Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa
File:                     1626650d-bc51-3b45-ae3f-8d59976db3ea.roa (raw, json)
Hash identifier:          yrGnVP3pK2H6P38m1JZCjpDIJ38nYN1NlB7ibRcr/xQ=
Subject key identifier:   80:70:D1:EF:44:58:94:4D:20:88:53:E4:94:87:76:94:45:12:8A:7E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844D988C8B95F7737B7CBAF6A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa
Signing time:             Sat 10 Feb 2024 23:05:09 +0000
ROA not before:           Sat 10 Feb 2024 23:05:09 +0000
ROA not after:            Fri 10 May 2024 22:05:09 +0000
asID:                     6939
IP address blocks:        2600:7000::/24 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d9:88:c8:b9:5f:77:37:b7:cb:af:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 10 23:05:09 2024 GMT
            Not After : May 10 22:05:09 2024 GMT
        Subject: CN=8c37727c-4702-4563-8b9f-63cf67e06d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:73:79:19:2d:ba:fd:82:04:30:08:ec:01:
                    42:57:0e:28:72:84:93:7a:c2:87:e3:5c:58:26:9d:
                    e9:40:e2:53:93:fc:0e:c1:d1:89:8b:38:a7:07:27:
                    7e:c8:09:df:30:dc:fd:9c:6a:73:ba:5a:65:85:4d:
                    fc:87:b8:a6:f6:70:c7:5f:7f:da:3b:ae:5f:31:54:
                    64:6d:fe:8a:47:27:80:f5:bf:b5:b4:5e:4f:7d:f2:
                    98:d8:ba:bf:38:92:eb:af:c5:68:1c:c6:5c:4d:fa:
                    57:39:85:d7:00:06:2e:8c:90:b8:ee:7a:c0:a9:9a:
                    c5:17:7f:55:6c:e5:b9:d4:b9:bd:71:51:c3:77:86:
                    7d:ce:06:18:0d:35:95:a7:bf:64:94:b0:e4:49:ba:
                    ee:26:ca:aa:e2:c5:a5:ab:94:14:3f:86:37:7d:a3:
                    82:40:8b:1c:3d:60:73:76:5c:98:ae:4b:91:a4:dd:
                    7d:ae:62:e4:cf:d4:10:52:13:44:30:79:41:cb:6e:
                    a7:2c:13:06:fa:e2:8e:fd:3b:00:8c:e2:37:bf:c7:
                    da:94:29:c5:71:69:10:74:ca:3f:14:fe:93:54:40:
                    ba:88:47:c4:ff:fd:a0:1e:14:e1:5e:92:71:b4:65:
                    c6:d4:90:1e:aa:37:22:e6:06:76:dd:c9:81:6a:58:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:70:D1:EF:44:58:94:4D:20:88:53:E4:94:87:76:94:45:12:8A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1626650d-bc51-3b45-ae3f-8d59976db3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:7000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:3a:7f:63:9d:2a:19:b4:97:56:10:55:d1:d8:03:8f:33:b7:
         b4:a5:ae:03:2c:72:60:ad:80:5b:46:ab:7b:19:b4:07:ca:21:
         e3:6c:68:1b:f3:d3:54:46:a9:53:66:9e:6b:e7:db:ad:0d:e9:
         cd:ef:e0:5d:42:97:b7:c7:35:d9:a7:6a:57:e6:84:62:9a:48:
         5c:0e:99:28:b0:47:40:fe:08:0d:d3:d2:ff:6e:0e:75:35:4b:
         b8:35:e4:4b:39:bf:9b:d0:de:63:76:5c:b6:2c:a5:74:12:97:
         f4:e9:98:99:9b:bc:e1:5d:be:5f:b8:b1:85:d0:8c:a0:5c:4b:
         5f:bb:d5:46:55:fb:11:d0:19:52:08:fd:cd:99:1e:45:c3:28:
         77:11:02:85:cf:77:ca:5a:bf:27:68:26:36:64:0b:89:7c:e1:
         79:fd:28:90:92:5b:43:46:61:2f:63:7d:7d:56:50:8d:fe:4b:
         14:fc:0f:87:f8:bd:69:b6:f7:ea:ed:c1:64:40:4f:ff:4c:ce:
         cd:c6:42:54:b6:b6:39:87:97:f4:a1:dc:61:1a:1a:63:17:06:
         4d:56:0d:d6:ac:63:13:38:2c:00:73:a0:1b:36:5f:d8:89:86:
         e9:d1:14:e9:74:bf:f4:cf:a9:3b:5b:a5:fc:91:c6:96:39:05:
         de:15:51:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETZiMi5X3c3t8uvaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIxMDIzMDUwOVoXDTI0MDUxMDIyMDUwOVowLzEtMCsGA1UEAxMk
OGMzNzcyN2MtNDcwMi00NTYzLThiOWYtNjNjZjY3ZTA2ZDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeNzeRktuv2CBDAI7AFCVw4ocoSTesKH41xY
Jp3pQOJTk/wOwdGJizinByd+yAnfMNz9nGpzulplhU38h7im9nDHX3/aO65fMVRk
bf6KRyeA9b+1tF5PffKY2Lq/OJLrr8VoHMZcTfpXOYXXAAYujJC47nrAqZrFF39V
bOW51Lm9cVHDd4Z9zgYYDTWVp79klLDkSbruJsqq4sWlq5QUP4Y3faOCQIscPWBz
dlyYrkuRpN19rmLkz9QQUhNEMHlBy26nLBMG+uKO/TsAjOI3v8falCnFcWkQdMo/
FP6TVEC6iEfE//2gHhThXpJxtGXG1JAeqjci5gZ23cmBalh/kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBw0e9EWJRNIIhT5JSHdpRFEop+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTYyNjY1MGQtYmM1MS0z
YjQ1LWFlM2YtOGQ1OTk3NmRiM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQAJgBwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK86f2OdKhm0l1YQVdHYA48zt7SlrgMscmCtgFtGq3sZtAfKIeNsaBvz
01RGqVNmnmvn260N6c3v4F1Cl7fHNdmnalfmhGKaSFwOmSiwR0D+CA3T0v9uDnU1
S7g15Es5v5vQ3mN2XLYspXQSl/TpmJmbvOFdvl+4sYXQjKBcS1+71UZV+xHQGVII
/c2ZHkXDKHcRAoXPd8pavydoJjZkC4l84Xn9KJCSW0NGYS9jfX1WUI3+SxT8D4f4
vWm29+rtwWRAT/9Mzs3GQlS2tjmHl/Sh3GEaGmMXBk1WDdasYxM4LABzoBs2X9iJ
hunRFOl0v/TPqTtbpfyRxpY5Bd4VUYo=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:18:04 2024 by rpki-client on console-ams.rpki-client.org