Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa
File:                     a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa (raw, json)
Hash identifier:          HHuQdBJ1yOA9/N76HmMbfBUjvGR3TcYIVlNToTr1Ws4=
Subject key identifier:   85:EA:DB:9A:1E:90:29:2E:E9:9B:7C:BB:2F:0B:C1:6B:EC:06:B5:F9
Certificate issuer:       /CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5
Certificate serial:       010D0C9F43285847213B198B1245445FD98A0740
Authority key identifier: C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     19750
IP address blocks:        2620:100:a000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:19:8b:12:45:44:5f:d9:8a:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=b003eb83-f3c0-40c8-b6af-b065e1c5c322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:16:27:04:20:cc:ec:6e:a9:e5:b4:8c:61:
                    ac:69:1a:52:3b:a4:1d:5b:fd:25:04:8e:2e:2f:06:
                    0d:92:07:57:0b:f5:c1:8a:e1:aa:44:74:e6:2a:6f:
                    e0:26:5c:26:b3:ce:7a:c8:57:b8:6e:bf:24:32:e1:
                    23:e4:4e:00:d3:ac:d9:4c:e0:37:ee:97:06:8d:86:
                    1c:95:00:35:30:ed:f2:59:21:7e:ff:fa:71:c7:ff:
                    6a:c7:7b:30:f9:62:07:19:03:0a:4a:7e:e3:b3:c7:
                    1e:da:67:20:ac:5b:2a:4b:ce:e6:fb:78:16:1b:b8:
                    ca:1a:32:f8:75:14:25:46:40:f1:99:93:95:dd:b0:
                    9e:4f:4a:b1:fb:32:4d:8e:02:14:56:d7:1d:14:cf:
                    3c:17:c7:e4:77:83:61:7f:ce:0c:79:41:db:95:35:
                    cc:b5:3e:90:f1:fa:20:1f:90:74:24:81:2e:dd:a9:
                    60:7e:1a:25:f0:55:95:e5:50:89:b5:4d:20:e7:f9:
                    a3:8b:13:04:63:c2:e2:54:35:ba:f5:c1:61:85:06:
                    db:29:13:de:1a:77:32:83:cd:2a:89:15:6b:e0:06:
                    99:e2:37:5d:77:0f:92:61:47:bc:84:c4:eb:fd:54:
                    7e:e0:12:ac:f3:75:69:d5:a6:44:53:b8:13:70:4b:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EA:DB:9A:1E:90:29:2E:E9:9B:7C:BB:2F:0B:C1:6B:EC:06:B5:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.crl

            X509v3 Authority Key Identifier:
                keyid:C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:100:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:10:16:03:1e:2f:8a:b0:a5:dc:5e:cb:e4:e2:52:54:c8:2d:
         11:bb:b0:37:c9:e4:8e:1c:e3:e3:6a:2a:4f:b2:4b:c9:60:c3:
         41:44:74:9c:9c:6b:c4:d1:ed:b0:bd:8a:8f:ce:b6:57:a9:9f:
         d7:9d:9d:03:22:59:d3:53:fe:da:7b:9a:84:90:f6:34:83:bf:
         77:5b:a2:7b:dd:e0:b1:d7:1d:f4:cd:86:de:c7:1d:59:45:66:
         7c:84:98:2d:7b:f5:c8:7b:e2:80:4d:79:cc:21:b4:2e:9e:97:
         fa:d5:e4:05:02:c0:da:72:eb:93:38:dd:31:21:ff:4e:ac:75:
         3c:dd:9d:aa:61:36:4d:03:08:82:94:f6:38:95:44:6e:c0:f6:
         6b:5d:12:5f:ec:54:83:7e:95:81:75:bd:14:bc:65:77:ec:c2:
         0a:9d:d5:f8:1b:c0:30:19:eb:6a:59:53:a0:32:b3:25:f9:9d:
         54:f2:af:5b:ba:05:e3:bd:26:a9:2b:4b:79:62:95:45:f2:a4:
         7f:77:6d:b3:af:e3:88:5d:ff:7a:be:32:2a:be:e2:b1:b5:b5:
         25:b9:1a:a0:30:37:d6:55:b0:34:b2:e8:ec:fa:6c:5d:dd:fb:
         58:4c:f5:bc:39:1b:d9:05:8b:b3:d7:c5:ee:db:98:98:8d:4b:
         c7:7f:76:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEchOxmLEkVEX9mKB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VhMDZjOTAtNGNjZC00NDc0LWI0ZmEtODgyZWVkNGY0
Y2Q1MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk
YjAwM2ViODMtZjNjMC00MGM4LWI2YWYtYjA2NWUxYzVjMzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzgWJwQgzOxuqeW0jGGsaRpSO6QdW/0lBI4u
LwYNkgdXC/XBiuGqRHTmKm/gJlwms856yFe4br8kMuEj5E4A06zZTOA37pcGjYYc
lQA1MO3yWSF+//pxx/9qx3sw+WIHGQMKSn7js8ce2mcgrFsqS87m+3gWG7jKGjL4
dRQlRkDxmZOV3bCeT0qx+zJNjgIUVtcdFM88F8fkd4Nhf84MeUHblTXMtT6Q8fog
H5B0JIEu3algfhol8FWV5VCJtU0g5/mjixMEY8LiVDW69cFhhQbbKRPeGncyg80q
iRVr4AaZ4jdddw+SYUe8hMTr/VR+4BKs83Vp1aZEU7gTcEtr3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIXq25oekCku6Zt8uy8LwWvsBrX5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWEw
NmM5MC00Y2NkLTQ0NzQtYjRmYS04ODJlZWQ0ZjRjZDUvYTdlYWNiMjktODY4MS0z
ZWExLWFmMjItZjUzMWY0M2UwYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2VhMDZjOTAtNGNjZC00NDc0LWI0
ZmEtODgyZWVkNGY0Y2Q1L2NlYTA2YzkwLTRjY2QtNDQ3NC1iNGZhLTg4MmVlZDRm
NGNkNS5jcmwwHwYDVR0jBBgwFoAUwJR2G28OANY7WBxXXEDTmDee/aIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWEwNmM5MC00Y2NkLTQ0NzQtYjRmYS04ODJl
ZWQ0ZjRjZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABAKAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADAQFgMeL4qwpdxey+TiUlTILRG7sDfJ5I4c4+NqKk+yS8lgw0FE
dJyca8TR7bC9io/Otlepn9ednQMiWdNT/tp7moSQ9jSDv3dbonvd4LHXHfTNht7H
HVlFZnyEmC179ch74oBNecwhtC6el/rV5AUCwNpy65M43TEh/06sdTzdnaphNk0D
CIKU9jiVRG7A9mtdEl/sVIN+lYF1vRS8ZXfswgqd1fgbwDAZ62pZU6AysyX5nVTy
r1u6BeO9JqkrS3lilUXypH93bbOv44hd/3q+Miq+4rG1tSW5GqAwN9ZVsDSy6Oz6
bF3d+1hM9bw5G9kFi7PXxe7bmJiNS8d/dpc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:52:07 2024 by rpki-client on console-fra.rpki-client.org