Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/d79d7629-9142-3f29-862b-ddcdc0b89870.roa
File:                     d79d7629-9142-3f29-862b-ddcdc0b89870.roa (raw, json)
Hash identifier:          ptGD+G8gMPH/h/a6mHtHL2nWCUiUGi3mVc2mKP7i8ws=
Subject key identifier:   1C:67:B5:9E:6E:EF:7F:C6:5B:59:A8:35:84:E5:A4:A8:80:44:4C:5A
Certificate issuer:       /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
Certificate serial:       010D0C9F4328584762D651E00FD9813276DE0B00
Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/d79d7629-9142-3f29-862b-ddcdc0b89870.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     26457
IP address blocks:        2620:135:5004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:51:e0:0f:d9:81:32:76:de:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=271fdc10-adf6-4b89-a09f-c1a2ea631723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:69:ad:16:c4:19:cf:94:07:e9:b9:f6:c7:38:
                    4a:81:d6:da:ac:32:24:82:83:9b:c5:da:0c:08:2e:
                    df:c4:a2:38:27:32:d0:f9:df:7b:b2:22:29:b9:e7:
                    d6:60:12:a2:8b:64:b2:86:ac:ce:af:ec:ba:5e:3f:
                    fa:1f:91:f6:54:ee:83:e8:c9:02:74:58:c7:30:87:
                    d5:9e:1a:61:d0:28:ae:e7:4d:3f:81:1f:05:3f:bf:
                    22:b5:f2:b1:10:a2:ce:61:a2:af:f4:24:bf:38:a5:
                    7a:44:ec:09:9d:95:c8:f6:c4:cb:ff:36:99:ee:91:
                    19:28:85:a3:15:3b:47:9b:37:81:2c:65:3c:0b:90:
                    ec:a8:e1:06:e2:ac:2a:c7:58:e2:9d:a2:fa:51:e7:
                    1d:95:bc:6f:35:ab:f7:c1:77:f1:70:e8:5c:72:0f:
                    f5:22:80:e7:aa:2a:42:68:f2:2d:ee:e5:5b:50:2b:
                    0a:22:c4:cf:94:45:e6:03:84:b0:31:65:0b:eb:be:
                    67:bb:da:fe:65:90:67:88:9b:9f:25:11:e6:39:91:
                    e8:8c:67:22:a1:27:02:e2:79:b4:0d:76:c2:56:34:
                    dd:d2:4e:46:b8:1d:66:c7:b3:d9:76:6d:61:aa:62:
                    cd:a4:7c:43:24:02:57:89:89:a7:68:cd:e2:a2:95:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:67:B5:9E:6E:EF:7F:C6:5B:59:A8:35:84:E5:A4:A8:80:44:4C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/d79d7629-9142-3f29-862b-ddcdc0b89870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:5004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:64:f2:2f:8e:e2:2f:32:4f:0d:c2:12:33:91:d4:eb:8f:
         48:b6:17:7e:04:a0:8f:ae:99:ec:a7:de:37:49:fa:1d:c4:98:
         58:67:15:7e:19:61:84:e4:bc:24:27:ec:f2:79:d3:bb:9f:6d:
         29:04:62:d8:a7:45:03:ed:90:d8:31:95:66:fc:6d:31:65:b1:
         1e:ac:ac:47:eb:3e:06:7d:7f:64:43:5d:c2:b9:4f:a3:7d:27:
         22:bc:03:f3:b6:5f:d4:88:7c:66:fc:91:d9:42:07:6d:46:30:
         83:8b:91:b0:9e:f2:6f:4a:20:aa:ed:92:d7:9d:55:d5:8d:76:
         cc:8d:37:96:d4:50:a6:6d:30:e0:af:93:09:89:cd:dc:cc:88:
         41:7c:87:74:6f:52:7d:49:ae:ce:0c:43:2b:69:5f:74:cd:bb:
         05:3f:8c:d5:d2:c5:51:70:f1:0a:8a:aa:3e:22:8e:2a:bb:43:
         c6:6c:06:fa:7f:56:1f:47:ca:98:c4:b5:c1:05:e2:d1:42:c6:
         94:08:5e:52:43:e3:8b:ac:f7:a1:2c:d8:d2:15:60:5b:5c:68:
         15:31:0a:ba:7d:ad:d3:21:a4:d9:cc:4f:87:76:d6:72:57:e8:
         0e:45:cb:66:57:a0:bb:0a:43:90:88:50:0e:3a:43:00:a3:1c:
         f1:b6:1e:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdi1lHgD9mBMnbeCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0
NjJmMB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
MjcxZmRjMTAtYWRmNi00Yjg5LWEwOWYtYzFhMmVhNjMxNzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mmtFsQZz5QH6bn2xzhKgdbarDIkgoObxdoM
CC7fxKI4JzLQ+d97siIpuefWYBKii2SyhqzOr+y6Xj/6H5H2VO6D6MkCdFjHMIfV
nhph0Ciu500/gR8FP78itfKxEKLOYaKv9CS/OKV6ROwJnZXI9sTL/zaZ7pEZKIWj
FTtHmzeBLGU8C5DsqOEG4qwqx1jinaL6UecdlbxvNav3wXfxcOhccg/1IoDnqipC
aPIt7uVbUCsKIsTPlEXmA4SwMWUL675nu9r+ZZBniJufJRHmOZHojGcioScC4nm0
DXbCVjTd0k5GuB1mx7PZdm1hqmLNpHxDJAJXiYmnaM3iopWHawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBxntZ5u73/GW1moNYTlpKiARExaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk
ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvZDc5ZDc2MjktOTE0Mi0z
ZjI5LTg2MmItZGRjZGMwYjg5ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk
NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm
NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx
YTYzZjQ2MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNVAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADPsZPIvjuIvMk8NwhIzkdTrj0i2F34EoI+umeyn3jdJ+h3EmFhn
FX4ZYYTkvCQn7PJ507ufbSkEYtinRQPtkNgxlWb8bTFlsR6srEfrPgZ9f2RDXcK5
T6N9JyK8A/O2X9SIfGb8kdlCB21GMIOLkbCe8m9KIKrtktedVdWNdsyNN5bUUKZt
MOCvkwmJzdzMiEF8h3RvUn1Jrs4MQytpX3TNuwU/jNXSxVFw8QqKqj4ijiq7Q8Zs
Bvp/Vh9HypjEtcEF4tFCxpQIXlJD44us96Es2NIVYFtcaBUxCrp9rdMhpNnMT4d2
1nJX6A5Fy2ZXoLsKQ5CIUA46QwCjHPG2Hm8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:55:43 2024 by rpki-client on console-fra.rpki-client.org