Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa
File:                     95dc919a-dcd4-36c2-b956-415e8edee518.roa (raw, json)
Hash identifier:          qIM0Wb2vMHBm8m+v8DorQdguJrEOKzR4EB/vFBqCHrk=
Subject key identifier:   42:CD:B1:EC:82:48:22:32:BD:11:7F:33:C6:D7:A2:4B:17:72:9E:88
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285847213B195E1E71890BC0D6F480
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     17012
IP address blocks:        2620:110:f000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:19:5e:1e:71:89:0b:c0:d6:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=33737343-931e-44d3-aae1-f3e58fccae24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:07:7c:01:cb:a3:df:3a:61:a9:00:df:d8:
                    8c:25:86:f5:30:71:7a:7c:39:43:d1:ff:c8:8c:ed:
                    9b:78:3f:79:49:36:57:a4:e1:86:52:2d:7e:5a:6a:
                    f1:f7:94:b4:7f:6a:51:0c:2f:f2:de:0e:83:c3:34:
                    62:20:c4:4b:18:b0:12:a3:57:bb:09:62:e7:44:d9:
                    0f:28:7a:f4:47:7e:03:4a:6e:e0:10:dc:d6:b3:63:
                    af:ec:e9:a0:e9:e3:09:fe:25:f8:0d:78:72:93:a0:
                    ab:a1:a4:58:05:b1:a0:46:35:d6:81:02:34:97:77:
                    f7:08:0e:41:94:82:de:2c:e6:48:2a:56:96:04:5b:
                    d4:03:73:1f:e7:b3:4e:e7:aa:7c:e5:78:57:a1:b7:
                    91:04:f1:42:ed:23:89:eb:e7:d8:a0:fd:8a:dd:f5:
                    60:ab:93:7d:82:c9:8e:85:14:e5:2b:cc:06:84:b2:
                    25:ee:57:a3:7f:d1:73:9d:46:0c:0e:c1:31:fc:f1:
                    cc:6c:1e:2c:7d:f7:f6:d9:d7:eb:df:34:7b:32:c6:
                    0c:f5:bc:bb:68:a8:50:42:90:1f:7e:26:33:7e:dd:
                    43:a6:66:87:69:e5:fb:38:78:67:9f:80:81:72:c5:
                    0b:cf:c1:71:1d:d9:ad:7f:be:0e:ce:12:53:f5:27:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CD:B1:EC:82:48:22:32:BD:11:7F:33:C6:D7:A2:4B:17:72:9E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:110:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:f0:78:be:94:db:a0:2e:20:70:52:3f:5e:c6:3b:44:c2:
         28:4a:60:dd:63:ee:98:06:70:fd:79:c4:97:41:af:89:0d:09:
         67:5b:e8:68:81:f5:a4:78:a2:59:7e:b9:ae:07:a4:e5:20:4d:
         7d:42:77:b8:06:ec:97:05:e5:ef:24:13:08:b1:ef:3b:45:3c:
         65:2e:b7:59:8e:33:56:5c:f2:8d:bb:6c:cb:be:1e:9b:6b:1b:
         62:6e:ab:df:02:39:5c:eb:d7:5b:b5:2b:e2:b6:0d:fd:39:6f:
         aa:3d:24:1f:a3:13:f1:2d:74:20:b3:9d:92:73:de:78:8c:be:
         92:fc:60:cd:9a:c2:8d:32:a6:72:08:04:b9:a5:8a:de:ab:68:
         a8:c2:d2:f0:c1:e4:64:75:d2:98:7c:44:0a:14:c6:36:f5:7e:
         8f:32:57:d1:4a:e9:1a:5a:48:61:be:4d:9c:52:4e:f5:dc:24:
         43:7c:35:58:11:dd:0b:09:4e:c8:62:86:7a:a0:f7:e3:9b:6b:
         99:34:82:16:98:c4:c2:ee:58:cf:c2:c9:2b:22:c6:6c:b5:09:
         d6:a4:0d:5a:b7:18:c8:48:d7:e9:d4:1e:0f:eb:9c:67:fa:fa:
         df:2f:a1:07:4f:f3:e7:2f:fc:a5:b4:de:f1:7e:4a:6f:7e:90:
         92:ad:0f:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEchOxleHnGJC8DW9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk
MzM3MzczNDMtOTMxZS00NGQzLWFhZTEtZjNlNThmY2NhZTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzwHfAHLo986YakA39iMJYb1MHF6fDlD0f/I
jO2beD95STZXpOGGUi1+Wmrx95S0f2pRDC/y3g6DwzRiIMRLGLASo1e7CWLnRNkP
KHr0R34DSm7gENzWs2Ov7Omg6eMJ/iX4DXhyk6CroaRYBbGgRjXWgQI0l3f3CA5B
lILeLOZIKlaWBFvUA3Mf57NO56p85XhXobeRBPFC7SOJ6+fYoP2K3fVgq5N9gsmO
hRTlK8wGhLIl7lejf9FznUYMDsEx/PHMbB4sfff22dfr3zR7MsYM9by7aKhQQpAf
fiYzft1DpmaHaeX7OHhnn4CBcsULz8FxHdmtf74OzhJT9ScULwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFELNseyCSCIyvRF/M8bXoksXcp6IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvOTVkYzkxOWEtZGNkNC0z
NmMyLWI5NTYtNDE1ZThlZGVlNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABEPAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH8q8Hi+lNugLiBwUj9exjtEwihKYN1j7pgGcP15xJdBr4kNCWdb
6GiB9aR4oll+ua4HpOUgTX1Cd7gG7JcF5e8kEwix7ztFPGUut1mOM1Zc8o27bMu+
HptrG2Juq98COVzr11u1K+K2Df05b6o9JB+jE/EtdCCznZJz3niMvpL8YM2awo0y
pnIIBLmlit6raKjC0vDB5GR10ph8RAoUxjb1fo8yV9FK6RpaSGG+TZxSTvXcJEN8
NVgR3QsJTshihnqg9+Oba5k0ghaYxMLuWM/CySsixmy1CdakDVq3GMhI1+nUHg/r
nGf6+t8voQdP8+cv/KW03vF+Sm9+kJKtD+o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:52 2024 by rpki-client on console-fra.rpki-client.org