Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
File:                     f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa (raw, json)
Hash identifier:          h3ctEcj0d8fQBcfGszodPoe3yY5mp78U8Gs7cAoqZi0=
Subject key identifier:   B6:FB:30:D4:9E:11:FD:52:D4:2A:E7:CD:2A:37:64:FF:58:B8:3E:0A
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858476E01072C6DFBA8463C569C40
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        2620:a0:200f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:07:2c:6d:fb:a8:46:3c:56:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=68dc1cf6-51a4-478d-b44a-d940faf39614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:6b:cc:26:27:d6:d0:59:de:c5:e9:63:80:
                    73:8b:5e:15:6d:8d:92:e4:e5:fe:22:3f:3d:b8:87:
                    c6:73:03:5c:9b:e8:d7:f0:67:c3:38:e2:5d:ff:50:
                    40:48:d2:0c:8f:3c:49:6b:20:ff:83:d0:ff:8e:09:
                    1d:9e:00:6a:4e:1d:d3:8c:50:f0:f4:71:4b:66:96:
                    27:f4:32:37:af:a5:49:b3:4b:91:6d:fa:1b:3d:bb:
                    d3:ea:30:4d:7f:5e:ce:c3:09:91:3b:60:b6:48:88:
                    ba:64:b0:77:ec:51:44:84:ff:e2:74:74:ce:c7:be:
                    cb:17:a6:c9:b4:eb:b9:17:42:5f:8d:7a:fd:a3:65:
                    e7:d2:e8:18:77:42:ec:75:33:ed:27:c4:4d:82:96:
                    98:7f:ab:b0:c6:e6:46:02:3f:c4:8d:5f:26:f2:9d:
                    48:c1:0e:1c:aa:74:8a:4c:52:dd:99:ca:4b:0e:b0:
                    91:ac:36:31:03:60:c4:62:0c:a3:64:8a:c7:36:06:
                    d3:e0:27:91:e6:64:81:c0:76:eb:f2:8e:bf:b0:3f:
                    e1:39:e9:1a:b9:24:31:d9:70:1c:1b:e7:8f:79:52:
                    20:c3:9d:cb:1f:1f:11:00:b8:00:ab:03:75:68:75:
                    c0:fc:41:97:ad:61:7b:51:79:ce:69:6e:f4:4c:07:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FB:30:D4:9E:11:FD:52:D4:2A:E7:CD:2A:37:64:FF:58:B8:3E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:fa:c4:57:df:ff:dd:a8:78:5b:92:d0:48:b6:75:3d:b5:f3:
         cf:41:58:98:7f:81:ee:79:ef:17:e6:e2:a9:20:18:2f:0e:85:
         9f:d2:82:79:08:22:fd:0f:76:a8:d9:72:94:9d:be:34:85:a0:
         b0:3b:80:3f:75:8f:5a:c4:a0:45:49:53:b9:b1:50:50:b5:a5:
         d5:00:36:17:90:62:13:37:e2:89:ad:8d:d8:18:b9:41:cb:7b:
         d5:3c:e7:2b:e5:ca:88:e1:e7:42:06:0b:97:60:d8:92:1a:bb:
         31:3c:18:ef:df:ab:35:c3:b3:fb:fb:f1:4f:7d:eb:36:5e:3d:
         9a:cf:23:67:be:f5:88:37:98:35:ad:22:71:dd:00:ed:56:99:
         37:f8:cc:69:ed:7f:42:8f:15:8c:e1:22:1b:fa:fb:90:f1:6c:
         e3:f7:48:c5:cd:80:be:ff:04:e1:50:31:b5:86:62:dc:e2:7a:
         3b:70:a7:28:31:9a:30:ec:e8:b4:50:ed:a8:18:4e:f2:8a:be:
         cc:81:60:f6:34:58:bd:e4:2a:b8:0c:d9:dc:d7:88:24:8d:ec:
         03:8f:9c:43:9f:4d:42:c8:f1:8f:cb:14:66:a4:da:b1:eb:31:
         20:a4:a2:85:e3:0b:7e:fd:b7:32:13:9e:3e:2f:32:32:7b:5a:
         8a:b8:41:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEduAQcsbfuoRjxWnEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk
NjhkYzFjZjYtNTFhNC00NzhkLWI0NGEtZDk0MGZhZjM5NjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+trzCYn1tBZ3sXpY4Bzi14VbY2S5OX+Ij89
uIfGcwNcm+jX8GfDOOJd/1BASNIMjzxJayD/g9D/jgkdngBqTh3TjFDw9HFLZpYn
9DI3r6VJs0uRbfobPbvT6jBNf17OwwmRO2C2SIi6ZLB37FFEhP/idHTOx77LF6bJ
tOu5F0JfjXr9o2Xn0ugYd0LsdTPtJ8RNgpaYf6uwxuZGAj/EjV8m8p1IwQ4cqnSK
TFLdmcpLDrCRrDYxA2DEYgyjZIrHNgbT4CeR5mSBwHbr8o6/sD/hOekauSQx2XAc
G+ePeVIgw53LHx8RALgAqwN1aHXA/EGXrWF7UXnOaW70TAcu3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLb7MNSeEf1S1CrnzSo3ZP9YuD4KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvZjQ2NTc1YTEtYmIwOC0z
ZDRlLWI2MTQtMzNiNDNkMWRjYzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKn6xFff/92oeFuS0Ei2dT21889BWJh/ge557xfm4qkgGC8OhZ/S
gnkIIv0PdqjZcpSdvjSFoLA7gD91j1rEoEVJU7mxUFC1pdUANheQYhM34omtjdgY
uUHLe9U85yvlyojh50IGC5dg2JIauzE8GO/fqzXDs/v78U996zZePZrPI2e+9Yg3
mDWtInHdAO1WmTf4zGntf0KPFYzhIhv6+5DxbOP3SMXNgL7/BOFQMbWGYtziejtw
pygxmjDs6LRQ7agYTvKKvsyBYPY0WL3kKrgM2dzXiCSN7AOPnEOfTULI8Y/LFGak
2rHrMSCkooXjC379tzITnj4vMjJ7Woq4QTY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:03 2024 by rpki-client on console-fra.rpki-client.org