Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/e4626a98-9621-369e-9e67-c402355aac2d.roa
File:                     e4626a98-9621-369e-9e67-c402355aac2d.roa (raw, json)
Hash identifier:          eNWojkZ2IudEhfOfim24JSiD40BQoUdWA/03VUZgv8c=
Subject key identifier:   F9:44:A1:37:CC:08:60:16:30:42:B3:4C:D4:9D:52:7D:3E:D2:56:8F
Certificate issuer:       /CN=1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd
Certificate serial:       010D0C9F432858473095FD3E9A10C51C3AB4CA20
Authority key identifier: 2D:D0:17:61:94:A0:D6:A1:48:A1:96:00:47:6D:B4:3F:9E:A7:B6:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/e4626a98-9621-369e-9e67-c402355aac2d.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     396982
IP address blocks:        2620:bb:a000:4000::/56 maxlen: 56
                          2620:bb:a000:8000::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:fd:3e:9a:10:c5:1c:3a:b4:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=a487c58e-2bff-4f95-9f8c-06d60c7b76ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:34:98:a3:b2:a4:78:ea:62:86:24:4d:e6:
                    a5:c9:48:bf:f6:78:ad:4b:6f:a9:07:57:12:7c:2f:
                    19:89:42:5b:35:f5:4e:ad:86:a9:c5:bf:ed:2f:d4:
                    70:0f:6c:e8:5b:e0:cd:d1:3b:45:b1:a3:e6:2e:7d:
                    62:ec:94:06:c5:cd:65:da:6e:5a:8e:46:ca:09:36:
                    36:29:fa:1d:ba:46:01:54:ef:58:6b:4b:77:9e:78:
                    f7:eb:d6:bf:cf:aa:b8:d8:7b:25:a0:a4:f4:66:fc:
                    a5:a8:18:30:ee:eb:d8:e5:b0:bb:43:5b:fd:1d:e8:
                    62:92:a4:41:9f:22:13:0d:d1:4e:fb:d8:93:34:a5:
                    a1:42:2a:45:ce:27:3b:6a:e7:33:25:17:70:56:80:
                    8c:da:b2:9c:c7:29:f4:de:a6:37:3b:d9:b7:97:cc:
                    b6:b6:3f:e9:83:ff:93:31:20:4c:71:b1:bf:29:ca:
                    23:13:a6:80:7a:d5:74:de:3e:99:6e:c2:85:bb:2d:
                    56:6c:7e:7a:a0:88:f0:b9:91:88:03:bc:61:07:31:
                    61:86:4a:4a:ee:42:3b:c1:f7:36:0f:db:f4:79:1d:
                    26:f6:8b:9a:c1:48:03:fe:e5:62:85:02:9e:12:b7:
                    ac:c3:d2:de:60:73:97:fa:a3:6b:78:90:db:3c:25:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:44:A1:37:CC:08:60:16:30:42:B3:4C:D4:9D:52:7D:3E:D2:56:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/e4626a98-9621-369e-9e67-c402355aac2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D0:17:61:94:A0:D6:A1:48:A1:96:00:47:6D:B4:3F:9E:A7:B6:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bb:a000:4000::/56
                  2620:bb:a000:8000::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:de:ec:01:70:d5:e3:c3:39:91:a4:9d:5a:02:23:29:7f:dd:
         27:e1:e5:61:61:84:63:e2:3a:57:b4:2d:23:77:fb:73:61:ae:
         de:e5:af:9d:6e:53:4b:63:61:e4:7d:9c:6d:53:e0:cb:2a:3c:
         7f:7c:df:dc:55:fe:be:38:a0:8f:44:ba:93:97:80:0b:eb:3e:
         d4:09:64:ed:3f:eb:c3:b6:d5:6d:ed:42:a1:24:9e:f5:e7:d1:
         11:a7:19:cc:b7:45:c2:69:ab:f7:22:c0:bd:03:5e:af:40:1e:
         11:32:4b:7d:55:02:21:a9:a4:7c:9c:08:d1:0d:63:82:a8:55:
         b9:c8:fc:ff:66:65:54:58:4f:71:30:a5:43:51:44:db:0e:6f:
         2c:85:9b:97:c6:23:04:3d:7e:b5:2c:b3:12:0d:de:a2:3b:9b:
         f6:fa:e6:57:00:4b:bf:71:34:d6:59:a9:c4:33:c8:59:0d:15:
         09:7b:b4:ae:35:bb:66:a0:30:13:ea:53:d8:d4:91:97:51:7e:
         c5:aa:26:c3:9a:0a:aa:b4:61:05:6d:0d:be:8e:2d:92:da:76:
         68:4c:2b:88:92:3b:8d:5c:89:40:7b:cc:42:67:98:5c:8f:8f:
         b1:41:32:5c:87:0a:44:17:bc:5e:78:1f:5d:1f:10:cf:9e:e1:
         de:b0:23:85
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEcwlf0+mhDFHDq0yiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWYwMjQyZDktYTljMi00OGNhLWE2OGMtNWQyYzE1M2Ux
ZmJkMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
YTQ4N2M1OGUtMmJmZi00Zjk1LTlmOGMtMDZkNjBjN2I3NmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV80mKOypHjqYoYkTealyUi/9nitS2+pB1cS
fC8ZiUJbNfVOrYapxb/tL9RwD2zoW+DN0TtFsaPmLn1i7JQGxc1l2m5ajkbKCTY2
KfodukYBVO9Ya0t3nnj369a/z6q42HsloKT0ZvylqBgw7uvY5bC7Q1v9HehikqRB
nyITDdFO+9iTNKWhQipFzic7auczJRdwVoCM2rKcxyn03qY3O9m3l8y2tj/pg/+T
MSBMcbG/KcojE6aAetV03j6ZbsKFuy1WbH56oIjwuZGIA7xhBzFhhkpK7kI7wfc2
D9v0eR0m9ouawUgD/uVihQKeEresw9LeYHOX+qNreJDbPCVfhwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFPlEoTfMCGAWMEKzTNSdUn0+0laPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjAy
NDJkOS1hOWMyLTQ4Y2EtYTY4Yy01ZDJjMTUzZTFmYmQvZTQ2MjZhOTgtOTYyMS0z
NjllLTllNjctYzQwMjM1NWFhYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWYwMjQyZDktYTljMi00OGNhLWE2
OGMtNWQyYzE1M2UxZmJkLzFmMDI0MmQ5LWE5YzItNDhjYS1hNjhjLTVkMmMxNTNl
MWZiZC5jcmwwHwYDVR0jBBgwFoAULdAXYZSg1qFIoZYAR220P56ntk0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjAyNDJkOS1hOWMyLTQ4Y2EtYTY4Yy01ZDJj
MTUzZTFmYmQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUAwgAJiAAu6AA
QAMIACYgALugAIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAoN7sAXDV48M5kaSdWgIjKX/dJ+HlYWGEY+I6
V7QtI3f7c2Gu3uWvnW5TS2Nh5H2cbVPgyyo8f3zf3FX+vjigj0S6k5eAC+s+1Alk
7T/rw7bVbe1CoSSe9efREacZzLdFwmmr9yLAvQNer0AeETJLfVUCIamkfJwI0Q1j
gqhVucj8/2ZlVFhPcTClQ1FE2w5vLIWbl8YjBD1+tSyzEg3eojub9vrmVwBLv3E0
1lmpxDPIWQ0VCXu0rjW7ZqAwE+pT2NSRl1F+xaomw5oKqrRhBW0Nvo4tktp2aEwr
iJI7jVyJQHvMQmeYXI+PsUEyXIcKRBe8XngfXR8Qz57h3rAjhQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:14 2024 by rpki-client on console-fra.rpki-client.org