Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa
File:                     16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa (raw, json)
Hash identifier:          uGXEWSEm5TU3UeNpucVyu/6aCao12ZV9tdA7A0cxUh4=
Subject key identifier:   26:4E:E6:BA:7A:07:B0:0D:37:4A:10:CE:B5:21:77:79:21:F9:7F:21
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285845CE134F8F1C0F3E5E251AA8A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa
Signing time:             Wed 08 May 2024 13:21:30 +0000
ROA not before:           Wed 08 May 2024 13:21:30 +0000
ROA not after:            Tue 06 Aug 2024 13:21:30 +0000
asID:                     0
IP address blocks:        2620:74:e0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:13:4f:8f:1c:0f:3e:5e:25:1a:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  8 13:21:30 2024 GMT
            Not After : Aug  6 13:21:30 2024 GMT
        Subject: CN=bdfd850f-1a1f-49de-a63a-e3762deb814c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:de:e5:7d:84:fd:0b:3e:d7:31:d6:2b:0c:
                    50:4a:03:8c:6b:3d:7c:ca:44:e9:30:cf:f7:90:32:
                    45:2a:38:08:9b:57:56:0d:d8:21:2f:a5:35:16:cb:
                    2d:d5:e5:db:6f:15:5d:c0:2d:f3:25:b7:a8:39:77:
                    6d:fb:3a:44:63:52:88:1d:8b:eb:aa:c4:3a:5e:82:
                    b4:20:96:bd:65:04:7e:ee:a1:76:e9:58:92:f9:69:
                    c7:82:97:9e:c7:83:cc:7e:2d:29:91:ec:a0:0f:6e:
                    a1:46:4e:68:3c:e2:0c:d1:ee:30:c7:e1:57:e3:b8:
                    bc:d2:60:1c:b8:16:f8:e3:b2:97:0f:ce:33:d8:f6:
                    83:38:93:8a:73:b7:11:a6:ec:49:d4:2b:01:22:b4:
                    dd:29:6c:1d:66:16:cd:93:9c:c1:49:88:f6:5f:b2:
                    bf:19:02:e0:17:73:ed:f0:63:3a:bc:d3:c8:d5:56:
                    0f:73:65:f0:a8:48:fa:69:e5:e8:ff:41:4b:23:a7:
                    aa:cb:20:ce:72:ee:94:8f:31:e7:32:96:8f:cb:c7:
                    31:7b:57:d8:58:46:da:3c:d8:d7:d6:a6:fe:9f:3f:
                    6d:38:9d:e3:44:a6:a3:c1:4b:9a:af:6c:8a:1a:5a:
                    75:75:24:cd:56:cf:5d:db:b4:80:f0:a7:41:09:a3:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:E6:BA:7A:07:B0:0D:37:4A:10:CE:B5:21:77:79:21:F9:7F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:e0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d7:f3:0c:db:95:45:d1:3d:91:61:0f:cc:da:25:94:ec:f1:
         ff:ab:7f:da:e4:47:3a:06:3e:f5:dc:0f:c5:7c:6b:4e:c5:1b:
         52:3a:50:2e:5f:08:26:54:16:b6:ed:4a:c3:b8:a2:cf:ea:b1:
         00:0b:4e:2d:5e:7a:3a:65:21:ab:f7:ed:c7:8d:f3:63:c0:3b:
         f7:b2:97:25:1f:72:74:28:3f:3e:7f:b8:84:6a:49:ce:fd:39:
         75:9f:63:db:71:65:be:5a:f5:a2:3c:6a:0e:79:08:af:a1:ea:
         4c:8e:4e:bb:22:01:83:dc:8f:04:b8:51:ae:52:bc:92:e9:72:
         00:d8:1a:66:ab:31:14:c6:2a:0f:b4:09:e4:1f:ac:ba:8e:c9:
         44:0b:b9:ab:a6:0b:65:a7:86:64:0d:16:5e:87:ba:15:75:8d:
         07:10:e0:2a:f1:52:03:1c:77:f2:12:29:43:63:0b:f1:f7:54:
         99:4f:59:c3:92:99:28:5b:3e:3f:1e:21:24:a8:6e:1a:36:df:
         ac:19:2a:2d:37:4b:98:a0:3c:8a:7a:90:87:83:d5:da:8a:3f:
         02:34:80:90:9b:36:d9:39:96:04:ee:84:39:5d:dc:5f:da:12:
         42:84:27:96:b9:74:7a:6b:08:a5:62:52:38:b9:50:30:e3:5d:
         73:00:a9:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXOE0+PHA8+XiUaqKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MDUwODEzMjEzMFoXDTI0MDgwNjEzMjEzMFowLzEtMCsGA1UEAxMk
YmRmZDg1MGYtMWExZi00OWRlLWE2M2EtZTM3NjJkZWI4MTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLLe5X2E/Qs+1zHWKwxQSgOMaz18ykTpMM/3
kDJFKjgIm1dWDdghL6U1Fsst1eXbbxVdwC3zJbeoOXdt+zpEY1KIHYvrqsQ6XoK0
IJa9ZQR+7qF26ViS+WnHgpeex4PMfi0pkeygD26hRk5oPOIM0e4wx+FX47i80mAc
uBb447KXD84z2PaDOJOKc7cRpuxJ1CsBIrTdKWwdZhbNk5zBSYj2X7K/GQLgF3Pt
8GM6vNPI1VYPc2XwqEj6aeXo/0FLI6eqyyDOcu6UjzHnMpaPy8cxe1fYWEbaPNjX
1qb+nz9tOJ3jRKajwUuar2yKGlp1dSTNVs9d27SA8KdBCaMpKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCZO5rp6B7ANN0oQzrUhd3kh+X8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTZhZjRhMGQtMjRmOC0z
MmIxLTk3MDAtZGQ5YWMzYTQzNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAdADg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGDX8wzblUXRPZFhD8zaJZTs8f+rf9rkRzoGPvXcD8V8a07FG1I6
UC5fCCZUFrbtSsO4os/qsQALTi1eejplIav37ceN82PAO/eylyUfcnQoPz5/uIRq
Sc79OXWfY9txZb5a9aI8ag55CK+h6kyOTrsiAYPcjwS4Ua5SvJLpcgDYGmarMRTG
Kg+0CeQfrLqOyUQLuaumC2WnhmQNFl6HuhV1jQcQ4CrxUgMcd/ISKUNjC/H3VJlP
WcOSmShbPj8eISSobho236wZKi03S5igPIp6kIeD1dqKPwI0gJCbNtk5lgTuhDld
3F/aEkKEJ5a5dHprCKViUji5UDDjXXMAqdo=
-----END CERTIFICATE-----
Generated at Wed Jun 26 16:49:21 2024 by rpki-client on console-fra.rpki-client.org