Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e5f4af-beee-31b2-a84c-42ef3100a6e1.roa
File:                     87e5f4af-beee-31b2-a84c-42ef3100a6e1.roa (raw, json)
Hash identifier:          bL+1FzhbNxkmR2DSyrqxp5eHlfEQ8ywrn2h1s89KdDw=
Subject key identifier:   0E:83:36:AE:DB:BA:23:C0:AD:F9:1B:CA:55:8C:01:91:4C:E8:98:A6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A1617308E4710C68302D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e5f4af-beee-31b2-a84c-42ef3100a6e1.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c55::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:61:73:08:e4:71:0c:68:30:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=97bf1b08-5ac3-4e30-a6d7-9df06c720cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:0f:93:b7:93:6d:c1:7b:f4:a2:a8:1d:92:
                    15:de:c3:02:d6:cf:09:9e:65:6d:3a:7a:21:46:d4:
                    db:6e:e0:6e:3d:98:a5:e4:3d:84:fb:49:be:b5:88:
                    62:1d:97:e6:21:d9:8d:a5:70:00:e6:00:12:a3:72:
                    91:94:ac:35:b1:5b:69:4e:e4:bb:80:a4:1d:f2:e4:
                    96:90:a0:3c:88:f1:ea:64:49:8b:d2:1f:d9:08:02:
                    a3:d1:61:8b:1a:f6:62:7a:18:d1:27:d5:ba:63:0f:
                    f7:17:38:dd:0b:62:6f:c6:dc:8c:99:c6:aa:de:92:
                    f6:6a:45:40:b6:5b:80:79:c6:57:ca:99:bb:eb:a6:
                    91:37:7e:3e:15:e5:c0:85:e2:be:68:d8:d4:c9:85:
                    8d:50:fb:c3:06:b9:09:e4:d5:8c:f1:d4:d5:6a:8f:
                    e6:45:cd:31:98:4b:28:5e:11:b8:14:c4:64:9d:c6:
                    14:24:af:e3:24:a9:b2:70:34:70:6c:22:af:94:00:
                    46:a8:da:dc:d4:8f:44:da:c2:f9:53:f3:d7:0b:4c:
                    6b:16:2c:2f:8f:c4:8f:bc:ae:a6:c8:fa:b7:9d:bf:
                    e5:75:9f:e2:68:66:d8:b1:0f:33:ad:df:1a:35:dc:
                    73:05:d1:3c:ef:b2:df:40:0c:c7:27:f0:39:0f:b8:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:83:36:AE:DB:BA:23:C0:AD:F9:1B:CA:55:8C:01:91:4C:E8:98:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e5f4af-beee-31b2-a84c-42ef3100a6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c55::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:56:e8:a8:ba:11:9a:e7:a9:43:79:55:78:22:4e:91:f3:
         9d:a7:ef:98:9b:d3:f3:5a:f4:c9:e9:da:4b:7d:fb:5e:ca:54:
         64:de:47:81:f9:b0:b2:7d:74:11:ef:67:bd:4b:37:4f:d4:2e:
         c1:4d:cd:5d:45:75:d4:41:fc:dd:71:38:ee:37:57:85:9f:14:
         2e:93:53:97:49:5a:8e:cc:93:dd:2c:5b:b8:9a:93:f1:ae:5f:
         64:9d:40:fd:f4:d9:86:bc:b9:c1:0b:a0:4a:f0:40:cd:70:42:
         a6:58:3c:23:0b:29:47:65:26:32:7f:56:44:1f:c5:30:a9:f3:
         25:48:2d:a2:cc:13:83:d6:85:29:88:4a:1f:99:24:02:98:c4:
         06:84:80:e7:b8:68:29:aa:86:c8:41:59:7b:02:66:f2:83:49:
         c5:6d:2a:09:49:d9:ba:00:9f:0f:e1:55:10:d7:72:ed:91:14:
         60:55:eb:6c:67:f0:28:14:86:e7:6e:8b:af:63:14:00:20:91:
         dd:45:08:ce:9f:19:eb:92:37:73:9e:ff:48:cf:0b:8d:db:9b:
         32:ce:37:ce:3d:80:bc:b5:9f:b2:6c:46:1f:28:df:3a:4e:88:
         59:37:fe:eb:8a:8a:11:a6:74:b0:f6:1a:08:2a:d4:81:6b:54:
         21:57:4f:11
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcioWFzCORxDGgwLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
OTdiZjFiMDgtNWFjMy00ZTMwLWE2ZDctOWRmMDZjNzIwY2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZcPk7eTbcF79KKoHZIV3sMC1s8JnmVtOnoh
RtTbbuBuPZil5D2E+0m+tYhiHZfmIdmNpXAA5gASo3KRlKw1sVtpTuS7gKQd8uSW
kKA8iPHqZEmL0h/ZCAKj0WGLGvZiehjRJ9W6Yw/3FzjdC2JvxtyMmcaq3pL2akVA
tluAecZXypm766aRN34+FeXAheK+aNjUyYWNUPvDBrkJ5NWM8dTVao/mRc0xmEso
XhG4FMRkncYUJK/jJKmycDRwbCKvlABGqNrc1I9E2sL5U/PXC0xrFiwvj8SPvK6m
yPq3nb/ldZ/iaGbYsQ8zrd8aNdxzBdE877LfQAzHJ/A5D7gviwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA6DNq7buiPArfkbylWMAZFM6JimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODdlNWY0YWYtYmVlZS0z
MWIyLWE4NGMtNDJlZjMxMDBhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsVTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCDblboqLoRmuepQ3lVeCJOkfOdp++Ym9PzWvTJ6dpLffteylRk3keB
+bCyfXQR72e9SzdP1C7BTc1dRXXUQfzdcTjuN1eFnxQuk1OXSVqOzJPdLFu4mpPx
rl9knUD99NmGvLnBC6BK8EDNcEKmWDwjCylHZSYyf1ZEH8UwqfMlSC2izBOD1oUp
iEofmSQCmMQGhIDnuGgpqobIQVl7Ambyg0nFbSoJSdm6AJ8P4VUQ13LtkRRgVets
Z/AoFIbnbouvYxQAIJHdRQjOnxnrkjdznv9IzwuN25syzjfOPYC8tZ+ybEYfKN86
TohZN/7riooRpnSw9hoIKtSBa1QhV08R
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:13 2024 by rpki-client on console-fra.rpki-client.org