Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f6fbaf52-cbe4-3d4b-89fc-849f2fae16c0.roa
File:                     f6fbaf52-cbe4-3d4b-89fc-849f2fae16c0.roa (raw, json)
Hash identifier:          nQxNG6jfYGSJEKmIQyPLF4EmnRX9kaoOhy2U8pqb9ak=
Subject key identifier:   5B:81:97:25:C0:F7:E1:EE:04:2E:E3:D5:F8:11:EB:EC:59:BB:E0:E8
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F432858458B0883677B384E9BFD53B360
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f6fbaf52-cbe4-3d4b-89fc-849f2fae16c0.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     13916
IP address blocks:        2620:100:9000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:83:67:7b:38:4e:9b:fd:53:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=a8e14673-ec53-4271-b5fd-425b18ba2b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:79:15:29:8e:b3:38:31:79:0b:eb:ac:cb:
                    3a:95:f5:4c:a5:64:cc:61:8f:b6:77:4f:8d:f9:22:
                    e7:3b:51:a7:1a:99:3d:5f:e7:c5:a4:b8:70:20:55:
                    c8:e9:c3:76:11:ec:43:50:23:4d:e6:b9:9a:10:83:
                    ff:b4:80:c4:cd:40:ab:e5:30:da:f6:f5:cc:5c:7d:
                    ea:4f:f4:00:50:fc:5a:73:b9:67:c1:b4:27:50:b6:
                    f6:df:d3:65:39:84:34:0a:95:14:9f:34:a8:ec:72:
                    65:98:b4:45:d0:46:43:cd:61:4c:d8:57:ec:dd:61:
                    94:82:75:fe:a9:97:61:ec:89:b4:00:55:0f:c5:9b:
                    0a:56:92:5c:e4:e3:b8:cd:e4:78:23:f3:85:21:bc:
                    c0:45:95:80:20:9c:51:ec:20:53:77:b4:e6:25:a6:
                    0d:ad:cb:7d:b1:d9:dc:62:ca:b5:d5:61:6c:94:1c:
                    dc:f6:59:96:64:2a:f8:29:cb:45:0d:72:5b:fc:45:
                    c8:56:be:29:a0:35:df:86:99:60:27:2c:db:ed:1c:
                    21:ae:1c:b0:21:f0:6d:3b:ba:4c:6e:bc:a6:4d:15:
                    90:1b:0d:5e:11:da:92:fd:6c:57:24:50:b1:bc:cd:
                    f9:d5:c3:53:88:4a:31:c1:02:e5:33:5d:40:cb:7d:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:81:97:25:C0:F7:E1:EE:04:2E:E3:D5:F8:11:EB:EC:59:BB:E0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f6fbaf52-cbe4-3d4b-89fc-849f2fae16c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:100:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:1d:74:a1:d0:33:d8:7a:5e:af:57:5d:67:cc:d4:ff:e6:
         71:bf:38:29:a0:7b:f2:02:ba:1d:c8:0b:1b:e2:60:8d:26:6d:
         3b:a9:64:58:a5:02:11:bc:d8:f7:92:9b:c8:3a:ee:b8:a7:c0:
         c3:92:87:ce:16:bc:0f:b9:54:d8:60:d3:e0:ab:bf:1a:bb:ed:
         7f:93:77:c3:7b:be:64:90:29:41:e1:70:b1:1f:30:38:a2:63:
         9a:61:ab:cd:81:fc:3c:e5:6f:b2:d2:07:2b:41:32:5e:93:4a:
         65:d1:93:0d:00:e5:08:d7:f7:61:bf:8f:30:9a:2e:7e:58:16:
         ea:09:ff:9c:00:4a:2e:85:69:2a:3f:53:ed:70:93:ab:fd:23:
         d1:4e:f5:cb:7f:b3:70:1b:70:60:60:72:0e:22:65:36:e0:fa:
         6d:30:af:25:0e:f1:01:ab:be:02:f8:96:67:8a:7f:e7:51:78:
         40:08:e7:f1:7e:9a:6f:4d:cb:7d:4a:94:c7:0b:eb:78:0e:31:
         1a:7e:af:ba:f1:a4:c3:55:61:0f:7d:3b:bb:92:c8:41:6c:81:
         07:15:ac:be:cb:51:b5:dd:01:8c:b7:09:6d:85:83:67:9f:41:
         cd:f7:59:c7:3b:c3:95:98:bc:1b:40:7f:f1:38:ee:34:a4:9e:
         9b:05:94:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWLCINnezhOm/1Ts2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk
YThlMTQ2NzMtZWM1My00MjcxLWI1ZmQtNDI1YjE4YmEyYjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts15FSmOszgxeQvrrMs6lfVMpWTMYY+2d0+N
+SLnO1GnGpk9X+fFpLhwIFXI6cN2EexDUCNN5rmaEIP/tIDEzUCr5TDa9vXMXH3q
T/QAUPxac7lnwbQnULb239NlOYQ0CpUUnzSo7HJlmLRF0EZDzWFM2Ffs3WGUgnX+
qZdh7Im0AFUPxZsKVpJc5OO4zeR4I/OFIbzARZWAIJxR7CBTd7TmJaYNrct9sdnc
Ysq11WFslBzc9lmWZCr4KctFDXJb/EXIVr4poDXfhplgJyzb7RwhrhywIfBtO7pM
brymTRWQGw1eEdqS/WxXJFCxvM351cNTiEoxwQLlM11Ay30LVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFuBlyXA9+HuBC7j1fgR6+xZu+DoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZjZmYmFmNTItY2JlNC0z
ZDRiLTg5ZmMtODQ5ZjJmYWUxNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABAJAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC7EHXSh0DPYel6vV11nzNT/5nG/OCmge/ICuh3ICxviYI0mbTup
ZFilAhG82PeSm8g67rinwMOSh84WvA+5VNhg0+Crvxq77X+Td8N7vmSQKUHhcLEf
MDiiY5phq82B/Dzlb7LSBytBMl6TSmXRkw0A5QjX92G/jzCaLn5YFuoJ/5wASi6F
aSo/U+1wk6v9I9FO9ct/s3AbcGBgcg4iZTbg+m0wryUO8QGrvgL4lmeKf+dReEAI
5/F+mm9Ny31KlMcL63gOMRp+r7rxpMNVYQ99O7uSyEFsgQcVrL7LUbXdAYy3CW2F
g2efQc33Wcc7w5WYvBtAf/E47jSknpsFlNQ=
-----END CERTIFICATE-----
Generated at Sun May 12 01:31:30 2024 by rpki-client on console-fra.rpki-client.org