Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa
File:                     1d978fb0-4997-3482-a154-82257478e02d.roa (raw, json)
Hash identifier:          VlDG3NvEwEFL0lmZ3K1NUhsVwooLm9Fq9yFJQoGAKyQ=
Subject key identifier:   2F:43:49:43:28:75:75:03:31:18:69:09:08:9E:52:A1:53:8C:ED:DB
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584524FA12419A8EF9BCCD9FAF80
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa
Signing time:             Fri 08 Mar 2024 23:39:02 +0000
ROA not before:           Fri 08 Mar 2024 23:39:02 +0000
ROA not after:            Thu 06 Jun 2024 22:39:02 +0000
asID:                     396982
IP address blocks:        2620:1b2:bd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:24:fa:12:41:9a:8e:f9:bc:cd:9f:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Mar  8 23:39:02 2024 GMT
            Not After : Jun  6 22:39:02 2024 GMT
        Subject: CN=0042d561-363e-4908-8f0d-7cedb5ad004e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:05:ef:cf:b8:76:18:a6:ee:c7:76:73:d0:
                    bf:44:45:9d:a4:37:62:89:68:f3:3c:55:e0:a2:c2:
                    35:b9:43:50:c2:78:33:9a:fd:a1:5e:da:f9:3e:53:
                    cf:f9:fe:31:ef:35:46:55:c1:14:7a:9b:39:96:d9:
                    77:7e:a3:a0:61:ce:ea:ea:3f:55:da:b6:a2:af:60:
                    84:26:ee:30:0c:b4:7b:f8:a7:d0:81:73:d2:46:7b:
                    16:54:19:bc:3a:06:9e:8d:4a:6b:f6:9e:fb:d9:5e:
                    9d:ad:51:38:84:6f:1a:0b:aa:a1:33:d5:2d:bf:ff:
                    bf:cd:12:bb:f2:d1:4d:19:04:af:db:3a:ce:0c:1b:
                    9e:05:3a:2a:d4:84:87:a2:7f:54:97:86:6b:d0:ea:
                    84:81:52:85:80:cb:9b:7d:85:9d:ad:08:b9:b2:08:
                    73:4d:96:1a:7f:c9:1d:f2:78:d6:c2:86:71:5c:ea:
                    34:9a:f0:d5:fe:b1:2f:16:80:ca:ba:3f:bc:1d:b9:
                    ef:c7:aa:1a:4b:15:fe:dc:9f:83:32:5e:e4:6b:84:
                    ad:60:55:f2:18:be:0e:0b:2f:98:07:d9:39:d7:78:
                    32:30:7a:c8:c1:73:d8:85:a2:aa:16:26:87:0b:9a:
                    e6:2d:36:f7:b6:b0:0b:7d:00:58:97:bc:cb:8f:93:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:43:49:43:28:75:75:03:31:18:69:09:08:9E:52:A1:53:8C:ED:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1d978fb0-4997-3482-a154-82257478e02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:dc:3a:d4:a6:7b:26:98:29:3b:d5:b3:a4:dc:95:a2:bf:df:
         14:e2:d1:c9:8d:dc:d8:6f:60:18:9f:98:ca:3e:77:f6:07:72:
         a1:6b:01:3a:af:54:2e:67:ab:76:7e:2f:ca:cb:d6:d8:03:37:
         b4:e8:2d:55:8b:10:70:70:b8:ca:03:56:5e:1c:60:83:c4:b2:
         b1:18:ec:3e:f1:0d:7e:f7:6b:54:74:b4:3f:41:4f:b9:d6:5e:
         db:15:6d:e9:78:28:4f:a3:b8:72:34:fd:3e:ec:b3:ba:16:29:
         c4:de:06:a6:75:b3:d8:5b:2d:f4:ce:81:67:8f:8d:0b:22:91:
         82:95:b1:d3:90:40:86:f7:1b:35:ae:49:c5:b9:db:b3:57:4d:
         85:f8:9c:86:61:e0:a3:8b:31:81:36:81:9c:8f:1c:a1:06:e6:
         77:bc:70:ed:0c:2a:53:2a:7a:be:e7:d5:7a:36:a6:ca:8f:37:
         35:8a:aa:c8:e1:c9:56:93:73:3c:7d:83:f0:67:86:55:3b:44:
         15:01:9e:e6:0f:84:cb:43:27:f1:c8:84:3d:c4:28:e4:b9:0a:
         af:f4:cf:7f:1b:21:b6:4f:ff:72:94:ca:1a:38:6e:2d:1b:7b:
         1a:3f:82:a9:22:80:ba:f9:ec:8b:fc:6d:4d:0b:a4:0a:eb:db:
         42:ba:c8:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUk+hJBmo75vM2fr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI0MDMwODIzMzkwMloXDTI0MDYwNjIyMzkwMlowLzEtMCsGA1UEAxMk
MDA0MmQ1NjEtMzYzZS00OTA4LThmMGQtN2NlZGI1YWQwMDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysYF78+4dhim7sd2c9C/REWdpDdiiWjzPFXg
osI1uUNQwngzmv2hXtr5PlPP+f4x7zVGVcEUeps5ltl3fqOgYc7q6j9V2rair2CE
Ju4wDLR7+KfQgXPSRnsWVBm8OgaejUpr9p772V6drVE4hG8aC6qhM9Utv/+/zRK7
8tFNGQSv2zrODBueBToq1ISHon9Ul4Zr0OqEgVKFgMubfYWdrQi5sghzTZYaf8kd
8njWwoZxXOo0mvDV/rEvFoDKuj+8Hbnvx6oaSxX+3J+DMl7ka4StYFXyGL4OCy+Y
B9k513gyMHrIwXPYhaKqFiaHC5rmLTb3trALfQBYl7zLj5OBvQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC9DSUModXUDMRhpCQieUqFTjO3bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvMWQ5NzhmYjAtNDk5Ny0z
NDgyLWExNTQtODIyNTc0NzhlMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABsgC9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJTcOtSmeyaYKTvVs6TclaK/3xTi0cmN3NhvYBifmMo+d/YHcqFr
ATqvVC5nq3Z+L8rL1tgDN7ToLVWLEHBwuMoDVl4cYIPEsrEY7D7xDX73a1R0tD9B
T7nWXtsVbel4KE+juHI0/T7ss7oWKcTeBqZ1s9hbLfTOgWePjQsikYKVsdOQQIb3
GzWuScW527NXTYX4nIZh4KOLMYE2gZyPHKEG5ne8cO0MKlMqer7n1Xo2psqPNzWK
qsjhyVaTczx9g/BnhlU7RBUBnuYPhMtDJ/HIhD3EKOS5Cq/0z38bIbZP/3KUyho4
bi0bexo/gqkigLr57Iv8bU0LpArr20K6yKU=
-----END CERTIFICATE-----
Generated at Sun May 5 21:13:35 2024 by rpki-client on console-fra.rpki-client.org