Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/824e1872-1dea-3861-9cbe-c02a4e385697.roa
File:                     824e1872-1dea-3861-9cbe-c02a4e385697.roa (raw, json)
Hash identifier:          lCMLRap4gVD73xjlTh2MKFPVXjI70IquJpNAHBrhzH0=
Subject key identifier:   A6:B6:98:DD:1C:CC:EB:7C:EC:87:5B:8F:38:41:0F:D4:5F:24:FD:7B
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730ECF21B0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/824e1872-1dea-3861-9cbe-c02a4e385697.roa
Signing time:             Thu 02 Jul 2020 09:15:22 +0000
ROA not before:           Tue 30 Jul 2019 04:00:00 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     398107
IP address blocks:        2607:f208:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0e:cf:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 30 04:00:00 2019 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=e6938927-47c5-4945-b7cf-312b90c47cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:3c:7b:1d:16:59:10:31:9c:49:c3:92:72:
                    3e:89:df:17:1d:60:4d:d9:03:73:13:9d:59:dd:68:
                    8f:d4:84:47:c8:54:f6:11:a5:dd:52:ac:07:4f:81:
                    17:b6:b9:cb:f2:85:22:b3:67:4f:94:11:e7:a8:9b:
                    ff:be:5a:98:3c:ae:23:ab:36:b8:b7:ef:52:ca:ec:
                    e1:14:db:cb:26:47:11:9a:79:41:f8:6c:00:60:cf:
                    8d:48:c0:e8:6b:08:b2:29:55:99:94:da:73:3e:a3:
                    d4:a8:ea:20:6e:48:4c:2d:34:87:99:dc:2c:2c:0e:
                    ee:0f:03:64:73:9d:0e:e6:f0:a2:ae:7f:4b:ac:02:
                    be:6e:7b:0d:50:87:47:4e:61:17:0d:0c:23:76:7c:
                    53:8c:d9:a8:4b:06:e3:f2:89:aa:5d:55:ce:06:42:
                    d5:3f:8e:53:8c:58:da:f5:06:32:13:bb:01:79:8c:
                    53:c7:59:9b:80:c5:19:f6:86:72:80:f3:d7:61:35:
                    6c:b1:81:28:a7:84:22:83:4d:81:38:0a:a8:47:7c:
                    7d:e3:65:bc:ff:4f:cd:7e:c3:40:92:c4:3e:6d:30:
                    da:03:23:18:f6:ab:f8:a9:2d:83:59:45:63:d9:78:
                    00:c8:5e:86:3b:f0:d4:44:17:64:b7:ba:22:31:35:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:98:DD:1C:CC:EB:7C:EC:87:5B:8F:38:41:0F:D4:5F:24:FD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/824e1872-1dea-3861-9cbe-c02a4e385697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f208:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:af:2f:fe:e8:7d:f5:6d:32:4d:d3:9c:c5:2e:a9:d2:01:95:
         58:0b:16:13:42:43:3c:63:7e:3f:6e:38:18:c0:57:7c:7a:73:
         75:32:6d:88:f8:fd:e0:bb:7f:c9:44:ab:1d:ff:6d:ca:9f:a8:
         4f:eb:17:ee:b5:8a:33:d0:62:33:d8:34:21:0d:92:aa:20:38:
         5b:05:7f:1a:04:17:15:f1:fa:45:db:0d:40:16:9a:f7:7a:b4:
         94:b7:0e:f4:c7:86:99:f2:b2:dc:5a:ca:dd:0e:f3:c7:1d:1c:
         f4:61:0b:ea:0b:e2:56:01:09:67:75:0f:6c:e7:cc:3f:d4:dd:
         a9:c2:0d:1a:ff:77:b7:31:fd:2f:8c:04:fe:fd:1c:cb:fc:49:
         89:c1:29:9c:ed:de:65:cd:79:a0:37:6b:d8:05:39:9e:08:27:
         73:90:f1:bf:0f:85:97:5f:99:0e:f2:07:b9:83:44:88:5a:3a:
         00:b7:38:e9:3f:a8:85:3e:ac:cc:c5:74:8b:dd:ad:90:37:f0:
         48:ef:d4:3f:f0:25:5e:c7:cd:e2:34:76:31:be:2a:93:9c:e4:
         9f:66:57:ed:22:d1:37:d2:f3:55:15:8e:59:0d:2d:dd:de:a7:
         6e:46:88:1c:d0:4c:91:4b:e8:6c:6c:1e:10:07:23:5c:e2:62:
         0f:a8:29:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcw7PIbAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNjZjEz
ZjAeFw0xOTA3MzAwNDAwMDBaFw0yOTA3MzAwNDAwMDBaMC8xLTArBgNVBAMTJGU2
OTM4OTI3LTQ3YzUtNDk0NS1iN2NmLTMxMmI5MGM0N2NmYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMu0PHsdFlkQMZxJw5JyPonfFx1gTdkDcxOdWd1o
j9SER8hU9hGl3VKsB0+BF7a5y/KFIrNnT5QR56ib/75amDyuI6s2uLfvUsrs4RTb
yyZHEZp5QfhsAGDPjUjA6GsIsilVmZTacz6j1KjqIG5ITC00h5ncLCwO7g8DZHOd
Dubwoq5/S6wCvm57DVCHR05hFw0MI3Z8U4zZqEsG4/KJql1VzgZC1T+OU4xY2vUG
MhO7AXmMU8dZm4DFGfaGcoDz12E1bLGBKKeEIoNNgTgKqEd8feNlvP9PzX7DQJLE
Pm0w2gMjGPar+Kktg1lFY9l4AMhehjvw1EQXZLe6IjE1/fkCAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBSmtpjdHMzrfOyHW484QQ/UXyT9ezCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNl
ODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2NmMTNmLzgyNGUxODcyLTFkZWEtMzg2
MS05Y2JlLWMwMmE0ZTM4NTY5Ny5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzllZDVjZTgwLTIyNGUtNDZhYi05NGYx
LTFhZmNlOGNjZjEzZi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2Yx
M2YuY3JsMB8GA1UdIwQYMBaAFDgdn6a6fMGoRK4J/loAlp07/OEPMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4
Y2NmMTNmLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYH8ggACDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAXq8v/uh99W0yTdOcxS6p0gGVWAsWE0JDPGN+P244GMBXfHpzdTJtiPj9
4Lt/yUSrHf9typ+oT+sX7rWKM9BiM9g0IQ2SqiA4WwV/GgQXFfH6RdsNQBaa93q0
lLcO9MeGmfKy3FrK3Q7zxx0c9GEL6gviVgEJZ3UPbOfMP9TdqcINGv93tzH9L4wE
/v0cy/xJicEpnO3eZc15oDdr2AU5nggnc5Dxvw+Fl1+ZDvIHuYNEiFo6ALc46T+o
hT6szMV0i92tkDfwSO/UP/AlXsfN4jR2Mb4qk5zkn2ZX7SLRN9LzVRWOWQ0t3d6n
bkaIHNBMkUvobGweEAcjXOJiD6gpxQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:54 2024 by rpki-client on console-fra.rpki-client.org