqxaXrT4BvcX9bACi
YcrPYtXdyNpsA0+CkaALZHpaa3HbLLEv2qC5VJQDoLjjzNZPuQ4FrtD7tht+0s2x
b+6QAf2Jon/7XWZ86qmgpkHS+nsca7daEc1Ul0ea4PR1D5vdiHX4R5ztygeWm2xv
/G0bXGDWmQexy3pnYtvI+TFDbC7nTCT6zOp/xhjj+lThYs8k/4JLbGud9W3etdv2
d7CzsV4KMQglcCfDvwNGUP+Zb1P76oa5+G+BJLZQQwJarCFp60lzuG1WkbyV5jC/
rF7mSnLJdo5TckJVlX9/ztdrN612iCzbAEM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:00 2024 by rpki-client on console-fra.rpki-client.org