Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa
File:                     2b5f910b-7d7d-3334-9361-98cb0de97f81.roa (raw, json)
Hash identifier:          H1/ZRwwnK00h5Z2BMIq0D7Gt7RBtTQhZH1jgrZFjvkM=
Subject key identifier:   C8:94:2D:64:65:D3:F4:98:E2:3A:97:54:C0:71:B7:4B:6B:E1:0A:FC
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F432858450EEACC3FE16E81C559C17388
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     26967
IP address blocks:        2620:125:b00f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:cc:3f:e1:6e:81:c5:59:c1:73:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=b9d6ec52-16ab-427b-b88e-39eb9bc6a3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:c6:74:ed:69:8d:da:50:be:7a:17:94:5e:
                    97:6f:60:55:0b:de:9e:ff:90:7b:64:da:89:35:76:
                    52:b5:86:9f:e7:25:6b:57:36:d4:eb:05:58:13:b7:
                    95:3c:fb:49:fa:ff:09:18:f7:ba:24:89:b2:2b:c9:
                    3f:59:8d:b7:df:68:a1:ec:b0:db:f6:8f:72:39:3e:
                    e1:94:be:5d:5d:57:96:51:20:cb:fc:49:46:11:2a:
                    bb:e0:97:d9:b0:f1:7d:8b:48:0f:0c:3c:7e:40:89:
                    9a:81:17:17:87:ca:a0:50:94:c8:a2:10:4e:99:bc:
                    5d:31:a7:20:30:5f:f2:e4:d7:f9:39:86:c6:44:bd:
                    8e:39:e7:6b:ab:ae:79:34:df:ac:94:4f:1c:2a:9b:
                    03:4d:82:c0:82:b6:cb:d3:da:0e:19:fe:a6:40:7b:
                    76:8d:6c:3e:98:a8:18:c5:42:65:be:7c:01:77:ae:
                    fb:55:77:6c:8b:26:f2:cd:03:83:30:21:12:c5:5c:
                    9e:ca:b7:af:c2:84:62:0d:76:f1:2f:79:81:86:b6:
                    70:5c:d8:11:06:c7:17:63:a9:33:56:98:f0:7f:e5:
                    31:ae:7e:e7:f0:26:8f:fd:ef:86:45:41:46:eb:82:
                    7d:10:3d:30:68:0f:b4:2f:f9:0a:63:78:af:8b:e5:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:94:2D:64:65:D3:F4:98:E2:3A:97:54:C0:71:B7:4B:6B:E1:0A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:125:b00f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7d:00:a1:ce:e8:64:71:13:68:be:dc:e3:c2:f3:8c:7a:5c:
         bf:35:e9:c2:2a:1c:d8:4b:74:01:ca:69:d3:0f:b1:e6:35:ee:
         34:6a:37:fe:0b:ed:9b:a1:3b:1a:33:d5:85:d8:9a:9a:5d:6d:
         9f:af:cd:1d:f0:fb:00:28:9e:33:e3:fa:93:57:74:00:ae:c9:
         40:c2:fa:33:75:6e:4e:81:a3:bb:d8:57:eb:ee:f0:50:9f:ae:
         54:07:ae:99:c1:fa:44:38:31:a9:e5:ca:55:40:1b:d0:b1:62:
         c7:a5:35:a6:20:0c:7e:a9:bf:44:e6:20:a8:90:a9:f4:02:78:
         73:db:0e:2a:21:3d:6b:c7:df:69:3b:ab:80:a1:98:0e:a0:8e:
         5d:28:84:75:60:aa:8e:bd:6a:31:2a:c0:11:c1:05:02:dd:c4:
         a0:30:64:99:f7:0f:0b:91:09:dc:c4:c5:6e:36:89:6d:29:ec:
         01:b3:69:7d:63:e3:99:fe:0e:9f:7d:81:87:d3:4b:c3:1b:b0:
         05:58:a9:d7:ec:bd:ca:fe:c9:a4:52:ae:35:25:1f:de:e1:5b:
         88:eb:15:cd:0c:d4:ff:6e:d5:ba:ea:6a:ac:54:49:7b:5c:f7:
         46:42:c8:bd:ad:4f:a5:c1:20:d3:e0:70:ff:40:68:7b:91:61:
         f9:1f:71:d0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUO6sw/4W6BxVnBc4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2
ZTAwMB4XDTI0MDMwMTAyMDAyN1oXDTI0MDUzMDAxMDAyN1owLzEtMCsGA1UEAxMk
YjlkNmVjNTItMTZhYi00MjdiLWI4OGUtMzllYjliYzZhM2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG/GdO1pjdpQvnoXlF6Xb2BVC96e/5B7ZNqJ
NXZStYaf5yVrVzbU6wVYE7eVPPtJ+v8JGPe6JImyK8k/WY2332ih7LDb9o9yOT7h
lL5dXVeWUSDL/ElGESq74JfZsPF9i0gPDDx+QImagRcXh8qgUJTIohBOmbxdMacg
MF/y5Nf5OYbGRL2OOedrq655NN+slE8cKpsDTYLAgrbL09oOGf6mQHt2jWw+mKgY
xUJlvnwBd677VXdsiybyzQODMCESxVyeyrevwoRiDXbxL3mBhrZwXNgRBscXY6kz
Vpjwf+Uxrn7n8CaP/e+GRUFG64J9ED0waA+0L/kKY3ivi+WqXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMiULWRl0/SY4jqXVMBxt0tr4Qr8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx
YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMmI1ZjkxMGItN2Q3ZC0z
MzM0LTkzNjEtOThjYjBkZTk3ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx
NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj
NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh
MTk3YzZlMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABJbAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF59AKHO6GRxE2i+3OPC84x6XL816cIqHNhLdAHKadMPseY17jRq
N/4L7ZuhOxoz1YXYmppdbZ+vzR3w+wAonjPj+pNXdACuyUDC+jN1bk6Bo7vYV+vu
8FCfrlQHrpnB+kQ4ManlylVAG9CxYselNaYgDH6pv0TmIKiQqfQCeHPbDiohPWvH
32k7q4ChmA6gjl0ohHVgqo69ajEqwBHBBQLdxKAwZJn3DwuRCdzExW42iW0p7AGz
aX1j45n+Dp99gYfTS8MbsAVYqdfsvcr+yaRSrjUlH97hW4jrFc0M1P9u1brqaqxU
SXtc90ZCyL2tT6XBINPgcP9AaHuRYfkfcdA=
-----END CERTIFICATE-----
Generated at Sat May 18 13:40:17 2024 by rpki-client on console-ams.rpki-client.org