Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa
File:                     8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa (raw, json)
Hash identifier:          jzKq2gw1pSo2ZMu6Ij5rZch6e0eFtzhKiwoD0nI4KpE=
Subject key identifier:   6F:CD:6A:35:A4:F4:33:0F:43:1C:AB:89:51:F5:CC:D8:52:FE:58:DE
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F43285844B42FA1177531CA6A9B465F00
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa
Signing time:             Sun 28 Jan 2024 14:00:31 +0000
ROA not before:           Sun 28 Jan 2024 14:00:31 +0000
ROA not after:            Sat 27 Apr 2024 13:00:31 +0000
asID:                     399728
IP address blocks:        2620:98:e000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b4:2f:a1:17:75:31:ca:6a:9b:46:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Jan 28 14:00:31 2024 GMT
            Not After : Apr 27 13:00:31 2024 GMT
        Subject: CN=7fb17e4a-d72b-43f9-a86e-8050855761cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f6:42:b6:fa:1c:85:ea:62:6d:b8:4b:31:fc:
                    bf:6d:56:7d:55:39:f7:ce:8b:d8:06:22:a0:26:6a:
                    c5:a2:44:b7:0a:64:0c:f8:aa:bc:9d:59:a8:34:c4:
                    a4:ff:ec:f9:39:9f:9f:58:6a:91:86:26:a4:4f:59:
                    9a:94:69:24:ee:11:c1:e2:e1:89:b7:68:32:35:5e:
                    91:11:65:65:ee:37:16:36:67:8a:62:2d:16:ca:53:
                    b5:51:27:77:04:09:53:bf:f4:dd:1e:80:99:fd:78:
                    0b:ab:55:f3:9e:66:09:09:f2:d6:7a:bf:a9:28:87:
                    95:25:54:9a:16:9c:cb:16:e2:20:fc:3c:a0:ed:d8:
                    07:01:fd:18:b0:ed:44:6d:fc:34:26:88:12:2c:36:
                    28:55:8b:d6:5b:20:5a:e5:b0:f6:8f:b8:b2:93:dd:
                    7c:3e:71:9a:56:55:65:69:d3:e1:54:da:59:6d:5c:
                    c2:d1:9f:9e:7b:01:53:f1:68:b0:f8:95:7d:e8:5e:
                    5e:9e:4e:6a:4e:60:b3:41:0f:30:51:ce:d7:ed:d9:
                    1c:4a:d1:f1:4b:f6:12:0d:e1:cc:19:14:d6:08:17:
                    31:37:af:72:bb:af:c3:a0:22:25:65:f6:97:48:25:
                    76:57:6f:a1:f1:23:2e:8f:17:e1:b3:c2:36:e5:df:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CD:6A:35:A4:F4:33:0F:43:1C:AB:89:51:F5:CC:D8:52:FE:58:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8e99f8fe-1dbf-310f-a563-cdb3c6d08dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:24:c8:a3:95:4e:94:64:57:b7:33:cd:be:10:64:e7:41:
         6a:3c:65:19:b5:35:29:fd:df:99:b9:4c:31:4c:66:6e:c7:39:
         76:79:40:f6:d8:35:f7:5d:bd:c9:7d:fe:d6:f8:4e:d8:94:cf:
         c2:7a:b4:cf:62:79:a2:c3:f1:d1:97:3b:df:06:0f:bb:92:21:
         ff:0f:de:90:35:83:b2:bf:cd:b7:f1:8c:cf:5c:c2:23:c4:06:
         f3:38:6d:dc:ae:2f:b2:ca:87:02:bb:5e:b1:b9:72:f4:e2:fc:
         a6:c2:d1:52:42:f2:0d:fe:2b:88:85:98:a2:0e:63:68:b1:18:
         c8:2f:c3:8c:e6:5e:d0:98:33:05:3b:82:df:08:6a:76:55:80:
         19:95:46:ca:41:65:cc:c3:61:7b:ce:68:e7:20:c6:36:5f:cf:
         63:08:aa:ee:d8:f0:a0:bc:04:f3:94:5c:bf:40:9d:3c:c7:cb:
         5e:c6:38:cc:03:b1:43:28:23:fc:a9:6a:52:75:d8:d1:92:66:
         f8:65:40:93:a3:47:d1:66:b3:81:1a:ad:c1:2f:5c:b5:99:8f:
         da:89:ff:57:6a:f4:02:2d:90:a1:0e:48:ac:10:61:b0:89:61:
         77:da:13:f1:1b:a8:a7:87:fb:86:e3:3b:53:70:8b:88:3e:96:
         e0:aa:49:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWES0L6EXdTHKaptGXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm
MDgyMB4XDTI0MDEyODE0MDAzMVoXDTI0MDQyNzEzMDAzMVowLzEtMCsGA1UEAxMk
N2ZiMTdlNGEtZDcyYi00M2Y5LWE4NmUtODA1MDg1NTc2MWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/ZCtvochepibbhLMfy/bVZ9VTn3zovYBiKg
JmrFokS3CmQM+Kq8nVmoNMSk/+z5OZ+fWGqRhiakT1malGkk7hHB4uGJt2gyNV6R
EWVl7jcWNmeKYi0WylO1USd3BAlTv/TdHoCZ/XgLq1XznmYJCfLWer+pKIeVJVSa
FpzLFuIg/Dyg7dgHAf0YsO1Ebfw0JogSLDYoVYvWWyBa5bD2j7iyk918PnGaVlVl
adPhVNpZbVzC0Z+eewFT8Wiw+JV96F5enk5qTmCzQQ8wUc7X7dkcStHxS/YSDeHM
GRTWCBcxN69yu6/DoCIlZfaXSCV2V2+h8SMujxfhs8I25d8n4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG/NajWk9DMPQxyriVH1zNhS/ljeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh
OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvOGU5OWY4ZmUtMWRiZi0z
MTBmLWE1NjMtY2RiM2M2ZDA4ZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5
OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1
ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi
ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAmOAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE4bJMijlU6UZFe3M82+EGTnQWo8ZRm1NSn935m5TDFMZm7HOXZ5
QPbYNfddvcl9/tb4TtiUz8J6tM9ieaLD8dGXO98GD7uSIf8P3pA1g7K/zbfxjM9c
wiPEBvM4bdyuL7LKhwK7XrG5cvTi/KbC0VJC8g3+K4iFmKIOY2ixGMgvw4zmXtCY
MwU7gt8IanZVgBmVRspBZczDYXvOaOcgxjZfz2MIqu7Y8KC8BPOUXL9AnTzHy17G
OMwDsUMoI/ypalJ12NGSZvhlQJOjR9Fms4EarcEvXLWZj9qJ/1dq9AItkKEOSKwQ
YbCJYXfaE/EbqKeH+4bjO1Nwi4g+luCqSbs=
-----END CERTIFICATE-----
Generated at Thu Mar 28 11:28:45 2024 by rpki-client on console-fra.rpki-client.org