Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/1a1848fb-bb4c-3fa6-a571-cd96844699e0.roa
File:                     1a1848fb-bb4c-3fa6-a571-cd96844699e0.roa (raw, json)
Hash identifier:          pZAGjdI0+oCxS4fXa3DoUH5zm+FL+Smpwq3Buu2OhrQ=
Subject key identifier:   DE:1B:9F:18:87:CD:13:2E:34:4C:BC:34:B8:EA:12:CB:89:CF:D0:73
Certificate issuer:       /CN=cec77629-198d-45fd-afaf-493c77bcbbf3
Certificate serial:       010D0C9F43285847E8F4CBB3A1987C34E66BBD80
Authority key identifier: 42:39:9B:BE:E9:C9:BF:68:02:7B:A4:E4:63:27:55:5B:57:AD:43:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/1a1848fb-bb4c-3fa6-a571-cd96844699e0.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     8075
IP address blocks:        2620:b1:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/cec77629-198d-45fd-afaf-493c77bcbbf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/cec77629-198d-45fd-afaf-493c77bcbbf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cb:b3:a1:98:7c:34:e6:6b:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec77629-198d-45fd-afaf-493c77bcbbf3
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=afa7514d-8db1-47fd-b247-a5a9ac2ea8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:84:b5:37:40:0c:d1:c9:9b:65:11:0d:44:
                    cd:46:dc:20:56:1d:82:2f:a8:25:02:d4:27:f0:ee:
                    c6:a7:00:3c:58:31:69:0c:cf:e5:e4:83:e3:47:43:
                    98:1b:33:d3:79:18:d9:8e:09:98:3d:85:88:d6:3f:
                    f2:c2:16:35:a3:7f:2a:83:a5:31:0d:6b:5c:44:18:
                    ec:c0:ca:37:1c:46:75:88:09:da:94:8f:ec:47:7a:
                    7f:3c:96:25:8a:4f:16:04:ba:21:13:76:0c:74:b7:
                    3c:ce:ea:bf:de:21:dc:0e:75:15:9b:bf:46:97:7d:
                    69:28:e4:3c:13:e3:3a:64:e2:0f:d2:72:80:18:ed:
                    b9:15:b6:ae:14:0a:3f:e8:3d:a2:b0:97:98:48:b5:
                    ed:48:4e:7b:a5:2d:e3:32:9b:f6:ea:4d:5c:2b:bb:
                    71:6d:1c:78:40:44:c6:25:6e:74:86:ca:e0:29:23:
                    28:cd:ce:e2:f7:69:3e:75:c1:15:9e:22:00:d5:5b:
                    8b:66:85:9b:d6:49:98:fe:00:46:55:f4:87:09:2a:
                    09:20:44:b5:62:6d:b7:28:e0:45:1d:68:fc:63:ac:
                    10:90:c2:17:1a:1c:5b:f3:a2:5b:3a:87:9c:ac:86:
                    93:f2:1a:6e:6f:db:b3:d4:78:43:90:f3:f8:c3:21:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1B:9F:18:87:CD:13:2E:34:4C:BC:34:B8:EA:12:CB:89:CF:D0:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/1a1848fb-bb4c-3fa6-a571-cd96844699e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/cec77629-198d-45fd-afaf-493c77bcbbf3.crl

            X509v3 Authority Key Identifier:
                keyid:42:39:9B:BE:E9:C9:BF:68:02:7B:A4:E4:63:27:55:5B:57:AD:43:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b1:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:1a:70:70:c6:d3:2f:97:e0:df:02:69:b3:07:c6:e7:96:
         16:51:d3:59:dd:97:26:a0:5c:0c:8b:81:54:8d:0b:23:f9:5b:
         e7:90:cf:63:58:59:a2:6d:34:d6:09:4c:e6:17:f9:45:a9:06:
         a1:7b:19:77:c3:a3:71:78:1b:19:b6:f5:94:1f:82:41:a3:69:
         aa:5c:c8:69:99:b5:21:f7:4c:bb:76:de:9e:a6:1b:ed:3c:b2:
         82:53:24:24:b8:43:4a:82:35:76:17:79:89:c0:da:56:3d:eb:
         6d:ec:ce:47:0d:56:8d:33:d7:67:2a:1e:6a:f6:45:b3:56:a0:
         47:c6:10:92:fe:04:a7:8d:93:7c:f7:9a:0f:3f:bc:52:38:5f:
         38:6b:90:85:48:c1:c1:55:08:0c:d6:24:83:d6:8d:e2:bd:99:
         33:3b:5d:c9:b9:d3:bc:6d:f4:ad:03:81:41:95:bc:06:a2:6f:
         76:88:4e:2e:39:2f:db:e4:68:c4:e8:7f:84:31:8f:e9:db:31:
         10:3c:9e:86:3a:de:7f:bb:8d:3a:57:1d:13:29:09:10:68:c0:
         40:c2:e4:69:3d:5e:c3:15:9b:69:14:23:2d:12:69:2c:32:89:
         c1:b0:94:f7:b6:87:81:b6:b9:26:44:80:ee:cc:f4:97:c4:49:
         06:70:fc:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfo9MuzoZh8NOZrvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjNzc2MjktMTk4ZC00NWZkLWFmYWYtNDkzYzc3YmNi
YmYzMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
YWZhNzUxNGQtOGRiMS00N2ZkLWIyNDctYTVhOWFjMmVhOGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7KEtTdADNHJm2URDUTNRtwgVh2CL6glAtQn
8O7GpwA8WDFpDM/l5IPjR0OYGzPTeRjZjgmYPYWI1j/ywhY1o38qg6UxDWtcRBjs
wMo3HEZ1iAnalI/sR3p/PJYlik8WBLohE3YMdLc8zuq/3iHcDnUVm79Gl31pKOQ8
E+M6ZOIP0nKAGO25FbauFAo/6D2isJeYSLXtSE57pS3jMpv26k1cK7txbRx4QETG
JW50hsrgKSMozc7i92k+dcEVniIA1VuLZoWb1kmY/gBGVfSHCSoJIES1Ym23KOBF
HWj8Y6wQkMIXGhxb86JbOoecrIaT8hpub9uz1HhDkPP4wyFfbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN4bnxiHzRMuNEy8NLjqEsuJz9BzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWM3
NzYyOS0xOThkLTQ1ZmQtYWZhZi00OTNjNzdiY2JiZjMvMWExODQ4ZmItYmI0Yy0z
ZmE2LWE1NzEtY2Q5Njg0NDY5OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjNzc2MjktMTk4ZC00NWZkLWFm
YWYtNDkzYzc3YmNiYmYzL2NlYzc3NjI5LTE5OGQtNDVmZC1hZmFmLTQ5M2M3N2Jj
YmJmMy5jcmwwHwYDVR0jBBgwFoAUQjmbvunJv2gCe6TkYydVW1etQ20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWM3NzYyOS0xOThkLTQ1ZmQtYWZhZi00OTNj
NzdiY2JiZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAseAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADM9GnBwxtMvl+DfAmmzB8bnlhZR01ndlyagXAyLgVSNCyP5W+eQ
z2NYWaJtNNYJTOYX+UWpBqF7GXfDo3F4Gxm29ZQfgkGjaapcyGmZtSH3TLt23p6m
G+08soJTJCS4Q0qCNXYXeYnA2lY9623szkcNVo0z12cqHmr2RbNWoEfGEJL+BKeN
k3z3mg8/vFI4XzhrkIVIwcFVCAzWJIPWjeK9mTM7Xcm507xt9K0DgUGVvAaib3aI
Ti45L9vkaMTof4Qxj+nbMRA8noY63n+7jTpXHRMpCRBowEDC5Gk9XsMVm2kUIy0S
aSwyicGwlPe2h4G2uSZEgO7M9JfESQZw/GY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:45 2024 by rpki-client on console-fra.rpki-client.org