Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
File:                     2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa (raw, json)
Hash identifier:          CxxCULR5QOfc2z3CupNQKPcwvrSRS9VGBUxWF7Nsi0w=
Subject key identifier:   05:F2:96:28:B9:CB:48:18:11:92:BA:C7:AC:C3:8B:BB:F9:59:C5:36
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285841E42B0F3319C9F80DB62327E0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Tue 27 Jun 2023 18:00:54 +0000
asID:                     398351
IP address blocks:        2607:f790:fff6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2b:0f:33:19:c9:f8:0d:b6:23:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : Jun 27 18:00:54 2023 GMT
        Subject: CN=c1ffad3c-0f46-49b5-a208-67615f057aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:ad:06:67:03:b4:4e:48:d4:f8:11:7b:47:
                    14:58:b7:8c:28:cd:0f:ac:bd:7e:c2:71:76:49:5b:
                    df:86:0e:5b:9b:45:c8:5f:a6:8f:3a:5a:9c:12:61:
                    af:4b:9b:22:d8:a2:4f:4f:57:31:b5:90:12:41:19:
                    88:4b:61:f8:68:fa:5d:d0:47:97:68:4a:45:a0:8d:
                    96:a0:a1:81:aa:bc:bc:51:a4:28:35:2c:6c:eb:2d:
                    25:2a:b6:13:4f:b1:0b:bb:90:e6:9e:43:63:65:8e:
                    6d:c2:ed:30:3d:ad:0d:3a:0e:0b:09:57:58:e0:d0:
                    0b:1f:07:ad:c5:21:1f:9e:5d:9f:89:2a:55:d4:ee:
                    f2:61:bf:25:c8:ad:b6:ce:f0:0c:c2:16:f8:1d:8c:
                    a0:1c:15:f5:da:80:bc:dc:c1:5f:46:6c:91:59:50:
                    87:04:25:45:6e:63:03:7e:be:2c:88:40:e4:92:1e:
                    85:5a:52:aa:b3:6e:0d:1b:6f:9e:1f:69:b6:ca:29:
                    0d:71:f8:5c:01:40:51:18:fd:5d:0d:42:ba:1d:f8:
                    63:ca:76:c5:e6:bc:fe:40:b9:01:61:ce:28:93:50:
                    b5:2c:a3:b5:12:96:fb:6d:71:c9:75:6c:d5:48:08:
                    cc:cb:2e:c3:a4:8a:ed:c2:45:21:da:ac:1c:59:5c:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                05:F2:96:28:B9:CB:48:18:11:92:BA:C7:AC:C3:8B:BB:F9:59:C5:36
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier: 
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:0f:70:7a:ed:d1:84:08:3f:ff:2b:87:8e:a0:a3:0f:b5:
         57:9a:19:f7:a0:fd:55:d4:8e:8c:d9:a4:8c:1f:7f:c8:df:31:
         db:90:08:2b:54:40:e9:c7:a3:e3:5e:d4:70:a5:14:7b:f0:9b:
         f1:85:25:6a:aa:b9:bc:11:8b:0d:be:d6:be:91:d8:f0:5e:f6:
         a1:e6:b8:60:4f:86:ae:02:3d:c9:fa:9f:4e:c7:0c:15:ba:53:
         b8:30:0e:1a:c8:ee:5f:24:58:e8:e7:6a:73:48:3c:22:eb:ce:
         3d:f5:6d:2e:b3:c7:46:8b:d1:e3:23:3b:ef:7a:85:a5:49:1d:
         41:40:84:c3:56:48:59:58:67:f9:fc:77:e6:42:a9:0e:24:16:
         e9:51:d9:7f:6d:f2:46:eb:f9:31:28:04:05:cb:be:17:e4:24:
         23:3e:0b:0b:21:ce:f2:2c:7d:8d:5b:73:79:ed:e0:78:60:53:
         62:63:3c:bb:e7:58:bd:8d:5f:4d:6d:19:49:59:93:83:36:51:
         5c:d4:3e:f8:5e:ba:e4:1c:c7:d2:85:da:42:6d:f3:24:4d:ce:
         7d:10:ab:37:63:49:fb:f9:af:98:60:87:ed:d8:e9:48:d5:e0:
         d3:2a:3e:dd:92:d4:b4:20:96:ab:94:f3:51:2c:ea:1c:b3:17:
         03:93:0f:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEHkKw8zGcn4DbYjJ+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTIzMDUxNTE2MDgxMFoXDTIzMDYyNzE4MDA1NFowLzEtMCsGA1UEAxMk
YzFmZmFkM2MtMGY0Ni00OWI1LWEyMDgtNjc2MTVmMDU3YWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy6tBmcDtE5I1PgRe0cUWLeMKM0PrL1+wnF2
SVvfhg5bm0XIX6aPOlqcEmGvS5si2KJPT1cxtZASQRmIS2H4aPpd0EeXaEpFoI2W
oKGBqry8UaQoNSxs6y0lKrYTT7ELu5DmnkNjZY5twu0wPa0NOg4LCVdY4NALHwet
xSEfnl2fiSpV1O7yYb8lyK22zvAMwhb4HYygHBX12oC83MFfRmyRWVCHBCVFbmMD
fr4siEDkkh6FWlKqs24NG2+eH2m2yikNcfhcAUBRGP1dDUK6HfhjynbF5rz+QLkB
Yc4ok1C1LKO1Epb7bXHJdWzVSAjMyy7DpIrtwkUh2qwcWVxxmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAXylii5y0gYEZK6x6zDi7v5WcU2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMmQ1ZTM2MjAtNTJmZC0z
MGNmLTlhYjQtNWE5ZTllOWE0MzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3kP/2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGChD3B67dGECD//K4eOoKMPtVeaGfeg/VXUjozZpIwff8jfMduQ
CCtUQOnHo+Ne1HClFHvwm/GFJWqqubwRiw2+1r6R2PBe9qHmuGBPhq4CPcn6n07H
DBW6U7gwDhrI7l8kWOjnanNIPCLrzj31bS6zx0aL0eMjO+96haVJHUFAhMNWSFlY
Z/n8d+ZCqQ4kFulR2X9t8kbr+TEoBAXLvhfkJCM+CwshzvIsfY1bc3nt4HhgU2Jj
PLvnWL2NX01tGUlZk4M2UVzUPvheuuQcx9KF2kJt8yRNzn0QqzdjSfv5r5hgh+3Y
6UjV4NMqPt2S1LQglquU81Es6hyzFwOTDwc=
-----END CERTIFICATE-----
Generated at Mon May 15 16:58:25 2023 by rpki-client on console-ams.rpki-client.org