Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa
File:                     fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa (raw, json)
Hash identifier:          vSJj3m7RRStg8EBoQ4ddys2jX1QGgMDvdfQ/VS/mJV0=
Subject key identifier:   52:A9:D9:49:44:00:52:57:9D:4C:0B:8F:95:A3:12:1E:B9:8C:CF:7C
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F432858477BF6579458B8AE1358B6E1E0
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        2606:9c40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:57:94:58:b8:ae:13:58:b6:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=5d7231ec-4757-4e48-bc05-b4d801c59487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:11:28:54:cf:b6:7e:df:59:46:da:c4:c9:
                    23:b9:49:f7:79:15:43:5e:c8:72:71:20:11:42:3a:
                    4d:7e:b2:17:87:fe:76:06:d3:52:a3:07:7a:3b:c5:
                    7c:3b:04:5e:a1:a5:60:b5:ef:48:44:97:3d:5c:53:
                    ac:72:fe:1b:41:91:fb:33:8e:27:6b:61:57:f9:f8:
                    13:2d:05:db:47:73:99:76:c2:39:c6:22:28:91:d9:
                    ce:1b:32:19:aa:ce:b5:48:29:a9:b9:5e:9a:26:99:
                    a6:de:4b:54:bf:d8:f2:8f:98:21:f5:e5:b5:8f:ad:
                    f4:c9:45:ac:79:90:35:9b:52:16:f0:fe:ab:8e:45:
                    9c:15:3a:00:17:f5:c5:a5:8b:6b:3c:13:0f:58:3e:
                    3e:03:8c:a5:f5:ea:0e:88:82:c8:d9:9f:9f:b3:4c:
                    05:ad:27:ff:a1:d0:ea:cb:6c:cc:a4:19:7d:13:f4:
                    84:a1:72:40:fc:ce:cc:ce:6e:aa:1c:95:7d:d0:1e:
                    cf:26:54:25:55:3d:fe:5f:0a:6d:39:51:59:6a:fe:
                    a5:13:9d:c6:b6:cf:74:b5:fb:bd:52:27:16:a1:2c:
                    46:bd:62:f0:a8:b9:37:c2:84:43:c9:0c:b3:8e:c6:
                    ee:7d:17:cc:f6:08:78:31:ab:9a:fc:f5:b0:fc:a9:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:D9:49:44:00:52:57:9D:4C:0B:8F:95:A3:12:1E:B9:8C:CF:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:79:6b:b4:a4:28:8c:bb:a5:38:db:7b:5b:7f:7d:e4:13:0f:
         3c:ae:c7:97:6e:33:b5:25:cd:16:d7:a8:4b:a8:0d:8c:4d:f4:
         9e:00:8e:d6:f1:8d:96:18:25:62:07:6e:03:b4:38:c0:32:2b:
         45:6c:9e:a0:39:3b:61:a7:70:ec:13:47:55:62:d6:ef:3e:c1:
         20:f7:b0:be:a4:16:92:83:6a:08:14:fb:89:09:85:86:32:44:
         3d:d6:e6:d1:b6:3b:c3:9e:26:ba:ba:fd:44:af:59:ec:9f:67:
         32:db:98:bb:c4:45:b6:40:3a:94:e5:ba:1c:39:d5:d6:4c:d8:
         a4:8c:e3:f6:ef:43:a4:05:38:1a:2c:98:8a:af:53:fe:11:32:
         8b:a4:6a:73:7a:8f:62:80:10:a6:13:08:73:e1:b2:53:0a:3d:
         16:86:1d:3c:a4:1a:43:fa:26:55:52:f4:51:7d:d0:f5:10:ea:
         e4:ac:fa:4c:6c:32:ee:a9:77:b4:fa:3f:34:a3:14:8f:af:32:
         cc:f6:76:62:41:50:4c:4b:0b:e0:ec:aa:78:b8:8b:18:c7:81:
         40:37:96:fc:45:c8:59:c2:72:f6:f1:ff:21:d2:28:64:b7:95:
         97:4a:68:e8:f7:a8:69:4a:c9:c4:49:0b:2b:0f:ee:95:7f:be:
         59:3e:5d:83
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd79leUWLiuE1i24eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTI4NmZkMjgtMDkzOS00OGI5LTg2YmEtY2JlNzkxNDk3
ZDE1MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk
NWQ3MjMxZWMtNDc1Ny00ZTQ4LWJjMDUtYjRkODAxYzU5NDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR8RKFTPtn7fWUbaxMkjuUn3eRVDXshycSAR
QjpNfrIXh/52BtNSowd6O8V8OwReoaVgte9IRJc9XFOscv4bQZH7M44na2FX+fgT
LQXbR3OZdsI5xiIokdnOGzIZqs61SCmpuV6aJpmm3ktUv9jyj5gh9eW1j630yUWs
eZA1m1IW8P6rjkWcFToAF/XFpYtrPBMPWD4+A4yl9eoOiILI2Z+fs0wFrSf/odDq
y2zMpBl9E/SEoXJA/M7Mzm6qHJV90B7PJlQlVT3+XwptOVFZav6lE53Gts90tfu9
UicWoSxGvWLwqLk3woRDyQyzjsbufRfM9gh4Maua/PWw/KkvbQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFKp2UlEAFJXnUwLj5WjEh65jM98MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2
ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3OTE0OTdkMTUvZmEwMjFmZmEtNGMzNi0z
NDhkLTliNmMtMDBjNmNiZGJhNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTI4NmZkMjgtMDkzOS00OGI5LTg2
YmEtY2JlNzkxNDk3ZDE1L2UyODZmZDI4LTA5MzktNDhiOS04NmJhLWNiZTc5MTQ5
N2QxNS5jcmwwHwYDVR0jBBgwFoAUGqScGIN6ivabySjfM0Qw8t1xDpwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3
OTE0OTdkMTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgacQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCYeWu0pCiMu6U423tbf33kEw88rseXbjO1Jc0W16hLqA2MTfSeAI7W
8Y2WGCViB24DtDjAMitFbJ6gOTthp3DsE0dVYtbvPsEg97C+pBaSg2oIFPuJCYWG
MkQ91ubRtjvDnia6uv1Er1nsn2cy25i7xEW2QDqU5bocOdXWTNikjOP270OkBTga
LJiKr1P+ETKLpGpzeo9igBCmEwhz4bJTCj0Whh08pBpD+iZVUvRRfdD1EOrkrPpM
bDLuqXe0+j80oxSPrzLM9nZiQVBMSwvg7Kp4uIsYx4FAN5b8RchZwnL28f8h0ihk
t5WXSmjo96hpSsnESQsrD+6Vf75ZPl2D
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:51 2024 by rpki-client on console-fra.rpki-client.org