Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
File:                     13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa (raw, json)
Hash identifier:          netBwN+tALCzP1RRnrrvc3cu44d8SrOJwGEdlIEU8zg=
Subject key identifier:   4E:A1:18:FF:E4:7E:20:D8:2D:75:F5:39:AF:C9:5D:8B:22:79:83:B6
Certificate issuer:       /CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
Certificate serial:       010D0C9F432858456128669F98F12CF121A78400
Authority key identifier: 00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     395460
IP address blocks:        2620:6:2000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:66:9f:98:f1:2c:f1:21:a7:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=e004f018-530c-4688-95d7-63aca07ea25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7a:29:40:e2:4d:49:0f:52:9d:34:cb:e4:31:
                    c1:a6:a8:de:3a:de:5b:45:e1:62:54:8f:f8:62:ea:
                    b7:bf:b2:0a:8d:e0:df:32:7e:7b:cf:46:2f:c3:91:
                    7d:61:d3:c8:98:b2:85:ff:13:8b:6e:52:9d:fa:26:
                    24:11:20:b1:cf:3a:8d:29:9f:e6:16:03:0e:2e:4c:
                    7b:04:89:c5:56:c7:4c:d3:b7:6b:e2:74:74:28:e7:
                    3b:2d:be:63:1a:e7:00:6f:94:66:17:df:ea:5d:8a:
                    76:10:e3:02:84:62:12:b4:23:22:30:15:f7:bf:be:
                    89:bf:1b:99:13:76:e0:b8:a5:dc:5c:61:9b:57:21:
                    c1:d7:87:f1:9e:85:3a:fc:db:15:35:4f:ad:cd:1c:
                    84:7e:34:22:f3:b0:5d:ff:58:34:1d:b8:c7:46:b6:
                    b1:47:13:c1:f7:60:c7:7c:21:45:c3:f9:2b:06:9f:
                    97:05:b8:e4:db:ab:7d:6f:c2:6d:e8:78:c0:29:17:
                    4c:07:93:fa:02:50:22:27:16:78:59:76:5e:f9:e8:
                    cc:7f:7a:32:02:f0:0d:74:de:9f:f8:93:d3:e8:90:
                    9b:90:6e:5a:3f:01:83:2a:ec:be:93:f0:ae:c0:ca:
                    6b:bb:1b:75:a0:a9:3a:d9:5a:16:0c:ba:61:1a:c9:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A1:18:FF:E4:7E:20:D8:2D:75:F5:39:AF:C9:5D:8B:22:79:83:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:fe:cf:b1:2e:c4:06:4e:18:bb:86:bb:e8:ad:49:16:2c:c1:
         7d:59:05:78:01:b7:34:38:ab:5a:a9:c9:b6:21:04:65:84:c7:
         42:70:13:d2:5a:1d:51:ee:96:90:a6:6f:19:f0:aa:55:cf:71:
         eb:9d:80:1b:ef:d5:10:3c:c2:18:9b:a3:1c:f1:ed:7b:20:b5:
         36:00:10:73:b8:8e:3a:f6:94:d8:19:fc:7b:45:d6:be:d4:1f:
         b3:51:78:a4:8d:3a:a7:8f:5c:5f:67:41:7b:97:e4:66:7d:fd:
         be:75:a3:00:87:b4:b7:17:78:52:c3:bd:00:f2:39:89:7c:a4:
         f7:6d:7a:d5:16:09:5c:35:be:0e:72:7f:70:58:fb:b4:8a:d3:
         a5:18:8a:59:1a:be:de:5d:d7:80:ab:fc:da:be:de:fd:e1:e9:
         a7:37:7e:60:5c:91:0b:f2:7b:c1:3b:14:5e:64:6b:f6:8a:02:
         83:8c:93:16:52:37:8e:14:26:a6:d8:9a:2d:9a:03:c5:01:65:
         30:7b:c6:94:8d:af:45:ac:b1:6f:08:24:6f:ba:c4:8a:09:b3:
         1d:e9:b8:81:19:f0:91:da:c9:d7:99:cb:85:81:0a:37:cf:ba:
         bf:40:1d:6a:68:85:8c:d8:8a:60:3b:6d:29:fa:d4:cf:98:9a:
         00:92:eb:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVhKGafmPEs8SGnhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzBkMTZhZDMtYzgyNi00ZTQyLTgwM2QtMWRlZDZiM2Yx
YTU5MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
ZTAwNGYwMTgtNTMwYy00Njg4LTk1ZDctNjNhY2EwN2VhMjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnopQOJNSQ9SnTTL5DHBpqjeOt5bReFiVI/4
Yuq3v7IKjeDfMn57z0Yvw5F9YdPImLKF/xOLblKd+iYkESCxzzqNKZ/mFgMOLkx7
BInFVsdM07dr4nR0KOc7Lb5jGucAb5RmF9/qXYp2EOMChGIStCMiMBX3v76JvxuZ
E3bguKXcXGGbVyHB14fxnoU6/NsVNU+tzRyEfjQi87Bd/1g0HbjHRraxRxPB92DH
fCFFw/krBp+XBbjk26t9b8Jt6HjAKRdMB5P6AlAiJxZ4WXZe+ejMf3oyAvANdN6f
+JPT6JCbkG5aPwGDKuy+k/CuwMpruxt1oKk62VoWDLphGsko6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE6hGP/kfiDYLXX1Oa/JXYsieYO2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMGQx
NmFkMy1jODI2LTRlNDItODAzZC0xZGVkNmIzZjFhNTkvMTNhZDM5ZTgtNmIyMS0z
YjMyLThhN2QtZGY3ZGFiNThiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzBkMTZhZDMtYzgyNi00ZTQyLTgw
M2QtMWRlZDZiM2YxYTU5LzMwZDE2YWQzLWM4MjYtNGU0Mi04MDNkLTFkZWQ2YjNm
MWE1OS5jcmwwHwYDVR0jBBgwFoAUANIYw9RvKTagT+dk2D+9oYNTBnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMGQxNmFkMy1jODI2LTRlNDItODAzZC0xZGVk
NmIzZjFhNTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAABiAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKr+z7EuxAZOGLuGu+itSRYswX1ZBXgBtzQ4q1qpybYhBGWEx0Jw
E9JaHVHulpCmbxnwqlXPceudgBvv1RA8whiboxzx7XsgtTYAEHO4jjr2lNgZ/HtF
1r7UH7NReKSNOqePXF9nQXuX5GZ9/b51owCHtLcXeFLDvQDyOYl8pPdtetUWCVw1
vg5yf3BY+7SK06UYilkavt5d14Cr/Nq+3v3h6ac3fmBckQvye8E7FF5ka/aKAoOM
kxZSN44UJqbYmi2aA8UBZTB7xpSNr0WssW8IJG+6xIoJsx3puIEZ8JHaydeZy4WB
CjfPur9AHWpohYzYimA7bSn61M+YmgCS69Q=
-----END CERTIFICATE-----
Generated at Sat May 11 15:16:31 2024 by rpki-client on console-ams.rpki-client.org