Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa
File:                     2c0a15c6-fc43-369f-8434-b2046445ad33.roa (raw, json)
Hash identifier:          5jbhKMJ2pI2uTjG8nUchZmrJuwZNoU22UVlX7hxGMZA=
Subject key identifier:   47:C4:5F:A3:6A:07:2C:0B:4C:28:BE:82:1F:8B:F7:65:E0:09:A5:BA
Certificate issuer:       /CN=c23acc72-dfd4-42de-ae0b-b8b0fd597ee7
Certificate serial:       010D0C9F43285847CE6F3AEDC845A9CA789B5C80
Authority key identifier: 4D:FF:96:52:7E:44:83:36:D6:48:C3:A8:EF:3A:95:FA:14:6A:A4:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     398933
IP address blocks:        2607:540::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3a:ed:c8:45:a9:ca:78:9b:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23acc72-dfd4-42de-ae0b-b8b0fd597ee7
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=446ae113-e550-4b9d-91f9-d7db20039787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:86:9c:af:fd:69:74:97:c4:5a:08:db:cb:
                    69:4f:ca:50:2f:6e:92:3e:c0:09:35:8e:b7:d0:cc:
                    26:14:95:6c:a5:4f:25:8c:4e:16:22:44:28:74:cc:
                    43:cf:42:10:5a:bd:44:0d:a1:37:61:db:53:d7:fb:
                    c0:27:15:bf:56:ed:ee:40:f6:ab:79:0b:e1:12:56:
                    eb:03:a8:2c:65:8c:a8:de:10:ba:54:5c:16:ce:e8:
                    b0:e3:4a:e1:ab:40:90:fb:15:05:5c:e0:34:ce:4d:
                    c7:47:b8:7c:dd:2c:46:60:42:f4:df:e9:e6:04:88:
                    ca:2d:42:c7:50:4e:b7:2b:c3:70:61:1c:53:0d:b3:
                    4c:a1:c3:99:a6:5b:3a:0d:68:af:0d:f4:2d:4c:7e:
                    e8:b6:e4:8d:89:c3:80:0d:95:6b:2b:b0:bd:19:ac:
                    5d:67:06:4b:a5:c6:d0:e9:4f:c2:a0:c1:3a:2b:67:
                    19:5c:be:a1:33:f1:e3:97:cb:75:ca:3a:60:b3:3f:
                    b5:5d:bb:84:eb:fd:71:fb:48:86:31:4a:11:96:8b:
                    69:00:87:a6:6a:55:cc:7e:6b:ba:92:51:02:d1:c0:
                    e7:55:35:e1:09:4b:07:e7:da:d4:89:50:3b:cf:6b:
                    23:86:7f:31:c2:bd:f5:26:8f:de:62:65:1c:32:d9:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C4:5F:A3:6A:07:2C:0B:4C:28:BE:82:1F:8B:F7:65:E0:09:A5:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.crl

            X509v3 Authority Key Identifier:
                keyid:4D:FF:96:52:7E:44:83:36:D6:48:C3:A8:EF:3A:95:FA:14:6A:A4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:81:1c:d8:d6:d4:35:81:9a:00:44:34:99:e4:9f:25:d3:f5:
         da:1f:87:b6:50:ff:09:dc:37:d8:bb:0a:c9:8e:05:57:3d:ff:
         f5:70:8a:04:ca:1a:c5:61:d1:df:e1:6a:1e:c1:9e:1c:74:0f:
         e0:42:63:a4:e1:8e:5c:f8:c6:d7:11:75:a2:9e:4b:ab:54:d7:
         00:9b:68:88:05:23:b8:30:3f:3e:43:22:16:0f:ac:9b:b0:5c:
         20:85:f6:e1:a9:de:ec:20:52:44:25:2e:da:4b:7c:82:2b:25:
         f4:d4:13:90:12:dc:ba:a2:b5:78:a9:02:d0:99:44:fc:bb:c4:
         f8:16:00:06:b6:a2:e3:4d:f9:f4:5c:ec:a9:bc:f4:19:05:0f:
         57:cc:d5:8d:26:86:7f:93:f5:95:96:8d:3e:b4:ff:6a:8e:b7:
         02:98:45:84:30:81:78:e2:32:66:0b:0d:98:cf:df:87:f7:88:
         80:b4:49:1c:40:e7:07:65:e5:8b:ac:46:d9:10:ca:c8:42:04:
         a4:0e:d5:ed:40:30:0c:73:21:6a:83:ef:3f:d7:c1:82:25:39:
         9a:44:b4:7a:dc:2e:08:05:74:6f:be:3e:67:bc:b5:46:26:5a:
         5c:03:c2:26:a2:c9:19:95:72:fe:2d:52:37:53:ed:5b:33:13:
         58:2e:ec:38
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfObzrtyEWpynibXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIzYWNjNzItZGZkNC00MmRlLWFlMGItYjhiMGZkNTk3
ZWU3MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
NDQ2YWUxMTMtZTU1MC00YjlkLTkxZjktZDdkYjIwMDM5Nzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy++GnK/9aXSXxFoI28tpT8pQL26SPsAJNY63
0MwmFJVspU8ljE4WIkQodMxDz0IQWr1EDaE3YdtT1/vAJxW/Vu3uQPareQvhElbr
A6gsZYyo3hC6VFwWzuiw40rhq0CQ+xUFXOA0zk3HR7h83SxGYEL03+nmBIjKLULH
UE63K8NwYRxTDbNMocOZpls6DWivDfQtTH7otuSNicOADZVrK7C9GaxdZwZLpcbQ
6U/CoME6K2cZXL6hM/Hjl8t1yjpgsz+1XbuE6/1x+0iGMUoRlotpAIemalXMfmu6
klEC0cDnVTXhCUsH59rUiVA7z2sjhn8xwr31Jo/eYmUcMtmteQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEfEX6NqBywLTCi+gh+L92XgCaW6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMjNh
Y2M3Mi1kZmQ0LTQyZGUtYWUwYi1iOGIwZmQ1OTdlZTcvMmMwYTE1YzYtZmM0My0z
NjlmLTg0MzQtYjIwNDY0NDVhZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzIzYWNjNzItZGZkNC00MmRlLWFl
MGItYjhiMGZkNTk3ZWU3L2MyM2FjYzcyLWRmZDQtNDJkZS1hZTBiLWI4YjBmZDU5
N2VlNy5jcmwwHwYDVR0jBBgwFoAUTf+WUn5EgzbWSMOo7zqV+hRqpLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMjNhY2M3Mi1kZmQ0LTQyZGUtYWUwYi1iOGIw
ZmQ1OTdlZTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcFQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCRgRzY1tQ1gZoARDSZ5J8l0/XaH4e2UP8J3DfYuwrJjgVXPf/1cIoE
yhrFYdHf4WoewZ4cdA/gQmOk4Y5c+MbXEXWinkurVNcAm2iIBSO4MD8+QyIWD6yb
sFwghfbhqd7sIFJEJS7aS3yCKyX01BOQEty6orV4qQLQmUT8u8T4FgAGtqLjTfn0
XOypvPQZBQ9XzNWNJoZ/k/WVlo0+tP9qjrcCmEWEMIF44jJmCw2Yz9+H94iAtEkc
QOcHZeWLrEbZEMrIQgSkDtXtQDAMcyFqg+8/18GCJTmaRLR63C4IBXRvvj5nvLVG
JlpcA8ImoskZlXL+LVI3U+1bMxNYLuw4
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:33 2024 by rpki-client on console-ams.rpki-client.org