Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/c08afd29-de04-3c6c-978c-64b3514fee97.roa
File:                     c08afd29-de04-3c6c-978c-64b3514fee97.roa (raw, json)
Hash identifier:          IZ4Js0BgSA+Ppyd4udwHyO2dFmD2GQn8KsTuA35RKlg=
Subject key identifier:   56:53:83:1F:8D:27:F3:F3:4E:4D:ED:CD:8B:B4:C1:D4:F4:85:B3:37
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F4328584625FA69F95D22D3ED874A7B80
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/c08afd29-de04-3c6c-978c-64b3514fee97.roa
Signing time:             Sun 09 Jun 2024 01:00:24 +0000
ROA not before:           Sun 09 Jun 2024 01:00:24 +0000
ROA not after:            Sat 07 Sep 2024 01:00:24 +0000
asID:                     53698
IP address blocks:        2620:134:1000::/44 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:25:fa:69:f9:5d:22:d3:ed:87:4a:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Jun  9 01:00:24 2024 GMT
            Not After : Sep  7 01:00:24 2024 GMT
        Subject: CN=5e76d6d2-e3d9-42b5-928f-0da38beb3510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:66:32:7f:24:9c:26:4c:ff:5e:f2:bf:46:3c:
                    b0:de:87:ec:0b:db:90:8a:fc:77:1d:db:68:93:0b:
                    f7:1e:49:a5:f5:8f:d1:1d:71:c8:6d:f2:68:01:eb:
                    fb:87:79:87:73:a3:ce:b3:bf:b4:fd:94:38:c1:30:
                    4e:8b:4a:7b:3f:f4:56:95:05:81:6c:b4:7c:ca:9f:
                    ed:7b:fe:a7:3a:59:a1:fe:ca:c7:34:c5:34:92:75:
                    7c:3b:e5:df:15:06:a6:58:ac:fa:c7:c2:ea:35:53:
                    2e:3e:f6:79:4e:44:b3:7a:8c:46:c1:02:78:51:cc:
                    1a:0f:e7:19:83:74:e8:6d:06:af:e0:ba:a1:6f:6c:
                    4e:2a:b1:9b:58:11:bf:e5:b3:15:4f:fb:23:1f:48:
                    02:80:4e:ea:cd:46:27:e7:4c:8d:74:cf:71:c6:1f:
                    30:c6:53:62:43:59:25:09:c5:3e:1b:c1:38:41:ea:
                    d9:b7:88:be:be:cc:ac:e5:86:1c:fc:32:6f:eb:07:
                    fe:d6:f7:16:08:d8:89:61:f7:08:36:ee:de:bc:70:
                    b8:4d:9a:3d:f0:2b:1c:f9:58:42:b2:47:e3:c8:35:
                    58:5a:64:d7:3e:2d:e2:de:15:78:84:aa:48:12:1c:
                    ca:df:1b:a6:49:92:32:40:17:dd:ed:b8:c3:52:69:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:53:83:1F:8D:27:F3:F3:4E:4D:ED:CD:8B:B4:C1:D4:F4:85:B3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/c08afd29-de04-3c6c-978c-64b3514fee97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:cd:9d:e5:73:0b:48:02:bc:6f:38:79:3e:36:5b:c4:64:
         81:77:b7:60:6f:15:66:8d:c5:ad:07:3a:e0:96:80:f1:7a:66:
         fa:e2:5f:99:73:98:f8:f1:e1:ed:fd:bc:9e:43:35:34:f5:20:
         bf:09:2a:b0:be:77:76:cb:cf:8e:1a:cd:0e:83:4e:93:b7:c6:
         7d:5b:76:63:b4:82:92:e9:c2:e8:52:e2:78:93:14:3c:c1:7f:
         88:d8:47:b2:a3:51:f4:3e:e0:6a:66:a5:4b:22:23:c0:d6:d4:
         1f:95:b0:7b:41:18:b0:93:5b:7a:eb:1e:76:ad:2d:85:50:54:
         c4:a1:0c:96:2b:8a:e2:0e:8a:e8:fd:51:94:76:12:66:c2:b3:
         be:31:b7:6c:26:0b:60:40:75:d3:42:1b:1d:3b:4e:cb:f8:c1:
         7e:20:1e:c2:05:c7:c9:c4:26:2b:78:c3:45:98:2f:1e:f7:12:
         98:7d:fd:79:68:02:d2:b2:92:17:57:f6:77:d5:2b:4a:b3:b1:
         3f:a7:23:2b:2c:33:62:7f:6f:81:b0:78:df:72:04:1f:86:5d:
         29:39:8e:96:08:ea:1f:89:56:a0:15:38:f8:30:ba:ad:ef:3e:
         e7:19:7a:fb:ba:45:02:a2:31:fb:da:60:c6:8b:7c:6e:5c:61:
         28:a3:17:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYl+mn5XSLT7YdKe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMyMjBiNWUtODEwNC00YzRlLWJiY2UtMzA1YjE3NGI2
ODRhMB4XDTI0MDYwOTAxMDAyNFoXDTI0MDkwNzAxMDAyNFowLzEtMCsGA1UEAxMk
NWU3NmQ2ZDItZTNkOS00MmI1LTkyOGYtMGRhMzhiZWIzNTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2YyfyScJkz/XvK/Rjyw3ofsC9uQivx3Hdto
kwv3Hkml9Y/RHXHIbfJoAev7h3mHc6POs7+0/ZQ4wTBOi0p7P/RWlQWBbLR8yp/t
e/6nOlmh/srHNMU0knV8O+XfFQamWKz6x8LqNVMuPvZ5TkSzeoxGwQJ4UcwaD+cZ
g3TobQav4Lqhb2xOKrGbWBG/5bMVT/sjH0gCgE7qzUYn50yNdM9xxh8wxlNiQ1kl
CcU+G8E4QerZt4i+vsys5YYc/DJv6wf+1vcWCNiJYfcINu7evHC4TZo98Csc+VhC
skfjyDVYWmTXPi3i3hV4hKpIEhzK3xumSZIyQBfd7bjDUmlbiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFZTgx+NJ/PzTk3tzYu0wdT0hbM3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MzIy
MGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0YjY4NGEvYzA4YWZkMjktZGUwNC0z
YzZjLTk3OGMtNjRiMzUxNGZlZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODMyMjBiNWUtODEwNC00YzRlLWJi
Y2UtMzA1YjE3NGI2ODRhLzgzMjIwYjVlLTgxMDQtNGM0ZS1iYmNlLTMwNWIxNzRi
Njg0YS5jcmwwHwYDVR0jBBgwFoAUoWhThMRveGpjv2l4lcBjMgj5U6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDVi
MTc0YjY4NGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABNBAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFfJzZ3lcwtIArxvOHk+NlvEZIF3t2BvFWaNxa0HOuCWgPF6Zvri
X5lzmPjx4e39vJ5DNTT1IL8JKrC+d3bLz44azQ6DTpO3xn1bdmO0gpLpwuhS4niT
FDzBf4jYR7KjUfQ+4GpmpUsiI8DW1B+VsHtBGLCTW3rrHnatLYVQVMShDJYriuIO
iuj9UZR2EmbCs74xt2wmC2BAddNCGx07Tsv4wX4gHsIFx8nEJit4w0WYLx73Eph9
/XloAtKykhdX9nfVK0qzsT+nIyssM2J/b4GweN9yBB+GXSk5jpYI6h+JVqAVOPgw
uq3vPucZevu6RQKiMfvaYMaLfG5cYSijF6U=
-----END CERTIFICATE-----
Generated at Tue Jun 25 18:12:21 2024 by rpki-client on console-ams.rpki-client.org