Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b61c61e3-7bea-3be8-94a8-33fb4002a998.roa
File:                     b61c61e3-7bea-3be8-94a8-33fb4002a998.roa (raw, json)
Hash identifier:          /m0HRyFzHNaHm/MUtQWin8fmBSkputrqvoF25IkHtY0=
Subject key identifier:   84:3B:E8:3A:E5:70:E8:88:EE:68:E9:3F:FF:54:0B:47:9A:78:A4:76
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285846654F1DFFA998DCC01C5F25C0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b61c61e3-7bea-3be8-94a8-33fb4002a998.roa
Signing time:             Mon 01 Jul 2024 17:29:04 +0000
ROA not before:           Mon 01 Jul 2024 17:29:04 +0000
ROA not after:            Sun 29 Sep 2024 17:29:04 +0000
asID:                     16509
IP address blocks:        2607:fcf0:10a0::/44 maxlen: 48
                          2607:fcf0:20a0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:65:4f:1d:ff:a9:98:dc:c0:1c:5f:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul  1 17:29:04 2024 GMT
            Not After : Sep 29 17:29:04 2024 GMT
        Subject: CN=e3978ba7-2e20-4c32-8f48-72b064fa4c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:1b:26:9d:59:70:a4:b1:3c:6a:c0:e8:2c:
                    b1:b3:92:11:4c:68:86:f3:15:70:3f:e4:21:28:95:
                    42:22:a8:08:e3:7a:1b:d4:8f:47:26:c6:3c:81:7d:
                    ec:9b:eb:c3:54:0d:e6:ca:fe:7d:41:da:be:be:97:
                    84:21:bc:52:4e:24:34:df:84:82:27:7b:5c:81:d4:
                    19:f1:8c:0d:d7:f9:d3:01:13:d9:98:fe:6e:6f:f9:
                    9b:15:58:c2:61:fa:49:bd:5e:bb:51:da:e9:54:da:
                    01:35:e5:87:d8:be:0e:f3:28:01:cd:72:f4:54:f6:
                    e7:18:79:6e:60:c1:65:98:a7:0d:90:00:c9:20:b9:
                    9b:2d:bb:51:ec:8a:c1:05:7d:66:71:49:09:14:08:
                    9b:93:1d:42:d1:36:fe:68:77:01:85:87:79:c8:09:
                    95:f7:89:87:94:b4:d4:33:ed:86:63:20:cc:62:05:
                    fc:49:43:05:89:35:97:63:fd:d5:9e:8a:56:a0:c7:
                    40:57:92:e1:91:55:d5:e4:a4:64:7b:74:9a:9a:83:
                    34:f9:d3:2a:23:5a:ba:18:70:70:d6:62:d5:73:16:
                    67:29:00:78:0f:e2:04:16:08:aa:ea:98:fa:86:5e:
                    41:53:94:fc:ee:4e:61:f2:87:56:6b:8f:8f:cc:ad:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3B:E8:3A:E5:70:E8:88:EE:68:E9:3F:FF:54:0B:47:9A:78:A4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b61c61e3-7bea-3be8-94a8-33fb4002a998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:10a0::/44
                  2607:fcf0:20a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:23:bb:dc:65:fd:a1:7d:3a:7c:7c:e2:a1:30:20:5d:73:2a:
         74:0e:bc:c3:05:71:3b:2c:9a:ed:8e:d3:51:5e:d2:1b:ce:04:
         c3:f5:29:53:83:2d:14:0b:e9:e3:d0:28:d0:9f:44:aa:5f:ee:
         3e:a5:4d:ee:ad:52:74:47:88:5b:27:d1:d9:8e:b9:69:4a:be:
         2c:fa:2e:56:43:f2:e4:4d:e4:f4:87:8e:33:f8:b6:4c:83:90:
         5f:c9:ee:4c:4a:46:97:26:8e:e8:fd:68:c0:d9:d5:ad:72:cf:
         f4:2b:f7:70:54:97:fb:66:fa:17:21:59:df:a4:9d:a0:d3:98:
         07:aa:73:f3:02:85:79:d4:8d:f9:35:9d:51:b2:07:30:db:5d:
         91:83:d0:65:fb:04:6d:8c:e7:13:bb:0d:91:ca:d3:37:eb:67:
         63:cd:fa:51:37:e9:50:17:2b:e8:c7:f1:87:1f:c2:87:6d:0e:
         22:80:62:23:e4:72:ea:ba:f1:fa:c3:7a:bf:a3:b6:bd:e7:58:
         fa:ea:5c:c2:ef:dd:18:4a:d5:7d:34:24:d2:56:3b:e8:ad:c9:
         ca:0b:18:d9:d5:e8:13:14:bb:03:6c:0c:d2:67:92:e7:83:0d:
         b7:a5:4f:ac:99:70:6e:b1:6e:45:ce:02:d0:52:7f:b2:e4:41:
         c0:49:ff:e1
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEZlTx3/qZjcwBxfJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI0MDcwMTE3MjkwNFoXDTI0MDkyOTE3MjkwNFowLzEtMCsGA1UEAxMk
ZTM5NzhiYTctMmUyMC00YzMyLThmNDgtNzJiMDY0ZmE0YzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8AbJp1ZcKSxPGrA6Cyxs5IRTGiG8xVwP+Qh
KJVCIqgI43ob1I9HJsY8gX3sm+vDVA3myv59Qdq+vpeEIbxSTiQ034SCJ3tcgdQZ
8YwN1/nTARPZmP5ub/mbFVjCYfpJvV67UdrpVNoBNeWH2L4O8ygBzXL0VPbnGHlu
YMFlmKcNkADJILmbLbtR7IrBBX1mcUkJFAibkx1C0Tb+aHcBhYd5yAmV94mHlLTU
M+2GYyDMYgX8SUMFiTWXY/3VnopWoMdAV5LhkVXV5KRke3SamoM0+dMqI1q6GHBw
1mLVcxZnKQB4D+IEFgiq6pj6hl5BU5T87k5h8odWa4+PzK063wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFIQ76DrlcOiI7mjpP/9UC0eaeKR2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjYxYzYxZTMtN2JlYS0z
YmU4LTk0YTgtMzNmYjQwMDJhOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEJgf88BCg
AwcEJgf88CCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAB8ju9xl/aF9Onx84qEwIF1zKnQOvMMFcTssmu2O
01Fe0hvOBMP1KVODLRQL6ePQKNCfRKpf7j6lTe6tUnRHiFsn0dmOuWlKviz6LlZD
8uRN5PSHjjP4tkyDkF/J7kxKRpcmjuj9aMDZ1a1yz/Qr93BUl/tm+hchWd+knaDT
mAeqc/MChXnUjfk1nVGyBzDbXZGD0GX7BG2M5xO7DZHK0zfrZ2PN+lE36VAXK+jH
8YcfwodtDiKAYiPkcuq68frDer+jtr3nWPrqXMLv3RhK1X00JNJWO+itycoLGNnV
6BMUuwNsDNJnkueDDbelT6yZcG6xbkXOAtBSf7LkQcBJ/+E=
-----END CERTIFICATE-----
Generated at Sat Sep 7 22:17:57 2024 by rpki-client on console-fra.rpki-client.org