Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/1a1848fb-bb4c-3fa6-a571-cd96844699e0.roa
File:                     1a1848fb-bb4c-3fa6-a571-cd96844699e0.roa (raw, json)
Hash identifier:          Eov9lRMymElm75+ilwVX3PFlMAV3kpr26rlk9qK2V7g=
Subject key identifier:   56:05:2E:26:E1:30:75:3B:D7:69:F0:72:F9:9B:C0:CE:D5:5B:9C:B2
Certificate issuer:       /CN=cec77629-198d-45fd-afaf-493c77bcbbf3
Certificate serial:       010D0C9F432858454836A95ED747205189C28F40
Authority key identifier: 42:39:9B:BE:E9:C9:BF:68:02:7B:A4:E4:63:27:55:5B:57:AD:43:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/1a1848fb-bb4c-3fa6-a571-cd96844699e0.roa
Signing time:             Thu 21 Mar 2024 14:34:25 +0000
ROA not before:           Thu 21 Mar 2024 14:34:25 +0000
ROA not after:            Wed 19 Jun 2024 14:34:25 +0000
asID:                     8075
IP address blocks:        2620:b1:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/cec77629-198d-45fd-afaf-493c77bcbbf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/cec77629-198d-45fd-afaf-493c77bcbbf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:36:a9:5e:d7:47:20:51:89:c2:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec77629-198d-45fd-afaf-493c77bcbbf3
        Validity
            Not Before: Mar 21 14:34:25 2024 GMT
            Not After : Jun 19 14:34:25 2024 GMT
        Subject: CN=aa74e7fb-01e6-485f-9a8f-089de82d7d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:36:29:c9:09:16:24:8d:45:62:9a:d8:a8:
                    fb:1b:74:de:0a:e7:49:67:ea:f4:e5:0b:d0:f8:0d:
                    7e:13:34:91:7b:10:96:00:62:b1:a7:16:75:2b:15:
                    f6:37:99:b0:9b:be:04:50:04:4d:07:df:1c:87:7c:
                    6c:fe:bd:c0:f9:c7:82:66:6e:63:3a:1a:4f:c3:ec:
                    1a:f9:80:d6:67:f6:1a:9e:39:08:b2:9d:8f:5d:72:
                    45:7c:fe:8b:80:ef:66:85:e4:b6:9a:43:42:fd:d8:
                    46:6c:fd:d2:68:50:ab:dd:2e:40:e8:d8:69:f9:22:
                    dc:ef:15:72:79:03:f9:3a:c9:c3:3e:b7:71:62:76:
                    89:5c:0b:b2:29:2c:b5:20:26:06:84:85:03:f9:44:
                    11:68:2d:0d:35:fc:15:7e:db:23:d5:42:4b:fe:00:
                    ad:5e:cf:f5:10:b4:11:90:03:d5:0f:15:b2:bc:9e:
                    96:65:d9:82:01:fe:9b:32:ba:7e:b6:de:0b:fb:9d:
                    17:1c:d5:68:87:1a:c1:98:1d:4f:34:a8:5b:ac:07:
                    c8:9a:b1:ba:87:1b:64:15:55:ae:4a:7f:44:6f:e1:
                    94:e0:37:2d:f2:ca:33:72:e7:6d:61:34:0a:82:27:
                    e0:d0:fc:63:d3:b6:34:ca:cf:04:be:0f:37:15:e3:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:05:2E:26:E1:30:75:3B:D7:69:F0:72:F9:9B:C0:CE:D5:5B:9C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/1a1848fb-bb4c-3fa6-a571-cd96844699e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3/cec77629-198d-45fd-afaf-493c77bcbbf3.crl

            X509v3 Authority Key Identifier:
                keyid:42:39:9B:BE:E9:C9:BF:68:02:7B:A4:E4:63:27:55:5B:57:AD:43:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec77629-198d-45fd-afaf-493c77bcbbf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b1:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:c7:7a:99:6e:28:5d:cd:29:87:ce:12:af:7b:84:df:5e:
         33:d5:2d:c4:41:92:41:b4:1a:e3:16:4c:91:b8:ec:52:36:37:
         3c:da:58:ba:db:40:b8:72:f2:e0:dd:ee:60:c8:b2:be:80:29:
         78:ab:66:1c:c6:ce:0c:38:86:77:f7:69:c2:51:e5:0f:df:05:
         c5:49:1b:95:a6:76:62:d4:8c:e5:3f:a9:95:40:bc:ca:83:4d:
         6e:f8:e0:ca:a3:bc:c2:52:44:f4:47:7c:9b:8e:62:36:56:46:
         ff:7e:31:24:6d:e2:b6:ec:2c:d9:df:83:4d:8b:fb:57:22:7d:
         28:c5:32:2f:4d:8a:84:8c:7f:43:83:15:54:d7:5f:13:f1:5b:
         b9:7d:43:34:ff:1a:ab:8e:a3:31:8b:09:0a:44:05:ed:43:b7:
         74:b7:a9:47:dd:33:51:2a:43:17:ab:e3:91:fc:41:78:26:5a:
         bd:1e:71:e5:63:79:48:17:91:7f:bb:0d:ac:c2:96:5a:7c:01:
         64:66:c2:2e:94:07:ce:ac:65:bd:e9:c6:fc:40:49:a1:d2:71:
         b8:5a:bc:aa:0a:46:02:f4:23:ab:b4:d9:f3:de:8a:80:dd:26:
         a6:fa:07:27:fe:62:e5:b3:b2:a9:51:ec:2f:d3:1d:ed:15:8b:
         46:7f:83:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVINqle10cgUYnCj0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjNzc2MjktMTk4ZC00NWZkLWFmYWYtNDkzYzc3YmNi
YmYzMB4XDTI0MDMyMTE0MzQyNVoXDTI0MDYxOTE0MzQyNVowLzEtMCsGA1UEAxMk
YWE3NGU3ZmItMDFlNi00ODVmLTlhOGYtMDg5ZGU4MmQ3ZDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJI2KckJFiSNRWKa2Kj7G3TeCudJZ+r05QvQ
+A1+EzSRexCWAGKxpxZ1KxX2N5mwm74EUARNB98ch3xs/r3A+ceCZm5jOhpPw+wa
+YDWZ/YanjkIsp2PXXJFfP6LgO9mheS2mkNC/dhGbP3SaFCr3S5A6Nhp+SLc7xVy
eQP5OsnDPrdxYnaJXAuyKSy1ICYGhIUD+UQRaC0NNfwVftsj1UJL/gCtXs/1ELQR
kAPVDxWyvJ6WZdmCAf6bMrp+tt4L+50XHNVohxrBmB1PNKhbrAfImrG6hxtkFVWu
Sn9Eb+GU4Dct8sozcudtYTQKgifg0Pxj07Y0ys8Evg83FeOJ/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFYFLibhMHU712nwcvmbwM7VW5yyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWM3
NzYyOS0xOThkLTQ1ZmQtYWZhZi00OTNjNzdiY2JiZjMvMWExODQ4ZmItYmI0Yy0z
ZmE2LWE1NzEtY2Q5Njg0NDY5OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjNzc2MjktMTk4ZC00NWZkLWFm
YWYtNDkzYzc3YmNiYmYzL2NlYzc3NjI5LTE5OGQtNDVmZC1hZmFmLTQ5M2M3N2Jj
YmJmMy5jcmwwHwYDVR0jBBgwFoAUQjmbvunJv2gCe6TkYydVW1etQ20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWM3NzYyOS0xOThkLTQ1ZmQtYWZhZi00OTNj
NzdiY2JiZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAseAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI8Xx3qZbihdzSmHzhKve4TfXjPVLcRBkkG0GuMWTJG47FI2Nzza
WLrbQLhy8uDd7mDIsr6AKXirZhzGzgw4hnf3acJR5Q/fBcVJG5WmdmLUjOU/qZVA
vMqDTW744MqjvMJSRPRHfJuOYjZWRv9+MSRt4rbsLNnfg02L+1cifSjFMi9NioSM
f0ODFVTXXxPxW7l9QzT/GquOozGLCQpEBe1Dt3S3qUfdM1EqQxer45H8QXgmWr0e
ceVjeUgXkX+7DazCllp8AWRmwi6UB86sZb3pxvxASaHScbhavKoKRgL0I6u02fPe
ioDdJqb6Byf+YuWzsqlR7C/THe0Vi0Z/g8w=
-----END CERTIFICATE-----
Generated at Sat May 18 03:50:09 2024 by rpki-client on console-fra.rpki-client.org