Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/7e3f84ec-6d39-35b5-bd4c-c08e8e397dfe.roa
File:                     7e3f84ec-6d39-35b5-bd4c-c08e8e397dfe.roa (raw, json)
Hash identifier:          bwmEcD1rSbZvizn0Wux2FB3V1Fzx2Wd03C/55RnCRvk=
Subject key identifier:   3A:24:5D:24:D4:51:96:D3:0C:BD:24:4F:D3:09:E6:78:FA:A4:B5:1D
Certificate issuer:       /CN=18063090-3337-4bcb-93cd-f57cb925fd54
Certificate serial:       010D0C9F43285845025ACFE7E5884ECC2C467600
Authority key identifier: C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/7e3f84ec-6d39-35b5-bd4c-c08e8e397dfe.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     4901
IP address blocks:        2620:118:5000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:cf:e7:e5:88:4e:cc:2c:46:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18063090-3337-4bcb-93cd-f57cb925fd54
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=100c80e6-e28d-4ca2-904f-c76ec2a88cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:87:cd:d5:c6:67:ab:40:e3:7a:85:bd:45:
                    59:9e:a5:42:7e:4a:43:84:a0:6f:d0:4e:90:18:a3:
                    8d:d3:01:32:f1:03:71:71:8a:d1:7d:e6:6a:46:67:
                    70:c4:58:b5:f5:39:af:a0:3c:4d:d3:cc:af:b3:69:
                    de:96:41:bb:78:19:da:dd:0a:72:02:ba:c4:a2:a3:
                    7f:23:e1:6f:cc:83:fa:43:14:17:b2:a9:68:f6:d4:
                    41:c6:0b:dd:5b:ad:b8:f4:92:17:34:a5:20:43:76:
                    8b:67:02:52:52:29:ef:b7:19:31:21:36:44:95:cd:
                    21:f7:0b:0a:fd:c1:21:56:ec:5f:02:c8:ce:e8:01:
                    17:64:c1:ad:11:e7:91:bc:84:c0:8a:e2:40:ee:62:
                    db:f2:10:40:86:59:3d:1c:7b:56:fc:2a:02:74:6b:
                    56:d7:93:46:66:87:e5:16:69:08:4f:6e:09:32:bb:
                    79:5e:95:11:39:e2:5e:70:06:fb:bd:3d:81:99:fb:
                    81:42:37:f3:95:86:01:e2:be:7a:c2:a3:f2:85:b2:
                    5f:77:ad:ed:63:d6:92:68:f2:fb:d4:fd:17:a4:87:
                    d1:a7:b1:c6:1a:37:58:58:d4:bc:60:f4:cd:ac:8e:
                    56:6b:dd:19:ca:48:e8:a0:f4:65:37:b0:d7:d1:65:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:24:5D:24:D4:51:96:D3:0C:BD:24:4F:D3:09:E6:78:FA:A4:B5:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/7e3f84ec-6d39-35b5-bd4c-c08e8e397dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl

            X509v3 Authority Key Identifier:
                keyid:C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:118:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e2:97:96:1a:38:78:fa:37:7c:73:29:c8:8b:8b:88:8f:58:
         be:1e:5b:69:e9:e4:fa:69:25:3d:40:e6:02:ce:bd:67:ba:67:
         e1:3a:c4:6f:9a:27:ae:0e:ef:81:b6:c2:73:35:15:04:08:a9:
         a9:ee:7c:76:8a:60:17:ac:1a:05:69:b7:3d:d1:d2:2f:f0:18:
         5d:3b:36:90:3e:91:5e:03:52:bf:ed:df:cf:41:a3:95:3a:c4:
         ac:b2:f3:25:58:16:6c:5f:00:2a:e2:95:4a:01:13:14:ad:f9:
         6f:30:76:69:2f:a3:c0:12:4c:da:9e:56:12:4a:bb:c2:23:db:
         80:9e:c5:58:ac:cd:aa:ba:a4:5d:99:50:1f:1b:fa:d5:6e:b0:
         bb:bf:54:fc:a2:d3:e3:95:ac:68:33:d5:93:1b:a6:a0:ce:76:
         3e:42:4e:45:77:e6:c7:3e:b2:36:f9:ea:95:24:4a:3c:49:c2:
         fa:55:98:7e:ed:75:32:46:29:61:79:8d:51:c0:31:1c:9a:55:
         7e:f6:e9:9e:9e:cd:43:18:4e:bf:09:a4:b8:f6:9b:9b:89:28:
         f2:cc:41:8d:79:6e:da:51:18:52:f3:3c:3b:3a:87:ca:46:25:
         c9:75:dd:94:71:49:c5:fd:e9:65:a2:b1:c6:34:57:61:9e:1a:
         44:4f:1b:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUCWs/n5YhOzCxGdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTgwNjMwOTAtMzMzNy00YmNiLTkzY2QtZjU3Y2I5MjVm
ZDU0MB4XDTI0MDIyNTE0MDAzNFoXDTI0MDUyNTEzMDAzNFowLzEtMCsGA1UEAxMk
MTAwYzgwZTYtZTI4ZC00Y2EyLTkwNGYtYzc2ZWMyYTg4Y2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiViHzdXGZ6tA43qFvUVZnqVCfkpDhKBv0E6Q
GKON0wEy8QNxcYrRfeZqRmdwxFi19TmvoDxN08yvs2nelkG7eBna3QpyArrEoqN/
I+FvzIP6QxQXsqlo9tRBxgvdW6249JIXNKUgQ3aLZwJSUinvtxkxITZElc0h9wsK
/cEhVuxfAsjO6AEXZMGtEeeRvITAiuJA7mLb8hBAhlk9HHtW/CoCdGtW15NGZofl
FmkIT24JMrt5XpUROeJecAb7vT2BmfuBQjfzlYYB4r56wqPyhbJfd63tY9aSaPL7
1P0XpIfRp7HGGjdYWNS8YPTNrI5Wa90ZykjooPRlN7DX0WVBXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDokXSTUUZbTDL0kT9MJ5nj6pLUdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODA2
MzA5MC0zMzM3LTRiY2ItOTNjZC1mNTdjYjkyNWZkNTQvN2UzZjg0ZWMtNmQzOS0z
NWI1LWJkNGMtYzA4ZThlMzk3ZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTgwNjMwOTAtMzMzNy00YmNiLTkz
Y2QtZjU3Y2I5MjVmZDU0LzE4MDYzMDkwLTMzMzctNGJjYi05M2NkLWY1N2NiOTI1
ZmQ1NC5jcmwwHwYDVR0jBBgwFoAUwJIybTnY5cX6eyfNKCCpH7PEyn8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODA2MzA5MC0zMzM3LTRiY2ItOTNjZC1mNTdj
YjkyNWZkNTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABGFAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI/il5YaOHj6N3xzKciLi4iPWL4eW2np5PppJT1A5gLOvWe6Z+E6
xG+aJ64O74G2wnM1FQQIqanufHaKYBesGgVptz3R0i/wGF07NpA+kV4DUr/t389B
o5U6xKyy8yVYFmxfACrilUoBExSt+W8wdmkvo8ASTNqeVhJKu8Ij24CexViszaq6
pF2ZUB8b+tVusLu/VPyi0+OVrGgz1ZMbpqDOdj5CTkV35sc+sjb56pUkSjxJwvpV
mH7tdTJGKWF5jVHAMRyaVX726Z6ezUMYTr8JpLj2m5uJKPLMQY15btpRGFLzPDs6
h8pGJcl13ZRxScX96WWiscY0V2GeGkRPG8Y=
-----END CERTIFICATE-----
Generated at Mon May 13 01:50:14 2024 by rpki-client on console-fra.rpki-client.org