Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa
File:                     927fe1cd-0450-3edf-9f91-6026bc74aeba.roa (raw, json)
Hash identifier:          cRSCRVgNJUl9AKQ3YOCgPXReAuREOzlumIFrvFtPuLk=
Subject key identifier:   78:6B:26:A9:62:94:6B:9B:FE:CA:CA:FA:AB:65:04:F3:97:58:52:40
Certificate issuer:       /CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
Certificate serial:       010D0C9F43285845AD531E74F8D8970DFE9375C0
Authority key identifier: 52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa
Signing time:             Fri 26 Apr 2024 19:48:24 +0000
ROA not before:           Fri 26 Apr 2024 19:48:24 +0000
ROA not after:            Thu 25 Jul 2024 19:48:24 +0000
asID:                     20473
IP address blocks:        2620:c7:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:53:1e:74:f8:d8:97:0d:fe:93:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
        Validity
            Not Before: Apr 26 19:48:24 2024 GMT
            Not After : Jul 25 19:48:24 2024 GMT
        Subject: CN=9d0b1e33-dba5-4307-8cc2-35d062c2c0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:61:c5:b1:52:2a:c5:4a:a4:f7:38:09:7d:98:
                    0d:f3:d3:e5:1f:0b:22:74:ae:4b:31:f3:3b:71:7a:
                    6e:a4:bc:e0:9a:66:88:24:4d:89:e3:6d:06:53:3b:
                    9d:b3:03:61:9b:ba:9e:be:c8:e7:77:1c:b1:29:8f:
                    0b:8a:35:93:e8:1c:27:63:99:6b:30:57:87:e5:24:
                    26:e4:cf:56:a6:90:2f:74:9a:fb:4c:2c:99:ef:81:
                    93:32:2f:5c:42:57:9a:ad:fa:da:e9:4a:07:12:2f:
                    a4:35:c3:cd:1e:5c:fa:e0:a6:63:b2:52:d5:48:1f:
                    2f:42:2f:14:1a:21:17:9a:06:60:c9:83:a6:e5:d7:
                    da:34:f8:a5:e8:d2:3d:55:ea:d5:78:ec:32:b6:2c:
                    a5:92:0c:c7:fb:63:0d:5e:31:87:64:c5:a6:b0:2b:
                    36:67:21:3f:c6:c5:05:d6:a2:50:8a:da:b4:35:12:
                    9a:0c:c9:75:2f:e5:a6:61:12:da:15:7c:4c:96:2a:
                    97:f1:f9:d7:36:ef:af:2b:11:8a:fb:19:01:54:ad:
                    2e:1d:7c:ce:d7:b0:ff:6b:2e:c0:29:f6:b3:aa:13:
                    03:0c:b1:e6:4a:54:f6:6d:99:fc:b5:c9:3c:f9:5f:
                    71:7b:ae:dc:28:d5:21:be:2c:25:92:e5:a8:46:25:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6B:26:A9:62:94:6B:9B:FE:CA:CA:FA:AB:65:04:F3:97:58:52:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl

            X509v3 Authority Key Identifier:
                keyid:52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c7:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:14:bf:1e:14:af:7f:fa:28:e2:c7:c1:3a:42:03:61:05:bb:
         98:77:5b:8e:d3:1d:96:76:d7:e8:7a:4e:18:0b:cb:50:3e:5f:
         f0:0e:0a:a0:a0:c4:07:09:52:dd:04:fa:09:08:a4:31:55:46:
         ed:9b:57:08:10:10:b2:b1:d5:ab:88:ff:29:14:16:8c:d8:4a:
         b4:a2:22:9b:ea:00:02:ab:32:b5:f1:24:7e:9c:05:b6:e9:24:
         12:59:b1:6b:a7:60:54:35:82:50:ac:bc:b0:96:1d:09:48:71:
         12:a2:0b:50:7f:78:6d:1d:53:c2:52:67:39:e5:dc:8c:1a:c2:
         c2:48:be:f4:8d:c8:28:7f:f5:f2:a0:33:b2:5a:01:1b:e2:bc:
         34:f1:3e:d3:a5:7a:9d:d1:93:ba:15:88:c1:66:e4:9b:23:e3:
         c8:58:d2:95:e6:4a:a9:51:7f:b0:12:b4:58:a2:f9:a4:3f:44:
         d4:82:8d:76:d3:32:b9:c1:16:45:2d:db:cb:18:13:cc:9a:dd:
         e1:78:e0:aa:8a:73:21:a9:ba:f0:eb:31:97:0d:35:ee:25:b1:
         a1:00:96:ce:29:96:b7:00:65:e5:5d:4e:89:7c:4b:c7:6b:75:
         71:c4:7e:dc:71:d0:42:18:28:9f:04:75:89:06:02:e7:94:8a:
         b4:da:e7:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWtUx50+NiXDf6TdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ3YjNkOGEtYzA3MC00MDM3LWFlZDUtMTliN2YwODI4
ZWY2MB4XDTI0MDQyNjE5NDgyNFoXDTI0MDcyNTE5NDgyNFowLzEtMCsGA1UEAxMk
OWQwYjFlMzMtZGJhNS00MzA3LThjYzItMzVkMDYyYzJjMGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGHFsVIqxUqk9zgJfZgN89PlHwsidK5LMfM7
cXpupLzgmmaIJE2J420GUzudswNhm7qevsjndxyxKY8LijWT6BwnY5lrMFeH5SQm
5M9WppAvdJr7TCyZ74GTMi9cQlearfra6UoHEi+kNcPNHlz64KZjslLVSB8vQi8U
GiEXmgZgyYOm5dfaNPil6NI9VerVeOwytiylkgzH+2MNXjGHZMWmsCs2ZyE/xsUF
1qJQitq0NRKaDMl1L+WmYRLaFXxMliqX8fnXNu+vKxGK+xkBVK0uHXzO17D/ay7A
KfazqhMDDLHmSlT2bZn8tck8+V9xe67cKNUhviwlkuWoRiVKVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHhrJqlilGub/srK+qtlBPOXWFJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZDdi
M2Q4YS1jMDcwLTQwMzctYWVkNS0xOWI3ZjA4MjhlZjYvOTI3ZmUxY2QtMDQ1MC0z
ZWRmLTlmOTEtNjAyNmJjNzRhZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGQ3YjNkOGEtYzA3MC00MDM3LWFl
ZDUtMTliN2YwODI4ZWY2L2RkN2IzZDhhLWMwNzAtNDAzNy1hZWQ1LTE5YjdmMDgy
OGVmNi5jcmwwHwYDVR0jBBgwFoAUUk5MjhdvnMWNHCIEqWutC0DiLRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZDdiM2Q4YS1jMDcwLTQwMzctYWVkNS0xOWI3
ZjA4MjhlZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAx2AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFEUvx4Ur3/6KOLHwTpCA2EFu5h3W47THZZ21+h6ThgLy1A+X/AO
CqCgxAcJUt0E+gkIpDFVRu2bVwgQELKx1auI/ykUFozYSrSiIpvqAAKrMrXxJH6c
BbbpJBJZsWunYFQ1glCsvLCWHQlIcRKiC1B/eG0dU8JSZznl3IwawsJIvvSNyCh/
9fKgM7JaARvivDTxPtOlep3Rk7oViMFm5Jsj48hY0pXmSqlRf7AStFii+aQ/RNSC
jXbTMrnBFkUt28sYE8ya3eF44KqKcyGpuvDrMZcNNe4lsaEAls4plrcAZeVdTol8
S8drdXHEftxx0EIYKJ8EdYkGAueUirTa51g=
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:14:59 2024 by rpki-client on console-ams.rpki-client.org