Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/e8ad4d1b-9a61-30ec-9b10-4f098d4a7586.roa
File:                     e8ad4d1b-9a61-30ec-9b10-4f098d4a7586.roa (raw, json)
Hash identifier:          xoKBaifaH+wvqCS10NE3Rtoe8OnO6mbjkxtTjrVbnvU=
Subject key identifier:   49:6F:01:DF:87:03:12:CA:6B:9D:7A:2F:C5:67:D0:81:EE:25:48:35
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F43285845D503C188E146BCEDB00A8700
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/e8ad4d1b-9a61-30ec-9b10-4f098d4a7586.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     8075
IP address blocks:        2620:7d:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c1:88:e1:46:bc:ed:b0:0a:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=e848592b-3fbf-4283-957c-aaf1ada94d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:06:3b:f0:ad:c6:6c:c6:44:4b:5c:f7:f6:0f:
                    61:62:75:4f:39:28:80:ff:36:18:10:d7:82:f7:8f:
                    1b:66:ca:7b:1e:7a:68:81:da:cc:37:ec:38:1f:b7:
                    44:c4:0e:f4:20:15:d2:45:c8:13:eb:47:ba:6a:62:
                    25:ac:6d:90:1c:be:e9:f9:fc:b4:aa:4a:71:a2:f5:
                    5e:90:5f:e6:75:82:a8:d2:62:e5:2e:36:5b:a9:93:
                    1a:b7:dc:00:1b:ef:2a:55:a2:bb:0b:43:16:61:da:
                    cd:1b:dc:f6:b9:8f:e8:46:d7:d1:32:4b:b9:31:fd:
                    ed:59:38:05:17:5f:1c:2e:2c:96:94:51:9e:7f:fd:
                    81:e7:60:33:73:ae:58:27:e5:dc:65:9b:46:c3:aa:
                    4e:d5:94:85:56:ab:d1:1a:3a:c4:8f:2f:7a:0c:cb:
                    f5:36:92:33:51:06:ab:12:9b:38:01:48:83:00:60:
                    da:f4:e5:31:11:21:e0:42:0e:d4:c9:17:a9:03:ba:
                    37:8a:1f:71:13:e4:bd:71:8f:e4:51:ac:24:02:07:
                    e9:36:a0:ee:bd:8a:bd:09:4c:29:6a:8a:97:1c:f3:
                    e9:ce:22:b7:4f:39:b3:57:d9:13:d8:1d:59:4e:08:
                    be:36:9e:22:bb:71:ad:4a:ae:eb:bb:d0:a9:2e:df:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6F:01:DF:87:03:12:CA:6B:9D:7A:2F:C5:67:D0:81:EE:25:48:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/e8ad4d1b-9a61-30ec-9b10-4f098d4a7586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7d:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:43:c7:cb:e0:82:67:6b:d4:77:89:c3:ff:bb:f2:a4:fe:a3:
         21:df:32:99:93:d1:ab:e9:96:ea:d1:78:e0:62:b7:13:93:eb:
         ae:fe:c4:8b:12:9d:93:d2:c4:28:e8:06:6d:31:26:cc:52:b1:
         84:04:59:6f:1e:8f:3d:fc:ba:97:9f:b8:7a:55:af:7b:c1:04:
         24:6d:29:0a:97:24:38:7a:92:c9:6e:13:e3:e1:87:ac:d4:e5:
         06:c7:b6:60:15:06:98:b3:d1:bd:71:1d:0b:e5:0a:b9:a2:f2:
         cb:3f:e3:ae:ef:85:fb:21:6a:dc:20:6f:e1:3d:dd:30:77:ba:
         be:11:58:f4:0e:8c:32:16:8b:f9:a1:35:f6:48:45:d9:24:e8:
         2c:d5:f7:c7:43:aa:3f:ed:e9:d9:c8:0e:92:14:79:ba:77:b7:
         c0:e3:5b:ae:4c:0f:00:cc:4d:89:05:7b:2c:87:01:74:d9:6a:
         65:c4:70:28:4c:aa:bc:d6:2d:42:14:f2:7f:76:99:45:e1:44:
         0e:ea:5d:72:f4:55:41:80:63:84:4e:43:f5:0f:37:fd:74:ce:
         66:e6:b0:33:dd:f7:91:92:40:50:27:14:28:2b:72:d8:e5:cd:
         22:e0:64:8e:46:a9:af:2f:6c:b7:1e:e0:de:9e:fa:41:73:85:
         77:26:f9:ec
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXVA8GI4Ua87bAKhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3
MTQ0MB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
ZTg0ODU5MmItM2ZiZi00MjgzLTk1N2MtYWFmMWFkYTk0ZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQY78K3GbMZES1z39g9hYnVPOSiA/zYYENeC
948bZsp7HnpogdrMN+w4H7dExA70IBXSRcgT60e6amIlrG2QHL7p+fy0qkpxovVe
kF/mdYKo0mLlLjZbqZMat9wAG+8qVaK7C0MWYdrNG9z2uY/oRtfRMku5Mf3tWTgF
F18cLiyWlFGef/2B52Azc65YJ+XcZZtGw6pO1ZSFVqvRGjrEjy96DMv1NpIzUQar
Eps4AUiDAGDa9OUxESHgQg7UyRepA7o3ih9xE+S9cY/kUawkAgfpNqDuvYq9CUwp
aoqXHPPpziK3TzmzV9kT2B1ZTgi+Np4iu3GtSq7ru9CpLt81jQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFElvAd+HAxLKa516L8Vn0IHuJUg1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh
N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvZThhZDRkMWItOWE2MS0z
MGVjLTliMTAtNGYwOThkNGE3NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy
NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5
NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2
NWRjOTcxNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAfQAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAElDx8vggmdr1HeJw/+78qT+oyHfMpmT0avplurReOBitxOT667+
xIsSnZPSxCjoBm0xJsxSsYQEWW8ejz38upefuHpVr3vBBCRtKQqXJDh6ksluE+Ph
h6zU5QbHtmAVBpiz0b1xHQvlCrmi8ss/467vhfshatwgb+E93TB3ur4RWPQOjDIW
i/mhNfZIRdkk6CzV98dDqj/t6dnIDpIUebp3t8DjW65MDwDMTYkFeyyHAXTZamXE
cChMqrzWLUIU8n92mUXhRA7qXXL0VUGAY4ROQ/UPN/10zmbmsDPd95GSQFAnFCgr
ctjlzSLgZI5Gqa8vbLce4N6e+kFzhXcm+ew=
-----END CERTIFICATE-----
Generated at Fri May 17 01:48:03 2024 by rpki-client on console-fra.rpki-client.org